last executing test programs: 2.895722019s ago: executing program 5 (id=3000): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)=@multiplanar_overlay={0x9, 0x8, 0x4, 0x10, 0x2, {0x77359400}, {0x5, 0x0, 0xfd, 0x8, 0xb, 0x6, "866ab6a2"}, 0x7, 0x3, {0x0}, 0xdb}) 2.70273292s ago: executing program 3 (id=3004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback={0x3f}, 0x23}, 0x1c) 2.620817075s ago: executing program 5 (id=3005): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) 2.433676866s ago: executing program 4 (id=3008): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 2.428978535s ago: executing program 3 (id=3009): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_POWER(r0, 0x12, 0x4, 0x0, &(0x7f0000000040)) 2.237649462s ago: executing program 5 (id=3011): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x18, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 2.21103614s ago: executing program 3 (id=3012): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 2.11326589s ago: executing program 3 (id=3014): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000003140)={0x3, 0x1000000}) 2.083518022s ago: executing program 4 (id=3015): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$getflags(r0, 0x401) 2.080570251s ago: executing program 0 (id=3016): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b5"], 0xc8) 1.974465741s ago: executing program 5 (id=3017): syz_usb_connect(0x1, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0xb6, 0x82, 0x3e, 0x8, 0x424, 0x7801, 0x7498, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb3, 0x4, 0xa0, 0xbe, "", [{{0x9, 0x4, 0x9c, 0x1, 0x0, 0x5c, 0x8c, 0x2a, 0x17}}]}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet6_sctp(0xa, 0x1, 0x84) 1.873669856s ago: executing program 1 (id=3018): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.87269242s ago: executing program 3 (id=3019): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc4089434, &(0x7f0000000040)={0x1, 0x2}) 1.860173564s ago: executing program 0 (id=3020): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x330, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 1.818400409s ago: executing program 4 (id=3021): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000010c0)=""/223, 0xdf}], 0x1, 0x6, 0x20000000) 1.578119379s ago: executing program 0 (id=3024): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.553328391s ago: executing program 1 (id=3025): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.453270129s ago: executing program 4 (id=3027): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="91", 0x1}], 0x1, 0x0, 0x20, 0x40004}}], 0x1, 0x24004044) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000700000004"], 0x50) 1.27180725s ago: executing program 1 (id=3028): r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 1.225775489s ago: executing program 4 (id=3029): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x14}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}]}]}}}]}, 0x44}, 0x1, 0xba01}, 0x8004) 1.142189119s ago: executing program 2 (id=3030): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x200, 0x1, 0x34343452, 0x2, 0x9, [{0x5ac, 0x9}, {0x5, 0xfffffff8}, {0x6, 0x4}, {0x6, 0x312}, {0x4ac5, 0x5}, {0x2000b39, 0x8007}, {0xffffff7f, 0x200}, {0x8, 0x1}], 0x6, 0x0, 0x6, 0x2, 0x2}}) 965.880232ms ago: executing program 1 (id=3031): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x5423, 0x0) 949.411668ms ago: executing program 2 (id=3032): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x1000004, 0x0, 0x4, 0x1, 0x1, 0x0, 0x7ac6}}) 913.565029ms ago: executing program 4 (id=3033): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x808302, &(0x7f0000000680)={[{@noload}, {@journal_dev={'journal_dev', 0x3d, 0xfd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x1, 0x482, &(0x7f0000001040)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 878.409969ms ago: executing program 0 (id=3034): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munlockall() 841.467501ms ago: executing program 2 (id=3035): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x8040) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r0, 0x81000000) 754.282574ms ago: executing program 1 (id=3036): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x6a6, &(0x7f0000000f80)="$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") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 692.592596ms ago: executing program 2 (id=3037): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0), &(0x7f0000000340)=0x8) 617.323776ms ago: executing program 0 (id=3038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) 584.902554ms ago: executing program 1 (id=3039): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000180)=ANY=[], 0x0, 0x5f2, &(0x7f0000000680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 417.765208ms ago: executing program 2 (id=3040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}]}]}, 0x2c}}, 0x10) 365.033327ms ago: executing program 0 (id=3041): syz_mount_image$minix(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x1000008, &(0x7f0000000000)=ANY=[], 0x1, 0x1a6, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 320.106255ms ago: executing program 5 (id=3042): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000940)={0x2f, {0x4, 0x80000001, 0xe4, 0x1, 0x9, 0xd30c}}) 84.974995ms ago: executing program 2 (id=3043): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 14.478197ms ago: executing program 3 (id=3044): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x10000) 0s ago: executing program 5 (id=3045): syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="0049cef4df796851925f86c004000000e4cf62dc777d55387afc4a70d087ede499a199c4d7e87a07cdb3e45fc513a1f97b0b9047144790d8f3affa2044cbd987208cf1dcd4ec17f5138b1f4efbdc2a7be39782db000000000000002c2e5cf00c404f4a3246fb740282b4265c2c2c686173682c00181f302d7cd22530b02054463a3dd16b847ce0f9c3bd119a1498eb8cc1ae04dee8bfa77d492c96fd54cb0abb83366c6b4d4785b8103b6ea5ce14afc0ebaae0f62832e93c0cd17b2130111d313bea3d9ab4738453538e448d770b602e104974e6cd92f7d589103fde2331f870b425e8776f9e2152dec6551ec1f61ced64b19c9e56"], 0x5, 0x18e, &(0x7f0000002780)="$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") rename(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file1\x00') kernel console output (not intermixed with test programs): new route [ 199.458775][ T9389] loop1: lost filesystem error report for type 5 error -117 [ 199.470790][ T9389] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 8: comm syz.1.1519: lblock 8 mapped to illegal pblock 8 (length 1) [ 199.512401][ T9389] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 199.521829][ T9389] Quota error (device loop1): write_blk: dquota write failed [ 199.554036][ T9389] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 199.584596][ T9389] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.1519: Failed to acquire dquot type 0 [ 199.609534][ T9389] loop1: lost filesystem error report for type 5 error -117 [ 199.615978][ T9389] EXT4-fs (loop1): 1 orphan inode deleted [ 199.651353][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 199.667127][ T9389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.749443][ T9389] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 8: comm syz.1.1519: lblock 8 mapped to illegal pblock 8 (length 1) [ 199.773708][ T9412] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 199.811405][ T9389] Quota error (device loop1): write_blk: dquota write failed [ 199.838655][ T9389] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 199.882022][ T9389] EXT4-fs error (device loop1): ext4_acquire_dquot:7028: comm syz.1.1519: Failed to acquire dquot type 0 [ 200.027561][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.098753][ T5937] usb 6-1: USB disconnect, device number 10 [ 200.231841][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 200.402028][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 200.410904][ T24] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 200.420384][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.432742][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 200.444506][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 200.456846][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.474903][ T24] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 200.491892][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.514790][ T24] usb 1-1: config 0 descriptor?? [ 200.520822][ T9422] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 200.569054][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 200.926399][ T9] usb 1-1: USB disconnect, device number 12 [ 200.943444][ T5174] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 200.948292][ T9450] loop2: detected capacity change from 0 to 4096 [ 200.983211][ T5937] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 201.006500][ T9450] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 201.172706][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 201.202107][ T5937] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 201.246749][ T5937] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 201.278277][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.309197][ T5937] usb 6-1: Product: syz [ 201.321766][ T5937] usb 6-1: Manufacturer: syz [ 201.337903][ T5937] usb 6-1: SerialNumber: syz [ 201.348760][ T5937] r8152-cfgselector 6-1: Unknown version 0x0000 [ 201.356891][ T5937] r8152-cfgselector 6-1: config 0 descriptor?? [ 201.618474][ T9476] xt_CT: No such helper "netbios-ns" [ 201.838207][ T5937] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 201.980254][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 202.011843][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.051939][ T9494] : renamed from vlan0 (while UP) [ 202.121160][ T9497] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1570'. [ 202.217950][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 202.227249][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.241815][ T24] usb 5-1: Product: syz [ 202.261863][ T24] usb 5-1: Manufacturer: syz [ 202.266503][ T24] usb 5-1: SerialNumber: syz [ 202.303049][ T24] usb 5-1: config 0 descriptor?? [ 202.318198][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 202.428312][ T9474] loop2: detected capacity change from 0 to 32768 [ 202.520372][ T24] sonixb 5-1:0.0: Error reading register 00: -71 [ 202.536902][ T9509] loop3: detected capacity change from 0 to 512 [ 202.572255][ T24] usb 5-1: USB disconnect, device number 8 [ 202.573951][ T5927] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 202.604713][ T9509] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 222 vs 220 free clusters [ 202.631746][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 202.638183][ C1] EXT4-fs (loop3): initial error at time 1776172305: ext4_mb_generate_buddy:1317 [ 202.647792][ C1] EXT4-fs (loop3): last error at time 1776172305: ext4_mb_generate_buddy:1317 [ 202.692871][ T9509] EXT4-fs (loop3): Remounting filesystem read-only [ 202.699987][ T9509] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.3.1576: cleanup dec ref error -28 [ 202.773795][ T5927] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 202.783360][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.793699][ T9509] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 202.826173][ T5927] usb 2-1: config 0 descriptor?? [ 202.833493][ T9509] EXT4-fs (loop3): 1 orphan inode deleted [ 202.876046][ T5927] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 202.901314][ T9509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.015559][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.096243][ T9522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1582'. [ 203.164135][ T5937] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 203.256336][ T5927] gspca_stv06xx: I2C: Read error writing address: -71 [ 203.278462][ T5927] usb 2-1: USB disconnect, device number 11 [ 203.353873][ T5937] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 203.373474][ T5937] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 203.408454][ T5937] usb 6-1: config 8 has no interface number 0 [ 203.454131][ T5937] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 203.497723][ T5937] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 203.523639][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.537466][ T5937] usb 6-1: Product: syz [ 203.541645][ T5937] usb 6-1: Manufacturer: syz [ 203.558350][ T5937] usb 6-1: SerialNumber: syz [ 203.616599][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 203.738684][ T9544] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1593'. [ 203.774021][ T5927] lo speed is unknown, defaulting to 1000 [ 203.962798][ T5937] usb 6-1: USB disconnect, device number 12 [ 204.531588][ T9538] loop2: detected capacity change from 0 to 32768 [ 204.541861][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 204.691869][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 204.722154][ T24] usb 2-1: config 0 interface 0 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.773281][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.805503][ T24] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 204.816973][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.852187][ T24] usb 2-1: Product: syz [ 204.862994][ T24] usb 2-1: Manufacturer: syz [ 204.877769][ T24] usb 2-1: SerialNumber: syz [ 204.894992][ T9570] loop5: detected capacity change from 0 to 4096 [ 204.936308][ T24] usb 2-1: config 0 descriptor?? [ 204.953989][ T9570] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 204.979090][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 204.995194][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 205.039408][ T24] usb 2-1: selecting invalid altsetting 0 [ 205.071846][ T24] usb 2-1: can't set first interface for hiFace device. [ 205.103206][ T24] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 205.105751][ T9570] ntfs3(loop5): ino=0, attr_set_size_ex [ 205.147438][ T9570] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 205.193438][ T24] usb 2-1: USB disconnect, device number 12 [ 205.244808][ T9580] loop4: detected capacity change from 0 to 256 [ 205.303374][ T9556] loop0: detected capacity change from 0 to 32768 [ 205.459205][ T9580] FAT-fs (loop4): Directory bread(block 64) failed [ 205.469013][ T9556] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 205.517042][ T9580] FAT-fs (loop4): Directory bread(block 65) failed [ 205.566303][ T9580] FAT-fs (loop4): Directory bread(block 66) failed [ 205.615426][ T9580] FAT-fs (loop4): Directory bread(block 67) failed [ 205.671886][ T9580] FAT-fs (loop4): Directory bread(block 68) failed [ 205.673039][ T9590] loop2: detected capacity change from 0 to 512 [ 205.678488][ T9580] FAT-fs (loop4): Directory bread(block 69) failed [ 205.678615][ T9580] FAT-fs (loop4): Directory bread(block 70) failed [ 205.761889][ T9580] FAT-fs (loop4): Directory bread(block 71) failed [ 205.768602][ T9580] FAT-fs (loop4): Directory bread(block 72) failed [ 205.835092][ T9580] FAT-fs (loop4): Directory bread(block 73) failed [ 205.844751][ T9590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.900755][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 205.907029][ T5140] Bluetooth: hci2: command 0x0406 tx timeout [ 205.913783][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 205.913810][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 205.919835][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 205.929718][ T5827] Bluetooth: hci0: command 0x0401 tx timeout [ 205.967423][ T9590] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.089057][ T9580] syz.4.1611: attempt to access beyond end of device [ 206.089057][ T9580] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 206.143935][ T9602] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.199219][ T9580] syz.4.1611: attempt to access beyond end of device [ 206.199219][ T9580] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 206.222272][ T31] audit: type=1800 audit(1776172309.277:63): pid=9580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1611" name="file0" dev="loop4" ino=1048638 res=0 errno=0 [ 206.296602][ T5822] ocfs2: Unmounting device (7,0) on (node local) [ 206.320027][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.444228][ T9611] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1627'. [ 206.566177][ T9611] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1627'. [ 206.798519][ T9623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.686543][ T9659] loop3: detected capacity change from 0 to 2048 [ 208.095924][ T9680] loop1: detected capacity change from 0 to 64 [ 208.175475][ T9680] Trying to free block not in datazone [ 208.420253][ T9690] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 208.677742][ T9698] loop1: detected capacity change from 0 to 4096 [ 208.743238][ T9698] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 208.752313][ T9705] IPv6: NLM_F_REPLACE set, but no existing node found! [ 208.805152][ T9700] loop0: detected capacity change from 0 to 4096 [ 208.826985][ T9698] ntfs3(loop1): ino=1a, mi_enum_attr [ 208.833682][ T9698] ntfs3(loop1): ino=1a, mi_enum_attr [ 208.848238][ T9698] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 208.867134][ T9700] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 208.916197][ T9698] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex [ 208.925692][ T31] audit: type=1800 audit(1776172311.967:64): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1659" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 208.958692][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 209.043295][ T9700] ntfs3(loop0): Failed to load $Extend (-22). [ 209.049499][ T9700] ntfs3(loop0): Failed to initialize $Extend. [ 209.122205][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 209.150619][ T24] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 209.169220][ T24] usb 4-1: config 0 has no interface number 0 [ 209.193165][ T24] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.248482][ T24] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.294821][ T24] usb 4-1: config 0 interface 85 has no altsetting 0 [ 209.329478][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 209.361784][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.390914][ T24] usb 4-1: Product: syz [ 209.410063][ T24] usb 4-1: Manufacturer: syz [ 209.431767][ T24] usb 4-1: SerialNumber: syz [ 209.469701][ T24] usb 4-1: config 0 descriptor?? [ 209.487346][ T9722] netlink: 'syz.5.1672': attribute type 10 has an invalid length. [ 209.563809][ T9722] team0: Device wg1 is of different type [ 209.692260][ T5937] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 209.852541][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 209.867747][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.893969][ T5937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 209.918697][ T24] appletouch 4-1:0.85: Failed to request geyser raw mode [ 209.927848][ T5937] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 209.927882][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.927906][ T5937] usb 5-1: Product: syz [ 209.927924][ T5937] usb 5-1: Manufacturer: syz [ 209.927942][ T5937] usb 5-1: SerialNumber: syz [ 209.931242][ T5937] usb 5-1: config 0 descriptor?? [ 209.980348][ T24] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 210.020559][ T24] usb 4-1: USB disconnect, device number 7 [ 210.031793][ T90] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.160424][ T5937] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 210.188609][ T5937] mcba_usb 5-1:0.0 can0: couldn't start device: -90 [ 210.212274][ T90] usb 1-1: Using ep0 maxpacket: 16 [ 210.224731][ T90] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 210.270554][ T90] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.287183][ T90] usb 1-1: config 1 has no interface number 0 [ 210.319233][ T90] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 210.346789][ T90] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.378889][ T90] usb 1-1: config 1 interface 105 has no altsetting 0 [ 210.404534][ T90] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 210.417788][ T90] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 210.426977][ T5937] mcba_usb 5-1:0.0: probe with driver mcba_usb failed with error -90 [ 210.466843][ T90] usb 1-1: Product: syz [ 210.471050][ T90] usb 1-1: Manufacturer: syz [ 210.477385][ T5937] usb 5-1: USB disconnect, device number 9 [ 210.521752][ T90] usb 1-1: SerialNumber: syz [ 210.789223][ T90] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 211.054124][ T5937] usb 1-1: USB disconnect, device number 13 [ 211.774011][ T9806] loop0: detected capacity change from 0 to 22 [ 211.809915][ T9806] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 211.838311][ T9806] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 212.937279][ T9853] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 212.944240][ T9853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.975631][ T9853] vhci_hcd vhci_hcd.0: Device attached [ 212.981425][ T9855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1729'. [ 212.994980][ T9861] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 213.001525][ T9861] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.036704][ T9861] vhci_hcd vhci_hcd.0: Device attached [ 213.042185][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 213.042211][ T9855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.146150][ T9856] vhci_hcd: connection closed [ 213.148290][ T9862] vhci_hcd: connection closed [ 213.160156][ T58] vhci_hcd vhci_hcd.3: stop threads [ 213.205212][ T58] vhci_hcd vhci_hcd.3: release socket [ 213.211920][ T5937] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 213.216357][ T9820] loop5: detected capacity change from 0 to 32768 [ 213.231515][ T58] vhci_hcd vhci_hcd.3: disconnect device [ 213.252802][ T58] vhci_hcd vhci_hcd.3: stop threads [ 213.270216][ T58] vhci_hcd vhci_hcd.3: release socket [ 213.289035][ T58] vhci_hcd vhci_hcd.3: disconnect device [ 213.364060][ T9820] ERROR: (device loop5): xtTruncate: xt_getpage: xtree page corrupt [ 213.364060][ T9820] [ 213.413323][ T9820] ERROR: (device loop5): remounting filesystem as read-only [ 213.850599][ T9890] loop3: detected capacity change from 0 to 256 [ 214.016442][ T9898] netlink: 'syz.5.1748': attribute type 5 has an invalid length. [ 214.085637][ T9890] FAT-fs (loop3): Directory bread(block 64) failed [ 214.114886][ T9890] FAT-fs (loop3): Directory bread(block 65) failed [ 214.121525][ T9890] FAT-fs (loop3): Directory bread(block 66) failed [ 214.223149][ T9890] FAT-fs (loop3): Directory bread(block 67) failed [ 214.259487][ T9890] FAT-fs (loop3): Directory bread(block 68) failed [ 214.299898][ T9890] FAT-fs (loop3): Directory bread(block 69) failed [ 214.362066][ T9890] FAT-fs (loop3): Directory bread(block 70) failed [ 214.368626][ T9890] FAT-fs (loop3): Directory bread(block 71) failed [ 214.439091][ T9890] FAT-fs (loop3): Directory bread(block 72) failed [ 214.455967][ T9890] FAT-fs (loop3): Directory bread(block 73) failed [ 215.085359][ T9933] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1766'. [ 215.325520][ T9899] loop0: detected capacity change from 0 to 32768 [ 215.388163][ T9899] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 215.525049][ T9956] loop5: detected capacity change from 0 to 128 [ 215.558360][ T9915] loop4: detected capacity change from 0 to 40427 [ 215.570780][ T9915] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 215.579462][ T9915] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 215.590305][ T9915] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 215.628707][ T9956] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.664351][ T9956] ext4 filesystem being mounted at /286/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.724117][ T9899] XFS (loop0): Starting recovery (logdev: internal) [ 215.779164][ T9956] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.1774: No space for directory leaf checksum. Please run e2fsck -D. [ 215.862151][ T9899] XFS (loop0): Ending recovery (logdev: internal) [ 215.881297][ T9956] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.1774: checksumming directory block 0 [ 215.920983][ T9915] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 216.007918][ T9915] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 216.024011][ T9915] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 216.081796][ T9899] XFS (loop0): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 216.104635][ T31] audit: type=1800 audit(1776172319.157:65): pid=9915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1757" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 216.175585][ T5820] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.192670][ T9899] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 216.258266][ T9899] XFS (loop0): Unmount and run xfs_repair [ 216.297032][ T9899] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 216.333224][ T9899] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 216.396047][ T9899] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 216.441771][ T9899] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 216.448506][ T9980] loop3: detected capacity change from 0 to 64 [ 216.482913][ T9899] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 216.523516][ T9978] loop2: detected capacity change from 0 to 4096 [ 216.531882][ T9899] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 216.538252][ T9899] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 216.609317][ T9978] EXT4-fs (loop2): Test dummy encryption mode enabled [ 216.629269][ T9899] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 216.635124][ T9978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.656880][ T9899] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 216.667808][ T9899] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74 [ 216.706013][ T9899] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x950 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 216.721931][ T9899] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 216.788268][ T9978] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 216.858940][ T9985] SET target dimension over the limit! [ 216.899128][ T5822] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 217.003390][ T9965] loop1: detected capacity change from 0 to 32768 [ 217.055379][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.101049][ T9965] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.289334][T10003] loop4: detected capacity change from 0 to 512 [ 217.354352][T10003] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 217.407416][ T9965] XFS (loop1): Ending clean mount [ 217.422957][T10003] EXT4-fs (loop4): orphan cleanup on readonly fs [ 217.430448][T10003] EXT4-fs warning (device loop4): ext4_enable_quotas:7263: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 217.445998][T10003] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 217.455091][T10003] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.1781: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 217.487845][T10003] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 217.488208][T10003] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1781: couldn't read orphan inode 13 (err -117) [ 217.497589][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 217.497622][ C1] EXT4-fs (loop4): last error at time 1776172320: ext4_ext_check_inode:521: inode 13 [ 217.574430][T10003] loop4: lost filesystem error report for type 5 error -117 [ 217.624479][T10003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.797784][ T5821] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.811656][T10003] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.1781: deleted inode referenced: 12 [ 217.945335][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.992022][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 217.992252][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 217.992274][T10019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.372317][ T5937] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 218.432302][T10028] netlink: 488 bytes leftover after parsing attributes in process `syz.5.1801'. [ 218.441493][T10028] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.1801'. [ 218.824446][T10014] loop2: detected capacity change from 0 to 32768 [ 218.864382][T10014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1793 (10014) [ 218.961607][T10014] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.002614][T10014] BTRFS info (device loop2): using crc32c checksum algorithm [ 219.033566][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1811'. [ 219.049334][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1811'. [ 219.272789][T10014] BTRFS info (device loop2): allowing degraded mounts [ 219.332714][T10014] BTRFS info (device loop2): enabling ssd optimizations [ 219.339707][T10014] BTRFS info (device loop2): enabling free space tree [ 219.581513][ T5832] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.589478][T10108] loop2: detected capacity change from 0 to 4096 [ 220.600703][T10117] netlink: zone id is out of range [ 220.630272][T10117] netlink: zone id is out of range [ 221.387024][T10140] loop5: detected capacity change from 0 to 4096 [ 221.452328][T10140] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 221.546794][T10140] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 221.576133][T10140] ntfs3(loop5): ino=19, mi_enum_attr [ 221.634927][T10140] ntfs3(loop5): failed to convert "c46c" to cp737 [ 221.683009][T10140] ntfs3(loop5): ino=20, mi_enum_attr [ 221.845928][T10166] xt_l2tp: wrong L2TP version: 0 [ 222.157785][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'. [ 222.191975][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1863'. [ 222.221015][T10180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1866'. [ 222.325187][T10183] loop1: detected capacity change from 0 to 512 [ 222.373230][T10184] loop4: detected capacity change from 0 to 512 [ 222.390874][T10183] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 222.444417][T10183] EXT4-fs (loop1): orphan cleanup on readonly fs [ 222.495605][T10184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.508293][T10183] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 222.551931][T10183] EXT4-fs warning (device loop1): ext4_enable_quotas:7263: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 222.572194][T10184] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.593690][T10183] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 222.689101][T10183] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1867: bg 0: block 64: padding at end of block bitmap is not set [ 222.730674][T10203] tmpfs: Bad value for 'mpol' [ 222.741909][T10183] loop1: lost filesystem error report for type 5 error -117 [ 222.744278][T10183] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 222.751973][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 222.752000][ C1] EXT4-fs (loop1): initial error at time 1776172325: ext4_validate_block_bitmap:441 [ 222.752030][ C1] EXT4-fs (loop1): last error at time 1776172325: ext4_validate_block_bitmap:441 [ 222.800125][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.809264][T10183] loop1: lost filesystem error report for type 5 error -117 [ 222.819894][T10183] EXT4-fs (loop1): 1 truncate cleaned up [ 222.839097][T10205] netlink: 'syz.2.1875': attribute type 2 has an invalid length. [ 222.900781][T10183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.203035][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.755335][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 223.834311][T10249] loop4: detected capacity change from 0 to 512 [ 223.883749][T10249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.913355][T10252] loop2: detected capacity change from 0 to 256 [ 223.927892][T10249] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 223.964472][T10249] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.987603][T10260] kAFS: unable to lookup cell '(,' [ 224.071879][T10249] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.1895: Allocating blocks 41-42 which overlap fs metadata [ 224.106994][T10264] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 224.171838][T10252] FAT-fs (loop2): Directory bread(block 64) failed [ 224.208101][T10252] FAT-fs (loop2): Directory bread(block 65) failed [ 224.222249][T10249] loop4: lost filesystem error report for type 5 error -117 [ 224.223725][T10249] EXT4-fs (loop4): Remounting filesystem read-only [ 224.237627][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 224.237652][ C0] EXT4-fs (loop4): initial error at time 1776172327: ext4_mb_mark_diskspace_used:4222 [ 224.237683][ C0] EXT4-fs (loop4): last error at time 1776172327: ext4_mb_mark_diskspace_used:4222 [ 224.286400][T10252] FAT-fs (loop2): Directory bread(block 66) failed [ 224.353069][T10252] FAT-fs (loop2): Directory bread(block 67) failed [ 224.359758][T10252] FAT-fs (loop2): Directory bread(block 68) failed [ 224.368623][T10271] loop1: detected capacity change from 0 to 64 [ 224.381917][T10249] Quota error (device loop4): write_blk: dquota write failed [ 224.410032][T10249] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 224.431031][T10252] FAT-fs (loop2): Directory bread(block 69) failed [ 224.480768][T10271] Trying to free block not in datazone [ 224.486342][T10252] FAT-fs (loop2): Directory bread(block 70) failed [ 224.486377][T10252] FAT-fs (loop2): Directory bread(block 71) failed [ 224.486466][T10252] FAT-fs (loop2): Directory bread(block 72) failed [ 224.486494][T10252] FAT-fs (loop2): Directory bread(block 73) failed [ 224.527082][T10249] Quota error (device loop4): write_blk: dquota write failed [ 224.590577][T10249] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 224.666201][T10249] EXT4-fs (loop4): 1 truncate cleaned up [ 224.721032][T10249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.951500][T10286] loop1: detected capacity change from 0 to 512 [ 224.963663][T10283] bridge1: entered promiscuous mode [ 225.012219][T10283] bridge1: entered allmulticast mode [ 225.036263][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.112459][T10286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.125554][T10286] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.206131][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.262722][T10298] loop3: detected capacity change from 0 to 128 [ 225.367920][T10298] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.472396][T10298] ext4 filesystem being mounted at /325/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.794366][ T5826] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.985663][T10320] netlink: 'syz.2.1924': attribute type 3 has an invalid length. [ 226.044956][T10320] netlink: 'syz.2.1924': attribute type 1 has an invalid length. [ 226.093516][T10320] netlink: 480 bytes leftover after parsing attributes in process `syz.2.1924'. [ 226.419656][T10338] bridge1: entered allmulticast mode [ 226.457889][T10341] comedi comedi2: pcm3724: I/O port conflict (0x8,16) [ 226.683647][T10351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1938'. [ 227.204296][T10374] Cannot find del_set index 4 as target [ 227.452281][T10382] loop1: detected capacity change from 0 to 256 [ 227.679174][T10390] loop0: detected capacity change from 0 to 128 [ 227.735037][T10390] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.754879][T10390] ext4 filesystem being mounted at /324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.870127][ T5822] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.027746][T10408] netlink: 'syz.0.1962': attribute type 10 has an invalid length. [ 228.071053][T10408] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.078831][T10408] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.157426][T10413] loop4: detected capacity change from 0 to 256 [ 228.159246][T10359] loop2: detected capacity change from 0 to 32768 [ 228.164815][T10413] exfat: Deprecated parameter 'namecase' [ 228.183857][T10413] exfat: Deprecated parameter 'namecase' [ 228.189951][T10408] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.197184][T10408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.206035][T10408] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.213249][T10408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.227972][T10413] exfat: Deprecated parameter 'utf8' [ 228.240826][T10413] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 228.304410][T10413] overlay: filesystem on ./file0 not supported [ 228.319922][T10359] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.342032][T10408] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 228.496496][T10359] XFS (loop2): Ending clean mount [ 228.618097][T10429] netlink: 'syz.3.1970': attribute type 21 has an invalid length. [ 228.650965][T10429] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1970'. [ 228.877845][T10437] loop0: detected capacity change from 0 to 256 [ 228.943206][ T5832] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.996125][T10437] FAT-fs (loop0): Directory bread(block 64) failed [ 229.062309][T10437] FAT-fs (loop0): Directory bread(block 65) failed [ 229.088941][T10437] FAT-fs (loop0): Directory bread(block 66) failed [ 229.123476][T10437] FAT-fs (loop0): Directory bread(block 67) failed [ 229.130135][T10437] FAT-fs (loop0): Directory bread(block 68) failed [ 229.138738][T10409] loop5: detected capacity change from 0 to 32768 [ 229.177211][T10437] FAT-fs (loop0): Directory bread(block 69) failed [ 229.213273][T10437] FAT-fs (loop0): Directory bread(block 70) failed [ 229.264473][T10437] FAT-fs (loop0): Directory bread(block 71) failed [ 229.291597][T10437] FAT-fs (loop0): Directory bread(block 72) failed [ 229.327918][T10409] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 229.363038][T10437] FAT-fs (loop0): Directory bread(block 73) failed [ 229.754541][ T5820] ocfs2: Unmounting device (7,5) on (node local) [ 229.951798][ T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 230.155093][ T24] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 230.183061][ T24] usb 4-1: config 0 has no interface number 0 [ 230.189226][ T24] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 230.201617][T10479] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1994'. [ 230.259389][ T24] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 230.278713][ T24] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 230.298958][ T24] usb 4-1: Manufacturer: syz [ 230.325085][ T24] usb 4-1: SerialNumber: syz [ 230.368149][ T24] usb 4-1: config 0 descriptor?? [ 230.410670][T10487] --map-set only usable from mangle table [ 230.554013][T10491] loop0: detected capacity change from 0 to 64 [ 230.619479][ T31] audit: type=1326 audit(1776172333.667:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391d59c819 code=0x7ffc0000 [ 230.724958][ T31] audit: type=1326 audit(1776172333.717:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391d59c819 code=0x7ffc0000 [ 230.812609][ T24] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 230.842024][ T31] audit: type=1326 audit(1776172333.717:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391d59c819 code=0x7ffc0000 [ 230.895299][ T24] usb 4-1: USB disconnect, device number 8 [ 230.914770][T10502] loop0: detected capacity change from 0 to 512 [ 230.954847][ T31] audit: type=1326 audit(1776172333.727:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f391d59c819 code=0x7ffc0000 [ 231.000849][ T31] audit: type=1326 audit(1776172333.727:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391d59c819 code=0x7ffc0000 [ 231.025061][ T31] audit: type=1326 audit(1776172333.727:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391d59c819 code=0x7ffc0000 [ 231.046337][T10502] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2005: inode has both inline data and extents flags [ 231.048229][ T31] audit: type=1326 audit(1776172333.727:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391d59c819 code=0x7ffc0000 [ 231.083207][ T31] audit: type=1326 audit(1776172333.727:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f391d59c819 code=0x7ffc0000 [ 231.106188][ T31] audit: type=1326 audit(1776172333.727:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10493 comm="syz.4.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f391d59c819 code=0x7ffc0000 [ 231.133003][T10502] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.133341][T10502] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2005: couldn't read orphan inode 15 (err -117) [ 231.142568][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 231.142595][ C0] EXT4-fs (loop0): initial error at time 1776172334: ext4_orphan_get:1397: inode 15 [ 231.142633][ C0] EXT4-fs (loop0): last error at time 1776172334: ext4_orphan_get:1397: inode 15 [ 231.275025][T10502] loop0: lost filesystem error report for type 5 error -117 [ 231.293314][T10513] loop2: detected capacity change from 0 to 2048 [ 231.294898][T10502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.374320][T10513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.409182][T10513] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.542123][T10513] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 231.644957][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.756484][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.924852][T10535] kAFS: unable to lookup cell 'syz0' [ 231.974323][T10542] tmpfs: Bad value for 'mpol' [ 232.327408][T10558] loop1: detected capacity change from 0 to 1024 [ 232.434992][T10562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.747927][T10578] netlink: 'syz.0.2042': attribute type 10 has an invalid length. [ 232.791885][T10578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2042'. [ 232.849633][T10578] batman_adv: batadv0: Adding interface: virt_wifi0 [ 232.874491][T10578] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.951969][T10578] batman_adv: batadv0: Interface activated: virt_wifi0 [ 233.573528][T10607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.608803][T10607] batadv_slave_0: entered promiscuous mode [ 233.620391][T10610] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 233.660735][T10607] batadv_slave_0: entered allmulticast mode [ 233.682378][T10610] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2056'. [ 233.722951][T10607] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 233.740146][T10610] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2056'. [ 233.786407][T10610] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2056'. [ 234.161999][T10627] netlink: 'syz.5.2064': attribute type 2 has an invalid length. [ 234.480872][T10644] loop4: detected capacity change from 0 to 256 [ 234.609651][T10644] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 234.926566][T10655] loop2: detected capacity change from 0 to 512 [ 235.018477][T10655] EXT4-fs (loop2): 1 truncate cleaned up [ 235.075594][T10655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.094512][T10655] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.2078: invalid fast symlink length 39 [ 235.121365][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2080'. [ 235.152171][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.455169][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 235.699381][T10682] sctp: [Deprecated]: syz.3.2090 (pid 10682) Use of int in maxseg socket option. [ 235.699381][T10682] Use struct sctp_assoc_value instead [ 235.723144][T10634] loop1: detected capacity change from 0 to 32768 [ 235.792848][T10634] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2068 (10634) [ 235.862120][T10634] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.931908][T10634] BTRFS info (device loop1 state S): using crc32c checksum algorithm [ 236.047327][T10698] 8021q: VLANs not supported on lo [ 236.056220][ T3535] BTRFS warning (device loop1 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 236.111849][ T179] BTRFS warning (device loop1 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored [ 236.130278][ T3535] BTRFS warning (device loop1 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored [ 236.151051][T10634] BTRFS error (device loop1 state ES): failed to load root free space [ 236.221034][ T179] BTRFS warning (device loop1 state ES): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored [ 236.282243][T10634] BTRFS info (device loop1 state ES): enabling ssd optimizations [ 236.299198][T10717] AppArmor: change_hat: Invalid input '=' [ 236.319802][T10634] BTRFS info (device loop1 state ES): enabling free space tree [ 236.387660][T10634] BTRFS info (device loop1 state ES): ignoring bad roots [ 236.439891][T10634] BTRFS info (device loop1 state ES): ignoring meta csums [ 236.491824][T10634] BTRFS info (device loop1 state ES): force zlib compression, level 3 [ 236.662390][T10731] loop5: detected capacity change from 0 to 64 [ 236.748116][ T5821] BTRFS info (device loop1 state ES): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.752279][T10731] syz.5.2104: attempt to access beyond end of device [ 236.752279][T10731] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 236.826590][T10731] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 237.272063][T10752] netlink: 'syz.0.2117': attribute type 15 has an invalid length. [ 237.522863][ T31] audit: type=1326 audit(1776172340.567:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10759 comm="syz.3.2120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54a939c819 code=0x0 [ 237.598003][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2122'. [ 238.012509][T10778] No such timeout policy "syz1" [ 238.061498][T10782] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 238.292770][T10790] loop4: detected capacity change from 0 to 128 [ 238.506673][T10790] Process accounting resumed [ 238.534837][T10790] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 238.567411][T10790] FAT-fs (loop4): Filesystem has been set read-only [ 238.641375][ T24] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 238.846457][T10810] x_tables: duplicate entry at hook 2 [ 239.038475][T10776] loop3: detected capacity change from 0 to 32768 [ 239.078013][T10816] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 239.520260][T10834] loop3: detected capacity change from 0 to 64 [ 239.549043][T10834] minix: block size(59136) > page size(4096) not supported by filesystem [ 239.638144][T10834] Trying to free block not in datazone [ 239.669066][T10834] Trying to free block not in datazone [ 239.681419][T10834] Trying to free block not in datazone [ 239.768189][T10845] loop1: detected capacity change from 0 to 2048 [ 239.925190][T10845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.130120][T10862] netlink: 'syz.0.2167': attribute type 61 has an invalid length. [ 240.166496][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.570653][T10880] loop2: detected capacity change from 0 to 512 [ 240.590094][T10880] EXT4-fs: Ignoring removed nobh option [ 240.646196][T10880] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 240.697824][T10880] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 240.721774][ T5937] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 240.732094][T10880] EXT4-fs (loop2): orphan cleanup on readonly fs [ 240.810348][T10880] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.2176: attempt to clear invalid blocks 1024 len 1 [ 240.861855][T10880] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 240.868877][T10880] EXT4-fs (loop2): Remounting filesystem read-only [ 240.878100][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 240.878121][ C0] EXT4-fs (loop2): initial error at time 1776172343: ext4_clear_blocks:876: inode 11 [ 240.878158][ C0] EXT4-fs (loop2): last error at time 1776172343: ext4_clear_blocks:876: inode 11 [ 240.916170][ T5937] usb 1-1: too many configurations: 34, using maximum allowed: 8 [ 240.958355][ T5937] usb 1-1: New USB device found, idVendor=e3b8, idProduct=ab02, bcdDevice= 0.40 [ 240.980499][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.992656][T10880] EXT4-fs (loop2): 1 truncate cleaned up [ 241.014282][ T5937] usb 1-1: Product: syz [ 241.018534][ T5937] usb 1-1: Manufacturer: syz [ 241.026341][T10896] hsr0: left promiscuous mode [ 241.031034][T10896] hsr0: left allmulticast mode [ 241.063055][T10880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 241.078980][ T5937] usb 1-1: SerialNumber: syz [ 241.099932][T10896] hsr_slave_0: left allmulticast mode [ 241.106370][T10896] hsr_slave_1: left allmulticast mode [ 241.230754][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 241.379302][T10909] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2191'. [ 241.416020][T10909] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2191'. [ 241.422835][ T5937] usb 1-1: USB disconnect, device number 14 [ 241.732307][T10922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.088376][T10935] loop4: detected capacity change from 0 to 1024 [ 242.124977][T10935] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 242.172135][T10935] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 242.228989][T10935] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 242.248901][T10935] EXT4-fs (loop4): orphan cleanup on readonly fs [ 242.302483][T10935] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.2204: Inode bitmap for bg 0 marked uninitialized [ 242.331889][T10944] xt_TCPMSS: Only works on TCP SYN packets [ 242.384245][T10916] loop1: detected capacity change from 0 to 32768 [ 242.395450][T10935] loop4: lost filesystem error report for type 5 error -117 [ 242.395781][T10935] EXT4-fs (loop4): Remounting filesystem read-only [ 242.411730][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 242.416154][T10916] (syz.1.2194,10916,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 242.418196][ C0] EXT4-fs (loop4): initial error at time 1776172345: ext4_read_inode_bitmap:167 [ 242.432874][T10916] (syz.1.2194,10916,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 242.440663][ C0] EXT4-fs (loop4): last error at time 1776172345: ext4_read_inode_bitmap:167 [ 242.526540][T10916] JBD2: Ignoring recovery information on journal [ 242.534054][T10935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.619001][T10948] loop0: detected capacity change from 0 to 1024 [ 242.643707][T10948] EXT4-fs (loop0): filesystem is read-only [ 242.742737][T10916] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 242.788454][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.300883][T10976] loop0: detected capacity change from 0 to 1024 [ 243.353160][T10976] EXT4-fs: Ignoring removed oldalloc option [ 243.362452][T10979] QAT: failed to copy from user cfg_data. [ 243.392722][ T5821] ocfs2: Unmounting device (7,1) on (node local) [ 243.652329][T10976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.809435][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.897409][T11001] openvswitch: netlink: Key 6 has unexpected len 187 expected 2 [ 243.908758][T10998] xt_l2tp: v2 doesn't support IP mode [ 243.922369][T11002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2234'. [ 243.931561][T11002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2234'. [ 243.991927][T11002] netlink: 'syz.2.2234': attribute type 6 has an invalid length. [ 244.156861][T11008] loop5: detected capacity change from 0 to 256 [ 244.232129][T11008] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 244.338528][ T5844] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 244.467720][T11022] x_tables: duplicate underflow at hook 2 [ 244.944490][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 245.143025][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 245.167728][ T9] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 245.187099][T11050] loop4: detected capacity change from 0 to 8 [ 245.211926][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 245.231792][ T9] usb 1-1: config 220 has no interface number 2 [ 245.243073][T11048] loop5: detected capacity change from 0 to 8192 [ 245.260705][T11050] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 245.281396][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 245.317875][T11048] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.328663][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 245.357126][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 245.360474][T11056] loop2: detected capacity change from 0 to 512 [ 245.374662][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 245.421979][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 245.431119][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.484758][T11056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.519810][ T9] usb 1-1: Product: syz [ 245.541435][ T9] usb 1-1: Manufacturer: syz [ 245.554829][ T9] usb 1-1: SerialNumber: syz [ 245.620452][T11056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.644687][T11064] loop1: detected capacity change from 0 to 64 [ 245.757308][T11056] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.831459][ T9] usb 1-1: selecting invalid altsetting 0 [ 245.857767][ T9] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 245.873875][ T9] uvcvideo 1-1:220.0: No valid video chain found. [ 245.924733][ T9] usb 1-1: selecting invalid altsetting 0 [ 245.930492][ T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 245.959430][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.987679][ T9] usb 1-1: USB disconnect, device number 15 [ 246.129269][T11076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2267'. [ 246.232347][T11082] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2269'. [ 246.334457][T11084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.585738][T11095] xt_TCPMSS: Only works on TCP SYN packets [ 246.608899][T11099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2273'. [ 246.818748][T11107] loop5: detected capacity change from 0 to 256 [ 246.836467][T11110] loop2: detected capacity change from 0 to 16 [ 246.849339][T11108] loop0: detected capacity change from 0 to 64 [ 246.870790][T11110] erofs: Unknown parameter '5ser_xattr' [ 246.878017][T11102] loop1: detected capacity change from 0 to 2048 [ 246.914691][T11102] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.936283][T11110] cifs: Unknown parameter '5ser_xattr' [ 247.011156][T11107] FAT-fs (loop5): Directory bread(block 64) failed [ 247.032519][T11107] FAT-fs (loop5): Directory bread(block 65) failed [ 247.039325][T11107] FAT-fs (loop5): Directory bread(block 66) failed [ 247.066576][T11107] FAT-fs (loop5): Directory bread(block 67) failed [ 247.102074][T11107] FAT-fs (loop5): Directory bread(block 68) failed [ 247.156072][T11107] FAT-fs (loop5): Directory bread(block 69) failed [ 247.192013][T11107] FAT-fs (loop5): Directory bread(block 70) failed [ 247.233999][T11107] FAT-fs (loop5): Directory bread(block 71) failed [ 247.240733][T11107] FAT-fs (loop5): Directory bread(block 72) failed [ 247.278733][T11107] FAT-fs (loop5): Directory bread(block 73) failed [ 247.459441][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2286'. [ 247.882036][T11139] program syz.0.2296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.931594][T11139] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 248.224763][T11151] loop0: detected capacity change from 0 to 256 [ 248.403706][T11156] loop5: detected capacity change from 0 to 256 [ 248.512487][T11156] FAT-fs (loop5): Directory bread(block 64) failed [ 248.543829][T11156] FAT-fs (loop5): Directory bread(block 65) failed [ 248.570902][T11156] FAT-fs (loop5): Directory bread(block 66) failed [ 248.599326][T11156] FAT-fs (loop5): Directory bread(block 67) failed [ 248.627272][T11156] FAT-fs (loop5): Directory bread(block 68) failed [ 248.644162][T11156] FAT-fs (loop5): Directory bread(block 69) failed [ 248.671271][T11156] FAT-fs (loop5): Directory bread(block 70) failed [ 248.708128][T11156] FAT-fs (loop5): Directory bread(block 71) failed [ 248.741979][T11156] FAT-fs (loop5): Directory bread(block 72) failed [ 248.748553][T11156] FAT-fs (loop5): Directory bread(block 73) failed [ 248.803904][T11167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.211900][T11179] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 249.254647][T11179] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 249.397237][T11183] syz.1.2318 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 249.942477][ T2338] pvrusb2: request_firmware fatal error with code=-110 [ 249.971953][ T2338] pvrusb2: Failure uploading firmware1 [ 250.009194][ T2338] pvrusb2: Device initialization was not successful. [ 250.041553][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 250.077673][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 250.122171][ T2338] pvrusb2: Failed to submit write-control URB status=-19 [ 250.129847][ T10] pvrusb2: Device being rendered inoperable [ 250.170619][ T2338] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 250.211742][ T2338] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 250.228098][T11210] set_capacity_and_notify: 3 callbacks suppressed [ 250.228120][T11210] loop5: detected capacity change from 0 to 1024 [ 250.381297][T11215] loop1: detected capacity change from 0 to 1024 [ 250.444990][T11215] hfsplus: failed to load extents file [ 250.479089][T11177] loop4: detected capacity change from 0 to 32768 [ 250.574548][T11177] JBD2: Ignoring recovery information on journal [ 250.627650][ T90] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 250.753115][T11227] ipt_ECN: cannot use operation on non-tcp rule [ 250.780478][T11177] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 250.842220][ T90] usb 4-1: Using ep0 maxpacket: 16 [ 250.853160][ T90] usb 4-1: unable to get BOS descriptor set [ 250.878382][ T90] usb 4-1: config 6 has an invalid interface number: 32 but max is 0 [ 250.904923][ T90] usb 4-1: config 6 has no interface number 0 [ 250.947141][ T90] usb 4-1: config 6 interface 32 has no altsetting 0 [ 250.964492][ T90] usb 4-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=c8.98 [ 251.019692][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.041786][ T90] usb 4-1: Product: syz [ 251.050196][ T90] usb 4-1: Manufacturer: syz [ 251.091257][ T90] usb 4-1: SerialNumber: syz [ 251.145291][ T5823] ocfs2: Unmounting device (7,4) on (node local) [ 251.463569][ T90] usb 4-1: USB disconnect, device number 9 [ 252.096808][T11274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.108760][T11272] netlink: set zone limit has 4 unknown bytes [ 252.284157][T11282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.357441][T11289] xt_TCPMSS: Only works on TCP SYN packets [ 252.561230][T11299] loop4: detected capacity change from 0 to 256 [ 252.607493][T11299] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.725552][T11299] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 253.039066][T11318] loop3: detected capacity change from 0 to 512 [ 253.045744][T11317] tmpfs: Bad value for 'mpol' [ 253.173187][T11321] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 253.279883][T11324] loop5: detected capacity change from 0 to 1024 [ 253.403516][T11324] hfsplus: failed to load extents file [ 253.427941][T11329] loop4: detected capacity change from 0 to 256 [ 253.472490][T11329] exfat: Deprecated parameter 'namecase' [ 253.491969][T11329] exfat: Deprecated parameter 'utf8' [ 253.576660][T11329] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 254.029785][T11312] loop0: detected capacity change from 0 to 32768 [ 254.120194][T11349] xt_HMARK: proto mask must be zero with L3 mode [ 254.384492][T11358] loop1: detected capacity change from 0 to 64 [ 254.892383][T11332] loop2: detected capacity change from 0 to 32768 [ 255.017860][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.031389][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.160032][T11376] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 255.258518][T11376] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.352304][T11376] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.2413: No space for directory leaf checksum. Please run e2fsck -D. [ 255.431441][T11376] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.2413: checksumming directory block 0 [ 255.499957][T11384] set_capacity_and_notify: 1 callbacks suppressed [ 255.499980][T11384] loop1: detected capacity change from 0 to 4096 [ 255.553753][T11384] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 255.573713][T11396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.629510][ T5820] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.665654][T11384] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 255.723204][T11384] ntfs3(loop1): ino=19, mi_enum_attr [ 255.837173][T11384] ntfs3(loop1): failed to convert "c46c" to cp861 [ 255.856867][T11384] ntfs3(loop1): ino=20, mi_enum_attr [ 255.945796][T11407] loop4: detected capacity change from 0 to 128 [ 256.011966][T11407] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 256.049894][T11407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.405859][T11416] loop0: detected capacity change from 0 to 4096 [ 256.513614][T11427] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.685149][T11435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2440'. [ 257.178948][T11453] ip6tnl1: entered allmulticast mode [ 257.203320][ T1055] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.243559][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.253718][ T1055] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.292931][T11457] geneve3: entered promiscuous mode [ 257.344121][T11450] loop1: detected capacity change from 0 to 4096 [ 257.385779][T11450] ntfs3(loop1): ino=0, mi_enum_attr [ 257.422165][T11450] ntfs3(loop1): ino=0, mi_enum_attr [ 257.681966][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 257.966713][T11437] loop4: detected capacity change from 0 to 32768 [ 258.036397][T11478] loop2: detected capacity change from 0 to 16 [ 258.058805][T11437] JBD2: Ignoring recovery information on journal [ 258.096362][T11478] erofs (device loop2): mounted with root inode @ nid 36. [ 258.197136][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.213918][T11484] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 258.227372][ T5844] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 258.247782][T11478] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 258.253574][T11437] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 258.267122][T11478] erofs (device loop2): read error -117 @ 2 of nid 89 [ 258.282075][ T31] audit: type=1800 audit(1776172361.337:76): pid=11478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2460" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 258.446491][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 258.471447][T11490] loop1: detected capacity change from 0 to 4096 [ 258.502060][T11492] loop2: detected capacity change from 0 to 256 [ 258.540368][T11492] exfat: Deprecated parameter 'namecase' [ 258.558779][T11492] exfat: Deprecated parameter 'namecase' [ 258.585213][T11494] netlink: 'syz.3.2467': attribute type 2 has an invalid length. [ 258.602069][T11492] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 258.664680][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 258.684725][ T5823] ocfs2: Unmounting device (7,4) on (node local) [ 258.705655][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 258.738916][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.749724][T11490] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 258.791816][ T9] usb 1-1: Product: syz [ 258.796127][ T9] usb 1-1: Manufacturer: syz [ 258.842344][ T9] usb 1-1: SerialNumber: syz [ 258.875171][T11490] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 258.912502][ T9] usb 1-1: config 0 descriptor?? [ 258.916789][T11498] loop4: detected capacity change from 0 to 512 [ 258.958680][T11498] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 259.065404][ T5821] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 259.150791][ T9] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 259.201876][ T9] 00 00 00 00 00 00 00 00 [ 259.206466][ T9] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 259.240294][T11498] loop4: detected capacity change from 0 to 4096 [ 259.310546][T11507] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.358278][ T9] usb 1-1: USB disconnect, device number 16 [ 259.537093][T11510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2474'. [ 259.552981][T11481] ERROR: (device loop5): diAllocAG: error reading iag [ 259.552981][T11481] [ 259.575786][T11481] ialloc: diAlloc returned -5! [ 259.825479][T11514] EXT4-fs: inline encryption not supported [ 259.860022][T11514] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.892668][T11514] EXT4-fs (loop4): Test dummy encryption mode enabled [ 259.946474][T11514] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 259.979039][T11514] System zones: 0-5 [ 260.032087][ T30] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 260.072201][T11514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.201821][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 260.233799][ T30] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 260.262481][T11514] Quota error (device loop4): do_check_range: Getting block 16646149 out of range 0-5 [ 260.268694][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.335627][ T30] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 260.373903][ T30] usb 4-1: config 1 has no interface number 1 [ 260.412078][ T30] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 260.503809][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2486'. [ 260.512142][ T30] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 260.576412][ T30] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.585869][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.605313][ T30] usb 4-1: Product: syz [ 260.619759][ T30] usb 4-1: Manufacturer: syz [ 260.640017][ T30] usb 4-1: SerialNumber: syz [ 260.768409][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.059900][ T30] usb 4-1: USB disconnect, device number 10 [ 261.091931][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.223047][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.357590][T11558] set_capacity_and_notify: 3 callbacks suppressed [ 261.357611][T11558] loop0: detected capacity change from 0 to 2048 [ 261.394222][T11558] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 261.524879][T11558] syz.0.2497: attempt to access beyond end of device [ 261.524879][T11558] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 261.550327][T11564] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.633691][T11572] sctp: [Deprecated]: syz.2.2504 (pid 11572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.633691][T11572] Use struct sctp_sack_info instead [ 261.637559][T11571] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 261.660807][T11558] syz.0.2497: attempt to access beyond end of device [ 261.660807][T11558] loop0: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 261.719442][T11558] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3) [ 262.073371][T11581] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2509'. [ 262.344589][T11596] netlink: 'syz.3.2513': attribute type 15 has an invalid length. [ 262.571029][T11602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.748090][T11608] netlink: 'syz.0.2522': attribute type 11 has an invalid length. [ 262.888546][T11615] loop4: detected capacity change from 0 to 512 [ 262.953550][T11615] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2525: bad orphan inode 15 [ 262.991893][T11615] loop4: lost filesystem error report for type 5 error -117 [ 263.001738][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 263.015536][ C1] EXT4-fs (loop4): initial error at time 1776172366: ext4_orphan_get:1423 [ 263.024099][ C1] EXT4-fs (loop4): last error at time 1776172366: ext4_orphan_get:1423 [ 263.036479][T11615] ext4_test_bit(bit=14, block=5) = 0 [ 263.044033][T11615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.098246][T11615] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 263.116292][T11622] netlink: 'syz.2.2528': attribute type 24 has an invalid length. [ 263.131791][T11622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2528'. [ 263.152275][T11615] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.2525: bit already cleared for inode 13 [ 263.262834][T11622] bond1: option ad_actor_sys_prio: invalid value (0) [ 263.306415][T11622] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 263.310727][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.426914][T11622] bond1 (unregistering): Released all slaves [ 264.599706][T11676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2553'. [ 264.845883][T11686] loop5: detected capacity change from 0 to 256 [ 265.013017][T11686] FAT-fs (loop5): Directory bread(block 64) failed [ 265.048570][T11650] loop4: detected capacity change from 0 to 32768 [ 265.072752][T11686] FAT-fs (loop5): Directory bread(block 65) failed [ 265.079410][T11686] FAT-fs (loop5): Directory bread(block 66) failed [ 265.111854][T11650] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2540 (11650) [ 265.119704][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2561'. [ 265.135304][T11686] FAT-fs (loop5): Directory bread(block 67) failed [ 265.163987][T11694] netlink: 420 bytes leftover after parsing attributes in process `syz.1.2562'. [ 265.164619][T11686] FAT-fs (loop5): Directory bread(block 68) failed [ 265.184737][T11694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2562'. [ 265.211906][T11686] FAT-fs (loop5): Directory bread(block 69) failed [ 265.241393][T11686] FAT-fs (loop5): Directory bread(block 70) failed [ 265.246841][T11694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2562'. [ 265.249073][T11650] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 265.283133][T11686] FAT-fs (loop5): Directory bread(block 71) failed [ 265.289822][T11686] FAT-fs (loop5): Directory bread(block 72) failed [ 265.295730][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2562'. [ 265.306762][T11650] BTRFS info (device loop4): using sha256 checksum algorithm [ 265.361784][T11686] FAT-fs (loop5): Directory bread(block 73) failed [ 265.589709][T11650] BTRFS info (device loop4): enabling ssd optimizations [ 265.661909][T11650] BTRFS info (device loop4): turning on async discard [ 265.673405][ T31] audit: type=1326 audit(1776172368.717:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 265.682205][T11719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.704890][T11650] BTRFS info (device loop4): enabling free space tree [ 265.781798][ T31] audit: type=1326 audit(1776172368.747:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 265.877941][ T31] audit: type=1326 audit(1776172368.757:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 265.984379][ T31] audit: type=1326 audit(1776172368.757:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 266.017657][ T5823] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 266.093333][ T5937] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 266.096233][ T31] audit: type=1326 audit(1776172368.757:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.0.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 266.232409][ T31] audit: type=1326 audit(1776172368.977:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11726 comm="syz.0.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 266.284023][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 266.328504][ T5937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 266.337844][ T31] audit: type=1326 audit(1776172368.987:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11726 comm="syz.0.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 266.364190][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 266.392246][ T5937] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 266.440757][ T5937] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 266.469222][ T5937] usb 4-1: Product: syz [ 266.489806][ T31] audit: type=1326 audit(1776172369.077:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11726 comm="syz.0.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 266.493870][ T5937] usb 4-1: Manufacturer: syz [ 266.538533][ T5937] usb 4-1: SerialNumber: syz [ 266.569676][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 266.595793][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 266.611868][ T31] audit: type=1326 audit(1776172369.077:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11726 comm="syz.0.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 266.671886][ T9] usb 2-1: config 1 has an invalid interface number: 8 but max is 2 [ 266.679957][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.767394][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 266.803787][ T5937] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 266.828813][ T9] usb 2-1: config 1 has no interface number 0 [ 266.855282][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.875240][ T5937] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 266.892504][ T5937] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 266.920633][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 266.930145][ T5937] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 266.940080][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.969322][ T9] usb 2-1: Product: syz [ 266.997899][ T9] usb 2-1: Manufacturer: syz [ 267.021776][ T9] usb 2-1: SerialNumber: syz [ 267.055949][ T9] usb 2-1: unknown sample rate [ 267.067556][ T5937] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 267.100110][ T5937] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 267.108727][ T9] usb 2-1: unknown sample rate [ 267.115480][T11757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.149136][ T5937] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 267.202875][ T5937] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 267.285613][ T5937] usb 4-1: USB disconnect, device number 11 [ 267.344128][ T9] usb 2-1: USB disconnect, device number 13 [ 267.436222][ T5937] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 267.449682][T11764] xfrm0: entered promiscuous mode [ 267.487350][T11764] xfrm0: entered allmulticast mode [ 267.492520][T11769] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2591'. [ 267.519756][ T5937] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 267.557464][ T5937] visor 4-1:1.0: device disconnected [ 267.607435][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.901019][T11775] loop0: detected capacity change from 0 to 2048 [ 268.042241][T11783] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 268.067787][T11775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.102722][T11783] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 268.154518][T11775] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.387299][T11800] loop1: detected capacity change from 0 to 256 [ 268.402619][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.666494][T11800] FAT-fs (loop1): Directory bread(block 64) failed [ 268.702918][T11800] FAT-fs (loop1): Directory bread(block 65) failed [ 268.709559][T11800] FAT-fs (loop1): Directory bread(block 66) failed [ 268.782185][T11800] FAT-fs (loop1): Directory bread(block 67) failed [ 268.788825][T11800] FAT-fs (loop1): Directory bread(block 68) failed [ 268.803219][T11814] netlink: 'syz.5.2612': attribute type 1 has an invalid length. [ 268.837119][T11800] FAT-fs (loop1): Directory bread(block 69) failed [ 268.864616][T11814] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2612'. [ 268.874225][T11800] FAT-fs (loop1): Directory bread(block 70) failed [ 268.912182][T11800] FAT-fs (loop1): Directory bread(block 71) failed [ 268.939325][T11800] FAT-fs (loop1): Directory bread(block 72) failed [ 268.958283][T11800] FAT-fs (loop1): Directory bread(block 73) failed [ 269.092336][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 269.167455][T11828] netlink: 'syz.5.2618': attribute type 10 has an invalid length. [ 269.222093][T11826] loop0: detected capacity change from 0 to 1764 [ 269.252114][T11831] loop2: detected capacity change from 0 to 64 [ 269.306290][T11831] syz.2.2620: attempt to access beyond end of device [ 269.306290][T11831] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 269.502083][T11841] wlan1 speed is unknown, defaulting to 1000 [ 269.530104][T11841] wlan1 speed is unknown, defaulting to 1000 [ 269.632400][T11841] wlan1 speed is unknown, defaulting to 1000 [ 269.671155][T11841] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 269.770767][T11841] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 269.800047][T11853] loop0: detected capacity change from 0 to 512 [ 269.899562][T11853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 269.932873][T11841] wlan1 speed is unknown, defaulting to 1000 [ 269.941126][T11841] wlan1 speed is unknown, defaulting to 1000 [ 269.977735][T11859] IPv6: Can't replace route, no match found [ 269.982229][T11853] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.2631: Unimplemented hash flags: 0x0001 [ 270.026672][T11856] netlink: 'syz.2.2632': attribute type 49 has an invalid length. [ 270.057883][T11853] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2631: Corrupt directory, running e2fsck is recommended [ 270.088093][T11841] wlan1 speed is unknown, defaulting to 1000 [ 270.105684][T11841] wlan1 speed is unknown, defaulting to 1000 [ 270.147098][T11841] wlan1 speed is unknown, defaulting to 1000 [ 270.173919][T11841] wlan1 speed is unknown, defaulting to 1000 [ 270.301126][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.318322][ T5844] Bluetooth: hci4: unexpected event for opcode 0x0407 [ 270.459478][T11868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.514872][T11872] xt_ecn: cannot match TCP bits for non-tcp packets [ 270.586588][T11839] loop5: detected capacity change from 0 to 32768 [ 270.631028][T11839] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2624 (11839) [ 270.696213][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 270.757495][T11881] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2644'. [ 270.793896][T11839] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.824707][T11839] BTRFS info (device loop5): using sha256 checksum algorithm [ 270.870072][T11881] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2644'. [ 270.988257][T11839] BTRFS info (device loop5): enabling ssd optimizations [ 271.033754][T11904] loop4: detected capacity change from 0 to 256 [ 271.045535][T11839] BTRFS info (device loop5): turning on async discard [ 271.098758][T11839] BTRFS info (device loop5): enabling free space tree [ 271.116896][T11904] exfat: Deprecated parameter 'namecase' [ 271.162222][T11904] exfat: Deprecated parameter 'namecase' [ 271.246739][T11904] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 271.266731][T11839] BTRFS error: failed to open device for path Wva [ 277.608959][T12079] dump_stack_lvl+0xe8/0x150 [ 277.609000][T12079] f2fs_handle_critical_error+0x37c/0x540 [ 277.609045][T12079] f2fs_write_end_io+0xcdb/0xff0 [ 277.609092][T12079] __submit_merged_bio+0x256/0x700 [ 277.609136][T12079] __submit_merged_write_cond+0x3c9/0x4e0 [ 277.609181][T12079] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 277.609232][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.609272][T12079] f2fs_write_data_pages+0x2975/0x35e0 [ 277.609353][T12079] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 277.609408][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.609436][T12079] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.609496][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.609524][T12079] ? do_raw_spin_unlock+0xf5/0x210 [ 277.609553][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.609582][T12079] ? free_unref_folios+0x15ad/0x16d0 [ 277.609626][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.609659][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.609688][T12079] ? __lock_acquire+0x6b5/0x2cf0 [ 277.609724][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.609767][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.609800][T12079] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 277.609841][T12079] do_writepages+0x32e/0x550 [ 277.609887][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.609919][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.609953][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.609982][T12079] ? do_raw_spin_unlock+0xf5/0x210 [ 277.610013][T12079] filemap_fdatawrite+0x1e9/0x2f0 [ 277.610055][T12079] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 277.610135][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.610166][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.610201][T12079] ? do_raw_spin_unlock+0xf5/0x210 [ 277.610231][T12079] f2fs_sync_dirty_inodes+0x30e/0x860 [ 277.610274][T12079] f2fs_write_checkpoint+0x9df/0x26a0 [ 277.610300][T12079] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 277.610368][T12079] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 277.610393][T12079] ? update_load_avg+0x1b0/0x1ec0 [ 277.610463][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.610492][T12079] ? down_write+0x16d/0x200 [ 277.610521][T12079] ? __pfx_down_write+0x10/0x10 [ 277.610548][T12079] ? uplift_priority+0xdb/0x730 [ 277.610582][T12079] ? trace_sched_exit_tp+0x3a/0x150 [ 277.610620][T12079] __write_checkpoint_sync+0x124/0x2b0 [ 277.610646][T12079] ? __lock_acquire+0x6b5/0x2cf0 [ 277.610684][T12079] ? __pfx___write_checkpoint_sync+0x10/0x10 [ 277.610728][T12079] ? __pfx___schedule+0x10/0x10 [ 277.610773][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.610811][T12079] __checkpoint_and_complete_reqs+0x53/0x2d0 [ 277.610848][T12079] issue_checkpoint_thread+0xd6/0x280 [ 277.610885][T12079] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 277.610914][T12079] ? __pfx_autoremove_wake_function+0x10/0x10 [ 277.610940][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.610971][T12079] ? __kthread_parkme+0x7a/0x1f0 [ 277.611006][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.611046][T12079] kthread+0x388/0x470 [ 277.611069][T12079] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 277.611095][T12079] ? __pfx_kthread+0x10/0x10 [ 277.611119][T12079] ret_from_fork+0x514/0xb70 [ 277.611154][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.611186][T12079] ? __pfx_ret_from_fork+0x10/0x10 [ 277.611216][T12079] ? srso_alias_return_thunk+0x5/0xfbef5 [ 277.611244][T12079] ? __switch_to+0xc7d/0x1450 [ 277.611278][T12079] ? __pfx_kthread+0x10/0x10 [ 277.611304][T12079] ret_from_fork_asm+0x1a/0x30 [ 277.611362][T12079] [ 277.613505][ T31] audit: type=1326 audit(1776172380.477:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12092 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fad3859c819 code=0x7ffc0000 [ 277.613558][ T31] audit: type=1326 audit(1776172380.477:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12092 comm="syz.1.2726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3859c819 code=0x7ffc0000 [ 277.613618][T12079] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 277.810800][ T5937] usb 5-1: USB disconnect, device number 11 [ 278.212260][ T90] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 278.221337][T12104] loop5: detected capacity change from 0 to 736 [ 278.661869][T12104] rock: directory entry would overflow storage [ 278.711844][T12104] rock: sig=0x3b10, size=4, remaining=3 [ 280.174519][ T9] usb 4-1: USB disconnect, device number 12 [ 280.212981][ T90] ath9k_htc: Failed to initialize the device [ 280.309747][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 280.381413][T12144] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.500100][T12146] netlink: 488 bytes leftover after parsing attributes in process `syz.4.2752'. [ 280.537501][T12146] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2752'. [ 280.749695][T12152] loop3: detected capacity change from 0 to 4096 [ 280.788850][T12152] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 280.885547][ T31] audit: type=1326 audit(1776172383.937:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 280.986638][T12152] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 281.011596][ T31] audit: type=1326 audit(1776172383.937:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 281.060859][T12152] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 281.069504][T12169] autofs4:pid:12169:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 281.112437][ T31] audit: type=1326 audit(1776172383.937:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 281.123424][T12169] autofs4:pid:12169:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 281.148386][ T31] audit: type=1326 audit(1776172383.967:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 281.158656][T12152] ntfs3(loop3): ino=1b, mi_enum_attr [ 281.170884][ T31] audit: type=1326 audit(1776172383.967:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 281.200885][ T31] audit: type=1326 audit(1776172383.967:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149459c819 code=0x7ffc0000 [ 281.635072][T12187] xt_l2tp: missing protocol rule (udp|l2tpip) [ 281.912775][T12199] binfmt_misc: register: failed to install interpreter file ./file0 [ 282.352863][T12219] mmap: syz.3.2788 (12219): VmData 37490688 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 282.377750][T12220] tmpfs: Bad value for 'mpol' [ 282.400101][T12223] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2791'. [ 282.441851][T12223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2791'. [ 283.263421][T12258] loop3: detected capacity change from 0 to 256 [ 283.395081][T12258] FAT-fs (loop3): Directory bread(block 64) failed [ 283.424535][T12258] FAT-fs (loop3): Directory bread(block 65) failed [ 283.431195][T12258] FAT-fs (loop3): Directory bread(block 66) failed [ 283.462007][ T29] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 283.474391][T12258] FAT-fs (loop3): Directory bread(block 67) failed [ 283.488341][T12258] FAT-fs (loop3): Directory bread(block 68) failed [ 283.541392][T12258] FAT-fs (loop3): Directory bread(block 69) failed [ 283.562053][T12258] FAT-fs (loop3): Directory bread(block 70) failed [ 283.569694][T12258] FAT-fs (loop3): Directory bread(block 71) failed [ 283.616367][T12258] FAT-fs (loop3): Directory bread(block 72) failed [ 283.653761][ T29] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.675280][T12258] FAT-fs (loop3): Directory bread(block 73) failed [ 283.710512][ T29] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 283.742192][ T29] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 283.751443][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.836902][T12264] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 283.876974][ T29] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.005261][T12289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2823'. [ 284.268449][ T29] usb 2-1: USB disconnect, device number 14 [ 284.325290][T12296] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 284.392563][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.415062][T12296] bond2 (unregistering): Released all slaves [ 284.451983][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.974051][T12295] loop3: detected capacity change from 0 to 32768 [ 285.023030][T12295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2825 (12295) [ 285.047890][T12324] sg_write: data in/out 294879/124 bytes for SCSI command 0x7-- guessing data in; [ 285.047890][T12324] program syz.1.2839 not setting count and/or reply_len properly [ 285.118077][T12295] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.168126][T12295] BTRFS info (device loop3): using sha256 checksum algorithm [ 285.305406][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 285.317035][T12341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.378838][T12295] BTRFS info (device loop3): enabling ssd optimizations [ 285.437760][T12348] SET target dimension over the limit! [ 285.448126][T12295] BTRFS info (device loop3): turning on async discard [ 285.472330][T12295] BTRFS info (device loop3): enabling free space tree [ 285.698347][T12357] loop0: detected capacity change from 0 to 128 [ 285.733738][T12319] loop5: detected capacity change from 0 to 32768 [ 285.750847][ T5826] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.781325][T12319] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 06a53480-2280-4f16-82b7-af0374522bd4 [ 285.793943][T12357] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.867607][T12319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2837 (12319) [ 285.887420][T12357] ext4 filesystem being mounted at /467/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 285.936671][T12319] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.991769][T12319] BTRFS info (device loop5): using sha256 checksum algorithm [ 286.128485][ T5822] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.262530][T12319] BTRFS info (device loop5): enabling ssd optimizations [ 286.347067][T12319] BTRFS info (device loop5): turning on async discard [ 286.391779][T12319] BTRFS info (device loop5): enabling free space tree [ 286.506759][T12319] BTRFS error: failed to open device for path Lz3-+!$؍Qo$P with flags 0x1: -2 [ 286.545500][T12388] netlink: 'syz.0.2854': attribute type 10 has an invalid length. [ 286.627532][T12388] team0: Device veth1_macvtap failed to register rx_handler [ 286.738981][ T5820] BTRFS info (device loop5): last unmount of filesystem 06a53480-2280-4f16-82b7-af0374522bd4 [ 286.802683][T12393] netlink: 'syz.3.2858': attribute type 7 has an invalid length. [ 286.919997][T12362] loop2: detected capacity change from 0 to 32768 [ 287.126411][T12362] JBD2: Ignoring recovery information on journal [ 287.353529][T12362] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 287.416305][T12362] (syz.2.2851,12362,0):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 287.455896][T12362] (syz.2.2851,12362,0):ocfs2_prepare_dir_for_insert:4335 ERROR: status = -2 [ 287.492540][T12362] (syz.2.2851,12362,1):ocfs2_mknod:302 ERROR: status = -2 [ 287.522258][T12362] (syz.2.2851,12362,1):ocfs2_mknod:506 ERROR: status = -2 [ 287.563897][T12362] (syz.2.2851,12362,1):ocfs2_create:679 ERROR: status = -2 [ 287.744058][T12421] loop4: detected capacity change from 0 to 4096 [ 287.823165][ T5832] ocfs2: Unmounting device (7,2) on (node local) [ 287.864545][T12430] loop1: detected capacity change from 0 to 128 [ 287.874400][T12429] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 288.420635][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2884'. [ 288.548086][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 288.548105][ T31] audit: type=1107 audit(1776172391.597:113): pid=12449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 288.733381][T12460] netlink: 'syz.4.2890': attribute type 1 has an invalid length. [ 288.741186][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2890'. [ 288.783860][T12462] netlink: 'syz.2.2891': attribute type 7 has an invalid length. [ 288.810502][T12462] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2891'. [ 289.072286][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2896'. [ 289.132729][T12476] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 289.152674][T12476] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 289.228810][T12484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2902'. [ 289.370439][T12486] loop1: detected capacity change from 0 to 2048 [ 289.398960][T12486] EXT4-fs: Ignoring removed bh option [ 289.463410][T12491] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2906'. [ 289.519556][T12486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.546014][T12492] usb usb8: usbfs: process 12492 (syz.5.2905) did not claim interface 0 before use [ 289.683628][T12486] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.2903: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 289.827554][ T29] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 289.894940][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.002328][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 290.016611][ T29] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 290.036386][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.058265][ T29] usb 4-1: Product: syz [ 290.058794][T12517] loop2: detected capacity change from 0 to 512 [ 290.070892][ T29] usb 4-1: Manufacturer: syz [ 290.082793][T12517] FAT-fs (loop2): Directory bread(block 199916) failed [ 290.091545][ T29] usb 4-1: SerialNumber: syz [ 290.112153][T12517] FAT-fs (loop2): Directory bread(block 199917) failed [ 290.134626][T12517] FAT-fs (loop2): Directory bread(block 199918) failed [ 290.156153][ T29] usb 4-1: config 0 descriptor?? [ 290.165291][T12517] FAT-fs (loop2): Directory bread(block 199919) failed [ 290.187529][T12517] FAT-fs (loop2): Directory bread(block 199920) failed [ 290.196669][ T29] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 290.217030][T12517] FAT-fs (loop2): Directory bread(block 199921) failed [ 290.234226][T12517] FAT-fs (loop2): Directory bread(block 199922) failed [ 290.254356][T12517] FAT-fs (loop2): Directory bread(block 199923) failed [ 290.262740][T12525] loop4: detected capacity change from 0 to 512 [ 290.304893][T12517] FAT-fs (loop2): Directory bread(block 199916) failed [ 290.330326][T12517] FAT-fs (loop2): Directory bread(block 199917) failed [ 290.370146][T12529] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2923'. [ 290.383862][T12525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.395495][T12529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.432024][ T29] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 290.492045][T12525] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.536583][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'. [ 290.546030][ T29] usb 4-1: USB disconnect, device number 13 [ 290.776535][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.802716][T12541] tmpfs: Bad value for 'mpol' [ 291.090656][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2934'. [ 291.364336][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2941'. [ 291.399460][T12569] loop0: detected capacity change from 0 to 512 [ 291.410922][T12563] tc_dump_action: action bad kind [ 291.430337][T12569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.442172][T12571] overlayfs: cannot append lower layer [ 291.476001][T12569] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.2942: invalid block [ 291.531791][T12569] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 291.541719][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 291.557454][ C1] EXT4-fs (loop0): initial error at time 1776172394: ext4_get_branch:178: inode 11: block 4294967295 [ 291.568378][ C1] EXT4-fs (loop0): last error at time 1776172394: ext4_get_branch:178: inode 11: block 4294967295 [ 291.625382][T12569] EXT4-fs (loop0): Remounting filesystem read-only [ 291.641971][ T5844] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 291.679651][T12569] EXT4-fs (loop0): 2 truncates cleaned up [ 291.754004][T12569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.979886][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.023660][T12589] openvswitch: netlink: Duplicate or invalid key (type 0). [ 292.030930][T12589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.361986][T12574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 292.397487][T12574] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 292.410348][T12607] loop0: detected capacity change from 0 to 164 [ 292.494381][T12574] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.512288][T12607] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 292.526498][T12574] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 292.560234][T12607] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 292.614558][T12607] Symlink component flag not implemented [ 292.620263][T12607] Symlink component flag not implemented [ 292.652813][T12574] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.666994][T12574] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 292.677918][T12607] Symlink component flag not implemented (7) [ 292.694989][T12607] Symlink component flag not implemented (116) [ 292.795050][T12574] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.818474][T12574] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 292.873807][T12574] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 292.880022][T12574] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 292.965281][T12574] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 293.002293][T12574] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 293.133277][T12629] i2c i2c-0: Invalid block write size 88 [ 293.319571][T12611] loop5: detected capacity change from 0 to 32768 [ 293.353857][T12611] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2961 (12611) [ 293.458603][T12611] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 293.499763][T12611] BTRFS info (device loop5): using xxhash64 checksum algorithm [ 293.534259][T12640] netlink: 'syz.0.2975': attribute type 3 has an invalid length. [ 293.552670][T12611] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 293.653153][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 293.809107][T12611] BTRFS info (device loop5): rebuilding free space tree [ 293.981197][T12611] BTRFS info (device loop5): disabling free space tree [ 293.983240][T12621] loop3: detected capacity change from 0 to 32768 [ 294.021427][T12611] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 294.037235][T12621] JBD2: Ignoring recovery information on journal [ 294.072191][T12611] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 294.076268][T12668] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 294.138596][T12611] BTRFS info (device loop5): setting nodatasum [ 294.153835][T12611] BTRFS info (device loop5): allowing degraded mounts [ 294.167316][T12611] BTRFS info (device loop5): turning on async discard [ 294.191850][T12611] BTRFS info (device loop5): enabling disk space caching [ 294.200247][T12611] BTRFS info (device loop5): force clearing of disk cache [ 294.215342][T12621] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 294.236796][T12611] BTRFS info (device loop5): force zlib compression, level 3 [ 294.435389][T12683] __nla_validate_parse: 2 callbacks suppressed [ 294.435412][T12683] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2988'. [ 294.454742][T12678] libceph: resolve '400' (ret=-3): failed [ 294.527394][ T5820] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 294.534201][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 294.622253][ T5826] ocfs2: Unmounting device (7,3) on (node local) [ 294.699910][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 294.832229][T12691] loop1: detected capacity change from 0 to 1024 [ 294.852833][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 294.902156][T12691] hfsplus: failed to load extents file [ 294.932099][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 295.011881][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 295.731829][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 296.270297][T12745] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 296.422174][ T30] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 296.508587][T12754] loop0: detected capacity change from 0 to 512 [ 296.598884][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 296.609841][T12754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 296.612411][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 296.664177][ T30] usb 6-1: config 179 has an invalid interface number: 156 but max is 0 [ 296.681851][ T30] usb 6-1: config 179 has no interface number 0 [ 296.698540][ T30] usb 6-1: config 179 interface 156 has no altsetting 0 [ 296.705433][T12754] ext4 filesystem being mounted at /502/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.726774][ T30] usb 6-1: string descriptor 0 read error: -22 [ 296.741930][ T30] usb 6-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=74.98 [ 296.761295][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.771976][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 296.794491][ T30] lan78xx 6-1:179.156 (unnamed net_device) (uninitialized): USB bus speed not supported [ 296.822073][ T30] lan78xx 6-1:179.156: probe with driver lan78xx failed with error -5 [ 296.849351][T12754] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 296.881987][T12754] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 296.932189][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 296.952049][T12754] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.3024: Failed to acquire dquot type 0 [ 297.013909][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 297.025131][T12743] loop3: detected capacity change from 0 to 32768 [ 297.034692][ T9] usb 6-1: USB disconnect, device number 13 [ 297.094867][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 297.101053][T12743] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3019 (12743) [ 297.147758][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 297.167220][T12743] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 297.179349][T12743] BTRFS info (device loop3): using sha256 checksum algorithm [ 297.236124][T12780] loop4: detected capacity change from 0 to 512 [ 297.268313][T12779] loop1: detected capacity change from 0 to 1024 [ 297.313106][T12780] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.3033: EA inode hash validation failed [ 297.334754][T12779] hfsplus: catalog record size mismatch (type 1, got 62, expected 88) [ 297.363474][T12780] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 297.395985][T12780] EXT4-fs error (device loop4): ext4_do_update_inode:5604: inode #15: comm syz.4.3033: corrupted inode contents [ 297.439541][T12780] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 297.441817][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 297.457446][ C1] EXT4-fs (loop4): initial error at time 1776172400: ext4_do_update_inode:5604: inode 15 [ 297.467340][ C1] EXT4-fs (loop4): last error at time 1776172400: ext4_do_update_inode:5604: inode 15 [ 297.467747][T12780] EXT4-fs error (device loop4): ext4_dirty_inode:6497: inode #15: comm syz.4.3033: mark_inode_dirty error [ 297.502348][T12743] BTRFS info (device loop3): enabling ssd optimizations [ 297.509331][T12743] BTRFS info (device loop3): turning on async discard [ 297.572642][T12780] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 297.581628][T12743] BTRFS info (device loop3): enabling free space tree [ 297.599972][T12780] EXT4-fs error (device loop4): ext4_do_update_inode:5604: inode #15: comm syz.4.3033: corrupted inode contents [ 297.639306][T12780] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 297.639738][T12780] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.3033: mark_inode_dirty error [ 297.737879][T12780] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 297.748045][T12780] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.3033: mark inode dirty (error -117) [ 297.775598][T12807] loop0: detected capacity change from 0 to 64 [ 297.782162][T12802] loop1: detected capacity change from 0 to 1024 [ 297.852511][T12780] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 297.855596][T12780] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 297.961858][T12780] EXT4-fs (loop4): 1 orphan inode deleted [ 297.969599][T12780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.002388][ T5826] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.017318][T12802] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 298.029443][T12802] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 298.037871][T12802] CPU: 1 UID: 0 PID: 12802 Comm: syz.1.3039 Not tainted syzkaller #0 PREEMPT(full) [ 298.047353][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 298.057427][T12802] RIP: 0010:__hfsplus_setxattr+0x1c68/0x2860 [ 298.063481][T12802] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 46 f8 80 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 29 f8 80 ff 4d 8b 36 49 8d 7e 90 [ 298.083115][T12802] RSP: 0018:ffffc90003657420 EFLAGS: 00010212 [ 298.089191][T12802] RAX: 0000000000000001 RBX: fffff520006caea4 RCX: 0000000000080000 [ 298.097166][T12802] RDX: ffffc90005d7a000 RSI: 0000000000001483 RDI: 0000000000001484 [ 298.105142][T12802] RBP: ffffc900036578f8 R08: ffffea0001aaccb7 R09: 1ffffd4000355996 [ 298.113111][T12802] R10: dffffc0000000000 R11: fffff94000355997 R12: dffffc0000000000 [ 298.121171][T12802] R13: ffff8880531066f0 R14: 0000000000000008 R15: ffff888053107400 [ 298.129245][T12802] FS: 00007fad394ed6c0(0000) GS:ffff88812554b000(0000) knlGS:0000000000000000 [ 298.138178][T12802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.144764][T12802] CR2: 000055556aa834e8 CR3: 000000002c2b4000 CR4: 0000000000350ef0 [ 298.152734][T12802] Call Trace: [ 298.156004][T12802] [ 298.158935][T12802] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 298.164481][T12802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 298.170293][T12802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.175952][T12802] ? rcu_is_watching+0x15/0xb0 [ 298.180722][T12802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.186355][T12802] ? __kasan_kmalloc+0x93/0xb0 [ 298.191121][T12802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.196754][T12802] ? __kmalloc_cache_noprof+0x31c/0x660 [ 298.202398][T12802] ? hfsplus_setxattr+0x10b/0x340 [ 298.207437][T12802] hfsplus_setxattr+0x124/0x340 [ 298.212289][T12802] hfsplus_trusted_setxattr+0x40/0x60 [ 298.217688][T12802] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 298.223761][T12802] __vfs_setxattr+0x43c/0x480 [ 298.228453][T12802] __vfs_setxattr_noperm+0x12d/0x660 [ 298.233747][T12802] vfs_setxattr+0x163/0x360 [ 298.238348][T12802] ? __pfx_vfs_setxattr+0x10/0x10 [ 298.243376][T12802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.249009][T12802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.254647][T12802] filename_setxattr+0x296/0x630 [ 298.259591][T12802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.265231][T12802] ? __pfx_filename_setxattr+0x10/0x10 [ 298.270703][T12802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.276367][T12802] ? do_getname+0x151/0x250 [ 298.280886][T12802] path_setxattrat+0x3eb/0x440 [ 298.285655][T12802] ? __pfx_path_setxattrat+0x10/0x10 [ 298.290942][T12802] ? do_futex+0x333/0x420 [ 298.295290][T12802] ? rcu_is_watching+0x15/0xb0 [ 298.300074][T12802] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.305718][T12802] __x64_sys_setxattr+0xbc/0xe0 [ 298.310571][T12802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.316637][T12802] do_syscall_64+0x15f/0xf80 [ 298.321225][T12802] ? trace_irq_disable+0x3b/0x150 [ 298.326258][T12802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.332233][T12802] RIP: 0033:0x7fad3859c819 [ 298.336727][T12802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.356413][T12802] RSP: 002b:00007fad394ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 298.364832][T12802] RAX: ffffffffffffffda RBX: 00007fad38815fa0 RCX: 00007fad3859c819 [ 298.372801][T12802] RDX: 0000200000001400 RSI: 00002000000001c0 RDI: 0000200000000380 [ 298.380766][T12802] RBP: 00007fad38632c91 R08: 0000000000000000 R09: 0000000000000000 [ 298.388730][T12802] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000000 [ 298.396693][T12802] R13: 00007fad38816038 R14: 00007fad38815fa0 R15: 00007ffefbb0c4b8 [ 298.404760][T12802] [ 298.407770][T12802] Modules linked in: [ 298.413322][T12802] ---[ end trace 0000000000000000 ]--- [ 298.424695][T12802] RIP: 0010:__hfsplus_setxattr+0x1c68/0x2860 [ 298.430912][T12802] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 46 f8 80 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 29 f8 80 ff 4d 8b 36 49 8d 7e 90 [ 298.488376][T12802] RSP: 0018:ffffc90003657420 EFLAGS: 00010212 [ 298.496632][T12813] loop5: detected capacity change from 0 to 64 [ 298.504431][T12802] RAX: 0000000000000001 RBX: fffff520006caea4 RCX: 0000000000080000 [ 298.513030][T12802] RDX: ffffc90005d7a000 RSI: 0000000000001483 RDI: 0000000000001484 [ 298.528975][T12813] MINIX-fs: Invalid file type 00016 for inode 2. [ 298.592114][T12802] RBP: ffffc900036578f8 R08: ffffea0001aaccb7 R09: 1ffffd4000355996 [ 298.600162][T12802] R10: dffffc0000000000 R11: fffff94000355997 R12: dffffc0000000000 [ 298.651556][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.663684][T12802] R13: ffff8880531066f0 R14: 0000000000000008 R15: ffff888053107400 [ 298.683015][T12802] FS: 00007fad394ed6c0(0000) GS:ffff88812554b000(0000) knlGS:0000000000000000 [ 298.719455][T12802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.727068][T12802] CR2: 00007f54a95e7158 CR3: 000000002c2b4000 CR4: 0000000000350ef0 [ 298.735166][T12802] Kernel panic - not syncing: Fatal exception [ 298.741510][T12802] Kernel Offset: disabled [ 298.745826][T12802] Rebooting in 86400 seconds..