last executing test programs: 56.951431939s ago: executing program 0 (id=10161): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) 56.56350906s ago: executing program 0 (id=10165): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 56.139435477s ago: executing program 0 (id=10168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x58, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004801}, 0x4) 55.812089867s ago: executing program 0 (id=10170): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=koi8-u,discard=0x0000000000000004,iocharset=iso8859-9,discard,iocharset=koi8-ru,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6e6f646973636172642c696f636861727365743d69736f383835392d332c005d245603bb5b494e31b3e32f7a4536f7389f889613f9bebfad670d9c5b69025afa2ed8a0983033c21a066b886aded885e0be89c3a88225b41e870229bff872d594d5a79ca2a73ae38725a8a4251c102dd8a175ce9f42f974c650e3f4d216c776b32d707119113d826189e7cc3f2b74b5191cce0209a7c007d15932d18b9ea2f49c0c2b7395277707"], 0x24, 0x62d7, &(0x7f0000021240)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4Cf/fTaIYmBkDqpgY1jQkg22bWd+IM2xYTPhq8SCIV+YLvetVlwbOO1S6CRbBookTAqqmgbLtoCQm1uKnLBBa0A5QK1QmoF7QXtBQKhchFVAQWkSrQCtppz3vfdmdnZmV3vePfMOb+fZD+eM2fmvHPmnTPz7Po/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZre8Zu4TQ1mWNf7kf23Psuc1/r11cnu+7JWbPUIAAABgvX6R//3c9WnB4VXcqGmdf37Jt768uLi4mL175M/HPrO4mK6YzLKxLVmWXxc99YP3DDWvEzyWTQwNN10e7rH5kR7Xj/a4fqzH9eM9rt/S4/qJHtcv2wHLbC1+HpPf2e78n9uLXZrdkI3l1+3ucKvHhrYMD8ef5eSG8tssjp3I5rNT2Vw207J+se5Qvv5Xb2ls641Z3NZw07Z2NmbITx49HscwFPbx7pZtLd1n9KNXZ5M//cmjx//2/LM3dao9d0PL/RXjvH1XY5wfC0uKsQ5lW9I+ieMcbhrnzg7PyUjLOIfy2zX+3T7O51Y5zpGlYW6o9ud8IhvO//3tfD+NNv9YL+2nnWHZz27NsuzS0rDb11m2rWw429ayZHjp+ZkoZmTjPhpT6QXZ6Jrm6S2rmKeNOru7dZ62vybi839LuN3oCmNofpp+9NHxpuf954tXMk+jxqNe6bXSPgf7/VopyxyM8+Lb+YN+vOMc3B0e/6O3rTwHO86dDnMwPe6mObir1xwcHh/Jx5yehKH8NktzcE/L+iP5loby+sxt3efg9PmHz04vfPgjd80/fOzk3Mm50/v27JnZt3//wYMHp0/Mn5qbKf6+wr1dftuy4fQa2BX2XXwNvLxt3eapuvj58WXH3yt9HU50eR1ub1u336/D0fYHN7QxL8jlc7p4bbyzsdMnLg9nK7zG8ufnjvW/DtPjbnodjja9Dju+p3R4HY6u4nXYWOfsHav7zDLa9KfTGFZ+L1jfHNzeNAfbP4+0z8F+fx4pyxycCPPiu3es/F6wM4z38am1fh4ZWTYH08MNx57GkvR5f+JgXjrNy5sbV1wznl1YmDt39yPHzp8/tycLZUO8sGmutM/XbU2PKVs2X4fXPF8Pz7/k8Zs7LN8e9tXEXY2/JlZ8rhrr3HN39+cqf3frvD9blu7NQumzjd6fnd7NG/tzPMs++42PPvi1Rz/7mhX3Z6Pf/Nj0+j+Lp7606fg7tsLxN/b9vyy2l+7qsZGx0eL1O5L2zljL8bj1qRrNj11D+bafm17d8Xgs/Nno4/ENXY7HO9rW7ffxeKz9wcXj8VCvn3asT/vzORHmyamZ7sfjxjo79q51To52PR7fGupQ2P+vCJ1C6oua5s5K8zZta3R0LDyu0biF1nm6r2X9sdCbNbb15N7woTCNcnXz9PZbi/VHmm4XbdQ8nWxbt9/zNP3sa6V5OtTrp29Xpv35nAjz4oZ93edpY52n71n/sXNr/GfTsXO81xwcGxlvjHksTcL8eJ8tbo1z8O7seHYmO5XN5teO5/NpKN/W1L2rO1aOhz8bfazc0WUO3t62br/nYHofW2nuDY0uf/B90P58ToR58cS93edgY53XHujvZ9fbiyVLP4pu+uza/vO1lX7mdXPbbrpac6UxksZj+caB7j+bbaxz6uBa+8zu++nOsOSaDvup/fW70mtqNtuY/bQjjPPZgyvvp8Z4Gut85tAq59PhLMsufvD+/Oe94fcrFy9858stv3fp9Dudix+8/8fXnvintYwfgMH3y6JsK97rmn4ztZrf/wMAAAADIfb9w6Em+n8AAACojNj3x/8Vnuj/AQAAoDJi3z8aalKF/v+Pe6+y47XPzv/yYpaS+YtBvD7thgeK9WLGdSZcnlxc0lh+/xfn/ucfL65ueMNZlv38gT/quP6OB+K4CpNhnE+9rnX5Ml++a1XbPvrQxbTd5vz658L9x8ez2mnQKYI7k2XZV6//VL6dyfdczuvTDxzN64OXHn+ssc5zh4rL8fbPvLBY/69C+PfwiWMtt38m7Icfhjrzps77I97uS5dfsfPAu5a2F283tOu6/GE/8d7ifuP35Hz6sWL9uJ9XGv/XPvnklxrrP/KyzuO/ONx5/E+G+/1iqP/74mL95uegcTne7uNh/HF78XZ3f+HrHcf/1CeK9c++vljvaKhx+7eHy7tf/+x88/56ZOhYy+PK3lCsF7c/850/za+P9xfvv338E0cut+yP9vnx9L8X9zPdtn5cHrcT/UPb9hv30zw/4/af/JOjLfu51/afevCZFzfut337d7atd/aDd+TbX7q/1m9s+uuPf6rj9uJ4Dv/92ZbHc/jt4XUctv/Ee8N8DNf/31PF/bV/u8LRt7cef+L6n9t+seXxRG/8abH9p151Mq9bJrZuu+Z511536aWNfZdl395S3F+v7Z/8mzMt4//8jcX+iNfHjH779lcSt3/uQ1OnzyxcmJ9Ne/XR6/PvznlzMZ443uvDsbX98pEz5983d25yZnImyyar+xV6V+wLof64KJe6r7247Ah6x0Ph+bz5L7+67bZ/+2Rc/h/vLJZfflPxvvXysN6nw/Lt4flb2/aXe+KWG/PX99DTYYSLy78veD127v7vg72+3zcXHn/754I438++6H35fmhcl79vxNf1Osf/vdnifr4S9uti+GbmXTcuba95/fjdCJffUbze173/wmEuPq9/F57vt/ywuP84rvh4vxc+x3x9R+vxLs6Pr1wcbr///Fs8LoXjSXapuD6uFff35edu7Di8+D0k2aWb8st/lu7npjU9zJUsfHhh+tT86QuPTJ+fWzg/vfDhjxx5+MyF0+eP5N/leeT9vW6/dHzalh+fZuf235PlR6szRbnKNnv8Zx86Pntg5rbZuRPHLpw4/9DZuXMnjy8sHJ+bXbjt2IkTcx/qdfv52fv27D2078DeqZPzs/cdPHRo36Gp+dNnGsMoBtXD/pkPTJ0+dyS/ycJ99xzac++998xMPXxmdu6+AzMzUxd63T5/b5pq3PoPp87NnTp2fv7huamF+Y/M3bfn0P79e3t+G+DDZ08sTE6fu3B6+sLC3Lnp4rFMns8XN977et2ealr4fvF5tt1Q8UV82dvu3J++n7Xhix9d8a6KVdq+QPTZ8F0033z+2YOruRz7/rFQkyr0/wAAAEAu9v3joSb6fwAAAKiM2PdvCTXR/wMAAEBlxL5/ItT0XwJq0v9XLv+/4+Kqti//L//fvL/k/2uW/39H2fL/xfFC/r8/1pu/r0P+f1Uryv/L/8v/y//L/9MHZcv/x75/a5b5/T8AAABUVOz7t4Wa6P8BAACgMmLff02oif4fAAAAKiP2/c8LNalJ/y//L/8v/y//L//fefvy/4NJ/r+7kuX/J9oXyP9vfv4/q1f+/1I/x78J+f+tzRfk/ymjsuX/Y99/bahJTfp/AAAAqIPY918XaqL/BwAAgMqIff/1oSb6fwAAAKiM2PdvDzWpSf8v/7+u/H/KXA1u/r/Ysvy//L/8v/x/Vcj/d1ey/P8y8v+bn/93/v+Byv+3kP+njMqW/499//NDTWrS/wMAAEAdxL7/BaEm+n8AAAAon9Eru1ns+18YarKs/7/CDQAAAACbLvb9N2RtQfCa/P5f/t/5/0t7/v8x+X/5/0L58/8jmfx/ecj/dyf/30M/8v+X5P/l/+X/5f+Jypb/z/v+bCJ7UahJTfp/AAAAqIPY998YaqL/BwAAgMqIff+vhJro/wEAAKAyYt+/I9SkJv2//H9l8v8/a37qKpH/d/5/+f+g/Pl/5/8vE/n/7uT/e3D+f/l/+X/5f/pqoWOntHn5/9j33xRqUpP+HwAAAOog9v03h5ro/wEAAKAyYt//q6Em+n8AAACojNj37ww1qUn/L/9f8vx/TI7W8fz/8v/y/0GZ8/8T8v+lI//fnfx/D/L/8v/y//L/9NXC94vPs+02K/8f+/4Xh5rUpP8HAACAOoh9/0tCTfT/AAAAUBmx739pqIn+HwAAACoj9v2ToSY16f/Xkv8fuiT/v5KrfP7/8VWc/7+F/P+m5P9H5f8Ldcr/Z/L/pSP/3538fw/y//L/8v/y//RV2fL/se+/JdSkJv0/AAAA1EHs+3eFmuj/AQAAoDJi339rqIn+HwAAACoj9v27Q01q0v87//9A5P8z+f+ByP87/38g/9+Z/P/GkP/vTv6/B/l/+X/5f/l/+qps+f/Y978s1KQm/T8AAADUQez7bws10f8DAABAZcS+/+WhJvp/AAAAqIzY998ealKT/l/+X/5f/l/+X/6/8/Y3PP9/Sf6/H+T/u5P/70H+X/5f/l/+n74qW/4/9v2vCDWpSf8PAAAAdRD7/jtCTfT/AAAAUBmx778z1ET/DwAAAJUR+/6pUJOa9P/y//L/1cz//6f8f5fty/+XNP/v/P99If/fnfx/D/L/8v/9yP+PhQXy//L/bHr+P35ei5dj339XqElN+n8AAACog9j33x1qov8HAACAyoh9/3Soif4fAAAAKiP2/TOhJjXp/+X/5f+rmf93/v9u219X/v+lS/cr/1+Q/y8X+f/u5P976Gf+f4v8f23z/+s6//+Y/D+Vstn5//bLse/fE2pSk/4fAAAA6iD2/XtDTfT/AAAAUBmx798XaqL/BwAAgMqIff89oSY16f/l/+X/5f/l/53/v/P25f8Hk/x/d/3P/8eHKP/v/P/y//3J/zv/P9VStvx/7PvvDTWpSf8PAAAAdRD7/v2hJvp/AAAAqIzY9x8INdH/AwAAQGXEvv9gqElN+n/5f/l/+X/5f/n/ztuX/x9M8v/dOf9/D/L/8v8DnP9vzC35f8qmbPn/2PcfCjWpSf8PAAAAdRD7/leGmuj/AQAAoDJi3/9roSb6fwAAACih8Su6Vez7fz3UpCb9v/y//L/8v/z/Juf/x3rl/8fl/+X/10D+vzv5/x7k/+X/Bzj/v8L5/68NV8v/synKlv+Pff99oSY16f8BAACgDmLf/xuhJvp/AAAAqIzY978q1ET/DwAAAJUR+/7DoSY16f/l/zco/x8Xljb/H5PM8v/5Avl/5/+X/x9Y8v/dyf/3IP8v/1+9/H+/z//f/jadyP/TSdny/7Hvf3WoSU36fwAAAKiD2PffH2qi/wcAAIDKiH3/a0JN9P8AAABQGbHvf22oSU36f/l/5//f/PP/j7WMXf5/6Xby/wX5f/n/tZD/707+vwf5f/l/+X/n/6evypb/j33/60JNatL/AwAAQB3Evv/1oSb6fwAAAKiM2Pe/IdRE/w8AAACVEfv+N4aa1KT/l/+X/9/8/L/z/8v/F+T/5f/7Qf6/O/n/HuT/5f/l/+X/6auy5f9j3/+boSY16f8BAACgDmLf/0Coif4fAAAAKiP2/W8KNdH/AwAAQGXEvv/NoSY16f/l/+X/5f/l/+X/O29f/n8wyf93N2D5/19cF5bL/xfk/8s9/rXm/0fbLl+V/P8PVsr/L25pv738P1dD2fL/se9/S6hJTfp/AAAAqIPY97811ET/DwAAAJUR+/63hZro/wEAAKAyYt//W6EmNen/5f8b41hKL8v/y//nC+T/5f/l/weW/H93Kf//XKd3riblyP87/38b+f9yj9/5/+X/Wa5s+f/Y97891KQm/T8AAADUQez7Hww10f8DAABAZcS+/x2hJvp/AAAAqIzY978z1KQm/b/8v/P/y//L/8v/d96+/P9gkv/vbsDO/y//30b+v9zjvyr5//+S/2ewlS3/H/v+h0JNatL/AwAAQB3Evv9doSb6fwAAAKiM2Pf/dqiJ/h8AAAAqI/b97w41qUn/L/8/KPn/Sfn/Neb/x8My+X/5f/n/epH/707+vwf5f/n/suX/nf+fAVe2/H/s+98TarL6/n9i1WsCAAAAV1P7r5OS2Pf/TqhJTX7/DwAAAHUQ+/7fDTXR/wMAAEBlxL7/90JNatL/y/8PSv7f+f8z5/+X/297PPL/8v+dbFz+Px551pT/39Jr+/L/8v/y/4M7fvl/+X+WK1v+P/b9vx9qUpP+HwAAAOog9v3vDTXR/wMAAMBA6PR/stvFvv9IqIn+HwAAACoj9v1HQ01q0v/L/8v/y/+XNP//F7v+5bvfeuvRPfL/8v/y/2uyoef/b7z4nf9f/l/+P5H/l/+X/6dd2fL/se8/Fmqy1Pi92Qn+AQAAYLDFvv8PQk1q8vt/AAAAqIPY9x8PNdH/AwAAQGXEvn821KQm/b/8/ybm/0ezLJP/l/+v4Pn/4/4YpPz/1JYByv/Hg678f0cbmv9/11JOXP5/rfn/8Y5L2/P/Q/L/LeT/1zz+b2ZZtmHjv/iv8v/y/7QrW/4/9v1zoSY16f8BAACgDkLfP3yiqEtX6P8BAACgMmLffzLURP8PAAAAlRH7/veFmtSk/5f/d/5/+X/5f+f/77z90ub/nf+/K/n/7sqT/+/M+f/l/wd5/M7/L//PcmXL/8e+fz7UpCb9PwAAANRB7PvfH2qi/wcAAIDKiH3/B0JN9P/w/+zdyZNlZZnH8ZuQRFUF0RG960Uvuve96k1vWDSrXnT/Ab1gw6YjulvFAeeJwnnEeR7QUBEHHEARUVGcBScUcUTFGcQJJ0SlDCqf56kcTp6bWXUz77nv+/ksfIqE5F4IrOJXybcOAABAM3L3Pzhu6WT/6//1/032/0f0/2Ovr//X/7dM/z9O/z+H/l//r//X/7NQU+v/c/c/JG7pZP8DAABAD3L3XxS32P8AAADQjNz9D41b7H8AAABoRu7+h8Utnex//b/+v8n+/z/u/r/7/13/v9vr6//1/y3T/4/T/8+h/9f/6//1/yzU1Pr/3P0Pj1s62f8AAADQg9z9j4hb7H8AAABoRu7+i+MW+x8AAACakbv/kXFLJ/t/W/+/Nuuz/8+MV//fUv/v+f+7vr7+X//fssPt/y994Hs+/b/+X/8f9P/6f/0/202t/8/d/6i4pZP9DwAAAD3I3f/ouMX+BwAAgGbk7n9M3GL/AwAAQDNy9z82bulk/3v+v+f/6//1//r/4dfX/68mz/8f11P/f/Gt5150z7X/eN1+Xl//r//X/+v/Wayp9f+5+x8Xt3Sy/wEAAKAHufsfH7fY/wAAANCM3P1PiFvsfwAAAFhBxwY/mrv/iXFLJ/tf/6//1/9H/39U/6//1/+3QP8/btn9/9CPl5t5/n/7/f+DFvJOl/f+x+j/9f/sNLX+P3f/k+KWTvY/AAAA9CB3/5PjFvsfAAAApmvef1i2Te7+S+IW+x8AAACakbv/eNzSyf7X/x98//9X/f9q9P+e/6//1/83Qf8/btn9/zz6//b7/4O07Pev/9f/s9PU+v/c/ZfGLZ3sfwAAAOhB7v6nxC32PwAAADQjd/9T4xb7HwAAAJqRu/9pcUsn+1//7/n/+n/9/+H3/xvf2er/T/1d1f8vjv5/nP5/Dv3/mfbz5+j/9f/6fzbbZ/9/38h32wvp/3P3Pz1u6WT/AwAAQA9y9z8jbrH/AQAAoBm5+58Zt9j/AAAA0Izc/c+KWzrZ//p//b/+X/9/2v3/zn/0TvL8/2H6/8Oh/x83mf5/bX3ww/r/le//Pf9f/6//Z4upPf8/d/+z45ZO9j8AAAD0IHf/c+KWkf2/75/MBwAAAJYqd/9z4xZf/wcAAICVl9VZ7v7nxS2d7H/9v/5f/6//P/zn/69+/3/dpven/58W/f+4yfT/u9D/6/9X+f3r//X/7DS1/j93//Pjlk72PwAAAPQgd/9lcYv9DwAAAM3I3f+CuMX+BwAAgGbk7n9h3NLJ/h/u/0/9/kn3/9sj4Zn+P+n/2+7/88+o/x/t/8/3/P8+6f/H6f/n0P/r//X/u/X/x+Z9vv6fIVPr/3P3vyhu6WT/AwAAQA9y9784brH/AQAAoBm5+18St9j/AAAA0Izc/S+NWzrZ/57/r//X/69e/+/5/xuW+fz/2aH3/+v6/z1abv+/dn/+CKr/P733r//X/6/y+2+y/z9ntvX5/yO/CoD+nyFT6/9z978sbulk/wMAAEAPcve/PG6x/wEAAGA1bP5vB4aeFTeb1e5/Rdxi/wMAAEAzcve/Mm5pZ/+PPqtT/6//1/+f/HT9v/5/oP9fn02n//f8/73y/P9x+v859P8H0c+vN9b/X77b50+h/7/k4J7//6/zPl//z5At/f8Npz6+rP4/d/+r4pZ29j8AAAB0L3f/q+MW+x8AAACakbv/NXGL/Q8AAADNyN3/2rilk/1/4P3/yK8+oP/X/0+k//f8f/3/4OtP6/n/+v+90v+P0//Pof/3/H/P/9f/c+Y2/Svjlv5/k2X1/7n7Xxe3dLL/AQAAoAe5+18ft9j/AAAA0Izc/ZfHLfY/AAAANCN3/xvilk72v+f/6//1//p//f/w6+v/V9MZ9fdn6f+L/l//r//X/+v/WYCp9f9bd39/+x8AAAB68MaT/3s0fr7e/gcAAIAW5e5/U9xi/wMAAEAzcve/OW7pZP/r/w+2/8+P6//1/zP9v/5f/38oun3+/9rQj0Q77dL/3/y/x/9r60f0//p//b/+X//PHv39yO+bRP9/4tS/Xebuf0vc0sn+BwAAgB7k7r8ibrH/AQAAoBm5+98at9j/AAAA0Izc/VfGLfvc/2PNw5Tp/z3/X/+v/9f/D7++/n81ddv/75Hn/8+h/9f/6//1/yzUJPr/Tb+du/9tcYuv/wMAAEAzcve/PW6x/wEAAKAZufvfEbfY/wAAANCM3P3vjFs62f/6f/2//l//r/8ffn39/2rS/4/T/8+xSv3/lWfQ/68Pf3jZ/fyZWvb71//r/9lpav1/7v6r4pZO9j8AAAD0IHf/u+IW+x8AAACakbv/3XGL/Q8AAADNyN3/nrilk/2v/9f/6//1//r/4dfX/68m/f84/f9sNrt65A0M9f8njkyz//f8/8m9f/2//p+dptb/5+5/b9zSyf4HAACAHuTuvzpusf8BAACgGbn7r4lb7H8AAABoRu7+98Utnex//b/+X/+v/9f/D7++/n816f/H6f/nWKXn/+v/J/f+9f/6f3aaWv+fu//9cUsn+x8AAAB6kLv/2rjF/gcAAIBm5O7/QNxi/wMAAEAzcvdfF7d0sv/1//p//b/+f6D/P/l/df2//n8VHVz/P9P/6//1/3Po//X/+n+2m1r/n7v/g3FLJ/sfAAAAepC7//q4xf4HAACAZuTu/1DcYv8DAABAM3L3fzhu6WT/6//1//p//b/n/w+/vv5/NXn+/zj9/xz6f/2//l//z0IN9/+XLK3/z93/kbilk/0PAAAAPcjdf0PcYv8DAABAM3L3fzRusf8BAACgGbn7Pxa3dLL/9f/6/639/2ym/9f/6/83DPT/t917xd/Vby+g/z860/8vnP5/nP5/Dv1/m/3/WbOG+v9ju36+/p8pmtrz/3P33xi3dLL/AQAAoAe5+z8et9j/AAAA0Izc/Z+IW+x/AAAAaEbu/k/GLZ3sf/2//n/Bz/+/68KB96H/36D/X/n+3/P/V4D+f5z+fw79f5v9v+f/6/9Zmqn1/7n7PxW3dLL/AQAAoAe5+z8dt9j/AAAA0Izc/Z+JW+x/AAAAaEbu/s/GLZ3sf/2//n/B/b/n/+v/9f+70P8fDv3/OP3/HPr/5vr//Ld7/b/+n+WYWv+fu/9zcUsn+x8AAAB6kLv/prjF/gcAAIBm5O6/OW6x/wEAAKAZufs/H7d0sv/1//p//f9q9v9Ht/T/Z8/0/6f+eP1/36bS/5933n/eov/X/+v/l9//e/6//p/lmlr/n7v/C3FLJ/sfAAAAepC7/4txi/0PAAAAzcjd/6W4xf4HAACAZuTu/3Lc0sn+39n/nzPbKFQ3DPX/0ajp/zfR/299//r/4X8+PP9f/6//P3hT6f89///03r/+X/+/yu9/X/3/P+/8fP0/LZpa/5+7/5a4pZP9DwAAAD3I3f+VuMX+BwAAgGbk7v9q3GL/AwAAQDNy998at3Sy/z3/X/+v/9f/L7z/v/7OjW/o/7fQ/x+O0+zv/+3G+Ib+P+j/9f/6/36f/3+2/p/FmVr/n7v/a3FLJ/sfAAAAepC7/7a4xf4HAACAZuTu/3rcYv8DAABAM3L3fyNu6WT/6//1//p//b/n/w+/vv5/NXn+/zj9f9n+l7ahn/7/6NAHl93Pn6llv/9m+n/P/2eBptb/5+7/ZtzSyf4HAACAHuTu/1bcYv8DAABAM3L3fztusf8BAACgGbn7vxO3dLL/9f/6//b7/wv1/9teX/+v/2+Z/j9/RB+m/5+jn/5/0LL7+VV///p//T87Ta3/z91/e9zSyf4HAACAHuTu/27cYv8DAABAM3L3fy9usf8BAACgGbn7vx+3dLL/9f999f9rsx77f8//1//r/3ui/x+n/59D/6//1//r/1moqfX/ufvvWFvvcv8DAADAqvrvf/n/2/f6x95x8n+Pzn4Qt5w/O7HHL2MDAAAAE/fA7l9bn81+ePK3fP0fAAAAWpS7/0dxSyf7X//fV//f5/P/9f/6f/1/T4b6+6Hvo3ej/w/6f/2//l//r/9nAabW/+fu/3Hcsmn4re/7rxIAAACYktz9P4lbOvn6PwAAAPQgd/9P45Yd+98vBwgAAACrKnf/z+KWTr7+r/+feP8/O6D+P/44/f8G/b/+f+j19f+ryfP/x51h/39iTf+v/x+h/9f/6//Zbmr9f+7+O+OWTvY/AAAANGrLzyjk7r8rbrH/AQAAoBm5+38et9j/AAAA0Izc/XfHLZ3sf/3/off/maof4PP/j9W3PP+/8/7/sqODr6//1/+3TP8/zvP/59D/t9L/H9H/6/+Zhqn1/7n7fxG3dLL/AQAAoAe5+38Zt9j/AAAA0Izc/b+KW+x/AAAAaEbu/l/HLZ3sf/3/xJ//f1r9/x6e/6//76P/3+X12+n//+Hc4zdd8D/XXKX/55TD7P/zn4VD7v+P7PfPuZn+fw79fyv9v+f/6/+ZiMX3/+tbPrjf/j93/2/ilk72PwAAAPQgd/89cYv9DwAAAM3I3f/buMX+BwAAgGbk7v9d3NLJ/tf/6/+n0v/n3+sl9P/HT7v/PzabzZbS/2dT3Hv/7/n/+v+dPP9/nP5/Dv2//l//r/9noRbf/2/94H77/9z9v49bOtn/AAAA0IPc/X+IW3L/r+37p+4BAACAicnd/8e4xdf/AQAAoBm5+++NWzrZ//p//f9U+v/k+f+nPq+t5/9fUHFqn/3/P9W39P8HS/8/Tv8/h/5f/6//1/+zUFPr/3P3/ylu6WT/AwAAQA9y998Xt9j/AAAA0Izc/X+OW+x/AAAAaEbu/r/ELZ3sf/1/q/1/FvH6f/3/VPp/z//3/P/Dof8fp/+fQ/+v/9f/6/9ZqKn1/7n7/xYAAP//2HxcCQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 53.775412864s ago: executing program 0 (id=10193): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000780)={'macvtap0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x1, 0x3, 0x0, 0x0, 0xf, 0xeb, 0x38, 0x4, 0x0, 0x4, [0xffffffff, 0xffffe022, 0xfffffe00, 0xfffff000, 0xe3a0, 0x4ac, 0x3c85aa8b, 0x6]}}) 52.380060355s ago: executing program 0 (id=10207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12a13, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x20004000) 51.645154648s ago: executing program 32 (id=10207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12a13, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x3c}}, 0x20004000) 3.409844163s ago: executing program 4 (id=10682): r0 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d046700700005700ad775f9ee1ae34b796a23373b3e00423b045d36ecccd4c1eaec2f3490d0000000000002c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b679e7bac6d", @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES8], 0x0, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZddFr6vMNbGxEKiUAjLosZOK8MD+AASWJG4+MOSKIRirXgPG17Dwnew0NhgYUwssDdrZubuOjyAJiRzkt1z75m5c2emOHMaXoU5AF+zURMHkLCwhCci2ADWSGmHOcXvjuIy52+24hLrd8zPzOFgeNYIAr/3i8Ff9DCBCUywaMFPun+bwYf0ssfZqCmCYwBxHMdCa6mP9DkWgAdtzootP7IQp3OE+YlkE0Cl372shIPhVqfbaPtt/9zzarvutuvueJWTTuC76k9ai4zySAguARCe+k8bzwJ4YYP9j3mQtjUeJ73W0cy5uD5fm9FqEybcp7Xs7RBXcIQN5AFcR6SpBbmKDXmkOggWJ1Vb25/qlZcD5eZF0BqDQEnZBHa6RnWKbJp4elLbi5Jtj5kLzHXmCfOUOXmzkrfIliu8claMAAc3jX6/VxWSilLNSzVvOdIvTHT9dOYPt5qDgYGBgYGBgcGC4TsAAP//NFFiLQ==") quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0x0, 0x0) 3.285113148s ago: executing program 4 (id=10685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7a0, 0x0, 0x228, 0x0, 0x5b8, 0x5b8, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff], 'veth1_virt_wifi\x00', 'batadv0\x00', {}, {0x1cd2af259700f990}, 0x33, 0x66, 0x0, 0x60}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x10, 0x5], 0x2, 0xa11b7ddcf662e78e, 0x4, [@loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, @mcast2, @local, @loopback, @private0, @private1], 0xf}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv4=@local, 0x80, 0x2c, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "b02b"}}, @common=@hbh={{0x48}, {0x386b, 0x3, 0x0, [0x347, 0x9, 0x81, 0x6, 0x0, 0xd, 0x1, 0x8000, 0xe5, 0xff, 0xff01, 0x5, 0x3, 0x5, 0x8, 0x6], 0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x6c03, @ipv4=@private=0xa010101, 0x4e22}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x21, 0x35, 0x500}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff], 'bridge_slave_0\x00', 'gretap0\x00', {0xff}, {}, 0x8, 0xf, 0x1, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x21, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@mcast2, 0x30, 0x3b, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x800) 2.897816528s ago: executing program 4 (id=10691): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3, 0x2000000}) 2.811384412s ago: executing program 6 (id=10692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xfffffffffffff6ff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2.678126502s ago: executing program 2 (id=10693): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 2.494971435s ago: executing program 2 (id=10696): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@resuid}]}, 0x1, 0x625, &(0x7f0000000800)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 2.494783707s ago: executing program 4 (id=10697): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) 2.270716545s ago: executing program 3 (id=10698): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f00000000c0)) 2.138609006s ago: executing program 4 (id=10700): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@anchor={'anchor', 0x3d, 0x7}}, {@noadinicb}, {@undelete}, {@uid_ignore}, {@uid_ignore}, {@adinicb}, {@longad}, {@gid_ignore}, {@gid_forget}, {@uid_forget}, {@unhide}]}, 0x1, 0xc77, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 2.138459144s ago: executing program 5 (id=10701): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000040)) 1.995629042s ago: executing program 6 (id=10702): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000140)={{0x7, 0x5, 0x6, 0x8001}, 0x4, 0x10000000, 0xf, 0x0, 0x0, 0x3, 'syz0\x00', 0x0}) 1.920479977s ago: executing program 3 (id=10704): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x1000}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 1.765875061s ago: executing program 5 (id=10705): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) close(r0) 1.764173082s ago: executing program 1 (id=10706): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20043, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x18000, 0x1, 0xa1a, 0x4, 0x4, 0x800afa3, 0x4, 0x8, 0x0, 0x2, 0x7, 0x9, 0x1, 0x5, 0xde, 0x4, 0xc, 0x4, 0x2, 0xa, 0x200, 0xcaa2, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x4]}) 1.465767364s ago: executing program 1 (id=10707): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="a4000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0004000000200000140003006e657464657673696d30000000000000140014006e657464657673696d300000000000005c0016805800018054000c80140001000200"], 0xa4}}, 0x4008040) 1.42395491s ago: executing program 2 (id=10708): r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) 1.423807028s ago: executing program 6 (id=10709): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) 1.422489071s ago: executing program 4 (id=10710): ptrace(0x10, 0x0) syz_usb_connect(0x5, 0x65, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xa9, 0x18, 0x3a, 0x40, 0xf3d, 0x68aa, 0xd9bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x8, 0x8, 0x10, 0xd7, "", [{{0x9, 0x4, 0x7, 0x0, 0x0, 0xe0, 0x82, 0x50, 0x7b, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "aaeaba"}, {0x5, 0x24, 0x0, 0x403e}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0xfe01, 0x4}, {0x6, 0x24, 0x1a, 0xfff, 0x20}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0xfe01, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5a}]}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x8, 0x2, 0x4, 0x10, 0xb}, 0x10, 0x0, 0x3, [{0x101, &(0x7f0000000440)=@string={0x101, 0x3, "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"}}, {0x0, 0x0}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x413}}]}) 1.365345448s ago: executing program 3 (id=10711): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0xfffffffffffffd5b, {0x2, 0x8, @private=0xa010102}}, 0x24) 1.361767002s ago: executing program 5 (id=10712): r0 = socket$inet6(0xa, 0x3, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0xe5371bee3fa2fe39) 1.084126132s ago: executing program 6 (id=10713): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03070600b531"], 0x31c8) 1.001178961s ago: executing program 1 (id=10714): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) inotify_rm_watch(0xffffffffffffffff, 0x0) 893.237221ms ago: executing program 5 (id=10715): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 891.779659ms ago: executing program 3 (id=10727): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x4}}, 0xfe44, 0x0) 739.490011ms ago: executing program 2 (id=10716): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000340)={0x0, 0x2, {0x56, 0x9af, 0x4, {0x3d, 0x7}, {0x87}, @const={0x5, {0x5, 0x3, 0x57, 0x781}}}, {0x56, 0x3, 0x7de, {0x81, 0x8}, {0x7, 0x4e99}, @rumble={0x8000, 0x5}}}) 657.341045ms ago: executing program 1 (id=10717): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @ah_ip4_spec={@broadcast, @local}, {0x0, @random='\x00\x00\x00\x00\b\x00', 0x0, 0x0, [0x0, 0x10000000]}, @tcp_ip4_spec={@local, @private=0xa010101, 0x4e21}, {0x0, @random="7a2a6d7372b7", 0x8001, 0x3, [0x9]}, 0x7}}}) 584.523115ms ago: executing program 6 (id=10718): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='attr\x00') sync_file_range(r0, 0x5e4, 0x1, 0x4) 580.00046ms ago: executing program 3 (id=10719): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) writev(r0, &(0x7f0000001a00)=[{&(0x7f0000000500)="fc12", 0x2}], 0x1) 532.007847ms ago: executing program 5 (id=10720): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x5, 0x4) 448.191548ms ago: executing program 2 (id=10721): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 398.151156ms ago: executing program 1 (id=10722): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4bfb, &(0x7f0000000240)={0xfa}) 252.363065ms ago: executing program 6 (id=10723): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@anchor={'anchor', 0x3d, 0x7}}, {@noadinicb}, {@undelete}, {@uid_ignore}, {@uid_ignore}, {@adinicb}, {@longad}, {@gid_ignore}, {@gid_forget}, {@uid_forget}, {@unhide}]}, 0x1, 0xc77, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 236.851367ms ago: executing program 5 (id=10724): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_TIOCINQ(r0, 0x5760, 0x0) 167.079541ms ago: executing program 3 (id=10725): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @mcast2, 0x3}, 0x1b) 274.487µs ago: executing program 1 (id=10726): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r0, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @time={0x4, 0x6}, {0x4}, {0xfe}, @addr={0x5b, 0x5d}}, {0x0, 0x0, 0x1, 0x0, @time, {}, {0x5}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x100, {}, {}, @queue={0xb, {0x80000001, 0xe4d0}}}, {0x1, 0x0, 0x1, 0x0, @time={0x80000000, 0xfff}, {0x4, 0x1}, {0x7, 0x8}, @time=@time={0x3, 0x8}}], 0x70) 0s ago: executing program 2 (id=10728): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x300c001, &(0x7f0000000180)={[{@bsdgroups}]}, 0x2c, 0x516, &(0x7f0000000740)="$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") kernel console output (not intermixed with test programs): than min 600 [ 1259.176693][T28650] XFS (loop4): Starting recovery (logdev: internal) [ 1259.277406][ T57] kworker/u8:4: attempt to access beyond end of device [ 1259.277406][ T57] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1259.321221][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.321289][ T57] Tainted: [L]=SOFTLOCKUP [ 1259.321304][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1259.321331][ T57] Workqueue: writeback wb_workfn (flush-7:5) [ 1259.321407][ T57] Call Trace: [ 1259.321420][ T57] [ 1259.321436][ T57] dump_stack_lvl+0x100/0x190 [ 1259.321486][ T57] f2fs_stop_checkpoint+0x600/0x9b0 [ 1259.321529][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.321578][ T57] ? errseq_set+0xe3/0x150 [ 1259.321636][ T57] ? errseq_set+0xe3/0x150 [ 1259.321693][ T57] f2fs_write_end_io+0xf59/0x1340 [ 1259.321747][ T57] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1259.321803][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.321864][ T57] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1259.321912][ T57] bio_endio+0x78f/0x8f0 [ 1259.321962][ T57] submit_bio_noacct+0x64c/0x2000 [ 1259.322036][ T57] f2fs_submit_write_bio+0x135/0x340 [ 1259.322084][ T57] __submit_merged_bio+0x331/0x780 [ 1259.322141][ T57] __submit_merged_write_cond+0x3fe/0x510 [ 1259.322204][ T57] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1259.322267][ T57] ? __pfx___might_resched+0x10/0x10 [ 1259.322322][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.322381][ T57] f2fs_write_cache_pages+0x20e9/0x2630 [ 1259.322465][ T57] ? lockdep_hardirqs_on+0x78/0x100 [ 1259.322534][ T57] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1259.322596][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.322644][ T57] ? kfree+0x223/0x6c0 [ 1259.322696][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.322745][ T57] ? ieee80211_inform_bss+0x8da/0x1150 [ 1259.322812][ T57] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1259.322854][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.322925][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.322973][ T57] ? __lock_acquire+0x4a5/0x2630 [ 1259.323067][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.323116][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.323167][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.323216][ T57] ? rcu_is_watching+0x12/0xc0 [ 1259.323283][ T57] f2fs_write_data_pages+0x799/0x16d0 [ 1259.323357][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1259.323424][ T57] ? __lock_acquire+0x4a5/0x2630 [ 1259.323480][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.323530][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1259.323592][ T57] do_writepages+0x278/0x600 [ 1259.323664][ T57] ? __pfx_do_writepages+0x10/0x10 [ 1259.323731][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.323788][ T57] __writeback_single_inode+0x164/0x1350 [ 1259.323851][ T57] ? find_held_lock+0x2b/0x80 [ 1259.323912][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.323964][ T57] ? __pfx___writeback_single_inode+0x10/0x10 [ 1259.324026][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.324074][ T57] ? do_raw_spin_unlock+0x145/0x1e0 [ 1259.324129][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.324184][ T57] writeback_sb_inodes+0x766/0x1c60 [ 1259.324274][ T57] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1259.324336][ T57] ? debug_object_activate+0x331/0x490 [ 1259.324386][ T57] ? debug_object_activate+0x331/0x490 [ 1259.324434][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.324557][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.324606][ T57] ? rcu_is_watching+0x12/0xc0 [ 1259.324661][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.324708][ T57] ? queue_io+0x287/0x540 [ 1259.324767][ T57] wb_writeback+0x1bf/0xb90 [ 1259.324845][ T57] ? __pfx_wb_writeback+0x10/0x10 [ 1259.324922][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.324970][ T57] ? mark_held_locks+0x40/0x70 [ 1259.325014][ T57] ? _raw_spin_unlock_irq+0x23/0x50 [ 1259.325074][ T57] wb_workfn+0x14f/0xc00 [ 1259.325141][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.325188][ T57] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1259.325246][ T57] ? __pfx_wb_workfn+0x10/0x10 [ 1259.325313][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.325365][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.325418][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.325466][ T57] ? rcu_is_watching+0x12/0xc0 [ 1259.325531][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.325591][ T57] process_one_work+0xa0e/0x1980 [ 1259.325665][ T57] ? __pfx_process_one_work+0x10/0x10 [ 1259.325710][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.325777][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.325835][ T57] worker_thread+0x5ef/0xe50 [ 1259.325898][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1259.325949][ T57] ? kthread+0x13a/0x450 [ 1259.325988][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1259.326033][ T57] kthread+0x370/0x450 [ 1259.326073][ T57] ? __pfx_kthread+0x10/0x10 [ 1259.326119][ T57] ret_from_fork+0x72b/0xd50 [ 1259.326168][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 1259.326218][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1259.326264][ T57] ? __switch_to+0x800/0x1100 [ 1259.326317][ T57] ? __switch_to_asm+0x39/0x70 [ 1259.326369][ T57] ? __pfx_kthread+0x10/0x10 [ 1259.326415][ T57] ret_from_fork_asm+0x1a/0x30 [ 1259.326501][ T57] [ 1259.326909][ T57] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1259.358018][T28650] XFS (loop4): Ending recovery (logdev: internal) [ 1259.883826][T28712] loop2: detected capacity change from 0 to 256 [ 1259.927355][T25839] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1259.995899][T28712] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 1260.063319][T28650] XFS (loop4): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1260.130233][T25839] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1260.147538][T28650] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 [ 1260.173793][T25839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.184175][T28650] XFS (loop4): Unmount and run xfs_repair [ 1260.200475][T25839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1260.214983][T28650] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1260.231534][T25839] usb 4-1: config 1 has no interface number 0 [ 1260.251400][T25839] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1260.262892][T28650] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 1260.290125][T28650] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 1260.299434][T25839] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1260.336841][T25839] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1260.346429][T28650] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 1260.352197][T25839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.373251][T28720] IPv6: NLM_F_CREATE should be specified when creating new route [ 1260.381120][T28650] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 1260.381158][T28650] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 1260.381191][T28650] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1260.381223][T28650] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1260.381256][T28650] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1260.381292][T28650] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x4 len 4 error 74 [ 1260.387973][T28650] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1260.439577][T25839] usb 4-1: Product: syz [ 1260.501668][T28650] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 1260.534689][T25839] usb 4-1: Manufacturer: syz [ 1260.556421][T25839] usb 4-1: SerialNumber: syz [ 1260.660596][ T5818] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1260.955273][T28733] loop2: detected capacity change from 0 to 16 [ 1260.989119][T28733] erofs (device loop2): mounted with root inode @ nid 36. [ 1261.033862][T25839] usb 4-1: USB disconnect, device number 62 [ 1261.053049][T28733] cifs: Unknown parameter 'cache_strategy' [ 1261.790422][T28750] loop5: detected capacity change from 0 to 4096 [ 1261.832540][T28753] loop0: detected capacity change from 0 to 1764 [ 1262.621732][T28774] loop3: detected capacity change from 0 to 4096 [ 1262.659571][T28774] ntfs3(loop3): ino=3, mi_enum_attr [ 1262.712462][T28774] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1262.742894][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1262.756968][ T1093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1262.825551][T28774] ntfs3(loop3): Failed to load $Extend (-22). [ 1262.859513][T28774] ntfs3(loop3): Failed to initialize $Extend. [ 1263.068813][T28757] loop4: detected capacity change from 0 to 32768 [ 1263.113311][T28757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.9707 (28757) [ 1263.209802][T28757] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1263.262461][T28757] BTRFS info (device loop4): using sha256 checksum algorithm [ 1263.411238][T28757] BTRFS info (device loop4): enabling ssd optimizations [ 1263.471105][T28757] BTRFS info (device loop4): turning on async discard [ 1263.499836][T28757] BTRFS info (device loop4): enabling free space tree [ 1263.783564][ T5818] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1263.875855][T28819] loop0: detected capacity change from 0 to 4096 [ 1264.014823][T28828] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1264.124640][T28819] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1264.159102][T28819] Remounting filesystem read-only [ 1264.221072][T28835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9751'. [ 1264.588496][T28843] loop3: detected capacity change from 0 to 16 [ 1264.624665][T28846] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1264.647871][T28838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.649374][T28843] erofs (device loop3): mounted with root inode @ nid 36. [ 1264.786475][T28843] erofs (device loop3): read error -117 @ 0 of nid 36 [ 1265.183477][T28856] loop4: detected capacity change from 0 to 16 [ 1265.226186][T28856] erofs (device loop4): mounted with root inode @ nid 36. [ 1265.240987][T28838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.263034][T28856] syz.4.9749: attempt to access beyond end of device [ 1265.263034][T28856] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1265.310246][T28838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.325228][T28856] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 1265.357936][T28856] erofs (device loop4): read error -117 @ 0 of nid 89 [ 1265.388319][ T30] audit: type=1800 audit(2000000520.987:373): pid=28856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9749" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1265.589472][T28864] netlink: 'syz.5.9754': attribute type 2 has an invalid length. [ 1265.611553][T28864] netlink: 'syz.5.9754': attribute type 8 has an invalid length. [ 1265.621708][T28864] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9754'. [ 1265.852108][ T1093] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.885283][ T1093] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.902291][T28873] loop4: detected capacity change from 0 to 256 [ 1265.980208][ T1093] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.017348][ T1093] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.027881][T28873] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 1266.234140][T28879] loop0: detected capacity change from 0 to 512 [ 1266.315174][T28854] loop3: detected capacity change from 0 to 32768 [ 1266.334809][T28879] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1266.356796][T28854] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9748 (28854) [ 1266.374177][T28879] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1266.402334][T28879] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1266.442265][T28854] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1266.486473][T28879] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1266.506221][T28854] BTRFS info (device loop3): using sha256 checksum algorithm [ 1266.530254][T28879] EXT4-fs warning (device loop0): ext4_enable_quotas:7265: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1266.554149][T28888] loop4: detected capacity change from 0 to 4096 [ 1266.561437][T28879] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1266.574608][T28879] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.9761: bg 0: block 40: padding at end of block bitmap is not set [ 1266.608895][T28879] loop0: lost filesystem error report for type 5 error -117 [ 1266.611424][T28879] EXT4-fs (loop0): Remounting filesystem read-only [ 1266.618872][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1266.618910][ C1] EXT4-fs (loop0): initial error at time 2000000522: ext4_validate_block_bitmap:440 [ 1266.618957][ C1] EXT4-fs (loop0): last error at time 2000000522: ext4_validate_block_bitmap:440 [ 1266.622179][T28888] ntfs3(loop4): ino=3, mi_enum_attr [ 1266.664805][T28879] EXT4-fs (loop0): 1 truncate cleaned up [ 1266.709781][T28879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1266.732431][T28854] BTRFS info (device loop3): enabling ssd optimizations [ 1266.751192][T28854] BTRFS info (device loop3): turning on async discard [ 1266.761965][T28854] BTRFS info (device loop3): enabling free space tree [ 1266.787427][T27541] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1266.848527][T28888] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1266.912469][T28888] ntfs3(loop4): Failed to load $Extend (-22). [ 1266.955059][T28888] ntfs3(loop4): Failed to initialize $Extend. [ 1266.970604][T27541] usb 3-1: Using ep0 maxpacket: 16 [ 1266.998224][T27541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1267.022989][ T5816] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1267.057017][T27541] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1267.065825][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.087668][T27541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1267.124974][T27541] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1267.169962][T27541] usb 3-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 1267.216524][T27541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.261109][T27541] usb 3-1: Product: syz [ 1267.284282][T27541] usb 3-1: Manufacturer: syz [ 1267.296041][T27541] usb 3-1: SerialNumber: syz [ 1267.340800][T27541] usb 3-1: config 0 descriptor?? [ 1267.416182][T27541] omninet 3-1:0.0: ZyXEL - omni.net usb converter detected [ 1267.463182][T27541] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 1267.673293][T25839] usb 3-1: USB disconnect, device number 54 [ 1267.938363][T25839] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 1267.989653][T25839] omninet 3-1:0.0: device disconnected [ 1268.240584][T28929] loop0: detected capacity change from 0 to 256 [ 1268.244845][T28929] exfat: Deprecated parameter 'utf8' [ 1268.269885][T28908] loop1: detected capacity change from 0 to 32768 [ 1268.276233][T28908] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9768 (28908) [ 1268.277725][T28917] bridge0: port 3(syz_tun) entered disabled state [ 1268.284430][T28908] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1268.284474][T28908] BTRFS info (device loop1): using sha256 checksum algorithm [ 1268.311471][T28929] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 1268.325854][T28917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.535478][T28908] BTRFS info (device loop1): enabling ssd optimizations [ 1268.535523][T28908] BTRFS info (device loop1): turning on async discard [ 1268.535555][T28908] BTRFS info (device loop1): enabling free space tree [ 1268.797870][ T5809] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1269.373632][T25839] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1269.536143][T28917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.566298][T25839] usb 2-1: Using ep0 maxpacket: 8 [ 1269.580719][T25839] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1269.599495][T25839] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1269.624905][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9785'. [ 1269.629320][T25839] usb 2-1: config 0 has no interface number 0 [ 1269.660904][T28970] netlink: 'syz.4.9785': attribute type 1 has an invalid length. [ 1269.665943][T28917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.690515][T25839] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1269.700385][T28970] netlink: 'syz.4.9785': attribute type 2 has an invalid length. [ 1269.721321][T25839] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1269.738340][T28970] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9785'. [ 1269.773520][T25839] usb 2-1: config 0 interface 88 has no altsetting 0 [ 1269.778940][T28972] loop3: detected capacity change from 0 to 2048 [ 1269.817886][T25839] usb 2-1: string descriptor 0 read error: -22 [ 1269.844286][T25839] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1269.877874][T28972] NILFS (loop3): corrupt root inode [ 1269.887443][T25839] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1269.945363][T25839] usb 2-1: config 0 descriptor?? [ 1270.010581][T25839] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input69 [ 1270.262057][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1270.305338][T27541] usb 2-1: USB disconnect, device number 49 [ 1270.419379][ T5781] udevd[5781]: Error opening device "/dev/input/event4": No such device [ 1270.457854][ T5781] udevd[5781]: Unable to EVIOCGABS device "/dev/input/event4" [ 1270.480023][ T5781] udevd[5781]: Unable to EVIOCGABS device "/dev/input/event4" [ 1270.619153][ T1093] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.659033][ T1093] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.697770][ T1093] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.729820][ T1093] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.119849][T27489] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1272.253475][T29018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.302952][T27489] usb 4-1: Using ep0 maxpacket: 32 [ 1272.316553][T29037] loop4: detected capacity change from 0 to 16 [ 1272.320645][T29018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.344478][T27489] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 1272.364403][T27489] usb 4-1: config 0 has no interface number 0 [ 1272.377386][T29037] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1272.399540][T27489] usb 4-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1272.444907][T27489] usb 4-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1272.484569][T27489] usb 4-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1272.535214][T27489] usb 4-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1272.579547][T27489] usb 4-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1272.617692][T27489] usb 4-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1272.676581][T27489] usb 4-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1272.727834][T27489] usb 4-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 1272.735880][T29044] loop2: detected capacity change from 0 to 1764 [ 1272.759918][T27489] usb 4-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 1272.803593][T27489] usb 4-1: Product: syz [ 1272.816407][T27489] usb 4-1: Manufacturer: syz [ 1272.832869][T27489] usb 4-1: SerialNumber: syz [ 1272.872490][T27489] usb 4-1: config 0 descriptor?? [ 1272.906851][T27489] spcp8x5 4-1:0.110: SPCP8x5 converter detected [ 1272.937431][T27489] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1273.042145][T29019] bridge_slave_1: left allmulticast mode [ 1273.063576][T29019] bridge_slave_1: left promiscuous mode [ 1273.083762][T29019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.150540][T29053] netlink: 'syz.2.9826': attribute type 3 has an invalid length. [ 1273.186865][T29053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9826'. [ 1273.196148][T29019] bridge_slave_0: left allmulticast mode [ 1273.209766][T29019] bridge_slave_0: left promiscuous mode [ 1273.236837][T29019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.305561][T27494] usb 4-1: USB disconnect, device number 63 [ 1273.402102][T27494] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1273.437026][T27494] spcp8x5 4-1:0.110: device disconnected [ 1273.830859][T28872] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.846377][T27526] wlan1 speed is unknown, defaulting to 1000 [ 1273.863878][T27526] syz0: Port: 1 Link DOWN [ 1273.872092][T28872] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.968590][T28872] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.016580][T28872] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.152837][T29078] netlink: 'syz.5.9840': attribute type 16 has an invalid length. [ 1274.203391][T29078] netlink: 'syz.5.9840': attribute type 17 has an invalid length. [ 1274.987433][T29109] loop1: detected capacity change from 0 to 164 [ 1275.009510][ T30] audit: type=1326 audit(2000000529.999:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29111 comm="syz.2.9857" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa40b9ce59 code=0x7ffc0000 [ 1275.060142][ T30] audit: type=1326 audit(2000000529.999:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29111 comm="syz.2.9857" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa40b9ce59 code=0x7ffc0000 [ 1275.085890][ T30] audit: type=1326 audit(2000000530.046:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29111 comm="syz.2.9857" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ffa40b9ce59 code=0x7ffc0000 [ 1275.116107][ T30] audit: type=1326 audit(2000000530.046:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29111 comm="syz.2.9857" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa40b9ce59 code=0x7ffc0000 [ 1275.141580][ T30] audit: type=1326 audit(2000000530.046:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29111 comm="syz.2.9857" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa40b9ce59 code=0x7ffc0000 [ 1275.206063][T29117] netlink: 'syz.5.9859': attribute type 7 has an invalid length. [ 1275.234717][T29117] netlink: 'syz.5.9859': attribute type 8 has an invalid length. [ 1275.251017][T27542] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1275.354215][T29121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9862'. [ 1275.427909][T27542] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1275.456279][T27542] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.491783][T27542] usb 4-1: Product: syz [ 1275.509782][T27542] usb 4-1: Manufacturer: syz [ 1275.523946][T27542] usb 4-1: SerialNumber: syz [ 1275.559152][T27542] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1275.570537][T29122] loop4: detected capacity change from 0 to 4096 [ 1275.587774][T27526] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1275.597025][T29122] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1275.738787][T29122] ntfs3(loop4): ino=19, mi_enum_attr [ 1275.760657][T29122] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1275.842082][T29122] ntfs3(loop4): failed to convert "c46c" to koi8-r [ 1275.873623][T29122] ntfs3(loop4): ino=20, mi_enum_attr [ 1276.017741][T29131] loop2: detected capacity change from 0 to 4096 [ 1276.031200][T29131] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1276.185642][T29131] ntfs3(loop2): ino=19, mi_enum_attr [ 1276.276611][T27494] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1276.371771][T29131] ntfs3(loop2): failed to convert "c46c" to iso8859-2 [ 1276.422886][T29131] ntfs3(loop2): ino=20, mi_enum_attr [ 1276.453241][T27542] usb 4-1: USB disconnect, device number 64 [ 1276.526123][T27494] usb 6-1: Using ep0 maxpacket: 8 [ 1276.548798][T27494] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.585086][T27494] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=a1.8c [ 1276.617561][T27494] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.663233][T27494] usb 6-1: config 0 descriptor?? [ 1276.700844][T27494] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1276.719444][T27494] gspca_stv06xx: st6422 sensor detected [ 1276.761280][T27526] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1276.791275][T27526] ath9k_htc: Failed to initialize the device [ 1276.814139][T27542] usb 4-1: ath9k_htc: USB layer deinitialized [ 1277.079265][T29159] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1277.246827][ T30] audit: type=1326 audit(2000000532.086:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.1.9882" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2679ce59 code=0x7ffc0000 [ 1277.292708][T27494] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 1277.328320][T27494] usb 6-1: USB disconnect, device number 72 [ 1277.337505][T29168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9884'. [ 1277.351586][ T30] audit: type=1326 audit(2000000532.086:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.1.9882" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2679ce59 code=0x7ffc0000 [ 1277.432886][ T30] audit: type=1326 audit(2000000532.086:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.1.9882" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2679ce59 code=0x7ffc0000 [ 1277.498256][ T30] audit: type=1326 audit(2000000532.086:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.1.9882" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2679ce59 code=0x7ffc0000 [ 1277.586469][ T30] audit: type=1326 audit(2000000532.123:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29161 comm="syz.1.9882" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7efd2679ce59 code=0x7ffc0000 [ 1277.614194][T29176] netlink: 'syz.3.9888': attribute type 11 has an invalid length. [ 1277.897582][T29186] loop1: detected capacity change from 0 to 64 [ 1277.976619][T29186] syz.1.9891: attempt to access beyond end of device [ 1277.976619][T29186] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1278.003857][T29189] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9892'. [ 1278.039438][T29186] Buffer I/O error on dev loop1, logical block 512, async page read [ 1278.067137][T29186] syz.1.9891: attempt to access beyond end of device [ 1278.067137][T29186] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1278.110616][T29186] Buffer I/O error on dev loop1, logical block 56576, async page read [ 1279.062771][T29229] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1279.475131][T29248] comedi comedi2: pcl711: I/O base address not correctly aligned [ 1279.607058][T29252] netlink: 'syz.1.9924': attribute type 2 has an invalid length. [ 1279.645945][T29252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9924'. [ 1279.753609][T29256] netlink: 'syz.3.9925': attribute type 16 has an invalid length. [ 1279.781649][T29256] netlink: 'syz.3.9925': attribute type 17 has an invalid length. [ 1279.963094][T29256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.970353][T29256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.034600][T29256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.041895][T29256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.225666][T29272] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 1280.390822][T27494] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1280.562276][T27494] usb 5-1: Using ep0 maxpacket: 16 [ 1280.579926][T27494] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1280.616858][T27494] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 1280.655034][T27494] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 1280.706276][T27494] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1280.741912][T27494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.781043][T27494] usb 5-1: Product: syz [ 1280.792207][T27494] usb 5-1: Manufacturer: syz [ 1280.809313][T27494] usb 5-1: SerialNumber: syz [ 1280.838136][T27494] usb 5-1: config 0 descriptor?? [ 1280.872079][T27494] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1281.091339][T29287] loop0: detected capacity change from 0 to 512 [ 1281.161062][T29287] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1281.182212][T27526] usb 5-1: USB disconnect, device number 59 [ 1281.225620][T29287] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4221: comm syz.0.9941: Allocating blocks 41-42 which overlap fs metadata [ 1281.335366][T29287] loop0: lost filesystem error report for type 5 error -117 [ 1281.335881][T29287] EXT4-fs (loop0): Remounting filesystem read-only [ 1281.343280][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1281.343313][ C0] EXT4-fs (loop0): initial error at time 2000000535: ext4_mb_mark_diskspace_used:4221 [ 1281.343356][ C0] EXT4-fs (loop0): last error at time 2000000535: ext4_mb_mark_diskspace_used:4221 [ 1281.399500][T29287] __quota_error: 4 callbacks suppressed [ 1281.399528][T29287] Quota error (device loop0): write_blk: dquota write failed [ 1281.472615][T29299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9945'. [ 1281.483782][T29287] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 1281.542771][T29287] Quota error (device loop0): write_blk: dquota write failed [ 1281.592870][T29287] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1281.643605][T29287] EXT4-fs (loop0): 1 truncate cleaned up [ 1281.685755][T29287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1281.968687][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.248642][T29318] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1282.455653][T27526] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1282.478457][T29323] QAT: failed to copy from user cfg_data. [ 1282.656658][T27526] usb 3-1: Using ep0 maxpacket: 16 [ 1282.685969][T27526] usb 3-1: config 249 has an invalid interface number: 183 but max is 1 [ 1282.734925][T27526] usb 3-1: config 249 has an invalid interface number: 125 but max is 1 [ 1282.776239][T27526] usb 3-1: config 249 has no interface number 0 [ 1282.814329][T27526] usb 3-1: config 249 has no interface number 1 [ 1282.847339][T27526] usb 3-1: config 249 interface 183 has no altsetting 0 [ 1282.894784][T29335] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1282.910165][T27526] usb 3-1: config 249 interface 125 has no altsetting 0 [ 1282.979384][T27526] usb 3-1: New USB device found, idVendor=07d1, idProduct=3c17, bcdDevice=81.c9 [ 1283.015136][T27526] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.061034][T27526] usb 3-1: Product: syz [ 1283.083358][T27526] usb 3-1: Manufacturer: syz [ 1283.102440][T27526] usb 3-1: SerialNumber: syz [ 1283.150327][T27526] usb 3-1: Interface #183 referenced by multiple IADs [ 1283.305556][T29345] loop5: detected capacity change from 0 to 128 [ 1283.373666][T29345] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1283.427783][T29345] hpfs: filesystem error: improperly stopped [ 1283.461656][T29345] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1283.515611][T27526] usb 3-1: USB disconnect, device number 55 [ 1283.516508][T29345] hpfs: You really don't want any checks? You are crazy... [ 1283.575334][T29345] hpfs: hpfs_map_sector(): read error [ 1283.604543][T29345] hpfs: code page support is disabled [ 1283.633469][T29345] hpfs: hpfs_map_4sectors(): unaligned read [ 1283.667205][T29345] hpfs: hpfs_map_4sectors(): unaligned read [ 1283.692424][T29353] loop0: detected capacity change from 0 to 512 [ 1283.706961][T29345] hpfs: filesystem error: unable to find root dir [ 1283.731434][T29353] EXT4-fs: Ignoring removed oldalloc option [ 1283.783274][T29353] EXT4-fs error (device loop0): ext4_iget_extra_inode:5127: inode #15: comm syz.0.9972: corrupted in-inode xattr: invalid ea_ino [ 1283.888889][T29353] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1283.891063][T29353] EXT4-fs (loop0): Remounting filesystem read-only [ 1283.900346][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1283.900380][ C0] EXT4-fs (loop0): initial error at time 2000000538: ext4_iget_extra_inode:5127: inode 15 [ 1283.900434][ C0] EXT4-fs (loop0): last error at time 2000000538: ext4_iget_extra_inode:5127: inode 15 [ 1284.137949][T29353] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.458545][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.610960][T29414] loop1: detected capacity change from 0 to 1764 [ 1285.628244][T27490] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1285.831668][T27490] usb 3-1: Using ep0 maxpacket: 32 [ 1285.838181][T29414] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1285.868850][T27490] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.918764][T27490] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1285.975298][T27490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.995506][T29426] bond4: option primary: mode dependency failed, not supported in mode broadcast(3) [ 1286.033186][T27490] usb 3-1: Product: syz [ 1286.047692][T27490] usb 3-1: Manufacturer: syz [ 1286.060343][T29426] bond4 (unregistering): Released all slaves [ 1286.063857][T27490] usb 3-1: SerialNumber: syz [ 1286.098664][T27490] usb 3-1: config 0 descriptor?? [ 1286.124114][T27490] cdc_ether 3-1:0.0: Descriptor too short [ 1286.154240][T27490] usb 3-1: unsupported MDLM descriptors [ 1286.314940][T29437] netlink: 'syz.4.10012': attribute type 1 has an invalid length. [ 1286.370394][T29437] netlink: 244 bytes leftover after parsing attributes in process `syz.4.10012'. [ 1286.426496][T29437] NCSI netlink: No device for ifindex 0 [ 1286.481598][T27490] usb 3-1: USB disconnect, device number 56 [ 1286.846008][T29442] loop0: detected capacity change from 0 to 4096 [ 1286.886247][T29442] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1287.004652][T29442] ntfs3(loop0): ino=1a, mi_enum_attr [ 1287.034726][T29442] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1287.345445][T29462] loop3: detected capacity change from 0 to 8 [ 1287.419378][T29462] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1287.473133][T29462] SQUASHFS error: Failed to read block 0x1dd: -5 [ 1287.519270][T29462] SQUASHFS error: Unable to read metadata cache entry [1db] [ 1287.580943][T29462] SQUASHFS error: Unable to read inode 0xa7 [ 1287.948553][T29468] loop1: detected capacity change from 0 to 4096 [ 1287.992671][T29468] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1288.086626][T29468] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1288.230432][T29485] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1288.440893][T29493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10040'. [ 1288.509175][T29491] loop3: detected capacity change from 0 to 2048 [ 1288.596163][T29495] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1288.846582][ T30] audit: type=1800 audit(2000000542.951:388): pid=29491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10039" name="file1" dev="loop3" ino=2097152 res=0 errno=0 [ 1289.054666][T29502] loop0: detected capacity change from 0 to 4096 [ 1289.108247][T29502] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1289.204999][T29502] ntfs3(loop0): ino=19, mi_enum_attr [ 1289.310683][T29502] ntfs3(loop0): failed to convert "c46c" to iso8859-2 [ 1289.358878][T29502] ntfs3(loop0): ino=20, mi_enum_attr [ 1289.437583][T29516] loop1: detected capacity change from 0 to 256 [ 1289.797863][T29529] loop2: detected capacity change from 0 to 256 [ 1289.849355][T29529] exfat: Deprecated parameter 'namecase' [ 1289.871993][T29530] loop5: detected capacity change from 0 to 1024 [ 1289.891344][T29529] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1289.947838][T29529] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1290.294596][T29538] bond4: option primary: mode dependency failed, not supported in mode broadcast(3) [ 1290.342825][ T30] audit: type=1326 audit(2000000544.345:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29545 comm="syz.3.10064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426d9ce59 code=0x7ffc0000 [ 1290.373558][T29538] bond4 (unregistering): Released all slaves [ 1290.420529][ T30] audit: type=1326 audit(2000000544.345:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29545 comm="syz.3.10064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426d9ce59 code=0x7ffc0000 [ 1290.446954][T29549] loop5: detected capacity change from 0 to 1024 [ 1290.482504][T29549] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1290.515078][ T30] audit: type=1326 audit(2000000544.354:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29545 comm="syz.3.10064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426d9ce59 code=0x7ffc0000 [ 1290.544085][T29549] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 1290.572654][T29549] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 1290.591104][T29553] loop1: detected capacity change from 0 to 512 [ 1290.597657][ T30] audit: type=1326 audit(2000000544.354:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29545 comm="syz.3.10064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc426d9ce59 code=0x7ffc0000 [ 1290.597739][ T30] audit: type=1326 audit(2000000544.354:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29545 comm="syz.3.10064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426d9ce59 code=0x7ffc0000 [ 1290.597816][ T30] audit: type=1326 audit(2000000544.420:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29545 comm="syz.3.10064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc426d5d68e code=0x7ffc0000 [ 1290.675090][ T30] audit: type=1326 audit(2000000544.420:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29545 comm="syz.3.10064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc426d5d68e code=0x7ffc0000 [ 1290.684278][T29549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1290.706727][ T30] audit: type=1326 audit(2000000544.438:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29545 comm="syz.3.10064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc426d5d68e code=0x7ffc0000 [ 1290.739950][T29553] EXT4-fs: Ignoring removed nobh option [ 1290.753767][T29553] EXT4-fs: Ignoring removed bh option [ 1290.814874][T29553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1290.828777][T29549] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (62631!=20869) [ 1290.886297][T29553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 1290.908683][ T30] audit: type=1326 audit(2000000544.438:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29545 comm="syz.3.10064" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc426d5d68e code=0x7ffc0000 [ 1290.941063][T29553] ext4 filesystem being mounted at /1747/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1290.948686][T29561] loop2: detected capacity change from 0 to 512 [ 1291.004696][T29553] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.10069: Failed to acquire dquot type 0 [ 1291.048593][T29561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1291.066304][T29561] ext4 filesystem being mounted at /1720/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1291.123874][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.182275][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 1291.226864][T29566] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10077'. [ 1291.323536][T29570] loop0: detected capacity change from 0 to 8 [ 1291.356155][T29568] loop4: detected capacity change from 0 to 1024 [ 1291.397525][T29561] EXT4-fs error (device loop2): ext4_xattr_block_list:766: inode #15: comm syz.2.10071: corrupted xattr block 13: invalid checksum [ 1291.434327][T29568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1291.701660][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.799977][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.212453][T29596] bond3: option primary: mode dependency failed, not supported in mode broadcast(3) [ 1292.247316][T29596] bond3 (unregistering): Released all slaves [ 1292.327437][T27490] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1292.370923][T29607] loop2: detected capacity change from 0 to 2048 [ 1292.443372][T29610] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1292.514431][T27490] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1292.549688][T27490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.588467][T27490] usb 6-1: Product: syz [ 1292.615391][T27490] usb 6-1: Manufacturer: syz [ 1292.644262][T27490] usb 6-1: SerialNumber: syz [ 1292.692314][T27490] usb 6-1: config 0 descriptor?? [ 1292.735030][T27490] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1292.742910][T27490] dvb-usb: bulk message failed: -22 (4/0) [ 1292.808247][T27490] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1292.833200][T29616] ip6gre2: entered promiscuous mode [ 1292.846931][T27490] dvb-usb: bulk message failed: -22 (5/0) [ 1292.853818][T29616] ip6gre2: entered allmulticast mode [ 1292.869613][T27490] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1292.990286][T29624] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1292.999277][T27490] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1293.052829][T29624] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1293.091030][T27490] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 1293.102623][T29624] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1293.140787][T29624] Remounting filesystem read-only [ 1293.152425][T27490] usb 6-1: USB disconnect, device number 73 [ 1293.324147][ T5807] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1294.192084][T29662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10117'. [ 1294.235070][T29662] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1294.763821][T27526] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1294.884509][T29687] set_capacity_and_notify: 2 callbacks suppressed [ 1294.884538][T29687] loop3: detected capacity change from 0 to 1764 [ 1294.955817][T27526] usb 2-1: Using ep0 maxpacket: 8 [ 1294.992271][T27526] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1295.015377][T29694] loop0: detected capacity change from 0 to 512 [ 1295.027319][T27526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.062934][T27526] usb 2-1: Product: syz [ 1295.082217][T27526] usb 2-1: Manufacturer: syz [ 1295.105855][T27526] usb 2-1: SerialNumber: syz [ 1295.113985][T29694] EXT4-fs (loop0): 1 truncate cleaned up [ 1295.182347][T29694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1295.242242][T29694] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz.0.10133: bg 0: block 465: padding at end of block bitmap is not set [ 1295.290493][T29694] EXT4-fs error (device loop0) in ext4_setattr:6120: error 28 [ 1295.468373][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.588727][T27526] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1295.632353][T27526] mxuport 2-1:254.0: probe with driver mxuport failed with error -5 [ 1295.696006][T27526] usb 2-1: USB disconnect, device number 50 [ 1295.972482][T29717] openvswitch: netlink: IP tunnel dst address not specified [ 1296.308665][T29701] loop4: detected capacity change from 0 to 32768 [ 1296.393650][T29701] dmapctl: invalid leafidx 1365 (expected 341) [ 1296.427371][T29701] ERROR: (device loop4): dbAllocAG: Corrupt dmapctl page [ 1296.427371][T29701] [ 1296.466947][T29701] ERROR: (device loop4): remounting filesystem as read-only [ 1296.497259][T29701] jfs_mkdir: dtInsert returned -EIO [ 1296.524694][T29701] ERROR: (device loop4): txAbort: [ 1296.524694][T29701] [ 1296.777839][T29737] loop1: detected capacity change from 0 to 256 [ 1296.978212][T29715] loop5: detected capacity change from 0 to 32768 [ 1297.038618][T29715] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.10142 (29715) [ 1297.107085][T29715] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1297.144823][T29715] BTRFS info (device loop5): using sha256 checksum algorithm [ 1297.285641][T27494] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1297.322377][T29764] loop1: detected capacity change from 0 to 2048 [ 1297.387025][T29768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10162'. [ 1297.390821][T29715] BTRFS info (device loop5): enabling ssd optimizations [ 1297.450198][T29715] BTRFS info (device loop5): turning on async discard [ 1297.457306][T27494] usb 3-1: Using ep0 maxpacket: 32 [ 1297.478537][T27494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1297.487214][T29769] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1297.495981][T29715] BTRFS info (device loop5): enabling free space tree [ 1297.525321][T27494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1297.579257][T27494] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1297.602100][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 1297.602126][ T30] audit: type=1800 audit(2000000551.139:468): pid=29764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10159" name="file1" dev="loop1" ino=2097152 res=0 errno=0 [ 1297.634236][T27494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1297.700772][T27494] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1297.741429][T27494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.786971][T27494] usb 3-1: Product: syz [ 1297.812124][T27494] usb 3-1: Manufacturer: syz [ 1297.833089][T27494] usb 3-1: SerialNumber: syz [ 1297.856118][T29774] loop4: detected capacity change from 0 to 4096 [ 1297.865750][T27494] usb 3-1: config 0 descriptor?? [ 1297.906261][T29774] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1297.948447][ T5823] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1297.968459][T27494] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 1298.018222][ T4978] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1298.035359][T29774] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1298.145221][ T4978] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1298.236648][T27494] usb 3-1: USB disconnect, device number 57 [ 1299.500568][T29812] loop1: detected capacity change from 0 to 24 [ 1299.562727][T29812] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1299.636038][T29812] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1299.762201][T29812] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 1299.896652][T29785] loop0: detected capacity change from 0 to 32768 [ 1300.220495][T29796] loop3: detected capacity change from 0 to 32768 [ 1300.238530][T29823] loop2: detected capacity change from 0 to 4096 [ 1300.287227][T29796] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 1300.287227][T29796] [ 1300.397846][T29796] ERROR: (device loop3): remounting filesystem as read-only [ 1300.417043][T29796] ialloc: diAlloc returned -5! [ 1300.650846][ T5807] read_mapping_page failed! [ 1300.676761][ T5807] ERROR: (device loop0): txAbort: [ 1300.676761][ T5807] [ 1300.745999][ T5807] read_mapping_page failed! [ 1300.792079][ T5807] ERROR: (device loop0): txAbort: [ 1300.792079][ T5807] [ 1301.407052][T29850] loop4: detected capacity change from 0 to 1024 [ 1301.650566][T29827] loop5: detected capacity change from 0 to 32768 [ 1302.244660][T29860] loop4: detected capacity change from 0 to 2048 [ 1302.292763][T29861] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1302.336097][ T30] audit: type=1800 audit(2000000555.565:469): pid=29860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10209" name="file1" dev="loop4" ino=2097152 res=0 errno=0 [ 1302.556884][T29870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1302.929712][T29883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10220'. [ 1303.059700][T29874] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 1303.127040][T29874] bond1 (unregistering): Released all slaves [ 1303.188331][T28378] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1303.201557][T28378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1303.216446][T28378] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1303.235150][T28378] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1303.237164][T28378] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1303.671207][T29905] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10229'. [ 1303.991688][T29913] loop5: detected capacity change from 0 to 128 [ 1304.089663][T29913] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1304.169280][T29913] ext4 filesystem being mounted at /1645/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1304.363614][T27484] dummy0: left promiscuous mode [ 1304.416923][T27484] bridge0: port 3(dummy0) entered disabled state [ 1304.464080][ T5823] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1304.513535][T27484] bridge_slave_1: left allmulticast mode [ 1304.561246][T27484] bridge_slave_1: left promiscuous mode [ 1304.575799][T27484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.613703][T27484] bridge_slave_0: left allmulticast mode [ 1304.623640][T27484] bridge_slave_0: left promiscuous mode [ 1304.636256][T27484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.774471][T29933] loop3: detected capacity change from 0 to 256 [ 1304.826345][T29933] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1304.867810][ T30] audit: type=1800 audit(2000000557.942:470): pid=29933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10240" name="bus" dev="loop3" ino=1048741 res=0 errno=0 [ 1304.916408][T29937] loop1: detected capacity change from 0 to 256 [ 1305.057869][T29937] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 1305.103971][T29937] FAT-fs (loop1): Filesystem has been set read-only [ 1305.125632][T29937] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1305.396861][ T4943] Bluetooth: hci0: command tx timeout [ 1305.734218][T27484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.784226][T27484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.797353][T27484] bond0 (unregistering): Released all slaves [ 1305.809380][T29961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10254'. [ 1305.834098][T27484] bond1 (unregistering): Released all slaves [ 1305.890274][T27484] bond2 (unregistering): Released all slaves [ 1305.953071][T27484] bond3 (unregistering): Released all slaves [ 1306.029438][T29941] netlink: 'syz.4.10245': attribute type 5 has an invalid length. [ 1306.152153][T27484] m1Ie5n: left promiscuous mode [ 1306.567259][T29982] gtp0: entered promiscuous mode [ 1306.593979][T29982] gtp0: entered allmulticast mode [ 1306.685965][T27484] hmac(sha224): left promiscuous mode [ 1306.807857][T29992] ubi31: attaching mtd0 [ 1306.931360][T29992] ubi31: scanning is finished [ 1306.936814][T29887] wlan1 speed is unknown, defaulting to 1000 [ 1306.971603][T29992] ubi31: empty MTD device detected [ 1307.143354][T30001] dvmrp1: entered allmulticast mode [ 1307.371381][T30006] loop4: detected capacity change from 0 to 1764 [ 1307.397216][T30008] loop3: detected capacity change from 0 to 128 [ 1307.429326][T30008] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1307.497231][T29992] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1307.520791][T30006] syz.4.10272: attempt to access beyond end of device [ 1307.520791][T30006] loop4: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 1307.544202][T30008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1307.553787][T29992] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1307.574754][T30006] Buffer I/O error on dev loop4, logical block 1795162143, async page read [ 1307.591696][T29992] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1307.631897][ T4943] Bluetooth: hci0: command tx timeout [ 1307.644361][T30006] syz.4.10272: attempt to access beyond end of device [ 1307.644361][T30006] loop4: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 1307.671182][T30008] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 1307.683237][T29992] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1307.692503][T30008] UDF-fs: error (device loop3): udf_count_free_bitmap: udf_count_free failed [ 1307.703533][T30006] Buffer I/O error on dev loop4, logical block 1795162143, async page read [ 1307.770283][T29992] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1307.777265][ T30] audit: type=1800 audit(2000000560.656:471): pid=30006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10272" name="file0" dev="loop4" ino=1923 res=0 errno=0 [ 1307.856067][T29992] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1307.896773][T29992] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 128666224 [ 1307.956108][T29992] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1308.028388][T30011] ubi31: background thread "ubi_bgt31d" started, PID 30011 [ 1308.322863][ T5816] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh [ 1308.342015][T30019] netlink: 'syz.4.10276': attribute type 13 has an invalid length. [ 1308.389735][ T5816] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh [ 1308.779458][T30035] loop4: detected capacity change from 0 to 128 [ 1308.802175][T30035] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1309.052875][T28872] smbdirect: ib_dev[syz0] removed [ 1309.447288][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1309.819593][T27484] hsr_slave_1: left promiscuous mode [ 1309.833528][T27484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.842706][ T4943] Bluetooth: hci0: command tx timeout [ 1309.854560][T27484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.275746][T27484] team0 (unregistering): Port device vlan0 removed [ 1310.305273][T30066] loop1: detected capacity change from 0 to 128 [ 1310.314248][T30067] loop4: detected capacity change from 0 to 256 [ 1310.389273][T30067] FAT-fs (loop4): Directory bread(block 64) failed [ 1310.408897][T30067] FAT-fs (loop4): Directory bread(block 65) failed [ 1310.438168][T30067] FAT-fs (loop4): Directory bread(block 66) failed [ 1310.458380][T30067] FAT-fs (loop4): Directory bread(block 67) failed [ 1310.475464][T30067] FAT-fs (loop4): Directory bread(block 68) failed [ 1310.514033][T30067] FAT-fs (loop4): Directory bread(block 69) failed [ 1310.544298][T30067] FAT-fs (loop4): Directory bread(block 70) failed [ 1310.571254][T30067] FAT-fs (loop4): Directory bread(block 71) failed [ 1310.596404][T30067] FAT-fs (loop4): Directory bread(block 72) failed [ 1310.619012][T30073] netlink: 'syz.2.10291': attribute type 21 has an invalid length. [ 1310.627530][T30067] FAT-fs (loop4): Directory bread(block 73) failed [ 1310.856129][T28378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1310.874133][T28378] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1310.884817][T28378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1310.896241][T28378] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1310.906756][T28378] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1311.130994][T27484] team0 (unregistering): Port device team_slave_1 removed [ 1311.286762][T27484] team0 (unregistering): Port device team_slave_0 removed [ 1311.437141][T30094] netlink: 'syz.1.10301': attribute type 10 has an invalid length. [ 1311.894164][T30094] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1311.935977][T30094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1311.986029][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1312.064571][ T4943] Bluetooth: hci0: command tx timeout [ 1312.099690][T30086] loop2: detected capacity change from 0 to 32768 [ 1312.215572][T30086] *** Log Is Dirty ! *** [ 1312.223418][T30086] lmLogInit: exit(-22) [ 1312.228039][T30086] lmLogOpen: exit(-22) [ 1312.486229][T30091] loop4: detected capacity change from 0 to 32768 [ 1312.529329][T30091] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.10298 (30091) [ 1312.607263][T29887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.624431][T30091] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1312.635604][T29887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.668547][T29887] bridge_slave_0: entered allmulticast mode [ 1312.711542][T30091] BTRFS info (device loop4): using crc32c checksum algorithm [ 1312.728639][T29887] bridge_slave_0: entered promiscuous mode [ 1312.764179][T29887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.826235][T29887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.837206][T29887] bridge_slave_1: entered allmulticast mode [ 1312.846210][T29887] bridge_slave_1: entered promiscuous mode [ 1312.965670][T30091] BTRFS info (device loop4): allowing degraded mounts [ 1313.029950][T30091] BTRFS info (device loop4): enabling ssd optimizations [ 1313.064217][T30091] BTRFS info (device loop4): turning on async discard [ 1313.099808][T30091] BTRFS info (device loop4): enabling free space tree [ 1313.109964][ T4943] Bluetooth: hci2: command tx timeout [ 1313.132000][T29887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.141655][T30091] BTRFS info (device loop4): force zlib compression, level 3 [ 1313.164574][T29887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.413405][T29887] team0: Port device team_slave_0 added [ 1313.484149][T29887] team0: Port device team_slave_1 added [ 1313.708135][ T5818] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1313.770981][T30154] batadv0: entered promiscuous mode [ 1313.793402][T29887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.837208][T29887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.947471][T29887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.077717][T29887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.111905][T29887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.225424][T29887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.268740][T30162] netlink: 'syz.4.10317': attribute type 2 has an invalid length. [ 1314.871971][T29887] hsr_slave_0: entered promiscuous mode [ 1314.916643][T29887] hsr_slave_1: entered promiscuous mode [ 1314.946528][T29887] debugfs: 'hsr0' already exists in 'hsr' [ 1314.974512][T29887] Cannot create hsr debugfs directory [ 1315.313099][ T4943] Bluetooth: hci2: command tx timeout [ 1315.483200][T27484] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.495180][T25839] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1315.635208][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1315.677123][T25839] usb 5-1: Using ep0 maxpacket: 8 [ 1315.703265][T25839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1315.739564][T25839] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1315.766537][T25839] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1315.790800][T25839] usb 5-1: Product: syz [ 1315.809526][T25839] usb 5-1: Manufacturer: syz [ 1315.835855][T25839] usb 5-1: SerialNumber: syz [ 1316.016422][T27484] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.112095][T25839] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1316.129467][T25839] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1316.137932][T25839] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1316.336742][T25839] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 1316.364391][T25839] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1316.401901][T27484] team0: Port device netdevsim1 removed [ 1316.404417][T25839] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1316.426810][T27484] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.457036][T25839] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1316.532561][T25839] usb 5-1: USB disconnect, device number 60 [ 1316.598412][T25839] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1316.657248][T25839] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1316.697971][T25839] visor 5-1:1.0: device disconnected [ 1316.961015][T27484] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.370752][T30256] loop2: detected capacity change from 0 to 2048 [ 1317.393403][T30256] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1317.413521][T30256] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1317.546370][ T4943] Bluetooth: hci2: command tx timeout [ 1317.661739][T30256] befs: (loop2): No write support. Marking filesystem read-only [ 1317.712186][T30256] befs: (loop2): unable to read superblock [ 1317.830984][T30272] loop1: detected capacity change from 0 to 256 [ 1317.852813][T30272] exfat: Deprecated parameter 'namecase' [ 1317.918486][T30272] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf3765126, utbl_chksum : 0xe619d30d) [ 1318.372210][T30287] loop1: detected capacity change from 0 to 256 [ 1318.551862][T30287] FAT-fs (loop1): Directory bread(block 64) failed [ 1318.583006][T30287] FAT-fs (loop1): Directory bread(block 65) failed [ 1318.614229][T30287] FAT-fs (loop1): Directory bread(block 66) failed [ 1318.646442][T30287] FAT-fs (loop1): Directory bread(block 67) failed [ 1318.671818][T30287] FAT-fs (loop1): Directory bread(block 68) failed [ 1318.703487][T30287] FAT-fs (loop1): Directory bread(block 69) failed [ 1318.736783][T30287] FAT-fs (loop1): Directory bread(block 70) failed [ 1318.776717][T30287] FAT-fs (loop1): Directory bread(block 71) failed [ 1318.827238][T30287] FAT-fs (loop1): Directory bread(block 72) failed [ 1318.857240][T30287] FAT-fs (loop1): Directory bread(block 73) failed [ 1319.165058][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1319.193597][T30308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10376'. [ 1319.336079][T29887] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1319.399735][T29887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1319.428855][T29887] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1319.435746][ T30] audit: type=1326 audit(2000000571.567:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30315 comm="syz.1.10378" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2679ce59 code=0x7ffc0000 [ 1319.501067][ T30] audit: type=1326 audit(2000000571.567:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30315 comm="syz.1.10378" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2679ce59 code=0x7ffc0000 [ 1319.548137][ T30] audit: type=1326 audit(2000000571.605:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30315 comm="syz.1.10378" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7efd2679ce59 code=0x7ffc0000 [ 1319.556190][T29887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1319.606389][ T30] audit: type=1326 audit(2000000571.605:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30315 comm="syz.1.10378" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2679ce59 code=0x7ffc0000 [ 1319.633287][ T30] audit: type=1326 audit(2000000571.605:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30315 comm="syz.1.10378" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2679ce59 code=0x7ffc0000 [ 1319.759406][ T4943] Bluetooth: hci2: command tx timeout [ 1319.799035][T30322] ALSA: mixer_oss: invalid OSS volume '' [ 1319.819132][T27484] bridge_slave_1: left allmulticast mode [ 1319.847331][T27484] bridge_slave_1: left promiscuous mode [ 1319.873171][T27484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.973918][T27484] bridge_slave_0: left allmulticast mode [ 1319.985660][T27484] bridge_slave_0: left promiscuous mode [ 1319.999823][ T30] audit: type=1326 audit(2000000572.101:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30329 comm="syz.5.10386" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734939ce59 code=0x7ffc0000 [ 1320.002983][T27484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.099850][ T30] audit: type=1326 audit(2000000572.129:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30329 comm="syz.5.10386" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734939ce59 code=0x7ffc0000 [ 1320.196505][ T30] audit: type=1326 audit(2000000572.138:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30329 comm="syz.5.10386" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f734939ce59 code=0x7ffc0000 [ 1320.280495][ T30] audit: type=1326 audit(2000000572.138:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30329 comm="syz.5.10386" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734939ce59 code=0x7ffc0000 [ 1320.373375][ T30] audit: type=1326 audit(2000000572.138:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30329 comm="syz.5.10386" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734939ce59 code=0x7ffc0000 [ 1320.502997][T30348] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1320.565990][T30351] loop4: detected capacity change from 0 to 1024 [ 1320.612426][T30351] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 1320.633309][T30351] hfsplus: xattr search failed [ 1321.083257][T25839] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1321.300088][T25839] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1321.311072][T30369] loop1: detected capacity change from 0 to 2048 [ 1321.317579][T25839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.337453][T25839] usb 3-1: config 0 descriptor?? [ 1321.368311][T25839] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1321.408401][T30369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1321.426219][T30369] ext4 filesystem being mounted at /1821/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.456988][T30369] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.10405: bg 0: block 345: padding at end of block bitmap is not set [ 1321.478135][T30369] EXT4-fs (loop1): Remounting filesystem read-only [ 1321.507444][T27484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.541180][T27484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.544275][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.591131][T27484] bond0 (unregistering): Released all slaves [ 1321.629446][T27484] bond1 (unregistering): Released all slaves [ 1321.674718][T27484] bond2 (unregistering): Released all slaves [ 1321.702798][T27484] bond3 (unregistering): Released all slaves [ 1321.732798][T29887] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1321.744739][T29887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1321.753058][T29887] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1321.769927][T29887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1321.804531][T25839] gp8psk: usb out operation failed. [ 1321.812388][T25839] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1321.825727][T25839] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1321.843841][T25839] usb 3-1: USB disconnect, device number 58 [ 1321.893128][T30075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.901150][T30075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.910609][T30075] bridge_slave_0: entered allmulticast mode [ 1321.932645][T30075] bridge_slave_0: entered promiscuous mode [ 1321.980534][T27484] hmac(sha224): left promiscuous mode [ 1322.050183][T30075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.072517][T30075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.095506][T30075] bridge_slave_1: entered allmulticast mode [ 1322.132173][T30075] bridge_slave_1: entered promiscuous mode [ 1322.173600][T27484] : left promiscuous mode [ 1322.428911][T30075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.511370][T30075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.752383][T25839] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1322.891988][T30075] team0: Port device team_slave_0 added [ 1322.980075][T25839] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1323.004424][T25839] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1323.035575][T25839] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1323.056534][T30075] team0: Port device team_slave_1 added [ 1323.086834][T25839] usb 2-1: string descriptor 0 read error: -22 [ 1323.120056][T25839] usb 2-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1323.153984][T25839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.253372][T30382] loop5: detected capacity change from 0 to 32768 [ 1323.479741][ T116] ERROR: (device loop5): diFree: numfree > numinos [ 1323.479741][ T116] [ 1323.511313][ T116] ERROR: (device loop5): remounting filesystem as read-only [ 1323.654508][T30075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.702242][T30075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.820043][T30075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.958351][T27494] usb 2-1: USB disconnect, device number 51 [ 1324.016422][T30075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.039159][T30075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.112363][T30075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.515940][T27484] hsr_slave_1: left promiscuous mode [ 1324.537735][T27484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1324.566957][T27484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.599214][T27542] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1324.610834][T27484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1324.640567][T27484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.737120][T27484] veth0_macvtap: left promiscuous mode [ 1324.756573][T30444] loop1: detected capacity change from 0 to 64 [ 1324.768056][T27484] veth1_vlan: left promiscuous mode [ 1324.781892][T27484] veth0_vlan: left promiscuous mode [ 1324.792332][T27542] usb 6-1: Using ep0 maxpacket: 16 [ 1324.813049][T27542] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1324.839497][T27542] usb 6-1: config 0 has no interface number 0 [ 1324.869702][T27542] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1324.925690][T27542] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1324.943423][T27542] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1324.964516][T27542] usb 6-1: Product: syz [ 1324.988272][T27542] usb 6-1: SerialNumber: syz [ 1325.024371][T27542] usb 6-1: config 0 descriptor?? [ 1325.074495][T27542] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 1325.115856][T27542] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input73 [ 1325.442247][T27484] team0 (unregistering): Port device team_slave_1 removed [ 1325.463152][T27484] team0 (unregistering): Port device team_slave_0 removed [ 1325.552958][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1325.560449][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1325.567736][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1325.575291][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1325.582950][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1325.590760][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1325.603193][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1325.610839][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1325.618210][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1325.625746][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1325.633144][T27542] usb 6-1: USB disconnect, device number 74 [ 1325.639462][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1325.639503][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1325.691144][T27542] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1325.728450][T30075] hsr_slave_0: entered promiscuous mode [ 1325.735422][T30075] hsr_slave_1: entered promiscuous mode [ 1325.743774][T30075] debugfs: 'hsr0' already exists in 'hsr' [ 1325.749546][T30075] Cannot create hsr debugfs directory [ 1325.757426][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1325.889971][T29887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.992835][T29887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.024634][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.031992][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.103695][T28872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.110875][T28872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.393785][T30458] loop1: detected capacity change from 0 to 256 [ 1327.844799][T30507] ipvlan0: left promiscuous mode [ 1327.877908][T30507] ipvlan0: left allmulticast mode [ 1327.903642][T30507] veth0_vlan: left allmulticast mode [ 1328.532449][T30531] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10459'. [ 1328.553136][T27542] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1328.739340][T27542] usb 5-1: Using ep0 maxpacket: 32 [ 1328.769836][T27542] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1328.781967][T30075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1328.800735][T30537] loop2: detected capacity change from 0 to 256 [ 1328.808777][T27542] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1328.839062][T30075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1328.863420][T27542] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1328.879631][T30075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1328.895200][T27542] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1328.926388][T30537] FAT-fs (loop2): Directory bread(block 64) failed [ 1328.937532][T30075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1328.949731][T27542] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1328.960168][T30537] FAT-fs (loop2): Directory bread(block 65) failed [ 1328.968312][T30075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1328.977798][T30537] FAT-fs (loop2): Directory bread(block 66) failed [ 1328.985437][T30537] FAT-fs (loop2): Directory bread(block 67) failed [ 1328.996564][T30537] FAT-fs (loop2): Directory bread(block 68) failed [ 1329.003494][T27542] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1329.019643][T30075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1329.027876][T27542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.037604][T27542] usb 5-1: Product: syz [ 1329.045271][T30075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1329.052962][T30537] FAT-fs (loop2): Directory bread(block 69) failed [ 1329.068916][T27542] usb 5-1: Manufacturer: syz [ 1329.083816][T30075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1329.093071][T30537] FAT-fs (loop2): Directory bread(block 70) failed [ 1329.104345][T27542] usb 5-1: SerialNumber: syz [ 1329.114360][T30537] FAT-fs (loop2): Directory bread(block 71) failed [ 1329.128327][T29887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.137854][T27542] usb 5-1: config 0 descriptor?? [ 1329.149657][T30537] FAT-fs (loop2): Directory bread(block 72) failed [ 1329.171583][T30537] FAT-fs (loop2): Directory bread(block 73) failed [ 1329.196195][T27542] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input74 [ 1329.575072][T27542] usb 5-1: USB disconnect, device number 61 [ 1329.650777][T30075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.721460][T30562] loop5: detected capacity change from 0 to 2048 [ 1329.773818][T30075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.812477][T30562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.838207][T30562] EXT4-fs error (device loop5): ext4_find_extent:903: inode #2: comm syz.5.10467: inode has invalid extent depth: 7 [ 1329.875807][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.883060][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1330.040871][T27484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.050391][T27484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.077762][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.133495][T30576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10470'. [ 1330.204572][T30576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10470'. [ 1330.262842][T30576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10470'. [ 1330.808886][T27543] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1330.826429][T29887] veth0_vlan: entered promiscuous mode [ 1330.900685][T29887] veth1_vlan: entered promiscuous mode [ 1331.004467][T30600] loop2: detected capacity change from 0 to 256 [ 1331.014484][T27543] usb 2-1: Using ep0 maxpacket: 8 [ 1331.028842][T27543] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1331.074920][T27543] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1331.094945][T29887] veth0_macvtap: entered promiscuous mode [ 1331.105903][T27543] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1331.134593][T29887] veth1_macvtap: entered promiscuous mode [ 1331.140856][T27543] usb 2-1: Product: syz [ 1331.155784][T27543] usb 2-1: Manufacturer: syz [ 1331.174835][T30600] FAT-fs (loop2): Directory bread(block 64) failed [ 1331.191921][T27543] usb 2-1: SerialNumber: syz [ 1331.216650][T30600] FAT-fs (loop2): Directory bread(block 65) failed [ 1331.229350][T30606] loop4: detected capacity change from 0 to 512 [ 1331.244084][T30600] FAT-fs (loop2): Directory bread(block 66) failed [ 1331.274011][T30606] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1331.287047][T29887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.293090][T30600] FAT-fs (loop2): Directory bread(block 67) failed [ 1331.335248][T30600] FAT-fs (loop2): Directory bread(block 68) failed [ 1331.383229][T30606] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.10480: corrupted xattr entries [ 1331.391256][T29887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.405195][T30600] FAT-fs (loop2): Directory bread(block 69) failed [ 1331.454310][T27543] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1331.462357][T30600] FAT-fs (loop2): Directory bread(block 70) failed [ 1331.471479][T27543] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1331.479951][T30606] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1331.482387][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1331.489675][T27543] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1331.491608][ C0] EXT4-fs (loop4): initial error at time 2000000582: xattr_find_entry:337: inode 15 [ 1331.491683][ C0] EXT4-fs (loop4): last error at time 2000000582: xattr_find_entry:337: inode 15 [ 1331.525956][T30600] FAT-fs (loop2): Directory bread(block 71) failed [ 1331.540539][T30600] FAT-fs (loop2): Directory bread(block 72) failed [ 1331.584276][T30600] FAT-fs (loop2): Directory bread(block 73) failed [ 1331.596723][T30606] EXT4-fs (loop4): Remounting filesystem read-only [ 1331.635027][T30606] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1331.652305][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.688461][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.688492][T27543] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1331.688577][T27543] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1331.715990][T30606] EXT4-fs (loop4): 1 truncate cleaned up [ 1331.745038][T27543] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1331.756057][T30606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.777122][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.779580][T27543] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1331.803465][T27543] usb 2-1: USB disconnect, device number 52 [ 1331.851092][T27543] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1331.917230][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.952666][T27543] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1332.033593][T27543] visor 2-1:1.0: device disconnected [ 1332.232922][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.353331][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.381057][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.616632][T30613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.655009][T30613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.731055][T27491] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1332.809532][T30636] Invalid source name [ 1332.843082][T30636] UBIFS error (pid: 30636): cannot open "./file0", error -22 [ 1332.934276][T27491] usb 5-1: Using ep0 maxpacket: 16 [ 1332.936556][T30641] netdevsim netdevsim5 : renamed from netdevsim0 [ 1332.965170][T27491] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1332.991101][T27491] usb 5-1: config 0 has no interface number 0 [ 1333.002815][T27491] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1333.049778][T27491] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1333.081979][T27491] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1333.123931][T27491] usb 5-1: Product: syz [ 1333.143617][T27491] usb 5-1: SerialNumber: syz [ 1333.188757][T27491] usb 5-1: config 0 descriptor?? [ 1333.249345][T27491] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 1333.299308][T27491] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input75 [ 1333.514243][T30075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1333.817809][T30075] veth0_vlan: entered promiscuous mode [ 1333.835858][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1333.839826][T27526] usb 5-1: USB disconnect, device number 62 [ 1333.842917][ C0] cm109 5-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 1333.882690][T30075] veth1_vlan: entered promiscuous mode [ 1333.965485][T27526] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1334.100208][T30075] veth0_macvtap: entered promiscuous mode [ 1334.154838][T30075] veth1_macvtap: entered promiscuous mode [ 1334.254033][T30075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1334.330820][T30075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.403482][ T94] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.431303][ T94] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.454982][T27543] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1334.467631][ T94] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.503775][ T94] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.656582][T27543] usb 3-1: Using ep0 maxpacket: 8 [ 1334.690037][T27543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1334.728780][T27543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1334.771111][T27543] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1334.833116][T27543] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1334.889330][T27543] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1334.935379][T27543] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1334.971521][T27543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.985103][T30696] loop5: detected capacity change from 0 to 512 [ 1335.029172][T30696] EXT4-fs: Ignoring removed orlov option [ 1335.048679][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.067107][T27543] usb 3-1: config 0 descriptor?? [ 1335.094225][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.111266][T30674] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1335.123501][T30696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.157389][T30696] ext4 filesystem being mounted at /1717/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1335.362931][T30696] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:337: inode #15: comm syz.5.10507: verity file corrupted; can't find descriptor [ 1335.444791][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.493657][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.519633][T30696] EXT4-fs (loop5): Remounting filesystem read-only [ 1335.584033][T30696] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 1335.922287][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1335.955587][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.113945][T27526] usb 3-1: USB disconnect, device number 59 [ 1336.129415][ T4943] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 1336.243398][T30722] openvswitch: netlink: Message has 1 unknown bytes. [ 1336.286676][T30722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1336.441037][T27506] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1336.466600][T30727] ipvlan0: left promiscuous mode [ 1336.519777][T30727] ipvlan0: left allmulticast mode [ 1336.546411][T30727] veth0_vlan: left allmulticast mode [ 1336.622631][T27506] usb 7-1: Using ep0 maxpacket: 32 [ 1336.657342][T27506] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1336.693445][T27506] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1336.730907][T27506] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1336.758689][T27506] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1336.786238][T27506] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.812177][T27506] usb 7-1: Product: syz [ 1336.823772][T27506] usb 7-1: Manufacturer: syz [ 1336.841620][T27506] usb 7-1: SerialNumber: syz [ 1336.853304][T27494] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1336.899405][T27506] usb 7-1: config 0 descriptor?? [ 1336.911720][T30740] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 1337.061706][T27494] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1337.089806][T27494] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1337.124549][T27494] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1337.171407][T27494] usb 6-1: string descriptor 0 read error: -22 [ 1337.181696][T27494] usb 6-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1337.197591][T27494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.381697][T27506] gs_usb 7-1:0.0: Couldn't get device config: (err=-71) [ 1337.408084][T27506] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 1337.463747][T27506] usb 7-1: USB disconnect, device number 2 [ 1337.563146][ T5919] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1337.755266][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 1337.774341][ T5919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1337.812312][ T5919] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1337.841869][ T5919] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1337.855492][ T5919] usb 3-1: Product: syz [ 1337.859723][ T5919] usb 3-1: Manufacturer: syz [ 1337.869154][ T5919] usb 3-1: SerialNumber: syz [ 1337.963460][T27494] usb 6-1: USB disconnect, device number 75 [ 1338.013330][T30767] loop1: detected capacity change from 0 to 256 [ 1338.126212][ T5919] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1338.157803][ T5919] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1338.157865][T30767] FAT-fs (loop1): Directory bread(block 64) failed [ 1338.189100][ T5919] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1338.229781][T30767] FAT-fs (loop1): Directory bread(block 65) failed [ 1338.264606][T30767] FAT-fs (loop1): Directory bread(block 66) failed [ 1338.293934][T30767] FAT-fs (loop1): Directory bread(block 67) failed [ 1338.323488][T30767] FAT-fs (loop1): Directory bread(block 68) failed [ 1338.347320][ T5919] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1338.357801][T30767] FAT-fs (loop1): Directory bread(block 69) failed [ 1338.376438][ T5919] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1338.379740][T30767] FAT-fs (loop1): Directory bread(block 70) failed [ 1338.420713][ T5919] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1338.426977][T30767] FAT-fs (loop1): Directory bread(block 71) failed [ 1338.460233][ T5919] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1338.474450][T30767] FAT-fs (loop1): Directory bread(block 72) failed [ 1338.497297][ T5919] usb 3-1: USB disconnect, device number 60 [ 1338.511463][T30767] FAT-fs (loop1): Directory bread(block 73) failed [ 1338.545908][ T5919] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1338.623308][T30776] loop4: detected capacity change from 0 to 2048 [ 1338.673494][T30776] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1338.729504][ T5919] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1338.764394][ T5919] visor 3-1:1.0: device disconnected [ 1338.837612][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1338.837641][ T30] audit: type=1800 audit(2000000589.731:487): pid=30776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10540" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 1339.313630][ T5919] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1339.528367][T27526] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1339.542016][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 1339.561655][ T5919] usb 6-1: config index 0 descriptor too short (expected 30482, got 18) [ 1339.573109][ T5919] usb 6-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 1339.581912][ T5919] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 1339.607125][ T5919] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 1339.632969][ T5919] usb 6-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 1339.642239][T30806] loop2: detected capacity change from 0 to 512 [ 1339.656492][ T5919] usb 6-1: Product: syz [ 1339.667641][ T5919] usb 6-1: Manufacturer: syz [ 1339.680996][T30806] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1339.716837][T30806] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1339.731730][T27526] usb 7-1: Using ep0 maxpacket: 16 [ 1339.742588][ T5919] usb 6-1: config 0 descriptor?? [ 1339.763010][T27526] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.787383][ T5919] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1339.809725][T27526] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1339.825093][ T5919] usb 6-1: Detected FT2232C/D [ 1339.843480][T30806] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1339.844332][T27526] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1339.889038][T27526] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1339.900442][T27526] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1339.923036][T27526] usb 7-1: Manufacturer: syz [ 1339.931463][T30806] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4221: comm syz.2.10552: Allocating blocks 41-42 which overlap fs metadata [ 1339.968287][T27526] usb 7-1: config 0 descriptor?? [ 1339.970414][T30806] loop2: lost filesystem error report for type 5 error -117 [ 1339.992862][T30806] Quota error (device loop2): write_blk: dquota write failed [ 1340.000257][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1340.000293][ C0] EXT4-fs (loop2): initial error at time 2000000590: ext4_mb_mark_diskspace_used:4221 [ 1340.000339][ C0] EXT4-fs (loop2): last error at time 2000000590: ext4_mb_mark_diskspace_used:4221 [ 1340.046697][T30806] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1340.064581][T30806] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1340.089271][T30806] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.10552: Failed to acquire dquot type 1 [ 1340.161659][T30806] loop2: lost filesystem error report for type 5 error -117 [ 1340.189035][T30806] EXT4-fs error (device loop2): mb_free_blocks:2046: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1340.225303][ T5919] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1340.252105][T30806] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.10552: corrupted inode contents [ 1340.269675][ T5919] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1340.302399][T30806] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1340.302935][T30806] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.10552: mark_inode_dirty error [ 1340.316664][ T5919] usb 6-1: USB disconnect, device number 76 [ 1340.371548][T27526] usb 7-1: USB disconnect, device number 3 [ 1340.394695][T30806] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1340.400217][T30806] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.10552: corrupted inode contents [ 1340.423067][T30806] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1340.424616][T30806] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.10552: mark_inode_dirty error [ 1340.450221][T30806] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1340.451848][T30806] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.10552: corrupted inode contents [ 1340.474586][T30806] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1340.480596][T30806] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1340.493978][T30824] loop3: detected capacity change from 0 to 256 [ 1340.507275][ T5919] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1340.520229][T30806] loop2: lost filesystem error report for type 5 error -117 [ 1340.520903][T30806] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.10552: corrupted inode contents [ 1340.560786][ T5919] ftdi_sio 6-1:0.0: device disconnected [ 1340.574092][T30824] FAT-fs (loop3): Directory bread(block 64) failed [ 1340.588976][T30824] FAT-fs (loop3): Directory bread(block 65) failed [ 1340.615736][T30806] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1340.616267][T30806] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.10552: mark_inode_dirty error [ 1340.637307][T30824] FAT-fs (loop3): Directory bread(block 66) failed [ 1340.668912][T30824] FAT-fs (loop3): Directory bread(block 67) failed [ 1340.685221][T30806] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1340.689140][T30806] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1340.716660][T30824] FAT-fs (loop3): Directory bread(block 68) failed [ 1340.765547][T30824] FAT-fs (loop3): Directory bread(block 69) failed [ 1340.772241][T30806] loop2: lost filesystem error report for type 5 error -117 [ 1340.773349][T30806] EXT4-fs (loop2): 1 truncate cleaned up [ 1340.811328][T30824] FAT-fs (loop3): Directory bread(block 70) failed [ 1340.831603][T30806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1340.841503][T30824] FAT-fs (loop3): Directory bread(block 71) failed [ 1340.896832][T30824] FAT-fs (loop3): Directory bread(block 72) failed [ 1340.920041][T30824] FAT-fs (loop3): Directory bread(block 73) failed [ 1341.210303][ T57] Quota error (device loop2): remove_tree: Cycle in quota tree detected: block 4 index 0 [ 1341.229159][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.243756][ T57] EXT4-fs error (device loop2): ext4_release_dquot:7068: comm kworker/u8:4: Failed to release dquot type 1 [ 1341.295875][ T57] loop2: lost filesystem error report for type 5 error -5 [ 1341.296477][T30837] loop5: detected capacity change from 0 to 4096 [ 1341.367632][T30837] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1341.423041][T30837] ntfs3(loop5): ino=b, mi_enum_attr [ 1341.457004][T30837] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1341.494910][T30837] ntfs3(loop5): Failed to load $Extend (-22). [ 1341.520501][T30837] ntfs3(loop5): Failed to initialize $Extend. [ 1341.633171][T30855] nft_compat: unsupported protocol 5 [ 1341.888774][ T30] audit: type=1326 audit(2000000592.576:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.10577" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758bd9ce59 code=0x7ffc0000 [ 1342.057678][ T30] audit: type=1326 audit(2000000592.576:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.10577" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758bd9ce59 code=0x7ffc0000 [ 1342.181495][ T30] audit: type=1326 audit(2000000592.613:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.10577" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f758bd9ce59 code=0x7ffc0000 [ 1342.290461][T30876] xt_hl: Unknown Hop Limit match mode: 206 [ 1342.298643][ T30] audit: type=1326 audit(2000000592.613:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30861 comm="syz.4.10577" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758bd9ce59 code=0x7ffc0000 [ 1342.391716][T27526] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1342.574007][T27526] usb 6-1: Using ep0 maxpacket: 8 [ 1342.582864][T30885] tmpfs: Bad value for 'mpol' [ 1342.606443][T30886] loop6: detected capacity change from 0 to 256 [ 1342.608721][T27526] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 1342.666270][T27526] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1342.698613][T27526] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1342.729576][T27526] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.750611][T27526] usb 6-1: Product: syz [ 1342.769490][T27526] usb 6-1: Manufacturer: syz [ 1342.790673][T27526] usb 6-1: SerialNumber: syz [ 1342.825614][T27526] usb 6-1: config 0 descriptor?? [ 1342.847563][T30886] FAT-fs (loop6): Directory bread(block 64) failed [ 1342.878626][T30886] FAT-fs (loop6): Directory bread(block 65) failed [ 1342.890016][T27526] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 1342.911168][T30886] FAT-fs (loop6): Directory bread(block 66) failed [ 1342.932620][T30886] FAT-fs (loop6): Directory bread(block 67) failed [ 1342.957899][T30886] FAT-fs (loop6): Directory bread(block 68) failed [ 1342.976876][T30886] FAT-fs (loop6): Directory bread(block 69) failed [ 1342.990476][T27511] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1343.003289][T30886] FAT-fs (loop6): Directory bread(block 70) failed [ 1343.030095][T30886] FAT-fs (loop6): Directory bread(block 71) failed [ 1343.055358][T30886] FAT-fs (loop6): Directory bread(block 72) failed [ 1343.092365][T30886] FAT-fs (loop6): Directory bread(block 73) failed [ 1343.144560][T27526] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 1343.178696][T27526] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1343.190285][T30898] xt_hashlimit: size too large, truncated to 1048576 [ 1343.205699][T27511] usb 2-1: Using ep0 maxpacket: 32 [ 1343.244326][T27511] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1343.274816][T27511] usb 2-1: config 0 has no interface number 0 [ 1343.293116][T27511] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1343.333824][T27511] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1343.373877][T27511] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1343.403758][T27511] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1343.427138][T27511] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1343.434926][T27526] usb 6-1: USB disconnect, device number 77 [ 1343.471833][T27511] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1343.513319][T27511] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1343.552861][T30905] loop3: detected capacity change from 0 to 128 [ 1343.553311][T27511] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1343.591216][T27511] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1343.636322][T27511] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1343.651924][T27511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.675752][T30905] FAT-fs (loop3): bogus sectors per cluster 7 [ 1343.686623][T27511] usb 2-1: Product: syz [ 1343.692528][T30905] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1343.706554][T27511] usb 2-1: Manufacturer: syz [ 1343.720768][T27511] usb 2-1: SerialNumber: syz [ 1343.729346][T30905] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1343.750438][T27511] usb 2-1: config 0 descriptor?? [ 1343.779639][T30890] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1343.815886][T27511] usb 2-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1343.845969][T27511] usb 2-1: couldn't find an output bulk endpoint. Bailing out. [ 1343.912988][T30914] loop6: detected capacity change from 0 to 64 [ 1344.066290][T27511] usb 2-1: USB disconnect, device number 53 [ 1344.079912][T27506] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1344.261242][T27506] usb 4-1: Using ep0 maxpacket: 8 [ 1344.290210][T27506] usb 4-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 1344.344693][T27506] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1344.394786][T27506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.462570][T27506] usb 4-1: config 0 descriptor?? [ 1344.495150][T27506] rndis_host 4-1:0.0: missing cdc header descriptor [ 1344.536335][T27506] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 1344.568005][T30928] loop2: detected capacity change from 0 to 2048 [ 1344.578122][T27506] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 1344.602724][T27506] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 1344.630647][T30932] openvswitch: netlink: Message has 1 unknown bytes. [ 1344.633600][T30928] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1344.665954][T30932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1344.831433][T27526] usb 4-1: USB disconnect, device number 65 [ 1344.966558][ T5919] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1345.150555][ T5919] usb 7-1: not running at top speed; connect to a high speed hub [ 1345.186025][ T5919] usb 7-1: config 2 has an invalid interface number: 195 but max is 0 [ 1345.216210][ T5919] usb 7-1: config 2 has no interface number 0 [ 1345.235106][ T5919] usb 7-1: config 2 interface 195 has no altsetting 0 [ 1345.270222][ T5919] usb 7-1: string descriptor 0 read error: -22 [ 1345.292854][ T5919] usb 7-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=c8.6b [ 1345.312871][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.373240][ T5919] gspca_main: spca505-2.14.0 probing 041e:401d [ 1345.421900][T30950] loop4: detected capacity change from 0 to 1024 [ 1345.654297][T30956] ALSA: mixer_oss: invalid OSS volume '' [ 1345.660131][T30956] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 1345.668746][T30956] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 1345.675271][T30956] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&' [ 1345.683434][T30956] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 1345.690011][T30956] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$' [ 1345.703190][T30956] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at' [ 1345.743851][T30956] ALSA: mixer_oss: invalid OSS volume '|~\' [ 1345.758271][T30952] bond1: entered allmulticast mode [ 1345.766728][T30959] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1345.779531][T30956] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL' [ 1345.790552][T30952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1345.816713][ T5919] gspca_spca505: reg write: error -71 [ 1345.829736][ T5919] spca505 7-1:2.195: probe with driver spca505 failed with error -5 [ 1345.848957][T30956] ALSA: mixer_oss: invalid OSS volume 'I :' [ 1345.864205][ T5919] usb 7-1: USB disconnect, device number 4 [ 1345.890333][T30956] ALSA: mixer_oss: invalid OSS volume '%^vhcGJPr('⍯Q=' [ 1345.937950][T30956] ALSA: mixer_oss: invalid OSS volume ' Gj;4Ìz3WҼ0F=%' [ 1345.978618][T30956] ALSA: mixer_oss: invalid OSS volume ';4 4fh߇GIבQ5oJ' [ 1346.011807][T30956] ALSA: mixer_oss: invalid OSS volume 'Wl]Y1-J<A>o' [ 1346.133763][T30967] loop5: detected capacity change from 0 to 512 [ 1346.223650][T30967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1346.258830][T30967] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1346.318760][T30967] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 1346.396321][T30967] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4221: comm syz.5.10622: Allocating blocks 41-42 which overlap fs metadata [ 1346.473047][T30967] loop5: lost filesystem error report for type 5 error -117 [ 1346.476504][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1346.490544][ C0] EXT4-fs (loop5): initial error at time 2000000596: ext4_mb_mark_diskspace_used:4221 [ 1346.500214][ C0] EXT4-fs (loop5): last error at time 2000000596: ext4_mb_mark_diskspace_used:4221 [ 1346.542422][T30967] Quota error (device loop5): write_blk: dquota write failed [ 1346.557043][T30984] loop1: detected capacity change from 0 to 256 [ 1346.579602][T30967] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 1346.591209][T30984] exfat: Deprecated parameter 'utf8' [ 1346.621752][T30967] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4221: comm syz.5.10622: Allocating blocks 41-42 which overlap fs metadata [ 1346.677091][T30984] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 1346.696060][T30967] loop5: lost filesystem error report for type 5 error -117 [ 1346.698774][T30967] Quota error (device loop5): write_blk: dquota write failed [ 1346.738482][T30967] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1346.773715][T30967] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.10622: Failed to acquire dquot type 1 [ 1346.829233][T30967] loop5: lost filesystem error report for type 5 error -117 [ 1346.863090][T30967] EXT4-fs error (device loop5): mb_free_blocks:2046: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1346.926079][T30967] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.10622: corrupted inode contents [ 1346.972163][T30967] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1346.974485][T30967] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #12: comm syz.5.10622: mark_inode_dirty error [ 1347.041339][T30967] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1347.042467][T30967] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.10622: corrupted inode contents [ 1347.107323][T30967] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1347.121232][T30967] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #12: comm syz.5.10622: mark_inode_dirty error [ 1347.210743][T30967] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1347.211366][T30967] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.10622: corrupted inode contents [ 1347.332404][T30967] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1347.332970][T30967] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1347.429092][T30967] loop5: lost filesystem error report for type 5 error -117 [ 1347.458656][T30967] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #12: comm syz.5.10622: corrupted inode contents [ 1347.566932][T30967] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1347.570684][T30967] EXT4-fs error (device loop5): ext4_truncate:4690: inode #12: comm syz.5.10622: mark_inode_dirty error [ 1347.661868][T30967] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1347.662445][T30967] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1347.746277][T30967] loop5: lost filesystem error report for type 5 error -117 [ 1347.747892][T30967] EXT4-fs (loop5): 1 truncate cleaned up [ 1347.811958][T30967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.025894][T30967] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4221: comm syz.5.10622: Allocating blocks 41-42 which overlap fs metadata [ 1348.183839][T30967] Quota error (device loop5): write_blk: dquota write failed [ 1348.270388][T30967] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1348.336317][T30967] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.10622: Failed to acquire dquot type 1 [ 1348.383510][T31035] Device name not specified. [ 1348.383510][T31035] [ 1348.406095][ T30] audit: type=1326 audit(2000000598.677:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31037 comm="syz.2.10651" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa40b9ce59 code=0x7ffc0000 [ 1348.444226][ T30] audit: type=1326 audit(2000000598.677:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31037 comm="syz.2.10651" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa40b9ce59 code=0x7ffc0000 [ 1348.471688][ T30] audit: type=1326 audit(2000000598.715:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31037 comm="syz.2.10651" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7ffa40b9ce59 code=0x7ffc0000 [ 1348.542591][ T30] audit: type=1326 audit(2000000598.799:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31037 comm="syz.2.10651" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa40b9ce59 code=0x7ffc0000 [ 1348.726232][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.060338][T31055] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1350.192515][T31040] loop1: detected capacity change from 0 to 32768 [ 1350.261931][T31094] MTD: Couldn't look up './file0': -15 [ 1350.262691][T31040] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10653 (31040) [ 1350.366953][T31040] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1350.411077][T31040] BTRFS info (device loop1): using sha256 checksum algorithm [ 1350.577617][T31040] BTRFS info (device loop1): enabling ssd optimizations [ 1350.619273][T31040] BTRFS info (device loop1): turning on async discard [ 1350.664488][T31040] BTRFS info (device loop1): enabling free space tree [ 1350.676269][T31120] loop4: detected capacity change from 0 to 8 [ 1350.926066][T31129] x_tables: duplicate underflow at hook 1 [ 1351.146966][ T5809] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1351.221922][T31133] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1351.447466][T31145] loop2: detected capacity change from 0 to 1024 [ 1351.649120][T31142] bond1: entered allmulticast mode [ 1351.702923][T31142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1351.848162][T31155] loop2: detected capacity change from 0 to 1024 [ 1351.894397][T31155] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1351.937651][T31155] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1351.972035][T31155] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: inode #32: comm syz.2.10696: iget: special inode unallocated [ 1352.044441][T31155] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1352.062984][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1352.078723][ C1] EXT4-fs (loop2): initial error at time 2000000602: ext4_get_journal_inode:5896: inode 32 [ 1352.088799][ C1] EXT4-fs (loop2): last error at time 2000000602: ext4_get_journal_inode:5896: inode 32 [ 1352.109561][T31155] EXT4-fs (loop2): no journal found [ 1352.132603][T31155] EXT4-fs (loop2): can't get journal size [ 1352.159706][T31155] EXT4-fs (loop2): filesystem is read-only [ 1352.164227][T31163] loop4: detected capacity change from 0 to 2048 [ 1352.197899][T31155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1352.357043][T31163] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1352.436406][T31175] comedi comedi1: 8255: I/O port conflict (0x18000,4) [ 1352.579094][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.811325][T31182] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1352.921816][T31192] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1353.120033][T27506] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1353.316798][T27506] usb 5-1: config 8 has an invalid interface number: 7 but max is 0 [ 1353.342231][T27506] usb 5-1: config 8 has no interface number 0 [ 1353.373690][T27506] usb 5-1: string descriptor 0 read error: -22 [ 1353.392401][T27506] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=d9.bb [ 1353.433536][T27506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.517437][T27506] usb 5-1: Expected 3 endpoints, found: 0 [ 1353.618875][T31210] random: crng reseeded on system resumption [ 1353.734015][T27526] usb 5-1: USB disconnect, device number 63 [ 1353.746375][T31217] loop2: detected capacity change from 0 to 64 [ 1353.806004][T31217] hfs: unable to locate alternate MDB [ 1353.849703][T31217] hfs: continuing without an alternate MDB [ 1353.908557][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1353.908584][ T30] audit: type=1800 audit(2000000603.824:497): pid=31217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10721" name="file1" dev="loop2" ino=22 res=0 errno=0 [ 1354.055725][ T36] [ 1354.058101][ T36] ====================================================== [ 1354.065130][ T36] WARNING: possible circular locking dependency detected [ 1354.072155][ T36] syzkaller #0 Tainted: G L [ 1354.078139][ T36] ------------------------------------------------------ [ 1354.085161][ T36] kworker/u8:2/36 is trying to acquire lock: [ 1354.091157][ T36] ffff8880295f00f0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 1354.101941][ T36] [ 1354.101941][ T36] but task is already holding lock: [ 1354.109309][ T36] ffff888051ddc0a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1354.118932][ T36] [ 1354.118932][ T36] which lock already depends on the new lock. [ 1354.118932][ T36] [ 1354.129474][ T36] [ 1354.129474][ T36] the existing dependency chain (in reverse order) is: [ 1354.138499][ T36] [ 1354.138499][ T36] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 1354.146647][ T36] __mutex_lock+0x1a4/0x1b10 [ 1354.151796][ T36] hfs_find_init+0x273/0x330 [ 1354.156929][ T36] hfs_ext_read_extent+0x19d/0x9d0 [ 1354.162595][ T36] hfs_get_block+0x576/0x830 [ 1354.167739][ T36] block_read_full_folio+0x36c/0x8e0 [ 1354.173580][ T36] filemap_read_folio+0xfc/0x3b0 [ 1354.179062][ T36] do_read_cache_folio+0x2d7/0x6b0 [ 1354.184715][ T36] read_cache_page+0x5b/0x1b0 [ 1354.189933][ T36] __hfs_bnode_create+0x718/0x9a0 [ 1354.195497][ T36] hfs_bnode_find+0x2d5/0xd30 [ 1354.200716][ T36] hfs_brec_find+0x39d/0x620 [ 1354.205842][ T36] hfs_brec_read+0x26/0x120 [ 1354.210881][ T36] hfs_cat_find_brec+0xdc/0x2a0 [ 1354.216307][ T36] hfs_fill_super+0x58d/0x7e0 [ 1354.221515][ T36] get_tree_bdev_flags+0x38c/0x620 [ 1354.227176][ T36] vfs_get_tree+0x92/0x320 [ 1354.232132][ T36] path_mount+0x7d0/0x23d0 [ 1354.237083][ T36] __x64_sys_mount+0x293/0x310 [ 1354.242381][ T36] do_syscall_64+0x115/0x870 [ 1354.247516][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.253939][ T36] [ 1354.253939][ T36] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 1354.263181][ T36] __lock_acquire+0x14b8/0x2630 [ 1354.268565][ T36] lock_acquire+0x1b1/0x370 [ 1354.273662][ T36] __mutex_lock+0x1a4/0x1b10 [ 1354.278799][ T36] hfs_extend_file+0xa6/0xcf0 [ 1354.284027][ T36] hfs_bmap_reserve+0x2ab/0x3a0 [ 1354.289424][ T36] __hfs_ext_write_extent+0x3c4/0x510 [ 1354.295345][ T36] hfs_ext_write_extent+0x1b7/0x200 [ 1354.301096][ T36] hfs_write_inode+0xce/0xab0 [ 1354.306298][ T36] __writeback_single_inode+0xcd4/0x1350 [ 1354.312479][ T36] writeback_sb_inodes+0x766/0x1c60 [ 1354.318230][ T36] wb_writeback+0x1bf/0xb90 [ 1354.323281][ T36] wb_workfn+0x14f/0xc00 [ 1354.328074][ T36] process_one_work+0xa0e/0x1980 [ 1354.333547][ T36] worker_thread+0x5ef/0xe50 [ 1354.338671][ T36] kthread+0x370/0x450 [ 1354.343268][ T36] ret_from_fork+0x72b/0xd50 [ 1354.348392][ T36] ret_from_fork_asm+0x1a/0x30 [ 1354.353700][ T36] [ 1354.353700][ T36] other info that might help us debug this: [ 1354.353700][ T36] [ 1354.363924][ T36] Possible unsafe locking scenario: [ 1354.363924][ T36] [ 1354.371364][ T36] CPU0 CPU1 [ 1354.376722][ T36] ---- ---- [ 1354.382082][ T36] lock(&tree->tree_lock#2/1); [ 1354.386971][ T36] lock(&HFS_I(tree->inode)->extents_lock); [ 1354.395480][ T36] lock(&tree->tree_lock#2/1); [ 1354.402886][ T36] lock(&HFS_I(tree->inode)->extents_lock); [ 1354.408875][ T36] [ 1354.408875][ T36] *** DEADLOCK *** [ 1354.408875][ T36] [ 1354.417007][ T36] 3 locks held by kworker/u8:2/36: [ 1354.422116][ T36] #0: ffff8880206c0940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1354.432876][ T36] #1: ffffc90000ac7d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1354.444812][ T36] #2: ffff888051ddc0a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1354.454819][ T36] [ 1354.454819][ T36] stack backtrace: [ 1354.460721][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1354.460773][ T36] Tainted: [L]=SOFTLOCKUP [ 1354.460785][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1354.460810][ T36] Workqueue: writeback wb_workfn (flush-7:2) [ 1354.460875][ T36] Call Trace: [ 1354.460887][ T36] [ 1354.460901][ T36] dump_stack_lvl+0x100/0x190 [ 1354.460937][ T36] print_circular_bug.cold+0x178/0x1c7 [ 1354.460998][ T36] check_noncircular+0x146/0x160 [ 1354.461033][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.461090][ T36] __lock_acquire+0x14b8/0x2630 [ 1354.461134][ T36] ? __pfx_stack_trace_save+0x10/0x10 [ 1354.461195][ T36] lock_acquire+0x1b1/0x370 [ 1354.461232][ T36] ? hfs_extend_file+0xa6/0xcf0 [ 1354.461289][ T36] ? __pfx___might_resched+0x10/0x10 [ 1354.461336][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.461378][ T36] ? add_lock_to_list+0x99/0x110 [ 1354.461437][ T36] __mutex_lock+0x1a4/0x1b10 [ 1354.461492][ T36] ? hfs_extend_file+0xa6/0xcf0 [ 1354.461545][ T36] ? hfs_extend_file+0xa6/0xcf0 [ 1354.461601][ T36] ? hfs_write_inode+0xce/0xab0 [ 1354.461633][ T36] ? __writeback_single_inode+0xcd4/0x1350 [ 1354.461690][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 1354.461744][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.461787][ T36] ? lock_acquire+0x1b1/0x370 [ 1354.461830][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.461872][ T36] ? trace_contention_end+0x122/0x170 [ 1354.461917][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.461964][ T36] ? hfs_extend_file+0xa6/0xcf0 [ 1354.462017][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.462063][ T36] hfs_extend_file+0xa6/0xcf0 [ 1354.462119][ T36] ? __pfx_hfs_extend_file+0x10/0x10 [ 1354.462174][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.462224][ T36] hfs_bmap_reserve+0x2ab/0x3a0 [ 1354.462279][ T36] __hfs_ext_write_extent+0x3c4/0x510 [ 1354.462333][ T36] ? hfs_find_init+0x273/0x330 [ 1354.462372][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.462419][ T36] hfs_ext_write_extent+0x1b7/0x200 [ 1354.462475][ T36] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1354.462536][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.462579][ T36] ? __mpage_writepages+0x1a8/0x210 [ 1354.462614][ T36] ? __pfx___mpage_writepages+0x10/0x10 [ 1354.462651][ T36] hfs_write_inode+0xce/0xab0 [ 1354.462685][ T36] ? __pfx_hfs_write_inode+0x10/0x10 [ 1354.462718][ T36] ? __lock_acquire+0x4a5/0x2630 [ 1354.462770][ T36] ? __writeback_single_inode+0x454/0x1350 [ 1354.462825][ T36] ? __writeback_single_inode+0x454/0x1350 [ 1354.462881][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.462929][ T36] __writeback_single_inode+0xcd4/0x1350 [ 1354.462989][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 1354.463045][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.463093][ T36] ? do_raw_spin_unlock+0x145/0x1e0 [ 1354.463140][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.463187][ T36] writeback_sb_inodes+0x766/0x1c60 [ 1354.463252][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1354.463337][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.463380][ T36] ? rcu_is_watching+0x12/0xc0 [ 1354.463428][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.463471][ T36] ? queue_io+0x287/0x540 [ 1354.463518][ T36] wb_writeback+0x1bf/0xb90 [ 1354.463578][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 1354.463638][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.463681][ T36] ? mark_held_locks+0x40/0x70 [ 1354.463719][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1354.463767][ T36] wb_workfn+0x14f/0xc00 [ 1354.463823][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.463867][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1354.463915][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 1354.463972][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.464016][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.464066][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.464109][ T36] ? rcu_is_watching+0x12/0xc0 [ 1354.464157][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.464204][ T36] process_one_work+0xa0e/0x1980 [ 1354.464255][ T36] ? __pfx_process_one_work+0x10/0x10 [ 1354.464296][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.464345][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.464392][ T36] worker_thread+0x5ef/0xe50 [ 1354.464441][ T36] ? kthread+0x13a/0x450 [ 1354.464476][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1354.464516][ T36] kthread+0x370/0x450 [ 1354.464550][ T36] ? __pfx_kthread+0x10/0x10 [ 1354.464588][ T36] ret_from_fork+0x72b/0xd50 [ 1354.464629][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 1354.464669][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1354.464711][ T36] ? __switch_to+0x800/0x1100 [ 1354.464760][ T36] ? __switch_to_asm+0x39/0x70 [ 1354.464805][ T36] ? __pfx_kthread+0x10/0x10 [ 1354.464843][ T36] ret_from_fork_asm+0x1a/0x30 [ 1354.464900][ T36] [ 1354.483095][T31223] loop6: detected capacity change from 0 to 2048 [ 1354.508801][T31230] dlm: process syz.1.10726 (31230) version mismatch user (6.4.6) kernel (6.0.2) [ 1354.617787][ T36] hfs: new node 0 already hashed? [ 1354.933834][T31223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1354.940863][ T36] ------------[ cut here ]------------ [ 1354.985251][ T36] 1 [ 1354.985270][ T36] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#0: kworker/u8:2/36 [ 1354.997561][ T36] Modules linked in: [ 1355.001710][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1355.012655][ T36] Tainted: [L]=SOFTLOCKUP [ 1355.017291][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1355.027838][ T36] Workqueue: writeback wb_workfn (flush-7:2) [ 1355.033937][ T36] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1355.039866][ T36] Code: f5 34 63 0a e9 27 3e d1 01 e8 3b 13 e1 00 4c 89 f7 e8 e3 34 63 0a e8 2e 13 e1 00 89 ee 48 c7 c7 c0 e7 d1 8b e8 40 e1 fa ff 90 <0f> 0b 90 e9 29 41 d1 01 e8 12 13 e1 00 e8 fd 49 4d 00 e9 85 43 d1 [ 1355.059560][ T36] RSP: 0018:ffffc90000ac7020 EFLAGS: 00010282 [ 1355.065733][ T36] RAX: 000000000000001f RBX: ffff888022efe200 RCX: 0000000000000000 [ 1355.073729][ T36] RDX: 000000000000001f RSI: ffffffff81e71b29 RDI: fffff52000158df5 [ 1355.081745][ T36] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1355.089800][ T36] R10: 0000000080000000 R11: 6977735f5f203f20 R12: dffffc0000000000 [ 1355.097833][ T36] R13: ffff888051ddc000 R14: ffff888051ddc0d8 R15: 0000000000000000 [ 1355.105830][ T36] FS: 0000000000000000(0000) GS:ffff888124386000(0000) knlGS:0000000000000000 [ 1355.114819][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1355.121462][ T36] CR2: 00007f73493ea540 CR3: 000000002c3ee000 CR4: 0000000000350ef0 [ 1355.129874][ T36] Call Trace: [ 1355.133188][ T36] [ 1355.136111][ T36] ? _raw_spin_unlock+0x28/0x50 [ 1355.141390][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.147071][ T36] ? hfs_bnode_put+0x208/0x480 [ 1355.151909][ T36] hfs_bmap_alloc+0x5a7/0x6b0 [ 1355.156648][ T36] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1355.161907][ T36] ? __asan_memcpy+0x3c/0x60 [ 1355.166536][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.172277][ T36] ? hfs_bnode_read.part.0+0x298/0x330 [ 1355.177799][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.183514][ T36] ? folio_mark_accessed+0xf3/0x1040 [ 1355.188883][ T36] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1355.194667][ T36] ? rcu_is_watching+0x12/0xc0 [ 1355.199500][ T36] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1355.205927][ T36] ? do_raw_spin_unlock+0x145/0x1e0 [ 1355.211162][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.216846][ T36] ? _raw_spin_unlock+0x28/0x50 [ 1355.221770][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.227487][ T36] ? hfs_bnode_put+0x208/0x480 [ 1355.232304][ T36] hfs_brec_insert+0x8ba/0xc20 [ 1355.237585][ T36] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1355.243261][ T36] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1355.248396][ T36] __hfs_ext_write_extent+0x3ef/0x510 [ 1355.253812][ T36] ? hfs_find_init+0x273/0x330 [ 1355.258628][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.264297][ T36] hfs_ext_write_extent+0x1b7/0x200 [ 1355.269559][ T36] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1355.275333][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.281028][ T36] ? __mpage_writepages+0x1a8/0x210 [ 1355.286278][ T36] ? __pfx___mpage_writepages+0x10/0x10 [ 1355.291898][ T36] hfs_write_inode+0xce/0xab0 [ 1355.296611][ T36] ? __pfx_hfs_write_inode+0x10/0x10 [ 1355.301951][ T36] ? __lock_acquire+0x4a5/0x2630 [ 1355.306936][ T36] ? __writeback_single_inode+0x454/0x1350 [ 1355.312818][ T36] ? __writeback_single_inode+0x454/0x1350 [ 1355.318789][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.324492][ T36] __writeback_single_inode+0xcd4/0x1350 [ 1355.330191][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 1355.336339][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.342011][ T36] ? do_raw_spin_unlock+0x145/0x1e0 [ 1355.347638][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.353655][ T36] writeback_sb_inodes+0x766/0x1c60 [ 1355.358929][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1355.364689][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.370362][ T36] ? rcu_is_watching+0x12/0xc0 [ 1355.375205][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.380863][ T36] ? queue_io+0x287/0x540 [ 1355.385246][ T36] wb_writeback+0x1bf/0xb90 [ 1355.389819][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 1355.394890][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.400575][ T36] ? mark_held_locks+0x40/0x70 [ 1355.405412][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1355.410870][ T36] wb_workfn+0x14f/0xc00 [ 1355.415147][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.420904][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1355.426764][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 1355.431592][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.437320][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.443041][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.448799][ T36] ? rcu_is_watching+0x12/0xc0 [ 1355.453991][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.459650][ T36] process_one_work+0xa0e/0x1980 [ 1355.464993][ T36] ? __pfx_process_one_work+0x10/0x10 [ 1355.470443][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.476159][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.481966][ T36] worker_thread+0x5ef/0xe50 [ 1355.486584][ T36] ? kthread+0x13a/0x450 [ 1355.490829][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1355.495996][ T36] kthread+0x370/0x450 [ 1355.500096][ T36] ? __pfx_kthread+0x10/0x10 [ 1355.504764][ T36] ret_from_fork+0x72b/0xd50 [ 1355.509397][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.514580][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.520289][ T36] ? __switch_to+0x800/0x1100 [ 1355.525058][ T36] ? __switch_to_asm+0x39/0x70 [ 1355.529853][ T36] ? __pfx_kthread+0x10/0x10 [ 1355.534459][ T36] ret_from_fork_asm+0x1a/0x30 [ 1355.539304][ T36] [ 1355.542331][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1355.549698][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1355.560579][ T36] Tainted: [L]=SOFTLOCKUP [ 1355.564918][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1355.574982][ T36] Workqueue: writeback wb_workfn (flush-7:2) [ 1355.581035][ T36] Call Trace: [ 1355.584318][ T36] [ 1355.587257][ T36] dump_stack_lvl+0x100/0x190 [ 1355.591955][ T36] vpanic+0x552/0x970 [ 1355.595990][ T36] ? __pfx_vpanic+0x10/0x10 [ 1355.600510][ T36] panic+0xd1/0xe0 [ 1355.604238][ T36] ? __pfx_panic+0x10/0x10 [ 1355.608673][ T36] ? check_panic_on_warn+0x1f/0x90 [ 1355.613801][ T36] check_panic_on_warn.cold+0x19/0x34 [ 1355.619192][ T36] ? hfs_bnode_create.cold+0x41/0x49 [ 1355.624494][ T36] __warn.cold+0x191/0x328 [ 1355.628923][ T36] __report_bug+0x296/0x3d0 [ 1355.633541][ T36] ? hfs_bnode_create.cold+0x41/0x49 [ 1355.638852][ T36] ? __pfx___report_bug+0x10/0x10 [ 1355.643916][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.649621][ T36] ? irq_work_queue+0xce/0x100 [ 1355.654410][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.660091][ T36] ? __wake_up_klogd+0xe2/0x140 [ 1355.664969][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.670619][ T36] ? vprintk_emit+0x1c9/0x6b0 [ 1355.675326][ T36] ? __pfx_vprintk_emit+0x10/0x10 [ 1355.680387][ T36] ? hfs_bnode_create.cold+0x41/0x49 [ 1355.685824][ T36] report_bug+0xb2/0x220 [ 1355.690093][ T36] ? hfs_bnode_create.cold+0x41/0x49 [ 1355.695398][ T36] handle_bug+0x16a/0x2a0 [ 1355.699738][ T36] exc_invalid_op+0x17/0x50 [ 1355.704243][ T36] asm_exc_invalid_op+0x1a/0x20 [ 1355.709189][ T36] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1355.715102][ T36] Code: f5 34 63 0a e9 27 3e d1 01 e8 3b 13 e1 00 4c 89 f7 e8 e3 34 63 0a e8 2e 13 e1 00 89 ee 48 c7 c7 c0 e7 d1 8b e8 40 e1 fa ff 90 <0f> 0b 90 e9 29 41 d1 01 e8 12 13 e1 00 e8 fd 49 4d 00 e9 85 43 d1 [ 1355.734731][ T36] RSP: 0018:ffffc90000ac7020 EFLAGS: 00010282 [ 1355.740819][ T36] RAX: 000000000000001f RBX: ffff888022efe200 RCX: 0000000000000000 [ 1355.748881][ T36] RDX: 000000000000001f RSI: ffffffff81e71b29 RDI: fffff52000158df5 [ 1355.756897][ T36] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1355.764887][ T36] R10: 0000000080000000 R11: 6977735f5f203f20 R12: dffffc0000000000 [ 1355.772872][ T36] R13: ffff888051ddc000 R14: ffff888051ddc0d8 R15: 0000000000000000 [ 1355.780861][ T36] ? vprintk_emit+0x1c9/0x6b0 [ 1355.785583][ T36] ? _raw_spin_unlock+0x28/0x50 [ 1355.790457][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.796118][ T36] ? hfs_bnode_put+0x208/0x480 [ 1355.800913][ T36] hfs_bmap_alloc+0x5a7/0x6b0 [ 1355.805629][ T36] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1355.810855][ T36] ? __asan_memcpy+0x3c/0x60 [ 1355.815471][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.821123][ T36] ? hfs_bnode_read.part.0+0x298/0x330 [ 1355.826738][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.832393][ T36] ? folio_mark_accessed+0xf3/0x1040 [ 1355.837711][ T36] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1355.843490][ T36] ? rcu_is_watching+0x12/0xc0 [ 1355.848281][ T36] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1355.854640][ T36] ? do_raw_spin_unlock+0x145/0x1e0 [ 1355.859865][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.865522][ T36] ? _raw_spin_unlock+0x28/0x50 [ 1355.870396][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.876055][ T36] ? hfs_bnode_put+0x208/0x480 [ 1355.880848][ T36] hfs_brec_insert+0x8ba/0xc20 [ 1355.885647][ T36] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1355.890958][ T36] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1355.896017][ T36] __hfs_ext_write_extent+0x3ef/0x510 [ 1355.901425][ T36] ? hfs_find_init+0x273/0x330 [ 1355.906205][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.911859][ T36] hfs_ext_write_extent+0x1b7/0x200 [ 1355.917088][ T36] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1355.922839][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.928490][ T36] ? __mpage_writepages+0x1a8/0x210 [ 1355.933724][ T36] ? __pfx___mpage_writepages+0x10/0x10 [ 1355.939289][ T36] hfs_write_inode+0xce/0xab0 [ 1355.943979][ T36] ? __pfx_hfs_write_inode+0x10/0x10 [ 1355.949267][ T36] ? __lock_acquire+0x4a5/0x2630 [ 1355.954231][ T36] ? __writeback_single_inode+0x454/0x1350 [ 1355.960066][ T36] ? __writeback_single_inode+0x454/0x1350 [ 1355.965903][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.971570][ T36] __writeback_single_inode+0xcd4/0x1350 [ 1355.977257][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 1355.983353][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.989001][ T36] ? do_raw_spin_unlock+0x145/0x1e0 [ 1355.994225][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1355.999882][ T36] writeback_sb_inodes+0x766/0x1c60 [ 1356.005219][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1356.010919][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.016573][ T36] ? rcu_is_watching+0x12/0xc0 [ 1356.021364][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.027020][ T36] ? queue_io+0x287/0x540 [ 1356.031375][ T36] wb_writeback+0x1bf/0xb90 [ 1356.035921][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 1356.041076][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.046729][ T36] ? mark_held_locks+0x40/0x70 [ 1356.051507][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1356.056740][ T36] wb_workfn+0x14f/0xc00 [ 1356.061021][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.066703][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1356.072542][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 1356.077341][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.082998][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.088689][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.094342][ T36] ? rcu_is_watching+0x12/0xc0 [ 1356.099132][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.104786][ T36] process_one_work+0xa0e/0x1980 [ 1356.109775][ T36] ? __pfx_process_one_work+0x10/0x10 [ 1356.115166][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.120862][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.126520][ T36] worker_thread+0x5ef/0xe50 [ 1356.131140][ T36] ? kthread+0x13a/0x450 [ 1356.135392][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1356.140520][ T36] kthread+0x370/0x450 [ 1356.144597][ T36] ? __pfx_kthread+0x10/0x10 [ 1356.149222][ T36] ret_from_fork+0x72b/0xd50 [ 1356.153854][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 1356.158995][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1356.164666][ T36] ? __switch_to+0x800/0x1100 [ 1356.169374][ T36] ? __switch_to_asm+0x39/0x70 [ 1356.174166][ T36] ? __pfx_kthread+0x10/0x10 [ 1356.178778][ T36] ret_from_fork_asm+0x1a/0x30 [ 1356.183591][ T36] [ 1356.186917][ T36] Kernel Offset: disabled [ 1356.191236][ T36] Rebooting in 86400 seconds..