last executing test programs: 4m29.83609337s ago: executing program 2 (id=4396): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp6\x00') pread64(r0, &(0x7f00000008c0)=""/4096, 0x1000, 0x4) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/150, 0x96}], 0x1, 0x6b46, 0x5) 4m29.579392544s ago: executing program 2 (id=4400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) 4m29.413466585s ago: executing program 2 (id=4403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000180)=0xfffffffd, 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 4m29.236652383s ago: executing program 2 (id=4407): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m28.552326343s ago: executing program 2 (id=4419): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x602, 0xb, 0x10000, 0x4, 0x1, 0x7, 0x85, 0x7, 0xa, 0x100, 0xde1, 0x1, 0x9, 0x1, 0x6, 0x78b4042d, 0x0, 0x1a449, 0x3, 0x40000001, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x7, 0x8, 0x6, 0x0, 0x6]}) 4m27.928180611s ago: executing program 2 (id=4426): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'no'}}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x74, 0x65, 0x65]}}]}, 0x3, 0x512d, &(0x7f000000f380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000740)={0x18, 0x1, {0x8001, @usage=0x1, 0x0, 0x7, 0xc, 0x10000, 0xa8, 0x0, 0x2, @usage=0xffffffff, 0x4, 0x2, [0x3, 0x3, 0xa, 0x3, 0x61, 0x4]}, {0x9, @struct={0x0, 0x5}, 0x0, 0x0, 0x156dc0000000, 0xffff, 0x2, 0x4, 0x1, @usage=0x3, 0x3, 0x2, [0x7, 0x0, 0x80, 0x40, 0x5, 0x2e0]}, {0x7, @usage=0x7, 0x0, 0x10, 0x4, 0x0, 0x7fffffffffffffff, 0x5dea, 0x10, @struct={0x3, 0xd}, 0x7, 0x7, [0x7, 0x97b8, 0x6, 0x6, 0x8ae, 0xfe98]}, {0x2, 0xd8}}) 4m27.655949413s ago: executing program 32 (id=4426): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'no'}}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x74, 0x65, 0x65]}}]}, 0x3, 0x512d, &(0x7f000000f380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000740)={0x18, 0x1, {0x8001, @usage=0x1, 0x0, 0x7, 0xc, 0x10000, 0xa8, 0x0, 0x2, @usage=0xffffffff, 0x4, 0x2, [0x3, 0x3, 0xa, 0x3, 0x61, 0x4]}, {0x9, @struct={0x0, 0x5}, 0x0, 0x0, 0x156dc0000000, 0xffff, 0x2, 0x4, 0x1, @usage=0x3, 0x3, 0x2, [0x7, 0x0, 0x80, 0x40, 0x5, 0x2e0]}, {0x7, @usage=0x7, 0x0, 0x10, 0x4, 0x0, 0x7fffffffffffffff, 0x5dea, 0x10, @struct={0x3, 0xd}, 0x7, 0x7, [0x7, 0x97b8, 0x6, 0x6, 0x8ae, 0xfe98]}, {0x2, 0xd8}}) 3.003362163s ago: executing program 4 (id=7117): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000100)=0x10) 1.960822928s ago: executing program 4 (id=7125): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2000007ff) 1.816168842s ago: executing program 4 (id=7128): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000005c0)={[{@nojournal_checksum}, {@noblock_validity}, {@inlinecrypt}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@dax_never}, {@resgid}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x52e, &(0x7f0000000c80)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@init_itable}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x47a, &(0x7f0000000580)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x200e1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.530598821s ago: executing program 4 (id=7131): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x20000000, 0x3, {0x7, 0x0, 0x0, r1, 0x80, 0x0, 0x8}}, 0x1c}}, 0x0) 1.303178091s ago: executing program 4 (id=7134): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.207272934s ago: executing program 1 (id=7136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) 1.082436592s ago: executing program 0 (id=7137): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x2, &(0x7f0000000200)={0x2, "90f5ae8b4ffd6190910a11805984d3c9f144d744c7bf982eb50900294657715900"}}) 1.031985963s ago: executing program 1 (id=7138): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x2000000, 0x96a, 0x8001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 1.031046913s ago: executing program 3 (id=7139): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r0, 0x5433, 0x0) 923.338774ms ago: executing program 0 (id=7140): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000001c0)=0x5, 0x2) 898.567619ms ago: executing program 1 (id=7141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 853.128181ms ago: executing program 0 (id=7142): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000240)=0x4) 788.50354ms ago: executing program 0 (id=7143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20002880}, 0x10) 725.063039ms ago: executing program 0 (id=7144): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 677.07913ms ago: executing program 3 (id=7145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{}], 0x8, 0x6b, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x3f, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10) 543.319786ms ago: executing program 0 (id=7146): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc4089434, &(0x7f0000000040)={0x1, 0x2}) 488.189167ms ago: executing program 3 (id=7147): r0 = syz_open_dev$video(&(0x7f0000000300), 0x1000000000c, 0x200c1) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc791, 0xd11c, 0x56d8, 0x7}, 0x7, 0x3, 0x0, 0xfffffeff, 0x0, 0x5}}) 460.986992ms ago: executing program 1 (id=7148): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @loopback}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x6b8726c3, @mcast2, 0xfffffff8}], 0x1c) 348.677622ms ago: executing program 3 (id=7149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 284.28526ms ago: executing program 1 (id=7150): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x1) write(r0, &(0x7f0000000440)="08008edf773c8000", 0x8) 205.442167ms ago: executing program 3 (id=7151): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) connect$vsock_stream(r0, &(0x7f0000000100), 0x10) 137.080824ms ago: executing program 1 (id=7152): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00') read$FUSE(r0, &(0x7f0000004000)={0x2020}, 0x2020) pread64(r0, &(0x7f00000011c0)=""/159, 0x9f, 0x1c0000000) 70.007262ms ago: executing program 3 (id=7153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000980), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) 0s ago: executing program 4 (id=7154): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4091}, 0xc000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) kernel console output (not intermixed with test programs): 4] Symlink component flag not implemented (7) [ 538.233414][T27314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5857'. [ 538.273802][T27317] tipc: Enabling of bearer rejected, failed to enable media [ 538.471058][T27329] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 538.583377][T27335] loop3: detected capacity change from 0 to 16 [ 538.618025][T27335] erofs: (device loop3): mounted with root inode @ nid 36. [ 538.839752][T27352] loop1: detected capacity change from 0 to 128 [ 538.888555][T27352] ext4: Unknown parameter 'fowner>00000000000000000000' [ 539.066148][T27327] loop0: detected capacity change from 0 to 32768 [ 539.078698][ T5801] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 539.135081][T27327] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 539.179623][T27374] loop1: detected capacity change from 0 to 512 [ 539.186927][T27374] EXT4-fs: Ignoring removed bh option [ 539.199430][T27374] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 539.243884][T27374] EXT4-fs (loop1): 1 truncate cleaned up [ 539.262099][T27374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.270051][T27327] XFS (loop0): Ending clean mount [ 539.281458][ T5801] usb 5-1: Using ep0 maxpacket: 16 [ 539.303821][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.314861][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.323446][T27327] XFS (loop0): Quotacheck needed: Please wait. [ 539.324775][ T5801] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 539.343897][ T5801] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 539.353337][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.385051][ T5801] usb 5-1: config 0 descriptor?? [ 539.462574][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.478811][T27327] XFS (loop0): Quotacheck: Done. [ 539.646200][ T5768] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 539.887292][ T5801] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 539.923417][ T5801] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 539.955429][ T5801] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 539.962711][ T5801] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 539.992843][ T5801] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 540.014211][ T5801] microsoft 0003:045E:07DA.000F: unbalanced collection at end of report description [ 540.015289][ T5801] microsoft 0003:045E:07DA.000F: parse failed [ 540.015381][ T5801] microsoft: probe of 0003:045E:07DA.000F failed with error -22 [ 540.083902][T27409] netlink: 54775 bytes leftover after parsing attributes in process `syz.1.5877'. [ 540.219806][ T8] usb 5-1: USB disconnect, device number 7 [ 540.327848][T27416] loop3: detected capacity change from 0 to 4096 [ 540.372061][T27416] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 540.539440][T27416] ntfs3: loop3: failed to convert "c46c" to maccenteuro [ 540.995875][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 540.995890][ T28] audit: type=1400 audit(1772845006.447:6972): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D6A pid=27470 comm="syz.3.5890" [ 541.277003][T27474] loop1: detected capacity change from 0 to 8192 [ 541.313538][T27474] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 541.368985][T27474] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 541.391692][T27495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5897'. [ 541.438084][T27474] REISERFS (device loop1): using ordered data mode [ 541.457092][T27499] loop4: detected capacity change from 0 to 256 [ 541.462411][T27474] reiserfs: using flush barriers [ 541.484906][T27474] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 541.564731][T27474] REISERFS (device loop1): checking transaction log (loop1) [ 541.565749][T27499] FAT-fs (loop4): Directory bread(block 64) failed [ 541.598879][T27499] FAT-fs (loop4): Directory bread(block 65) failed [ 541.601565][T27474] REISERFS (device loop1): Using r5 hash to sort names [ 541.632306][T27499] FAT-fs (loop4): Directory bread(block 66) failed [ 541.649535][T27474] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 541.650990][T27499] FAT-fs (loop4): Directory bread(block 67) failed [ 541.671548][T27499] FAT-fs (loop4): Directory bread(block 68) failed [ 541.684126][T27499] FAT-fs (loop4): Directory bread(block 69) failed [ 541.695896][T27499] FAT-fs (loop4): Directory bread(block 70) failed [ 541.718788][T27499] FAT-fs (loop4): Directory bread(block 71) failed [ 541.729810][T27499] FAT-fs (loop4): Directory bread(block 72) failed [ 541.742945][T27499] FAT-fs (loop4): Directory bread(block 73) failed [ 542.066176][T27517] loop4: detected capacity change from 0 to 128 [ 542.194123][T19999] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 543.144119][T27570] loop1: detected capacity change from 0 to 1024 [ 543.162316][T27570] hfsplus: invalid btree flag [ 543.168296][T27570] hfsplus: failed to load extents file [ 543.404753][T27586] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5921'. [ 543.927145][T27589] loop1: detected capacity change from 0 to 32768 [ 543.990404][T27589] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 544.052743][T27589] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 544.103708][T27607] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 544.111719][T27607] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 544.118896][T27607] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 544.126874][T27607] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 544.133417][T27607] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 544.146090][T27607] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 544.156472][T27607] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 544.167145][T27607] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 544.188772][T27607] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 544.200653][T27607] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 544.218674][T27607] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 544.236283][T27607] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 544.251394][T27607] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 544.258787][T27607] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 544.276591][T27614] loop3: detected capacity change from 0 to 128 [ 544.369051][T27619] loop0: detected capacity change from 0 to 8 [ 544.381620][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 544.412781][T27619] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 544.472529][ T5754] udevd[5754]: incorrect cramfs checksum on /dev/loop0 [ 544.516052][T27623] netlink: 'syz.4.5932': attribute type 3 has an invalid length. [ 544.576731][ T5754] udevd[5754]: incorrect cramfs checksum on /dev/loop0 [ 544.752732][T27643] loop4: detected capacity change from 0 to 256 [ 544.818059][T27643] exfat: Deprecated parameter 'utf8' [ 544.828782][T27643] exfat: Deprecated parameter 'utf8' [ 544.878213][T27643] exfat: Deprecated parameter 'utf8' [ 544.980344][T27643] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 545.278019][T27672] loop1: detected capacity change from 0 to 512 [ 545.322238][T27672] EXT4-fs: Ignoring removed orlov option [ 545.346916][T27672] EXT4-fs: Ignoring removed mblk_io_submit option [ 545.379348][T27672] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.5944: corrupted in-inode xattr: e_value size too large [ 545.396395][T27672] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.5944: couldn't read orphan inode 15 (err -117) [ 545.450521][T27672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.643376][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.662442][T27689] dccp_invalid_packet: P.Data Offset(4) too small [ 546.279719][T27719] loop1: detected capacity change from 0 to 8 [ 546.678791][T27743] loop0: detected capacity change from 0 to 128 [ 546.739773][T27743] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 546.759188][T27743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.974852][T27757] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 547.031388][T27757] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 547.215291][T27772] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5970'. [ 547.226551][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5970'. [ 548.084752][T27813] loop3: detected capacity change from 0 to 1024 [ 548.149366][T27813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.196355][ T5801] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 548.230600][T27813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 548.268701][T27813] EXT4-fs (loop3): stripe (536871160) is not aligned with cluster size (16), stripe is disabled [ 548.293697][T27813] EXT4-fs (loop3): can't enable nombcache during remount [ 548.364219][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.399899][ T5801] usb 2-1: Using ep0 maxpacket: 32 [ 548.416099][ T5801] usb 2-1: unable to get BOS descriptor or descriptor too short [ 548.440103][ T5801] usb 2-1: config 164 has an invalid interface number: 28 but max is 0 [ 548.461532][ T5801] usb 2-1: config 164 has no interface number 0 [ 548.471986][ T5801] usb 2-1: config 164 interface 28 has no altsetting 0 [ 548.488669][ T5801] usb 2-1: New USB device found, idVendor=a772, idProduct=72b8, bcdDevice=30.cc [ 548.499118][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.508647][T27818] loop0: detected capacity change from 0 to 32768 [ 548.521062][ T5801] usb 2-1: Product: syz [ 548.530170][T27818] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.5983 (27818) [ 548.551258][ T5801] usb 2-1: Manufacturer: syz [ 548.559231][ T5801] usb 2-1: SerialNumber: syz [ 548.579022][T27818] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 548.602904][T27818] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 548.625094][T27818] BTRFS info (device loop0): using free space tree [ 548.711144][T27818] BTRFS info (device loop0): enabling ssd optimizations [ 548.747345][T27818] BTRFS info (device loop0): auto enabling async discard [ 548.845852][ T5801] usb 2-1: USB disconnect, device number 50 [ 549.053026][T27868] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5989'. [ 549.127607][ T5768] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 549.787886][T27898] ptrace attach of "./syz-executor exec"[5770] was attempted by "\x22"[27898] [ 550.074490][T27914] loop1: detected capacity change from 0 to 64 [ 550.117776][T27914] syz.1.6002: attempt to access beyond end of device [ 550.117776][T27914] loop1: rw=2049, sector=73, nr_sectors = 89 limit=64 [ 550.533943][T27938] loop1: detected capacity change from 0 to 128 [ 550.673577][T27949] loop0: detected capacity change from 0 to 1024 [ 550.718418][T27949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.804535][ T8] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 550.892430][T27931] loop4: detected capacity change from 0 to 32768 [ 550.915433][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.014400][ T8] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 551.016091][T27931] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 551.029577][ T8] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 551.041632][ T8] usb 4-1: Product: syz [ 551.045833][ T8] usb 4-1: Manufacturer: syz [ 551.050533][ T8] usb 4-1: SerialNumber: syz [ 551.067187][ T8] usb 4-1: config 0 descriptor?? [ 551.176492][T27931] XFS (loop4): Ending clean mount [ 551.318558][ T8] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 551.497535][T19937] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 551.545216][ T8] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 551.552496][ T8] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 551.559716][ T8] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 551.643389][ T8] peak_usb: probe of 4-1:0.0 failed with error -8 [ 551.836919][T28013] loop1: detected capacity change from 0 to 1024 [ 551.856686][ T5801] usb 4-1: USB disconnect, device number 48 [ 551.959148][ T12] hfsplus: b-tree write err: -5, ino 25 [ 551.964938][ T12] hfsplus: b-tree write err: -5, ino 4 [ 551.982828][ T12] hfsplus: b-tree write err: -5, ino 2 [ 552.011840][T28029] loop0: detected capacity change from 0 to 512 [ 552.080723][T28029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.093817][T28029] ext4 filesystem being mounted at /1504/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 552.159603][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.544067][T28061] loop0: detected capacity change from 0 to 128 [ 552.576478][T28064] loop3: detected capacity change from 0 to 1024 [ 552.605339][T28064] EXT4-fs: Ignoring removed i_version option [ 552.621773][T28061] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 552.646752][T28064] EXT4-fs: inline encryption not supported [ 552.666520][T28061] ext4 filesystem being mounted at /1507/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 552.684101][T28071] loop1: detected capacity change from 0 to 512 [ 552.705673][T28064] EXT4-fs (loop3): Test dummy encryption mode enabled [ 552.729618][T28071] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 552.811635][T28064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.848790][T28071] EXT4-fs (loop1): 1 truncate cleaned up [ 552.856179][T28071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.892547][T28071] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #2: block 4: comm syz.1.6038: lblock 0 mapped to illegal pblock 4 (length 1) [ 552.894856][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 552.927066][T28071] EXT4-fs (loop1): Remounting filesystem read-only [ 552.963273][T28064] EXT4-fs error (device loop3): __ext4_remount:6752: comm syz.3.6037: Abort forced by user [ 552.986330][T28064] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 553.036434][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.135720][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.765114][T28127] loop1: detected capacity change from 0 to 64 [ 553.780849][T28127] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 553.946790][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6051'. [ 554.203871][ T5801] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 554.384548][T28142] loop1: detected capacity change from 0 to 32768 [ 554.423319][ T5801] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 554.455512][T28142] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 554.471052][ T5801] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 554.499849][ T5801] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 554.511697][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.552631][T28134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 554.597448][T28142] XFS (loop1): Ending clean mount [ 554.750094][ T5764] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 554.834110][T28164] loop4: detected capacity change from 0 to 32768 [ 555.000544][T28164] syz.4.6056: attempt to access beyond end of device [ 555.000544][T28164] loop4: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 555.126852][ T112] blkno = 5002c, nblocks = 1 [ 555.131490][ T112] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 555.131490][ T112] [ 555.154306][ T112] ERROR: (device loop4): remounting filesystem as read-only [ 555.424055][T28186] mkiss: ax0: crc mode is auto. [ 555.498073][ T5801] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 555.511662][ T5801] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input26 [ 555.522599][T28197] loop4: detected capacity change from 0 to 1024 [ 555.582618][ T5801] usb 4-1: USB disconnect, device number 49 [ 555.582678][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 555.612945][ T1028] hfsplus: b-tree write err: -5, ino 25 [ 555.643424][ T1028] hfsplus: b-tree write err: -5, ino 4 [ 555.659545][ T1028] hfsplus: b-tree write err: -5, ino 2 [ 555.869264][T28222] netlink: 'syz.1.6064': attribute type 10 has an invalid length. [ 555.902904][T28222] team0: Port device netdevsim0 added [ 555.928579][T28222] netlink: 'syz.1.6064': attribute type 10 has an invalid length. [ 556.019293][T28222] team0: Port device netdevsim0 removed [ 556.034953][T28222] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 556.339580][T28224] loop4: detected capacity change from 0 to 32768 [ 556.354352][ T59] bond0: (slave netdevsim0): interface is now down [ 556.361179][ T59] bond0: now running without any active interface! [ 556.390819][T28224] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 556.425474][T28224] JBD2: Ignoring recovery information on journal [ 556.524975][T28224] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 556.817778][T28227] loop3: detected capacity change from 0 to 32768 [ 556.852588][T28227] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 556.891670][T28224] syz.4.6065 (28224) used greatest stack depth: 19280 bytes left [ 556.957775][T28227] XFS (loop3): Ending clean mount [ 557.015322][T19937] ocfs2: Unmounting device (7,4) on (node local) [ 557.081369][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 557.233224][ T5801] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 557.465758][ T5801] usb 2-1: Using ep0 maxpacket: 16 [ 557.473949][ T5801] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 557.483768][ T5801] usb 2-1: config 0 has no interface number 0 [ 557.501833][ T5801] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 557.524262][ T5801] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 557.546700][ T5801] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 557.561486][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 557.580637][ T5801] usb 2-1: Product: syz [ 557.592282][ T5801] usb 2-1: SerialNumber: syz [ 557.603975][ T5801] usb 2-1: config 0 descriptor?? [ 557.617172][ T5801] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 557.638406][ T5801] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input27 [ 557.844792][T28304] loop4: detected capacity change from 0 to 64 [ 557.943018][ T5802] usb 2-1: USB disconnect, device number 51 [ 557.943046][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 557.956332][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 557.969919][ T5802] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 558.022822][T28286] loop3: detected capacity change from 0 to 32768 [ 558.050859][T28286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.6073 (28286) [ 558.113951][T28286] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 558.131696][T28286] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 558.142033][T28286] BTRFS info (device loop3): allowing degraded mounts [ 558.149338][T28286] BTRFS info (device loop3): enabling auto defrag [ 558.155791][T28286] BTRFS info (device loop3): using free space tree [ 558.256287][T28286] BTRFS info (device loop3): enabling ssd optimizations [ 558.269841][T28286] BTRFS info (device loop3): auto enabling async discard [ 558.384357][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 559.063485][T28358] loop3: detected capacity change from 0 to 256 [ 559.172120][T28363] loop4: detected capacity change from 0 to 1024 [ 559.262158][T28351] loop1: detected capacity change from 0 to 32768 [ 559.321732][T28351] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 559.615939][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 559.730105][ T5801] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 559.909039][T28391] loop1: detected capacity change from 0 to 4096 [ 559.925514][ T5801] usb 5-1: Using ep0 maxpacket: 16 [ 559.956438][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.984682][ T5801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.005814][T28401] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 560.019237][T28391] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 560.025735][ T5801] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 560.063095][T28391] NILFS (loop1): mounting fs with errors [ 560.103548][ T5801] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 560.132635][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.159834][ T5801] usb 5-1: config 0 descriptor?? [ 560.357955][T28413] loop3: detected capacity change from 0 to 512 [ 560.423751][T28413] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 560.478016][T28413] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.6093: corrupted xattr entries [ 560.495925][T28413] EXT4-fs (loop3): Remounting filesystem read-only [ 560.503819][T28413] EXT4-fs (loop3): 1 truncate cleaned up [ 560.511682][T28413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.567320][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.610421][ T5801] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 560.642647][ T5801] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 560.655845][ T5801] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 560.675624][ T5801] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 560.689475][ T5801] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 560.703812][ T5803] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 560.720284][ T5801] microsoft 0003:045E:07DA.0010: no inputs found [ 560.729026][ T5801] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 560.838309][ T5801] usb 5-1: USB disconnect, device number 8 [ 560.920993][ T5803] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 560.939189][ T5803] usb 2-1: config 0 interface 0 has no altsetting 0 [ 560.949109][ T5803] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 560.965358][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 560.973929][ T5803] usb 2-1: Product: syz [ 560.978119][ T5803] usb 2-1: Manufacturer: syz [ 560.983662][ T5803] usb 2-1: SerialNumber: syz [ 560.990645][ T5803] usb 2-1: config 0 descriptor?? [ 561.004439][ T5803] usb 2-1: selecting invalid altsetting 0 [ 561.303886][ T27] usb 2-1: USB disconnect, device number 52 [ 561.372256][T28458] loop3: detected capacity change from 0 to 32768 [ 561.393961][T28458] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.6099 (28458) [ 561.436632][T28458] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 561.469866][T28458] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 561.504416][T28458] BTRFS info (device loop3): using free space tree [ 561.684761][T28458] BTRFS info (device loop3): enabling ssd optimizations [ 561.707478][T28458] BTRFS info (device loop3): auto enabling async discard [ 561.928896][T28520] loop4: detected capacity change from 0 to 256 [ 561.941952][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 562.062836][T28520] FAT-fs (loop4): Directory bread(block 64) failed [ 562.091531][T28520] FAT-fs (loop4): Directory bread(block 65) failed [ 562.124733][T28520] FAT-fs (loop4): Directory bread(block 66) failed [ 562.132337][T28520] FAT-fs (loop4): Directory bread(block 67) failed [ 562.181459][T28520] FAT-fs (loop4): Directory bread(block 68) failed [ 562.188193][T28520] FAT-fs (loop4): Directory bread(block 69) failed [ 562.207453][T28520] FAT-fs (loop4): Directory bread(block 70) failed [ 562.237914][T28520] FAT-fs (loop4): Directory bread(block 71) failed [ 562.246257][T28520] FAT-fs (loop4): Directory bread(block 72) failed [ 562.267690][T28520] FAT-fs (loop4): Directory bread(block 73) failed [ 562.637863][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 562.697220][ T28] audit: type=1326 audit(1772845026.739:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28548 comm="syz.0.6112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f777eb9c799 code=0x0 [ 562.968695][T28567] loop4: detected capacity change from 0 to 512 [ 562.998858][T28567] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 563.015297][T28567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 563.048023][T28567] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.6119: Invalid block bitmap block 0 in block_group 0 [ 563.062474][T28567] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 563.072079][T28567] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.6119: attempt to clear invalid blocks 983261 len 1 [ 563.122766][T28567] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.6119: Invalid inode table block 0 in block_group 0 [ 563.139178][T28575] loop1: detected capacity change from 0 to 2048 [ 563.164397][T28575] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 563.184587][T28567] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 563.194784][T28567] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 563.212211][T28567] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.6119: Invalid inode table block 0 in block_group 0 [ 563.234269][T28567] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 563.260105][T28567] EXT4-fs error (device loop4): ext4_truncate:4294: inode #11: comm syz.4.6119: mark_inode_dirty error [ 563.272335][T28567] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 563.290988][T28567] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.6119: Invalid inode table block 0 in block_group 0 [ 563.317516][T28567] EXT4-fs (loop4): 1 truncate cleaned up [ 563.325666][T28567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.426331][T19937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.173084][T28628] loop4: detected capacity change from 0 to 256 [ 564.248965][T28628] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d) [ 565.040237][T28653] loop3: detected capacity change from 0 to 2048 [ 565.074933][T28653] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 565.096598][T28653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 565.362628][T28643] loop4: detected capacity change from 0 to 40427 [ 565.456831][T28643] F2FS-fs (loop4): invalid crc value [ 565.515616][T28643] F2FS-fs (loop4): Found nat_bits in checkpoint [ 565.653452][T28643] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 566.167946][T28683] netlink: 'syz.4.6149': attribute type 8 has an invalid length. [ 566.582489][T28619] loop1: detected capacity change from 0 to 131072 [ 566.605917][T28619] F2FS-fs (loop1): invalid crc value [ 566.646708][T28619] F2FS-fs (loop1): Found nat_bits in checkpoint [ 566.706020][T28678] loop3: detected capacity change from 0 to 40427 [ 566.746859][T28678] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 566.780226][T28678] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 566.813765][T28678] F2FS-fs (loop3): invalid crc value [ 566.821649][T28619] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 566.865106][T28678] F2FS-fs (loop3): Found nat_bits in checkpoint [ 567.028354][T28678] F2FS-fs (loop3): Start checkpoint disabled! [ 567.059979][T28678] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 567.077166][T28678] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 567.240627][T28722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6158'. [ 567.276988][T28722] tipc: Started in network mode [ 567.281898][T28722] tipc: Node identity 68b, cluster identity 4711 [ 567.308938][T28722] tipc: Node number set to 1675 [ 567.426896][T26369] Bluetooth: hci0: command 0x0c1a tx timeout [ 568.080368][T28749] loop3: detected capacity change from 0 to 256 [ 568.114826][T28749] FAT-fs (loop3): Directory bread(block 1285) failed [ 568.131575][T28749] FAT-fs (loop3): Directory bread(block 1286) failed [ 568.186157][T28749] FAT-fs (loop3): Directory bread(block 1287) failed [ 568.193122][T28749] FAT-fs (loop3): Directory bread(block 1288) failed [ 568.303285][T28749] FAT-fs (loop3): Directory bread(block 1285) failed [ 568.324343][T28749] FAT-fs (loop3): Directory bread(block 1286) failed [ 568.331101][T28749] FAT-fs (loop3): Directory bread(block 1287) failed [ 568.356783][T28749] FAT-fs (loop3): Directory bread(block 1288) failed [ 568.364602][T28749] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 568.421778][T28762] FAT-fs (loop3): Directory bread(block 1285) failed [ 568.430819][T28730] loop0: detected capacity change from 0 to 40427 [ 568.461470][T28730] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 568.487454][T28730] F2FS-fs (loop0): invalid crc value [ 568.521132][T28730] F2FS-fs (loop0): Found nat_bits in checkpoint [ 568.568910][T28730] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 568.688270][ T28] audit: type=1800 audit(1772845032.352:6974): pid=28730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6160" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 568.831956][ T5768] syz-executor: attempt to access beyond end of device [ 568.831956][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 568.868316][ T5768] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 569.034350][T28792] loop3: detected capacity change from 0 to 1024 [ 569.171819][ T59] hfsplus: b-tree write err: -5, ino 25 [ 569.177621][ T59] hfsplus: b-tree write err: -5, ino 4 [ 569.219839][ T59] hfsplus: b-tree write err: -5, ino 2 [ 569.365672][T28810] loop3: detected capacity change from 0 to 1024 [ 569.397892][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.404738][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.480751][T28810] hfsplus: bad catalog entry type [ 569.547443][T28817] loop4: detected capacity change from 0 to 128 [ 569.601987][T19976] hfsplus: b-tree write err: -5, ino 25 [ 569.615337][T28817] FAT-fs (loop4): Directory bread(block 32) failed [ 569.617665][T19976] hfsplus: b-tree write err: -5, ino 4 [ 569.633525][T19976] hfsplus: b-tree write err: -5, ino 2 [ 569.639972][T28817] FAT-fs (loop4): Directory bread(block 33) failed [ 569.646639][T28817] FAT-fs (loop4): Directory bread(block 34) failed [ 569.659391][T26369] Bluetooth: hci0: command 0x0c1a tx timeout [ 569.703128][T28817] FAT-fs (loop4): Directory bread(block 35) failed [ 569.709799][T28817] FAT-fs (loop4): Directory bread(block 36) failed [ 569.767736][T28817] FAT-fs (loop4): Directory bread(block 37) failed [ 569.790647][T28817] FAT-fs (loop4): Directory bread(block 38) failed [ 569.797226][T28817] FAT-fs (loop4): Directory bread(block 39) failed [ 569.844441][T28817] FAT-fs (loop4): Directory bread(block 40) failed [ 569.872959][T28817] FAT-fs (loop4): Directory bread(block 41) failed [ 570.051378][T28841] mkiss: ax0: crc mode is auto. [ 570.501561][T28868] loop3: detected capacity change from 0 to 256 [ 570.639177][T28868] FAT-fs (loop3): Directory bread(block 64) failed [ 570.651084][T28868] FAT-fs (loop3): Directory bread(block 65) failed [ 570.667197][T28868] FAT-fs (loop3): Directory bread(block 66) failed [ 570.673819][T28868] FAT-fs (loop3): Directory bread(block 67) failed [ 570.717350][T28868] FAT-fs (loop3): Directory bread(block 68) failed [ 570.734871][T28868] FAT-fs (loop3): Directory bread(block 69) failed [ 570.750075][T28868] FAT-fs (loop3): Directory bread(block 70) failed [ 570.782797][T28868] FAT-fs (loop3): Directory bread(block 71) failed [ 570.789469][T28868] FAT-fs (loop3): Directory bread(block 72) failed [ 570.821818][T28868] FAT-fs (loop3): Directory bread(block 73) failed [ 571.206958][T28904] loop3: detected capacity change from 0 to 512 [ 571.216813][T28904] EXT4-fs: Ignoring removed orlov option [ 571.250522][T28904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 571.291415][T28904] EXT4-fs (loop3): 1 orphan inode deleted [ 571.302799][T28904] EXT4-fs (loop3): 1 truncate cleaned up [ 571.331120][T28904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.439612][T28884] loop0: detected capacity change from 0 to 32768 [ 571.454037][T28884] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.6200 (28884) [ 571.480830][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.500063][T28884] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 571.522162][T28884] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 571.531912][T28884] BTRFS info (device loop0): force zlib compression, level 3 [ 571.586507][T28884] BTRFS info (device loop0): enabling ssd optimizations [ 571.613027][T28884] BTRFS info (device loop0): allowing degraded mounts [ 571.646624][T28884] BTRFS info (device loop0): force clearing of disk cache [ 571.656781][T28884] BTRFS info (device loop0): using free space tree [ 571.737416][T28884] BTRFS info (device loop0): rebuilding free space tree [ 571.791451][T28884] BTRFS info (device loop0): checking UUID tree [ 571.873184][ T27] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 571.934719][ T5768] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 572.131857][ T27] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 572.141346][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.149367][ T27] usb 4-1: Product: syz [ 572.155803][ T27] usb 4-1: Manufacturer: syz [ 572.160555][ T27] usb 4-1: SerialNumber: syz [ 572.188915][ T27] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 572.230691][ T5831] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 572.756396][T28989] loop1: detected capacity change from 0 to 256 [ 572.764785][T28989] exfat: Deprecated parameter 'utf8' [ 572.772681][T28989] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 572.811398][T28989] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 573.487411][T28997] loop0: detected capacity change from 0 to 32768 [ 573.525422][T28997] JBD2: Ignoring recovery information on journal [ 573.587397][T28997] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 573.669156][ T5831] usb 4-1: Service connection timeout for: 256 [ 573.675889][ T5831] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 573.713284][ T5831] ath9k_htc: Failed to initialize the device [ 573.729881][ T5831] usb 4-1: ath9k_htc: USB layer deinitialized [ 573.895131][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 573.985797][ T5831] usb 4-1: USB disconnect, device number 50 [ 574.551576][T29054] loop0: detected capacity change from 0 to 4096 [ 574.560052][T29054] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 574.742771][T29054] overlayfs: upper fs does not support tmpfile. [ 574.764048][T29054] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 575.010531][T29077] loop1: detected capacity change from 0 to 16 [ 575.058824][T29077] erofs: (device loop1): mounted with root inode @ nid 36. [ 575.110497][T29077] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 575.294464][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 575.856616][T29082] loop3: detected capacity change from 0 to 32768 [ 575.920781][T29082] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 576.002550][T29082] JBD2: Ignoring recovery information on journal [ 576.096876][T29082] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 576.394819][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 576.790197][T29118] loop1: detected capacity change from 0 to 32768 [ 576.812942][T29118] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.6251 (29118) [ 576.886414][T29118] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 576.909932][T29123] loop0: detected capacity change from 0 to 40427 [ 576.935136][T29123] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 576.937020][T29118] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 576.953820][T29118] BTRFS info (device loop1): using free space tree [ 576.963235][T29123] F2FS-fs (loop0): invalid crc value [ 576.976850][T29123] F2FS-fs (loop0): Found nat_bits in checkpoint [ 577.039205][T29118] BTRFS info (device loop1): enabling ssd optimizations [ 577.101431][T29118] BTRFS info (device loop1): auto enabling async discard [ 577.102831][T29123] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 577.382584][ T5768] syz-executor: attempt to access beyond end of device [ 577.382584][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 577.410134][ T5768] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 577.499635][ T5764] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 578.027020][T29172] loop1: detected capacity change from 0 to 1024 [ 578.214246][T29172] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 578.221452][T29172] hfsplus: xattr searching failed [ 578.266419][T29181] lo speed is unknown, defaulting to 1000 [ 578.277549][T29159] loop4: detected capacity change from 0 to 40427 [ 578.314313][T29181] lo speed is unknown, defaulting to 1000 [ 578.356870][T29159] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 578.365811][T29181] lo speed is unknown, defaulting to 1000 [ 578.386045][T19976] hfsplus: b-tree write err: -5, ino 25 [ 578.393486][T29159] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 578.409187][T19976] hfsplus: b-tree write err: -5, ino 4 [ 578.411712][T29181] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 578.437297][T19976] hfsplus: b-tree write err: -5, ino 2 [ 578.447027][T29159] F2FS-fs (loop4): invalid crc value [ 578.474112][T19976] hfsplus: b-tree write err: -5, ino 23 [ 578.490695][T29181] lo speed is unknown, defaulting to 1000 [ 578.500077][T29159] F2FS-fs (loop4): Found nat_bits in checkpoint [ 578.551198][T29181] lo speed is unknown, defaulting to 1000 [ 578.590180][T29181] lo speed is unknown, defaulting to 1000 [ 578.649118][T29181] lo speed is unknown, defaulting to 1000 [ 578.697645][T29159] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 578.740129][T29159] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 579.278020][T29223] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6272'. [ 579.463822][T29230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6274'. [ 579.505668][T29230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6274'. [ 580.053145][T29256] bridge_slave_0: default FDB implementation only supports local addresses [ 580.088563][T29244] lo speed is unknown, defaulting to 1000 [ 580.119375][T29253] loop0: detected capacity change from 0 to 4096 [ 580.194267][T29274] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 580.302176][T29283] netlink: 35 bytes leftover after parsing attributes in process `syz.1.6284'. [ 580.323728][T29253] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 580.355212][T29253] Remounting filesystem read-only [ 580.734254][T29306] trusted_key: encrypted_key: insufficient parameters specified [ 581.071323][T29328] loop1: detected capacity change from 0 to 128 [ 581.100059][T29330] loop4: detected capacity change from 0 to 64 [ 581.136155][T29328] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 581.225146][T29328] ext4 filesystem being mounted at /1585/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 581.305606][T29330] minix_free_block (loop4:21): bit already cleared [ 581.334622][T29330] Trying to free block not in datazone [ 581.425951][ T28] audit: type=1800 audit(1772845044.261:6975): pid=29328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6298" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 581.517796][T29322] loop0: detected capacity change from 0 to 32768 [ 581.570848][T29322] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 581.601219][ T5764] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 581.704465][T29322] XFS (loop0): Ending clean mount [ 581.779925][ T5831] XFS (loop0): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 581.830888][ T5831] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 581.859874][T29327] loop3: detected capacity change from 0 to 40427 [ 581.861878][ T5831] XFS (loop0): Unmount and run xfs_repair [ 581.878010][T29327] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 581.885066][T29327] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 581.906248][ T5831] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 581.923855][T29327] F2FS-fs (loop3): Found nat_bits in checkpoint [ 581.924102][ T5831] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 581.948080][ T5831] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 581.957570][ T5831] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 581.966980][ T5831] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 581.980371][ T5831] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 581.990781][ T5831] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 581.999978][ T5831] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 582.009447][ T5831] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 582.020619][T29322] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 582.035549][T29322] XFS (loop0): Failed to initialize disk quotas. [ 582.059655][T29327] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 582.082291][T29327] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 582.241056][ T5770] syz-executor: attempt to access beyond end of device [ 582.241056][ T5770] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 582.261051][ T5770] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 582.271405][ T5768] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 583.262848][T29398] dvmrp12: entered allmulticast mode [ 583.272468][T29397] dvmrp12: left allmulticast mode [ 583.368368][T29383] loop4: detected capacity change from 0 to 40427 [ 583.388182][T29383] F2FS-fs (loop4): invalid crc value [ 583.437238][T29383] F2FS-fs (loop4): Found nat_bits in checkpoint [ 583.542171][T29383] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 583.770657][T19937] syz-executor: attempt to access beyond end of device [ 583.770657][T19937] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 583.804222][T19937] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 584.052053][T29434] loop3: detected capacity change from 0 to 256 [ 584.057057][T29437] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 584.081384][T29434] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 584.156995][T29441] loop1: detected capacity change from 0 to 1024 [ 584.176139][T29434] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 584.311530][ T59] hfsplus: b-tree write err: -5, ino 25 [ 584.319577][ T59] hfsplus: b-tree write err: -5, ino 4 [ 584.347470][ T59] hfsplus: b-tree write err: -5, ino 2 [ 584.587275][T29464] [U] [ 584.590603][T29464] [U] [ 584.593334][T29464] [U] [ 584.596038][T29464] [U] [ 584.598739][T29464] [U] [ 584.601439][T29464] [U] [ 584.604132][T29464] [U] [ 584.606840][T29464] [U] [ 584.632372][T29464] [U] [ 584.635114][T29464] [U] [ 584.637821][T29464] [U] [ 584.645794][T29463] [U] [ 584.747725][T29473] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6330'. [ 585.388646][T29491] loop4: detected capacity change from 0 to 128 [ 585.448676][ T5803] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 585.503578][T29491] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 585.560896][T29491] FAT-fs (loop4): Filesystem has been set read-only [ 585.693813][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 585.715483][ C1] sched: RT throttling activated [ 585.732180][ T5803] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 585.774909][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.811148][ T5803] usb 2-1: Product: syz [ 585.832297][ T5803] usb 2-1: Manufacturer: syz [ 585.842208][ T5803] usb 2-1: SerialNumber: syz [ 585.871653][T29471] loop3: detected capacity change from 0 to 131072 [ 585.881608][ T5803] usb 2-1: config 0 descriptor?? [ 585.893930][T29471] F2FS-fs (loop3): Test dummy encryption mode enabled [ 585.905288][T29471] F2FS-fs (loop3): invalid crc value [ 585.920685][ T5803] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 585.941962][T29471] F2FS-fs (loop3): Mismatch valid blocks 4 vs. 5 [ 585.952880][T29471] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 585.973719][ T5803] dvb-usb: bulk message failed: -22 (2/0) [ 586.045213][ T5803] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 586.099964][ T5803] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 586.128779][ T5803] usb 2-1: media controller created [ 586.245075][ T5803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 586.325644][ T5803] usb 2-1: selecting invalid altsetting 7 [ 586.331851][ T5803] cxusb: set interface failed [ 586.372766][T29532] loop4: detected capacity change from 0 to 512 [ 586.373330][ T5803] dvb-usb: bulk message failed: -22 (1/0) [ 586.455461][T29540] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6345'. [ 586.468922][T29532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.517323][ T5803] DVB: Unable to find symbol lgdt330x_attach() [ 586.549627][T29532] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.569397][ T5803] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 586.735935][T29532] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 586.784680][ T5803] rc_core: IR keymap rc-dvico-portable not found [ 586.805992][ T5803] Registered IR keymap rc-empty [ 586.847202][ T5803] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 586.881143][ T5803] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input29 [ 586.921801][T19937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.934155][ T5803] dvb-usb: schedule remote query interval to 100 msecs. [ 586.946646][ T5803] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 587.005326][ T5803] usb 2-1: USB disconnect, device number 53 [ 587.066324][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 587.248403][T29525] loop0: detected capacity change from 0 to 32768 [ 587.309216][ T5803] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 587.373938][T29525] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 587.447025][T29602] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 786440, id = 0 [ 587.461325][T29600] IPVS: stopping backup sync thread 29602 ... [ 587.577945][ T8] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 587.601063][T29525] XFS (loop0): Ending clean mount [ 587.697863][T29610] netlink: 'syz.4.6356': attribute type 3 has an invalid length. [ 587.707228][T29610] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6356'. [ 587.825723][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 587.837986][ T8] usb 4-1: config 0 has no interface number 0 [ 587.853958][ T8] usb 4-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30 [ 587.877706][ T8] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 587.884630][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 587.892260][T29616] loop1: detected capacity change from 0 to 1024 [ 587.906181][ T8] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 587.917386][T29616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 587.942597][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.991712][ T8] usb 4-1: config 0 descriptor?? [ 588.004142][T29616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.325666][ T8] usb 4-1: string descriptor 0 read error: -71 [ 588.331957][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.337345][ T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 588.473978][ T8] snd-usb-audio: probe of 4-1:0.1 failed with error -2 [ 588.485850][T29639] team0: Device ipip0 is of different type [ 588.502920][ T8] usb 4-1: USB disconnect, device number 51 [ 589.231700][T29691] loop0: detected capacity change from 0 to 256 [ 589.241491][T29691] exfat: Deprecated parameter 'utf8' [ 589.264902][T29691] exfat: Deprecated parameter 'namecase' [ 589.276606][T29691] exfat: Deprecated parameter 'namecase' [ 589.283073][T29691] exfat: Deprecated parameter 'utf8' [ 589.367875][T29691] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 589.647645][T29701] Bluetooth: MGMT ver 1.22 [ 589.691417][T29680] loop4: detected capacity change from 0 to 32768 [ 590.074601][T29725] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6381'. [ 590.076210][T29724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6380'. [ 590.084820][T29725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6381'. [ 590.394743][T29743] loop3: detected capacity change from 0 to 256 [ 590.413453][T29743] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 590.494014][ T28] audit: type=1800 audit(1772845052.746:6976): pid=29743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6384" name="file1" dev="loop3" ino=1048770 res=0 errno=0 [ 590.751401][T29756] loop0: detected capacity change from 0 to 2048 [ 590.845480][T29767] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 591.019349][T29770] loop4: detected capacity change from 0 to 4096 [ 591.116240][T29781] loop0: detected capacity change from 0 to 512 [ 591.139999][T29782] loop3: detected capacity change from 0 to 1024 [ 591.144870][T29781] EXT4-fs: Ignoring removed oldalloc option [ 591.158875][T29781] EXT4-fs: Ignoring removed bh option [ 591.176394][T29782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 591.250968][T29781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 591.270130][T29781] System zones: 1-12 [ 591.312178][T29782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.322876][T29781] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.6393: corrupted in-inode xattr: e_value size too large [ 591.350856][T29781] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.6393: couldn't read orphan inode 15 (err -117) [ 591.359941][T29770] ntfs3: loop4: failed to convert "0080" to maciceland [ 591.374756][T29781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.408970][T29770] ntfs3: loop4: failed to convert name for inode 1e. [ 591.602773][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.673375][T29798] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 591.977404][T29814] dvmrp12: entered allmulticast mode [ 592.018174][T29812] dvmrp12: left allmulticast mode [ 592.147034][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.180358][T29823] loop3: detected capacity change from 0 to 1024 [ 592.323641][ T28] audit: type=1800 audit(1772845054.468:6977): pid=29823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6402" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 592.999076][T29872] program syz.1.6417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.336028][T29855] loop0: detected capacity change from 0 to 40427 [ 593.380438][T29855] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 593.422604][ T5801] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 593.426670][T29855] F2FS-fs (loop0): invalid crc value [ 593.446047][T29895] loop4: detected capacity change from 0 to 256 [ 593.453302][T29895] exfat: Deprecated parameter 'utf8' [ 593.478466][T29855] F2FS-fs (loop0): Found nat_bits in checkpoint [ 593.493656][T29900] loop1: detected capacity change from 0 to 128 [ 593.504236][T29895] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 593.577530][T29900] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 593.625730][ T5801] usb 4-1: Using ep0 maxpacket: 8 [ 593.644743][ T5801] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.657902][ T5801] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.663607][T29900] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 593.667967][ T5801] usb 4-1: config 0 interface 0 has no altsetting 0 [ 593.686851][ T5801] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 593.700444][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.711504][ T5801] usb 4-1: config 0 descriptor?? [ 593.733737][T29855] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 593.786151][T29900] ext2 filesystem being mounted at /1621/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.966015][ T5768] syz-executor: attempt to access beyond end of device [ 593.966015][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 593.986193][T29917] CUSE: unknown device info "" [ 593.989904][ T5768] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 594.010424][T29917] CUSE: unknown device info "" [ 594.014566][ T5764] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 594.015327][T29917] CUSE: unknown device info "" [ 594.053286][T29917] CUSE: zero length info key specified [ 594.176620][ T5801] smartjoyplus 0003:6666:8804.0011: item fetching failed at offset 2/5 [ 594.191986][ T5801] smartjoyplus 0003:6666:8804.0011: parse failed [ 594.201592][ T5801] smartjoyplus: probe of 0003:6666:8804.0011 failed with error -22 [ 594.216705][T29929] netlink: 'syz.4.6429': attribute type 1 has an invalid length. [ 594.303381][T29934] ip6gretap0: entered promiscuous mode [ 594.313923][T29934] macvtap1: entered promiscuous mode [ 594.326234][T29934] ip6gretap0: left promiscuous mode [ 594.384685][ T8] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 594.466139][ T27] usb 4-1: USB disconnect, device number 52 [ 594.599265][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 594.610233][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.628614][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.628665][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 594.628688][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.632605][ T8] usb 2-1: config 0 descriptor?? [ 594.934445][T29963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6433'. [ 595.135547][ T8] hid (null): bogus close delimiter [ 595.173254][ T8] wacom 0003:056A:0084.0012: bogus close delimiter [ 595.201947][ T8] wacom 0003:056A:0084.0012: item 0 4 2 10 parsing failed [ 595.219126][ T8] wacom 0003:056A:0084.0012: parse failed [ 595.230645][T29975] gretap0: entered promiscuous mode [ 595.239008][ T8] wacom: probe of 0003:056A:0084.0012 failed with error -22 [ 595.452364][ T5802] usb 2-1: USB disconnect, device number 54 [ 595.453895][T29989] loop0: detected capacity change from 0 to 256 [ 595.548041][T29989] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 595.590742][T30002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6441'. [ 595.839137][T29969] loop4: detected capacity change from 0 to 40427 [ 595.857163][T29969] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 595.882640][T29969] F2FS-fs (loop4): invalid crc value [ 595.912312][T29969] F2FS-fs (loop4): Found nat_bits in checkpoint [ 596.092744][T29969] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 596.675860][T30061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6454'. [ 596.888310][T30068] loop1: detected capacity change from 0 to 16 [ 596.918376][T30068] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 597.380612][T30096] loop0: detected capacity change from 0 to 128 [ 597.952457][T30112] loop3: detected capacity change from 0 to 2048 [ 597.965117][T30115] loop0: detected capacity change from 0 to 256 [ 597.991153][T30112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.016857][T30115] exfat: Deprecated parameter 'utf8' [ 598.036757][T30115] exfat: Deprecated parameter 'namecase' [ 598.071087][T30115] exfat: Deprecated parameter 'namecase' [ 598.084282][T30115] exfat: Deprecated parameter 'utf8' [ 598.109946][T30115] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 598.609203][T30157] loop4: detected capacity change from 0 to 64 [ 598.713727][ T5802] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 598.766873][T30167] netlink: 436 bytes leftover after parsing attributes in process `syz.0.6483'. [ 598.772002][T30168] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6482'. [ 598.790939][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6482'. [ 598.922696][T30178] loop4: detected capacity change from 0 to 256 [ 598.932496][T30178] exfat: Deprecated parameter 'namecase' [ 598.950864][ T5802] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 598.958918][ T5802] usb 4-1: config 0 has no interface number 0 [ 598.967010][T30178] exfat: Deprecated parameter 'utf8' [ 598.974855][ T5802] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 599.012648][T30178] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 599.030943][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.042676][ T5802] usb 4-1: config 0 descriptor?? [ 599.070601][ T5802] usb 4-1: selecting invalid altsetting 1 [ 599.092964][ T5802] dvb_ttusb_budget: ttusb_init_controller: error [ 599.107964][ T5802] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 599.227964][ T5802] DVB: Unable to find symbol cx22700_attach() [ 599.318513][ T5802] DVB: Unable to find symbol tda10046_attach() [ 599.326655][ T5802] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 599.343750][ T5802] usb 4-1: USB disconnect, device number 53 [ 599.574985][T30216] loop4: detected capacity change from 0 to 256 [ 599.646375][T30216] FAT-fs (loop4): Directory bread(block 64) failed [ 599.662633][T30216] FAT-fs (loop4): Directory bread(block 65) failed [ 599.677239][T30216] FAT-fs (loop4): Directory bread(block 66) failed [ 599.694971][T30216] FAT-fs (loop4): Directory bread(block 67) failed [ 599.719131][T30216] FAT-fs (loop4): Directory bread(block 68) failed [ 599.736506][T30216] FAT-fs (loop4): Directory bread(block 69) failed [ 599.765989][T30216] FAT-fs (loop4): Directory bread(block 70) failed [ 599.786630][T30216] FAT-fs (loop4): Directory bread(block 71) failed [ 599.811453][T30216] FAT-fs (loop4): Directory bread(block 72) failed [ 599.815218][T30224] loop0: detected capacity change from 0 to 4096 [ 599.838594][T30224] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 599.853722][T30216] FAT-fs (loop4): Directory bread(block 73) failed [ 599.907396][T30224] ntfs: volume version 3.1. [ 599.953038][T30224] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775. You might want to try to use the mount option nls=utf8. [ 600.024453][T30224] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 600.679472][T30259] loop1: detected capacity change from 0 to 4096 [ 600.739952][T30259] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 600.780259][T30264] loop4: detected capacity change from 0 to 512 [ 600.782917][T30259] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 600.803511][T30264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 600.819704][T30259] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 600.888877][T30264] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 600.894508][T30259] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 600.897065][T30264] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 600.918011][T30264] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 600.927934][T30264] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 600.938235][T30264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 600.960929][T30264] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 600.999935][T19937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.087364][T30259] ntfs: volume version 3.1. [ 601.130090][T30272] comedi comedi3: pcl816: I/O port conflict (0x8001,16) [ 601.191706][T30259] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccyrillic. You might want to try to use the mount option nls=utf8. [ 601.198922][T30238] loop3: detected capacity change from 0 to 40427 [ 601.210577][T30259] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 601.254258][T30247] loop0: detected capacity change from 0 to 32768 [ 601.273450][T30238] F2FS-fs (loop3): heap/no_heap options were deprecated [ 601.282174][T30238] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 601.314616][T30238] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x77e8c [ 601.347685][T30247] [ 601.347685][T30247] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 601.347685][T30247] [ 601.359590][T30238] F2FS-fs (loop3): invalid crc value [ 601.429543][T30238] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 601.451601][T30247] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 601.451601][T30247] [ 601.485213][T30238] F2FS-fs (loop3): Found nat_bits in checkpoint [ 601.523172][T30247] xtLookup: xtSearch returned -5 [ 601.593431][T30247] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 601.593431][T30247] [ 601.613132][T30238] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 601.640964][T30247] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 601.640964][T30247] [ 601.671571][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 601.682434][T30247] xtLookup: xtSearch returned -5 [ 601.688127][T30247] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 601.688127][T30247] [ 601.738267][ T42] [ 601.738267][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 601.738267][ T42] [ 601.753261][ T42] [ 601.753261][ T42] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 601.753261][ T42] [ 601.753300][T30238] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 601.765857][ T113] [ 601.765857][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 601.765857][ T113] [ 601.783136][ T5768] [ 601.783136][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 601.783136][ T5768] [ 601.832082][ T5768] [ 601.832082][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 601.832082][ T5768] [ 601.900690][T30238] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 602.068928][ T5770] syz-executor: attempt to access beyond end of device [ 602.068928][ T5770] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 602.105403][ T5770] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 602.301999][T30309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6512'. [ 602.428218][T30289] loop1: detected capacity change from 0 to 32768 [ 602.495699][T30289] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 602.702987][T30289] XFS (loop1): Ending clean mount [ 602.724006][T30289] XFS (loop1): Quotacheck needed: Please wait. [ 602.775359][T30341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6511'. [ 602.836645][T30341] ip6gretap0: entered promiscuous mode [ 602.862679][T30341] ip6gretap0: left promiscuous mode [ 602.863237][T30289] XFS (loop1): Quotacheck: Done. [ 602.978784][ T5802] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 603.027654][ T5764] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 603.199063][T30359] sp0: Synchronizing with TNC [ 603.219873][ T5802] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 603.220859][T30358] [U] è [ 603.237066][ T5802] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 603.252113][ T5802] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 603.267144][ T5802] usb 5-1: config 220 has no interface number 2 [ 603.283650][ T5802] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 603.297084][ T5802] usb 5-1: config 220 interface 0 has no altsetting 0 [ 603.305061][ T5802] usb 5-1: config 220 interface 76 has no altsetting 0 [ 603.312962][ T5802] usb 5-1: config 220 interface 1 has no altsetting 0 [ 603.333026][ T5802] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 603.345235][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.367059][ T5802] usb 5-1: Product: syz [ 603.371719][ T5802] usb 5-1: Manufacturer: syz [ 603.376528][ T5802] usb 5-1: SerialNumber: syz [ 603.634001][ T5802] usb 5-1: selecting invalid altsetting 0 [ 603.650790][ T5802] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 603.677129][ T5802] usb 5-1: No valid video chain found. [ 603.699845][ T5802] usb 5-1: selecting invalid altsetting 0 [ 603.711930][ T5802] usbtest: probe of 5-1:220.1 failed with error -22 [ 603.737351][ T5802] usb 5-1: USB disconnect, device number 9 [ 604.288687][T30415] loop3: detected capacity change from 0 to 32768 [ 604.333563][T30415] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.6531 (30415) [ 604.392266][T30415] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 604.408582][T30415] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 604.434182][T30415] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 604.444059][T30415] BTRFS info (device loop3): use lzo compression, level 0 [ 604.451377][T30415] BTRFS info (device loop3): using free space tree [ 604.550411][ T5802] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 604.591050][T30415] BTRFS info (device loop3): enabling ssd optimizations [ 604.608236][T30415] BTRFS info (device loop3): auto enabling async discard [ 604.769896][ T5802] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 604.791508][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.794202][T30415] BTRFS info (device loop3): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 604.811081][ T5802] usb 5-1: Product: syz [ 604.815289][ T5802] usb 5-1: Manufacturer: syz [ 604.845097][ T5802] usb 5-1: SerialNumber: syz [ 604.863857][ T5802] usb 5-1: config 0 descriptor?? [ 604.915086][T30450] loop1: detected capacity change from 0 to 4096 [ 604.935794][ T5802] usb 5-1: selecting invalid altsetting 3 [ 604.937495][ T5770] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 604.942380][ T5802] comedi comedi5: could not set alternate setting 3 in high speed [ 604.974275][T30450] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 604.989993][ T5802] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 605.004480][ T5802] usbdux: probe of 5-1:0.0 failed with error -22 [ 605.115829][ T5802] usb 5-1: USB disconnect, device number 10 [ 605.731742][ T5802] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 605.804783][T30472] loop1: detected capacity change from 0 to 32768 [ 605.853923][T30472] (syz.1.6536,30472,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 605.897353][T30472] (syz.1.6536,30472,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 605.939674][ T5802] usb 5-1: Using ep0 maxpacket: 8 [ 605.950710][ T5802] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 605.960257][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.962454][T30472] JBD2: Ignoring recovery information on journal [ 605.968834][ T5802] usb 5-1: Product: syz [ 605.979120][ T5802] usb 5-1: Manufacturer: syz [ 605.983851][ T5802] usb 5-1: SerialNumber: syz [ 605.994185][ T5802] usb 5-1: config 0 descriptor?? [ 606.007785][ T5802] usb 5-1: selecting invalid altsetting 3 [ 606.013580][ T5802] comedi comedi5: could not set alternate setting 3 in high speed [ 606.022541][ T5802] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 606.037470][ T5802] usbdux: probe of 5-1:0.0 failed with error -22 [ 606.047439][T30472] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 606.191351][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 606.233323][ T27] usb 5-1: USB disconnect, device number 11 [ 606.420518][T30516] loop1: detected capacity change from 0 to 64 [ 606.516457][T30521] loop1: detected capacity change from 0 to 512 [ 606.561708][T30521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.578883][T30521] ext4 filesystem being mounted at /1650/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.602227][T30521] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 606.652747][T30521] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 606.683051][T30521] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.6543: Failed to acquire dquot type 0 [ 606.701175][T30533] netlink: 'syz.0.6544': attribute type 2 has an invalid length. [ 606.709066][T30533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6544'. [ 606.766341][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.921291][T30542] loop1: detected capacity change from 0 to 256 [ 606.935419][T30543] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6547'. [ 606.957328][T30542] exfat: Deprecated parameter 'namecase' [ 606.967586][T30543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6547'. [ 606.992228][T30543] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6547'. [ 607.048028][T30542] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 607.760234][T30551] loop3: detected capacity change from 0 to 32768 [ 607.789099][T30551] (syz.3.6549,30551,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 607.840782][T30551] (syz.3.6549,30551,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 607.923012][T30551] JBD2: Ignoring recovery information on journal [ 608.113492][T30551] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 608.232137][T30604] loop1: detected capacity change from 0 to 128 [ 608.291109][T30604] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 608.316901][T30604] hpfs: filesystem error: improperly stopped [ 608.336522][T30604] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 608.371271][T30604] hpfs: You really don't want any checks? You are crazy... [ 608.391385][T30604] hpfs: Code page index out of array [ 608.396721][T30604] hpfs: code page support is disabled [ 608.440139][T30604] hpfs: hpfs_map_4sectors(): unaligned read [ 608.456533][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 608.457671][T30604] hpfs: hpfs_map_4sectors(): unaligned read [ 608.480336][T30604] hpfs: filesystem error: unable to find root dir [ 608.622388][T30616] loop4: detected capacity change from 0 to 256 [ 608.695895][T30616] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 609.529536][T30671] loop1: detected capacity change from 0 to 2048 [ 609.583241][T30671] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 609.598795][T30671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 610.053611][T30698] loop1: detected capacity change from 0 to 64 [ 610.177004][ T28] audit: type=1800 audit(1772845071.167:6978): pid=30698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6584" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 610.249085][T30706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6587'. [ 610.492072][T30688] loop0: detected capacity change from 0 to 32768 [ 610.717878][ T5802] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 610.792231][T30734] loop3: detected capacity change from 0 to 512 [ 610.813222][T30734] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 610.857271][T30734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 610.878391][T30734] System zones: 1-12 [ 610.896347][T30734] EXT4-fs (loop3): 1 truncate cleaned up [ 610.906135][T30734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.931892][ T5802] usb 5-1: Using ep0 maxpacket: 32 [ 610.969093][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.025206][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.074262][ T5802] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 611.104545][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.117080][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.135857][T30751] loop1: detected capacity change from 0 to 1024 [ 611.183006][ T5802] usb 5-1: config 0 descriptor?? [ 611.269404][ T1028] hfsplus: b-tree write err: -5, ino 25 [ 611.284406][ T1028] hfsplus: b-tree write err: -5, ino 4 [ 611.311911][ T1028] hfsplus: b-tree write err: -5, ino 2 [ 611.660446][ T5802] savu 0003:1E7D:2D5A.0013: unexpected long global item [ 611.668113][ T5802] savu 0003:1E7D:2D5A.0013: parse failed [ 611.718032][ T5802] savu: probe of 0003:1E7D:2D5A.0013 failed with error -22 [ 611.895370][ T5802] usb 5-1: USB disconnect, device number 12 [ 611.984521][T30763] loop3: detected capacity change from 0 to 32768 [ 611.991588][T30773] loop1: detected capacity change from 0 to 32768 [ 612.020505][T30773] (syz.1.6603,30773,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 612.035718][T30773] (syz.1.6603,30773,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 612.060785][T30773] JBD2: Ignoring recovery information on journal [ 612.116106][T30773] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 612.347735][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 613.257218][T30843] loop0: detected capacity change from 0 to 16 [ 613.274918][T30843] erofs: (device loop0): mounted with root inode @ nid 36. [ 613.290665][T30809] loop3: detected capacity change from 0 to 32768 [ 613.298995][ T28] audit: type=1800 audit(1772845074.085:6979): pid=30843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6617" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 613.347906][T30809] [ 613.347906][T30809] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 613.347906][T30809] [ 613.436053][T30809] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.436053][T30809] [ 613.516162][T30809] xtLookup: xtSearch returned -5 [ 613.561124][T30809] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.561124][T30809] [ 613.601361][T30809] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 613.601361][T30809] [ 613.654199][T30809] xtLookup: xtSearch returned -5 [ 613.703795][T30809] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 613.703795][T30809] [ 613.821270][ T1153] [ 613.821270][ T1153] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 613.821270][ T1153] [ 613.840562][T30828] loop1: detected capacity change from 0 to 32768 [ 613.848684][ T1153] [ 613.848684][ T1153] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 613.848684][ T1153] [ 613.882601][T30828] XFS: attr2 mount option is deprecated. [ 613.888740][ T112] [ 613.888740][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 613.888740][ T112] [ 613.936385][ T5770] [ 613.936385][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 613.936385][ T5770] [ 613.952448][T30828] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 613.988041][T30873] loop0: detected capacity change from 0 to 512 [ 614.000566][ T5770] [ 614.000566][ T5770] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 614.000566][ T5770] [ 614.047374][T30873] EXT4-fs: Ignoring removed i_version option [ 614.057783][T30873] EXT4-fs: Ignoring removed bh option [ 614.080513][T30828] XFS (loop1): Ending clean mount [ 614.100107][T30828] XFS (loop1): Quotacheck needed: Please wait. [ 614.172611][T30873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.231721][T30873] ext4 filesystem being mounted at /1637/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 614.249474][T30828] XFS (loop1): Quotacheck: Done. [ 614.432351][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.444372][T30889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6625'. [ 614.458763][ T5764] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 614.951714][T30909] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 615.279864][T30909] ntfs3: Cannot use different iocharset when remounting! [ 616.417160][T30998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6652'. [ 616.543953][ T5801] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 616.699359][T30986] set_capacity_and_notify: 2 callbacks suppressed [ 616.699374][T30986] loop4: detected capacity change from 0 to 32768 [ 616.706903][T30980] loop1: detected capacity change from 0 to 32768 [ 616.745598][T30980] [ 616.745598][T30980] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 616.745598][T30980] [ 616.760116][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.774522][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.785206][T30986] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 616.794930][ T5801] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 616.805118][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.822426][ T5801] usb 4-1: config 0 descriptor?? [ 616.895831][T30980] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 616.895831][T30980] [ 616.917947][T30980] xtLookup: xtSearch returned -5 [ 616.924819][T30986] XFS (loop4): Ending clean mount [ 616.941582][T30980] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 616.941582][T30980] [ 616.955754][T30986] XFS (loop4): Quotacheck needed: Please wait. [ 616.961716][T30980] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 616.961716][T30980] [ 616.981228][T30980] xtLookup: xtSearch returned -5 [ 616.997695][T30980] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 616.997695][T30980] [ 617.078107][T30986] XFS (loop4): Quotacheck: Done. [ 617.125067][ T11] [ 617.125067][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 617.125067][ T11] [ 617.146090][ T11] [ 617.146090][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 617.146090][ T11] [ 617.157485][ T113] [ 617.157485][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 617.157485][ T113] [ 617.169234][ T5764] [ 617.169234][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 617.169234][ T5764] [ 617.180491][ T5764] [ 617.180491][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 617.180491][ T5764] [ 617.251889][T19937] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 617.294796][ T5801] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x2 [ 617.308428][ T5801] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 617.411479][T31032] loop1: detected capacity change from 0 to 512 [ 617.491755][T31032] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 617.501626][ T5801] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 617.509315][T31032] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 617.530596][ T5801] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 617.549118][T31032] System zones: 0-1, 15-15, 18-18, 34-34 [ 617.586604][ T5801] pyra: probe of 0003:1E7D:2CF6.0014 failed with error -71 [ 617.597809][T31032] EXT4-fs (loop1): orphan cleanup on readonly fs [ 617.630829][T31032] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 617.676917][T31032] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 617.685475][ T5801] usb 4-1: USB disconnect, device number 54 [ 617.692465][T31032] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 617.717685][T31032] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.6657: bad orphan inode 16 [ 617.748532][T31032] ext4_test_bit(bit=15, block=18) = 1 [ 617.765968][T31032] is_bad_inode(inode)=0 [ 617.770302][T31032] NEXT_ORPHAN(inode)=0 [ 617.776478][T31032] max_ino=32 [ 617.782994][T31032] i_nlink=2 [ 617.791662][T31032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 617.833007][T31032] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 617.885785][ T5803] kernel write not supported for file /vcsu (pid: 5803 comm: kworker/0:5) [ 617.920181][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.111352][T31067] loop0: detected capacity change from 0 to 1024 [ 618.255886][T31074] loop3: detected capacity change from 0 to 256 [ 618.351516][T31074] FAT-fs (loop3): Directory bread(block 64) failed [ 618.368451][T31074] FAT-fs (loop3): Directory bread(block 65) failed [ 618.399949][T31074] FAT-fs (loop3): Directory bread(block 66) failed [ 618.408296][T31074] FAT-fs (loop3): Directory bread(block 67) failed [ 618.415657][T31074] FAT-fs (loop3): Directory bread(block 68) failed [ 618.422936][T31074] FAT-fs (loop3): Directory bread(block 69) failed [ 618.430182][T31074] FAT-fs (loop3): Directory bread(block 70) failed [ 618.453806][T31074] FAT-fs (loop3): Directory bread(block 71) failed [ 618.463477][T31074] FAT-fs (loop3): Directory bread(block 72) failed [ 618.471227][T31074] FAT-fs (loop3): Directory bread(block 73) failed [ 619.148206][T31126] loop4: detected capacity change from 0 to 256 [ 619.174933][T31127] vlan2: entered promiscuous mode [ 619.180023][T31127] geneve1: entered promiscuous mode [ 619.200008][T31127] vlan2: entered allmulticast mode [ 619.242303][T31127] geneve1: entered allmulticast mode [ 619.314748][T31126] FAT-fs (loop4): Directory bread(block 64) failed [ 619.321364][T31126] FAT-fs (loop4): Directory bread(block 65) failed [ 619.335299][T31126] FAT-fs (loop4): Directory bread(block 66) failed [ 619.354899][T31126] FAT-fs (loop4): Directory bread(block 67) failed [ 619.361565][T31126] FAT-fs (loop4): Directory bread(block 68) failed [ 619.379459][T31126] FAT-fs (loop4): Directory bread(block 69) failed [ 619.400314][T31126] FAT-fs (loop4): Directory bread(block 70) failed [ 619.406994][T31126] FAT-fs (loop4): Directory bread(block 71) failed [ 619.435382][T31126] FAT-fs (loop4): Directory bread(block 72) failed [ 619.461920][T31126] FAT-fs (loop4): Directory bread(block 73) failed [ 619.475711][T31137] loop0: detected capacity change from 0 to 4096 [ 619.718209][T31152] netlink: 336 bytes leftover after parsing attributes in process `syz.3.6685'. [ 620.403634][T31186] overlayfs: lower data-only dirs require metacopy support. [ 620.777915][T31175] loop4: detected capacity change from 0 to 32768 [ 620.787686][T31200] netlink: 'syz.1.6699': attribute type 5 has an invalid length. [ 620.823208][T31175] JBD2: Ignoring recovery information on journal [ 620.837461][T31172] loop0: detected capacity change from 0 to 32768 [ 620.923628][T31175] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 621.115685][T31175] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 621.157207][T31175] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 621.178405][T31175] OCFS2: File system is now read-only. [ 621.189208][T31175] (syz.4.6691,31175,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 621.236312][T31175] (syz.4.6691,31175,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 621.244333][T31175] (syz.4.6691,31175,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 621.288594][T31175] (syz.4.6691,31175,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 621.309839][T31175] (syz.4.6691,31175,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 621.318962][T31175] (syz.4.6691,31175,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 621.340684][T31220] loop0: detected capacity change from 0 to 128 [ 621.347177][T31175] (syz.4.6691,31175,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 621.383965][T31175] (syz.4.6691,31175,1):ocfs2_mknod:385 ERROR: status = -30 [ 621.397593][T31220] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 621.408605][T31175] (syz.4.6691,31175,1):ocfs2_mknod:502 ERROR: status = -30 [ 621.415856][T31175] (syz.4.6691,31175,1):ocfs2_mkdir:659 ERROR: status = -30 [ 621.574985][ T5768] sysv_free_block: flc_count > flc_size [ 621.606018][ T5768] sysv_free_block: flc_count > flc_size [ 621.634510][ T5768] sysv_free_block: flc_count > flc_size [ 621.640116][ T5768] sysv_free_block: flc_count > flc_size [ 621.662774][ T5768] sysv_free_block: flc_count > flc_size [ 621.684899][ T5768] sysv_free_block: flc_count > flc_size [ 621.690502][ T5768] sysv_free_block: flc_count > flc_size [ 621.734646][ T5768] sysv_free_block: flc_count > flc_size [ 621.753073][T19937] ocfs2: Unmounting device (7,4) on (node local) [ 621.756531][ T5768] sysv_free_block: flc_count > flc_size [ 621.792188][ T5768] sysv_free_block: flc_count > flc_size [ 621.801404][ T5768] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 621.911402][T31237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6709'. [ 621.969349][T31237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6709'. [ 621.986731][T31202] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 622.116532][T31202] XFS (loop3): Ending clean mount [ 622.197579][T31202] XFS (loop3): Quotacheck needed: Please wait. [ 622.389303][T31202] XFS (loop3): Quotacheck: Done. [ 622.470210][T31275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6714'. [ 622.514818][ T5802] IPVS: starting estimator thread 0... [ 622.596747][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 622.637098][T31280] IPVS: using max 21 ests per chain, 50400 per kthread [ 622.782410][T31291] set_capacity_and_notify: 1 callbacks suppressed [ 622.782426][T31291] loop1: detected capacity change from 0 to 4096 [ 622.804088][T31291] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 622.887738][T31296] loop0: detected capacity change from 0 to 4096 [ 622.898587][T31300] loop4: detected capacity change from 0 to 1024 [ 622.995421][T31300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.040525][T31310] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 623.198710][T19937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.325593][T31319] loop1: detected capacity change from 0 to 4096 [ 623.368917][T31319] ntfs3: loop1: ino=3, Correct links count -> 2. [ 623.638785][T31334] loop1: detected capacity change from 0 to 1024 [ 623.666013][T31334] EXT4-fs: Ignoring removed orlov option [ 623.684988][T31334] EXT4-fs: Ignoring removed bh option [ 623.700367][T31338] sp0: Synchronizing with TNC [ 623.753785][T31334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.797947][T31334] EXT4-fs: old and new quota format mixing [ 623.932400][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.119695][T31365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6735'. [ 624.553207][T31382] loop0: detected capacity change from 0 to 8192 [ 624.596544][T31382] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 624.674982][T31382] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 624.716099][T31382] REISERFS (device loop0): using ordered data mode [ 624.750376][T31382] reiserfs: using flush barriers [ 624.782024][T31382] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 624.828413][T31382] REISERFS (device loop0): checking transaction log (loop0) [ 625.047131][T31382] REISERFS (device loop0): Using tea hash to sort names [ 625.063467][T31382] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 625.355615][T31377] loop1: detected capacity change from 0 to 40427 [ 625.381605][T31377] F2FS-fs (loop1): invalid crc value [ 625.713942][T31377] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 625.974345][T31431] loop3: detected capacity change from 0 to 8192 [ 625.994248][T31431] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 626.009561][T31431] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 626.019535][T31431] REISERFS (device loop3): using ordered data mode [ 626.026477][T31431] reiserfs: using flush barriers [ 626.034194][T31431] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 626.051726][T31431] REISERFS (device loop3): checking transaction log (loop3) [ 626.061369][T31431] REISERFS (device loop3): Using r5 hash to sort names [ 626.068917][T31431] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 626.249823][ T5803] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 626.490103][ T5803] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 626.518957][ T5803] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 626.551256][ T5803] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 626.571702][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.594944][T31463] loop1: detected capacity change from 0 to 64 [ 626.609745][ T5803] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 626.634644][ T5803] usb 5-1: invalid MIDI out EP 0 [ 626.776626][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.787306][T31482] loop3: detected capacity change from 0 to 512 [ 626.822190][ T5803] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 626.854647][T31482] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 626.899871][ T5803] usb 5-1: USB disconnect, device number 13 [ 627.111348][ T28] audit: type=1326 audit(1772845087.005:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31510 comm="syz.1.6764" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d11b9c799 code=0x0 [ 627.355936][T31526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6768'. [ 627.446314][T31529] team0: Device gtp0 is up. Set it down before adding it as a team port [ 628.472013][T31593] netlink: 'syz.3.6790': attribute type 2 has an invalid length. [ 628.517041][T31593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6790'. [ 628.540212][T31593] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 629.030535][T31622] set_capacity_and_notify: 2 callbacks suppressed [ 629.030549][T31622] loop3: detected capacity change from 0 to 4096 [ 629.290422][T31638] nftables ruleset with unbound set [ 629.754399][T31651] loop4: detected capacity change from 0 to 8192 [ 629.794534][T31651] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 629.818846][T31651] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 629.862968][T31651] REISERFS (device loop4): using ordered data mode [ 629.880240][T31651] reiserfs: using flush barriers [ 629.912416][T31651] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 629.937647][ T5802] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 629.953961][T31651] REISERFS (device loop4): checking transaction log (loop4) [ 630.118527][T31673] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6816'. [ 630.139076][T31673] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6816'. [ 630.144803][T31651] REISERFS (device loop4): Using tea hash to sort names [ 630.162132][T31651] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 630.163627][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.202606][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.236387][ T5802] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 630.267248][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.302102][ T5802] usb 4-1: config 0 descriptor?? [ 630.772326][ T5802] playstation 0003:054C:0DF2.0015: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 630.969230][ T5802] playstation 0003:054C:0DF2.0015: Failed to retrieve feature with reportID 9: -71 [ 630.984859][ T5802] playstation 0003:054C:0DF2.0015: Failed to retrieve DualSense pairing info: -71 [ 631.000589][ T5802] playstation 0003:054C:0DF2.0015: Failed to get MAC address from DualSense [ 631.010248][ T5802] playstation 0003:054C:0DF2.0015: Failed to create dualsense. [ 631.032535][ T5802] playstation: probe of 0003:054C:0DF2.0015 failed with error -71 [ 631.059837][ T5802] usb 4-1: USB disconnect, device number 55 [ 631.148194][T31679] loop1: detected capacity change from 0 to 32768 [ 631.786400][ T5801] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 631.923822][T31745] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6830'. [ 632.016859][ T5801] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 632.048499][ T5801] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 632.061121][ T5801] usb 2-1: config 0 interface 0 has no altsetting 0 [ 632.068529][ T5801] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 632.088131][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.117419][ T5801] usb 2-1: config 0 descriptor?? [ 632.254618][ T28] audit: type=1400 audit(1772845091.813:6981): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26F81648AA2A pid=31765 comm="syz.3.6835" [ 632.590609][ T5801] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 632.604287][ T5801] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 632.612834][ T5801] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 632.620636][ T5801] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 632.628859][ T5801] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 632.649343][ T5801] corsair-psu 0003:1B1C:1C09.0016: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 632.780702][ T5801] corsair-psu 0003:1B1C:1C09.0016: unable to initialize device (-90) [ 632.827515][ T5801] corsair-psu: probe of 0003:1B1C:1C09.0016 failed with error -90 [ 632.869273][ T5801] usb 2-1: USB disconnect, device number 55 [ 632.954719][T31805] loop4: detected capacity change from 0 to 1024 [ 633.067821][ T1153] hfsplus: b-tree write err: -5, ino 25 [ 633.078267][ T1153] hfsplus: b-tree write err: -5, ino 4 [ 633.091781][ T1153] hfsplus: b-tree write err: -5, ino 2 [ 633.110542][ T1153] hfsplus: b-tree write err: -5, ino 20 [ 633.475374][T31832] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6851'. [ 633.643459][T31839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6853'. [ 633.907685][T31829] loop3: detected capacity change from 0 to 32768 [ 633.927370][T31829] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.6850 (31829) [ 633.961035][T31829] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 633.973748][T31829] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 633.986010][T31829] BTRFS info (device loop3): enabling auto defrag [ 633.994876][T31829] BTRFS info (device loop3): use no compression [ 634.007073][T31829] BTRFS info (device loop3): force clearing of disk cache [ 634.015815][T31829] BTRFS info (device loop3): max_inline at 4096 [ 634.025400][T31829] BTRFS info (device loop3): disabling free space tree [ 634.108453][T31829] BTRFS info (device loop3): enabling ssd optimizations [ 634.115457][T31829] BTRFS info (device loop3): auto enabling async discard [ 634.156620][T31829] BTRFS info (device loop3): rebuilding free space tree [ 634.186964][T31829] BTRFS info (device loop3): disabling free space tree [ 634.216377][T31829] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 634.241760][T31829] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 634.356478][T31845] loop1: detected capacity change from 0 to 32768 [ 634.415318][T31845] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 634.435567][ T5770] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 634.559344][T31845] XFS (loop1): Ending clean mount [ 634.758903][ T5764] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 635.073541][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.080030][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.499495][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6871'. [ 635.555726][T31925] netlink: 'syz.4.6871': attribute type 30 has an invalid length. [ 635.565618][T31925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6871'. [ 635.931661][T31919] loop3: detected capacity change from 0 to 32768 [ 635.948477][T31919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.6870 (31919) [ 635.981269][T31919] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 636.007634][T31919] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 636.040696][T31919] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 636.050132][T31919] BTRFS info (device loop3): force zstd compression, level 3 [ 636.061015][T31919] BTRFS info (device loop3): turning on sync discard [ 636.083726][T31919] BTRFS info (device loop3): force clearing of disk cache [ 636.090897][T31919] BTRFS info (device loop3): enabling disk space caching [ 636.136823][T31919] BTRFS info (device loop3): turning off discard [ 636.154108][T31919] BTRFS info (device loop3): disk space caching is enabled [ 636.169599][T31948] loop1: detected capacity change from 0 to 512 [ 636.186708][T31948] EXT4-fs: Invalid uid value -1 [ 636.261411][T31919] BTRFS info (device loop3): enabling ssd optimizations [ 636.308657][T31919] BTRFS info (device loop3): rebuilding free space tree [ 636.365295][T31919] BTRFS info (device loop3): disabling free space tree [ 636.383204][T31919] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 636.393089][T31919] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 636.714483][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 637.100006][ T787] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 637.152120][T32000] loop1: detected capacity change from 0 to 64 [ 637.335158][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.362391][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.406561][ T787] usb 5-1: New USB device found, idVendor=5e0a, idProduct=a055, bcdDevice= 0.00 [ 637.451603][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.482047][ T787] usb 5-1: config 0 descriptor?? [ 637.966899][ T787] hid-generic 0003:5E0A:A055.0017: unbalanced collection at end of report description [ 637.997766][ T787] hid-generic: probe of 0003:5E0A:A055.0017 failed with error -22 [ 638.058330][T32036] loop3: detected capacity change from 0 to 64 [ 638.245564][ T787] usb 5-1: USB disconnect, device number 14 [ 638.769408][T32062] loop1: detected capacity change from 0 to 32768 [ 638.892773][T32062] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 638.892773][T32062] [ 638.917629][T32062] ERROR: (device loop1): remounting filesystem as read-only [ 638.925190][T32062] ialloc: diAlloc returned -5! [ 639.108241][T32084] loop4: detected capacity change from 0 to 512 [ 639.145952][T32084] EXT4-fs: Ignoring removed bh option [ 639.194400][T32084] EXT4-fs (loop4): 1 truncate cleaned up [ 639.201285][T32084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.454828][T19937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.212117][T32098] loop3: detected capacity change from 0 to 40427 [ 640.258539][T32098] F2FS-fs (loop3): invalid crc value [ 640.273332][T32098] F2FS-fs (loop3): Found nat_bits in checkpoint [ 640.399674][T32098] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 640.540263][T32139] loop1: detected capacity change from 0 to 512 [ 640.642138][T32139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 640.830463][T32139] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.6924: Unimplemented hash flags: 0x0001 [ 640.848127][T32139] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.6924: Corrupt directory, running e2fsck is recommended [ 640.915458][T32139] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.6924: path /1749/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 641.326760][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.005456][ T5801] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 642.187152][T32208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6946'. [ 642.226904][ T5801] usb 5-1: unable to get BOS descriptor or descriptor too short [ 642.255490][ T5801] usb 5-1: not running at top speed; connect to a high speed hub [ 642.274382][T32185] loop3: detected capacity change from 0 to 40427 [ 642.282184][ T5801] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.305659][T32185] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 642.306847][ T5801] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.313439][T32185] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 642.384427][T32185] F2FS-fs (loop3): invalid crc value [ 642.392860][ T5801] usb 5-1: string descriptor 0 read error: -22 [ 642.412424][ T5801] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 642.423403][T32185] F2FS-fs (loop3): Found nat_bits in checkpoint [ 642.432490][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.494170][ T5801] usb 5-1: 0:2 : does not exist [ 642.591424][T32185] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 642.614587][T32185] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 643.150060][ T5801] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 643.195475][ T5801] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 643.214213][ T5801] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 643.342526][ T5801] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 643.396330][ T5801] usb 5-1: USB disconnect, device number 15 [ 643.770589][T32238] loop1: detected capacity change from 0 to 32768 [ 644.092403][T32287] can0: slcan on ttyprintk. [ 644.282745][T32285] can0 (unregistered): slcan off ttyprintk. [ 644.469442][T32311] tipc: Enabling of bearer rejected, failed to enable media [ 645.523756][T32361] loop1: detected capacity change from 0 to 8192 [ 645.594639][T32361] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 646.502352][T32423] program syz.4.7000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 646.647583][T32435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7003'. [ 646.772890][ T787] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 646.973383][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 646.984468][ T787] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 646.997076][ T787] usb 4-1: config 0 has no interface number 0 [ 647.003251][ T787] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 647.031626][ T787] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 647.041488][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.049989][ T787] usb 4-1: Product: syz [ 647.059636][ T787] usb 4-1: Manufacturer: syz [ 647.064622][ T787] usb 4-1: SerialNumber: syz [ 647.073037][ T787] usb 4-1: config 0 descriptor?? [ 647.084434][ T787] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 647.095314][ T787] em28xx 4-1:0.132: Video interface 132 found: [ 647.521765][ T5801] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 647.522734][ T787] em28xx 4-1:0.132: unknown em28xx chip ID (39) [ 647.729302][ T5801] usb 2-1: unable to get BOS descriptor or descriptor too short [ 647.756979][ T5801] usb 2-1: not running at top speed; connect to a high speed hub [ 647.799226][ T5801] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.825396][ T787] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 647.825510][ T5801] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 647.854451][ T787] em28xx 4-1:0.132: board has no eeprom [ 647.855021][ T5801] usb 2-1: string descriptor 0 read error: -22 [ 647.876585][ T5801] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 647.901373][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.918462][ T5801] usb 2-1: 0:2 : does not exist [ 647.947900][T32488] loop4: detected capacity change from 0 to 1024 [ 647.948787][ T787] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 648.004901][T32488] hfsplus: bad catalog entry type [ 648.016168][ T787] em28xx 4-1:0.132: analog set to bulk mode. [ 648.071789][ T42] hfsplus: b-tree write err: -5, ino 25 [ 648.072474][ T5802] em28xx 4-1:0.132: Registering V4L2 extension [ 648.088264][ T42] hfsplus: b-tree write err: -5, ino 4 [ 648.095520][ T787] usb 4-1: USB disconnect, device number 56 [ 648.113759][ T787] em28xx 4-1:0.132: Disconnecting em28xx [ 648.126214][ T42] hfsplus: b-tree write err: -5, ino 2 [ 648.461933][ T5802] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 648.469450][ T5802] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 648.513903][ T5802] em28xx 4-1:0.132: No AC97 audio processor [ 648.559635][ T5802] usb 4-1: Decoder not found [ 648.564278][ T5802] em28xx 4-1:0.132: failed to create media graph [ 648.580208][ T5802] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 648.603568][ T5801] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 648.607718][ T5802] em28xx 4-1:0.132: Remote control support is not available for this card. [ 648.634704][ T787] em28xx 4-1:0.132: Closing input extension [ 648.646582][ T5801] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 648.671436][ T787] em28xx 4-1:0.132: Freeing device [ 648.696030][ T5801] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 648.779168][ T5801] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 648.808608][ T5801] usb 2-1: USB disconnect, device number 56 [ 648.960282][T32538] loop3: detected capacity change from 0 to 4096 [ 648.980183][T32538] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 649.155623][T32538] ntfs3: loop3: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 649.185110][T32538] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 649.228876][T32558] ntfs3: loop3: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 649.326376][ T1153] ntfs3: loop3: ino=1e, ntfs3_write_inode failed, -22. [ 649.341790][T32561] loop4: detected capacity change from 0 to 4096 [ 649.489979][T32561] ntfs3: loop4: failed to convert "256c" to koi8-ru [ 650.159505][T32595] loop1: detected capacity change from 0 to 8192 [ 651.219912][T32655] loop3: detected capacity change from 0 to 64 [ 651.279496][T32652] loop4: detected capacity change from 0 to 8192 [ 651.330975][T32652] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 651.344213][T32652] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 651.353910][T32652] REISERFS (device loop4): using ordered data mode [ 651.360776][T32652] reiserfs: using flush barriers [ 651.368150][T32652] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 651.387299][T32652] REISERFS (device loop4): checking transaction log (loop4) [ 651.399560][T32652] REISERFS (device loop4): Using r5 hash to sort names [ 651.409748][T32652] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 652.278487][T32710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7069'. [ 652.607028][T32728] loop3: detected capacity change from 0 to 2048 [ 652.687501][T32728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.822622][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.954484][T32695] loop1: detected capacity change from 0 to 40427 [ 652.990607][T32695] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 652.999096][T32695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 653.032028][T32695] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 653.053890][T32695] F2FS-fs (loop1): Found nat_bits in checkpoint [ 653.194057][T32695] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 653.218731][T32695] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 653.350353][T32695] F2FS-fs (loop1): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix. [ 653.414230][ T302] netlink: 'syz.4.7087': attribute type 15 has an invalid length. [ 653.793722][ T324] loop4: detected capacity change from 0 to 128 [ 653.900201][ T324] syz.4.7095: attempt to access beyond end of device [ 653.900201][ T324] loop4: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 653.957074][ T331] loop3: detected capacity change from 0 to 64 [ 653.975544][ T333] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 654.662132][ T5802] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 654.767179][ T363] loop1: detected capacity change from 0 to 32768 [ 654.805857][ T363] [ 654.805857][ T363] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.805857][ T363] [ 654.869371][ T5802] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 654.878711][ T28] audit: type=1800 audit(1772845112.984:6982): pid=363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7089" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 654.911595][ T5802] usb 4-1: config 0 has no interface number 0 [ 654.923201][ T5802] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 654.938188][ T5802] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 654.966891][ T5802] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 655.012989][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 655.036210][ T5802] usb 4-1: Product: syz [ 655.050028][ T5802] usb 4-1: SerialNumber: syz [ 655.075239][ T5802] usb 4-1: config 0 descriptor?? [ 655.095482][ T363] ERROR: (device loop1): xtSearch: stack overrun! [ 655.095482][ T363] [ 655.114902][ T5802] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input31 [ 655.213910][ T363] ERROR: (device loop1): xtSearch: stack overrun! [ 655.213910][ T363] [ 655.249477][ T363] xtLookup: xtSearch returned -5 [ 655.254476][ T363] ERROR: (device loop1): xtTruncate: stack overrun! [ 655.254476][ T363] [ 655.352681][ T5802] usb 4-1: USB disconnect, device number 57 [ 655.404959][ T11] [ 655.404959][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.404959][ T11] [ 655.426494][ T11] [ 655.426494][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.426494][ T11] [ 655.439533][ T11] [ 655.439533][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.439533][ T11] [ 655.454322][ T11] [ 655.454322][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.454322][ T11] [ 655.471892][ T11] JFS: metapage_get_blocks failed [ 655.485235][ T11] [ 655.485235][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.485235][ T11] [ 655.496879][ T409] loop4: detected capacity change from 0 to 4096 [ 655.503730][ T5764] [ 655.503730][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.503730][ T5764] [ 655.524978][ T5764] [ 655.524978][ T5764] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.524978][ T5764] [ 655.589745][ T413] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 656.045824][ T433] ALSA: seq fatal error: cannot create timer (-19) [ 656.284434][ T430] loop1: detected capacity change from 0 to 32768 [ 656.296892][ T430] (syz.1.7118,430,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 656.311565][ T430] (syz.1.7118,430,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 656.335743][ T430] JBD2: Ignoring recovery information on journal [ 656.373009][ T430] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 656.544733][ T430] syz.1.7118 (430) used greatest stack depth: 18480 bytes left [ 656.587226][ T5764] ocfs2: Unmounting device (7,1) on (node local) [ 656.846625][ T455] loop1: detected capacity change from 0 to 256 [ 656.870409][ T455] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 657.144104][ T468] loop4: detected capacity change from 0 to 512 [ 657.154283][ T468] EXT4-fs: inline encryption not supported [ 657.160981][ T468] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 657.180882][ T468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 657.190629][ T468] EXT4-fs (loop4): orphan cleanup on readonly fs [ 657.197894][ T468] EXT4-fs error (device loop4): ext4_orphan_get:1424: comm syz.4.7128: bad orphan inode 267 [ 657.210885][ T468] EXT4-fs (loop4): Remounting filesystem read-only [ 657.225438][ T468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 657.286245][ T468] System zones: 1-12 [ 657.307720][ T468] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000007. [ 657.341582][T19937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 657.487322][ T479] loop3: detected capacity change from 0 to 4096 [ 657.510122][ T479] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 657.596068][ T479] ntfs: volume version 3.1. [ 657.628867][ T479] ntfs: (device loop3): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 657.666499][ T479] ntfs: (device loop3): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 657.935646][ T497] loop4: detected capacity change from 0 to 8192 [ 657.974727][ T497] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 658.044267][ T497] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 658.107925][ T497] REISERFS (device loop4): using ordered data mode [ 658.142776][ T497] reiserfs: using flush barriers [ 658.174605][ T497] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 658.234100][ T497] REISERFS (device loop4): checking transaction log (loop4) [ 658.263453][ T497] REISERFS (device loop4): Using r5 hash to sort names [ 658.310470][ T497] reiserfs: enabling write barrier flush mode [ 658.350172][ T497] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 658.409551][ T497] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 658.445596][ T497] REISERFS (device loop4): Remounting filesystem read-only [ 658.452863][ T497] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 658.509742][ T497] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 658.550546][ T497] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 658.573901][ T497] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error [ 658.586345][ T497] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 658.638411][ T497] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 658.659440][ T497] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 658.722729][ T497] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 658.845406][T19937] ------------[ cut here ]------------ [ 658.850935][T19937] kernel BUG at fs/reiserfs/journal.c:1916! [ 658.890757][T19937] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 658.896873][T19937] CPU: 0 PID: 19937 Comm: syz-executor Not tainted syzkaller #0 [ 658.904525][T19937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.914594][T19937] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 658.920438][T19937] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 dc b5 ff e9 f9 fc ff ff e8 8a ad 5d ff <0f> 0b e8 83 ad 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 658.940062][T19937] RSP: 0018:ffffc90003247b00 EFLAGS: 00010293 [ 658.946150][T19937] RAX: ffffffff82296ed6 RBX: 1ffff92000648f64 RCX: ffff88802752da00 [ 658.954139][T19937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 658.962121][T19937] RBP: ffffc90003247bf8 R08: ffffc90003247b77 R09: 0000000000000000 [ 658.970108][T19937] R10: ffffc90003247b40 R11: fffff52000648f6f R12: ffffc90004783000 [ 658.978180][T19937] R13: dffffc0000000000 R14: ffff8880558b0630 R15: 0000000000000000 [ 658.986167][T19937] FS: 000055557ea7c500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 658.995113][T19937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 659.001710][T19937] CR2: 00007f77759f6000 CR3: 000000001fff6000 CR4: 00000000003506f0 [ 659.009696][T19937] Call Trace: [ 659.012985][T19937] [ 659.015921][T19937] ? journal_release+0x30/0x30 [ 659.020715][T19937] journal_release+0x1f/0x30 [ 659.025326][T19937] reiserfs_put_super+0x26b/0x510 [ 659.029164][ T558] loop3: detected capacity change from 0 to 1024 [ 659.030353][T19937] ? hook_inode_free_security+0xb0/0xb0 [ 659.030374][T19937] ? evict_inodes+0x63c/0x6a0 [ 659.030389][T19937] ? reiserfs_dirty_inode+0x270/0x270 [ 659.052275][T19937] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 659.057936][T19937] ? reiserfs_dirty_inode+0x270/0x270 [ 659.063328][T19937] generic_shutdown_super+0x134/0x2b0 [ 659.068719][T19937] kill_block_super+0x44/0x90 [ 659.073417][T19937] deactivate_locked_super+0x97/0x100 [ 659.078801][T19937] cleanup_mnt+0x43b/0x4d0 [ 659.083236][T19937] task_work_run+0x1d4/0x260 [ 659.087844][T19937] ? task_work_cancel+0x220/0x220 [ 659.092886][T19937] ? exit_to_user_mode_loop+0x3b/0x110 [ 659.098366][T19937] exit_to_user_mode_loop+0xe6/0x110 [ 659.103679][T19937] exit_to_user_mode_prepare+0xee/0x180 [ 659.109244][T19937] syscall_exit_to_user_mode+0x1a/0x50 [ 659.114723][T19937] do_syscall_64+0x61/0xa0 [ 659.119150][T19937] ? clear_bhb_loop+0x40/0x90 [ 659.123833][T19937] ? clear_bhb_loop+0x40/0x90 [ 659.128521][T19937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.134430][T19937] RIP: 0033:0x7f001a39d9d7 [ 659.138854][T19937] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 659.158474][T19937] RSP: 002b:00007ffe86d95d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 659.166899][T19937] RAX: 0000000000000000 RBX: 00007f001a431f90 RCX: 00007f001a39d9d7 [ 659.174881][T19937] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe86d95e50 [ 659.182852][T19937] RBP: 00007ffe86d95e50 R08: 00007ffe86d96e50 R09: 00000000ffffffff [ 659.190817][T19937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe86d96ee0 [ 659.198778][T19937] R13: 00007f001a431f90 R14: 000000000009de6c R15: 00007ffe86d96f20 [ 659.206745][T19937] [ 659.209754][T19937] Modules linked in: [ 659.257160][T19937] ---[ end trace 0000000000000000 ]--- [ 659.263501][T19937] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 659.272834][T19937] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 64 dc b5 ff e9 f9 fc ff ff e8 8a ad 5d ff <0f> 0b e8 83 ad 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 659.295342][T19937] RSP: 0018:ffffc90003247b00 EFLAGS: 00010293 [ 659.301975][T19937] RAX: ffffffff82296ed6 RBX: 1ffff92000648f64 RCX: ffff88802752da00 [ 659.316991][T19937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 659.326940][T19937] RBP: ffffc90003247bf8 R08: ffffc90003247b77 R09: 0000000000000000 [ 659.337270][T19937] R10: ffffc90003247b40 R11: fffff52000648f6f R12: ffffc90004783000 [ 659.348493][T19937] R13: dffffc0000000000 R14: ffff8880558b0630 R15: 0000000000000000 [ 659.357041][T19937] FS: 000055557ea7c500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 659.361156][ T558] hfsplus: bad catalog entry type [ 659.366392][T19937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 659.379938][T19937] CR2: 00007f8d12a66ff8 CR3: 000000001fff6000 CR4: 00000000003506f0 [ 659.388391][T19937] Kernel panic - not syncing: Fatal exception [ 659.394907][T19937] Kernel Offset: disabled [ 659.399222][T19937] Rebooting in 86400 seconds..