last executing test programs: 2m44.391861032s ago: executing program 0 (id=1430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 2m44.285789179s ago: executing program 0 (id=1432): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x36, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x1f, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x68, 0x22, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x20, 0x23, 0x6, {0x6, 0x22, "15c76b7d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m41.979154433s ago: executing program 0 (id=1472): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000034c0)=ANY=[@ANYBLOB='iocharset=maciceland,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000006,errors=remount-ro,errors=continue,iocharset=koi8-u,dmask=00000000000000000000004,\x00', @ANYRESHEX=0x0, @ANYBLOB=',zero_size_dir,keep_last_dots,gid=', @ANYRESHEX, @ANYRES64], 0x1, 0x152a, &(0x7f0000001f80)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m41.645951582s ago: executing program 0 (id=1478): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x210014, &(0x7f0000000040)=ANY=[], 0x5, 0x1c4, &(0x7f00000002c0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f00000000c0)='./file1\x00', 0x0) 2m41.316613011s ago: executing program 0 (id=1483): syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfa, 0x156, &(0x7f0000000340)="$eJzskL9rGmEch59Xz1NLrRYstIWWQoeKxXqe2K2Dlkod7EGLS6eAXoigURSCW37MGfIHOCRLJnEIGTMkZjJRCObvcAsEshjeu1OyZn+f5e59vh8+749fP6YJYuDH5Wer2e7Y3a5d+/TXKhf/nZyevZI+CIScRLPdkeGamz/Pw4b8ajDfdfVlxAc07G/VVqOmA3lIAAUNqAcwcLMvpIuHWK837IznEp9h9AbHmUung+65rOfea1CIus54gMURfJF9r1n13QG9fsC7WSp5/MGf9xb0+l+Hg6s/k3Eplfxo75vFd84LVGx5XiHnt+lx6iY9HMymk8W2VbamWdP8njUyhpGbWdeTUm7nAO33yy34LyD8pE+XHRXYE9AXMHD65hfLva1QNBgPg28zBkJORATB6PDeagov406qa28DS8PqR6FQKBQKhUKhUCgUiufyGAAA//+qM1mm") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x50000, 0x46) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2m40.571213005s ago: executing program 0 (id=1495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010528bd7000aab3cbca0c000000180005"], 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) 2m40.47023208s ago: executing program 32 (id=1495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010528bd7000aab3cbca0c000000180005"], 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) 23.852243573s ago: executing program 1 (id=3087): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) 23.716451881s ago: executing program 1 (id=3089): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 23.588294828s ago: executing program 1 (id=3091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f00000004c0)) 22.69056516s ago: executing program 1 (id=3097): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x4, 0x5510, &(0x7f00000020c0)="$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") mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 21.451525593s ago: executing program 1 (id=3106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.939061861s ago: executing program 1 (id=3114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211050, &(0x7f0000000580)=ANY=[], 0x5, 0x152e, &(0x7f0000003140)="$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") ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)={0xb6, 0x0, 0x2}) 19.637287688s ago: executing program 33 (id=3114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211050, &(0x7f0000000580)=ANY=[], 0x5, 0x152e, &(0x7f0000003140)="$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") ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)={0xb6, 0x0, 0x2}) 4.110619181s ago: executing program 2 (id=3272): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x802, 0x1) write(r1, &(0x7f0000000440)="08008edf773c8000", 0x8) 4.022148256s ago: executing program 2 (id=3274): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4051}}], 0x2, 0xc4) 3.95289242s ago: executing program 2 (id=3275): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") chdir(&(0x7f0000000340)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x14c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 3.464163879s ago: executing program 2 (id=3282): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x5519, &(0x7f00000079c0)="$eJzs3M1rI/UbAPAn7Xbff/sr4sHbDixCC5uw6cuit6q7+IJdyqoHT5om05DdJFOaNK09efAoHvxPRMGTR/8GD569iQfFm6BkZqpbX0Bo2tjt5wOTZ77ffPPM8w3LwjNTEsC5NZ/8/GMlbsSViJiNiOsR+XmlPHJrRXguIm5GxMwTR6Wc/33iYkRcjYgb4+RFzkr51qe3R7dWf3jjp6++uXTh2mdffju9XQPT9nxE9MrzvfIkaxfx0XYRG6NOHnsrozIWb/Qel+OsiHvpZp5hr3G4rpHH5XaxPtveHYzjVrfRHMd2Zyuf3+4XFxyM2od58g88auzk41a6mcfOIMtj+6Coa/+g+L/tYDAs8rTKfB/k6WM4PIzFfLqfFvvZfpzHZn9Yzhd5s1a6P46jMpaXi2bWbeV1bB7ji/6Pe7PT391PRunOoJP1k9Va/YVa/W61vpO10mG6Um30WndXkoV2d7ysOkwbvbV2lrW7aa2Z9RaThXazWa3Xk4V76Wan0U/q9dpy7U51dbE8u528+uCdpNtKFsbx5U5/d9jpDpKtbCcpPrGYLNWWX1xMbtWTt9Y3ko2H9++vb7z93r13H7y0/vor5aK/lJUsLN1ZWqrW71SX6ovnaP8flUVPcP9wLJVpFwBw9uj/gWnI+/+yz59s/7/zMOLk+//Q/0/Emep/z3v/fwL7h2PR/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFvfzX3+Wn4yX4yvlfP/K6eeKceViJiJiF//xmxcPJJztswz9w/r5/5Uw9eVyDOMr3GpPK5GxFp5/PL/k/4WAAAA4On1xYc3Pym69eJlftoFcZqKmzYz19+fUL5KRMzNfz+hbDPjl2cnlCz/930h9ieULb+BdXlCyYpbbhcmle1fmT0SLj8RKkWYOdVyAACAU3G0EzjdLgQAAIDT9PG0C2A6KnH4KPPwWXD+l/d/PBC8cmQEAAAAnEGVaRcAAAAAnLi8//f7fwAAAPB0K37/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN/YuZ/ctIEoDsDPBhfoHxVV3fcq3cGih+gRuuyy4gC9BAfogl4hF+AMZJcjRBDhcQhELIg8xkr0fZIZbJmf3yBYzIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqtVvP/f779bZuz3bWTpzcAAADAOZtqNa/fTNP5h+b6p+bSl+a8iIgyIs6N3Qfx7iRz0ORUT/f/O76/elbDTUSdsH/GqDneR8T35rj/3PW3AAAAAG/XerGcpdF6epn2XRAZTC69MU3alB9/ZnpwERHV9C5TWrnP+5oprP59D+N3prR6AmucKSxNuQ1zpV2k/rsfZu3GR02RmvLsxw5FZus7AABwRYOT5qWjkB/Z6wEAAKArv/ougH4U8biUeVgKHKWmWd6bnJwBAAAAr1DRdwEAAABA5+rx/5X2/9vZ/w8AAAD6kfb/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEubajVfL5aztjnbXTt5egMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAP7c46CIRDGADT/4tbJ3NibS0BbW5v3YCAkTPEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATz7Xy/cOv4Y9yb9tw9R6JJk7jSNZOrVZOzds/TDevgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBkf15SIASCIArmjP+d9P0PKwl6BhEioOFRRS0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBi5/5946biAIA/2+crLSCOgG4IQiAxwEKv19LSDTGAIgb+BKQovZbQKz/aDLSqEFnYUOYuCEaEkEBh6//QuZWyhC3DDUFiBtln55wfEkcI9iX5fKTn9z3Lfe/7fFKVr58TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKo3cncZIdOuM4Ls493r6/lPVP9vSZh2sb81nL4qjOpI+Hl6sfom5ziQAAAHB6JGV9H0LYTNcXsj7u5PV/Wl6T1fzfPzuOy3p+b91f9mXtn7Xfft16cWeizniebNDry8PBhf2ptP6/Vc625/7xilZ+5/NnL0n+hcQfrL4wSvP7GX376NF77Tw8U0e2AMBhnC/7Iih/Hsr6fpOJAXBqtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PF3GUQhhvjWJM0+27y8d1D9c25gv25UHD9bC15MxsyHSEML15eHgQq2rmW137t67uTgcDm7XH7wSQjiCcVqH+VfvFMu/+dEUF4fQyP0RHFEQF1/2rORzPIIG/1MCAOBESouW1fWb6fpCdi6aC+GvH3bX/69X4jBl/b/18ZXH1bmq9X+/thXOvt7Krc97d+7ee3P51uKNwY3Bp29d7L/dv3T18uWrvfxZSc8TEwAAAP6bdtGq9X88t3///1wlDlPW/1981/+qOlei/j/QZNOv6UwAAABOt+df/fOP6IDzUbsdvlxcWbndHx93Pl8cHxtI9V87U7Rq/Z/MNZ0VAAAAUIfRarRr//9aJQ5T7v8/8+NLP1fHTEIIZ4v9//NLnw2v1becmVbHrxM3vUYAAACadbZo1f3/NH//P9555SEOIbzx2jgu/gzgVPV/8v43P1Xnqr7/f6m+Jc6kuDu+H3nfDaHVbTojAAAATrKnipYV+7+n6wuf/HLuw7b3/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq9ncAAAD//9IgPpA=") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) lstat(&(0x7f0000000000)='./file1\x00', 0x0) fchown(r0, 0x0, 0xee01) 2.994678975s ago: executing program 6 (id=3289): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) setresuid(0x0, 0x0, 0xee01) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 2.818130036s ago: executing program 3 (id=3291): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @empty, 0xf}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1, 0x4}, {0x2, 0xfff6, 0xfffffffe, @mcast2}, r1, 0x9dfffffd}}, 0x48) 2.773693419s ago: executing program 4 (id=3292): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) unlink(&(0x7f0000000040)='./file0\x00') 2.75071434s ago: executing program 6 (id=3293): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb4}]}) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000340)="1511152119e41b2a8733cc", 0xb}], 0x1) 2.684172744s ago: executing program 3 (id=3294): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@errors_remount}, {@mblk_io_submit}, {@quota}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4EQeZ31JruwsF72sBQaCLSnHpoYWTGpZStYcoiNaRNKoZdCW3prLzn356X02h+HXtr/oySkrROa0kNxGf2wZVtyrMSWkubzgYne07zRe995ozcvmrEUwBNrPP0nE3EsIl5PIkbrzycR0V9NZSOma+Xura/l0yWJjY1nvkuqZe6ur+WjaZvUkXrmjxHx+SsRJzK76y2vrM7PFIuFpXp+orJweaK8snry0sLMXGGusHh6cmrq1Jl/nDn9UOENN2d++Hr16K03/v/XD6Z/evkPH772RRLTcbS+rjmOgzIe4/V90p/uwm3+d9CV9czHL+6jUNMRkD3MxtChtGP66r1yLEajb6/+Ge5mywCAw/JSRGy009d2DQDwWEtq5///9LodAEC3ND4HuLu+lm8svf1Eortu/zcihobqudr1zVo6W79mN1S9DjpyN9l2ZSSJiLEDqH88It755Pn30iUO6TokQCvXrkfEhbHx3eN/suuehU79rfXTc82Z8R0rjX/QPZ+m859/tpr/ZTbnP9Fi/jPY4r37IO7//s/cPIBq2krnf/9uurftXlP8dWN99dxvqnO+/uTipWIhHdt+GxHHo38wzU/uUcfxOz/fabeuef73/ZsvvJvWnz5ulcjczA5u32Z2pjLzMDE3u3094k/ZVvGn4/9gtf+TNvPfc/X0wH3qeOpfr77dbl0afxpvY9kd/+HauBHxl5b9n2yWSfa8P3GiejhMNA6KFj6ajpF29Y9nt/o/XdL6G/8X6Ia0/0f2jn8sab5fs7zvl968W+yrG6OftSvUfPy3jr/18T+QPFtNN469qzOVytJkxEDy9O7nT21t28g3yqfxH/9z6/d/Y/xrcfw/l77+hX3uiOytb99/8PgPVxr/bEf933Eihu7N97Wrf3/9P7Vtm/2Mf/tt4IPuNwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSyW2mM5lcrvYb3r+PkUyxVK6cuFhaXpyN6m9lj0V/pvFVl6NN34c6Wf8+/Eb+1I783yPidxHx1uBwNZ/Ll4qzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqOtPn9/9Q3gzsK9/WihQDAoRhyYgeAJ02Szfa6CQBAtw11VHr40NoBAHRPZ+d/AODXwPkfAJ489zn/7/wzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjUubNn02Xjx/W1fJqfvbKyPF+6cnK2UJ7PLSznc/nS0uXcXKk0Vyzk8qWFti90rfZQLJUuT8Xi8tWJSqFcmSivrJ5fKC0vVs5fWpiZK5wv9HctMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYv/LK6vxMsVhYkuhJYv7LWj88Ku2R6CwR12r996i05+ASMbA1Sgz3ZnACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAz8EgAA//99gB7t") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0x1de) pwrite64(r0, &(0x7f0000000240)="cf", 0x1, 0x7ff) 2.660538735s ago: executing program 5 (id=3295): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000580)=0xfffffffd, 0x4) 2.563976491s ago: executing program 5 (id=3296): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xf8f5, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x3c, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.552016422s ago: executing program 4 (id=3297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000300)={[{@abort}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) listxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 2.472125946s ago: executing program 6 (id=3298): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.339347134s ago: executing program 5 (id=3299): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r0, 0x8) accept$ax25(r0, 0x0, 0x0) 2.137780846s ago: executing program 3 (id=3300): munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 2.022765152s ago: executing program 6 (id=3301): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000000)={[{@inlinecrypt}, {@usrquota}, {@test_dummy_encryption_v1}, {@data_err_ignore}]}, 0x2, 0xbd1, &(0x7f0000001340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000440)) 2.004916583s ago: executing program 5 (id=3302): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x15, 0x0, 0x1, {[@generic={0x0, 0x2}]}}}}}}}}, 0x0) 1.926333868s ago: executing program 5 (id=3303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x0, 0x55ae, &(0x7f000000abc0)="$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") fstatfs(r0, &(0x7f0000000080)=""/36) 1.853089422s ago: executing program 4 (id=3304): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000780)={[{@flushoncommit}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@noacl}, {@clear_cache}, {@ssd_spread}, {@max_inline={'max_inline', 0x3d, [0x31, 0x37]}}, {@nobarrier}, {@datacow}, {@noflushoncommit}, {@enospc_debug}, {}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44020, 0x0) 1.738923148s ago: executing program 3 (id=3305): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x808808, &(0x7f0000000240)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47", @ANYRES16, @ANYRES64, @ANYRES8, @ANYRES16, @ANYRESOCT, @ANYRES16, @ANYRESDEC, @ANYRES64], 0x1, 0x2e2, &(0x7f0000000900)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.585654338s ago: executing program 2 (id=3306): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 1.238589368s ago: executing program 3 (id=3307): r0 = epoll_create1(0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e1c, 0x6, @empty, 0x8}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.060826128s ago: executing program 3 (id=3308): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) 1.060505808s ago: executing program 6 (id=3309): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000040, &(0x7f00000005c0)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80) 862.17543ms ago: executing program 4 (id=3310): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5b7, &(0x7f0000001380)="$eJzs3U1oHNcdAPD/zGot2ZYrF1poiw+mLbhgvPqw3bo9yddSg8GHQi+tWK2F0UprtKvWEoLKdxPiQ0iCL84tOeSYkEMOIZccc80lH+eAiUUClg/Jhv2SZXnlrGTtbqz9/WC0783M7v//duY9zQwzbAAD63TtTxrx24i4mkSMbVs2FM2FpxvrbW6s5R9vrOWTqFavfZNEEhGPNtbyrfWT5uvxiFiPiN9ExMfZiLPp1kceaRXKK6vzM8ViYalZH68s3Bwvr6yeu7EwM1eYKyye/8tfL166cHFyanJ7uo+r22vZvbX1zhd3X7nz6d/v333n3VPr+ddmkpiO0eay7e04SI3vJBvTO+Zf6EawPkr6nQD7kmn281pX+nWMRabZ69upbh8chnuSHtBF1eGI6pZtRWAAJC/Q6VuDCPAyah0H1M5/W1Mvjz8eXG6cgNTibm6s5f8frfhDjWsTMVI/Nzn2bfLUmUntfPNkLxPlUFq/HRETQ0PP7v9Jc//bv4mDSJCu+uhyY0M9u/3TrfEn2ow/o61rpy+oNf5tNse/zTbxM7uMf1c7jPH9v756c9f4t4fjd23jJ1vxkzbx04j4T4fx7/3zg0u7Lau+FXEm2sdvSZ5/fXj8+o1iYaLxt22MD8+c+tvu7Y84tkv8xjXbkXoi29t/pJlT2mH73//kvd+vPyf+n/7w/O3f7vs/GhGvdhj/l4/e/sduyx7cTh7WjgL2uv2TyMb9DuP/efr0582iq4YAAAAAAAAAAHCA0vq9bEma2yqnaS7XeIb3V3EsLZbKlbPXS8uLs4173k5GNm3daTXWqCe1+mTzftxWfWpH/XymGTBztF7P5UvF2T63HQAAAAAAAAAAAAAAAAAAAH4uju94/v+7TP35/+mIqRP9zg3ogd1/8hs47PR/GFxP9/+kb3kAvef/Pwysqv4Pg0v/h8Gl/8Pg0v9hcLXt/0d7nwfQe8/0/5H+5AH0nuN/AAAAAAAAAAAAAAAAAAAAAAAAAADoiqtXrtSm6uONtXytPju0sjxf+u+52UJ5PrewnM/lS0s3c3Ol0lyxkMuXFn7q85JS6eZELC7fGq8UypXx8srqvxdKy4ut3xQtZLveIgAAAAAAAAAAAAAAAAAAAHj5jNanJM1FZBv1NM3lIk5ExMkkkus3ioWJiPhFRHyWyQ7X6pP9ThoAAAAAAAAAAAAAAAAAAAAOmfLK6vxMsVhY6l5hqBmqs3d9WelqPkN7WTki1g82jdon7vld2eYXWJ8z0vXtdbgLmQ73w4Ev9HFQAgAAAAAAAAAAAAAAAACAAfXkod9O3/FDdxMCAAAAAAAAAAAAAAAAAACAgZR+nUREbToz9sfRnUuPJJuZ+mtE/O/etddvzVQqS5O1+Q+35lfeaM6f6kf+QKda/TSNiFo/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4or6zOzxSLhaV9FoY7WKffbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjx8DAAD//95Mx5c=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) fallocate(r0, 0x0, 0x0, 0x1955) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0xb}}, 0x20) 676.85935ms ago: executing program 5 (id=3311): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x150b, &(0x7f0000001d40)="$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") chdir(&(0x7f0000000200)='./file0\x00') truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') 515.96925ms ago: executing program 4 (id=3312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000a40)="e5333ea1", 0x401, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 404.869926ms ago: executing program 2 (id=3313): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870", 0x17, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x3}, &(0x7f0000001400)="01ececd1e0055f9761df25b51d1e672615765a31eda6580ec368189ca8cca97daf8dff7dd4042a45ed0d4c77262ee203b0520c8778a217e62874d8ebb38ef913de6b1ada2e2a85ae3ea93a81a06a3afdacc1e27a564f02969886ad749f2e2a01e9ddf16f05a9f874e6de177f245b62cca4a9136a32813fedc25d3aaeb37c04d68e2a13df9dbba4729820d13f9c6d9ea9d379127af6a84684aed5bb857b06f0053ad847cc8b7ec92b5098f1675277ab21f83eca69cf48dfacbdc569133e521639b1", 0xc1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r0, r2, r1}, &(0x7f0000000180)=""/4093, 0xffd, 0x0) 254.284235ms ago: executing program 6 (id=3314): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "020000000400000126000400"}, {0x5, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x3073, @local}, {0xa, 0x1c, 0x3, @loopback={0x9dffffffffffffff}, 0x1}, r1, 0x8}}, 0x48) 253.541305ms ago: executing program 4 (id=3315): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000bc0)={'sit0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0x31, &(0x7f0000000200)="cae5400c44436fde6e2935c703db720274609f68d54ca3444f0fe2d7667aa127ca258416f51039f1278d1538845b268af6", 0x0, 0x0, 0x0}) 0s ago: executing program 34 (id=3314): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "020000000400000126000400"}, {0x5, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x3073, @local}, {0xa, 0x1c, 0x3, @loopback={0x9dffffffffffffff}, 0x1}, r1, 0x8}}, 0x48) kernel console output (not intermixed with test programs): 0.371977][T10107] [ 230.413048][T10107] read_mapping_page failed! [ 230.418117][T10107] ERROR: (device loop1): txCommit: [ 230.418117][T10107] [ 230.486573][T10130] read_mapping_page failed! [ 230.505777][T10130] ERROR: (device loop1): txCommit: [ 230.505777][T10130] [ 230.612445][ T4184] [ 230.612445][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.612445][ T4184] [ 230.706313][ T4184] [ 230.706313][ T4184] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 230.706313][ T4184] [ 230.747207][T10135] loop4: detected capacity change from 0 to 128 [ 230.911189][T10125] loop5: detected capacity change from 0 to 32768 [ 231.063404][T10125] XFS (loop5): Mounting V5 Filesystem [ 231.176578][T10153] loop1: detected capacity change from 0 to 4096 [ 231.233479][T10125] XFS (loop5): Ending clean mount [ 231.309366][T10153] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 231.335733][T10162] loop4: detected capacity change from 0 to 512 [ 231.344193][T10161] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2289'. [ 231.390227][T10161] netlink: 'syz.2.2289': attribute type 6 has an invalid length. [ 231.411237][T10161] netlink: 'syz.2.2289': attribute type 5 has an invalid length. [ 231.427884][ T7853] XFS (loop5): Unmounting Filesystem [ 231.443703][T10161] netlink: 'syz.2.2289': attribute type 4 has an invalid length. [ 231.557081][T10162] EXT4-fs (loop4): Ignoring removed oldalloc option [ 231.568190][T10162] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 231.592307][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 231.614658][T10171] loop3: detected capacity change from 0 to 1024 [ 231.634617][T10162] EXT4-fs (loop4): 1 truncate cleaned up [ 231.646369][T10162] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none. [ 231.747982][T10171] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 231.773217][T10171] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 231.844823][T10171] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.2294: bad orphan inode 11 [ 231.914166][T10171] ext4_test_bit(bit=10, block=4) = 1 [ 231.919604][T10171] is_bad_inode(inode)=0 [ 232.011892][T10171] NEXT_ORPHAN(inode)=3254779904 [ 232.017053][T10171] max_ino=32 [ 232.020661][T10171] i_nlink=0 [ 232.037408][T10171] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.2294: lblock 2 mapped to illegal pblock 2 (length 1) [ 232.067190][T10171] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 232.075633][T10171] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.2294: lblock 0 mapped to illegal pblock 48 (length 1) [ 232.116852][T10171] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 232.166815][T10171] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.2294: Failed to acquire dquot type 0 [ 232.190162][T10190] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2301'. [ 232.212420][T10171] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 232.243869][T10171] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.2294: mark_inode_dirty error [ 232.291141][T10171] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 232.339954][T10171] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,noblock_validity,mblk_io_submit,delalloc,stripe=0x0000000000008000,delalloc,,errors=continue. Quota mode: none. [ 232.428220][ T6211] kernel write not supported for file /snd/seq (pid: 6211 comm: kworker/0:17) [ 232.453914][ T4188] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 232.522824][ T4188] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 232.557122][ T4188] EXT4-fs error (device loop3): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 232.572910][T10205] erofs: (device loop5): mounted with root inode @ nid 36. [ 232.669517][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 232.857773][T10213] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.2312'. [ 233.099922][ T4253] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 233.239596][T10199] XFS (loop4): Mounting V5 Filesystem [ 233.323012][T10199] XFS (loop4): Ending clean mount [ 233.335032][T10199] XFS (loop4): Quotacheck needed: Please wait. [ 233.402959][T10199] XFS (loop4): Quotacheck: Done. [ 233.439874][T10203] F2FS-fs (loop1): invalid crc value [ 233.468344][T10215] (syz.2.2313,10215,0):ocfs2_find_slot:468 ERROR: no free slots available! [ 233.477236][ T4253] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.521066][T10215] (syz.2.2313,10215,1):ocfs2_mount_volume:1811 ERROR: status = -22 [ 233.526919][ T4253] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.543061][T10203] F2FS-fs (loop1): Found nat_bits in checkpoint [ 233.560124][T10215] (syz.2.2313,10215,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 233.632808][ T4193] XFS (loop4): Unmounting Filesystem [ 233.700265][ T4253] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.709383][ T4253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.763766][ T4253] usb 6-1: SerialNumber: syz [ 233.794008][T10203] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 233.850748][ T6212] Bluetooth: hci2: command 0x0407 tx timeout [ 234.016380][ T4184] attempt to access beyond end of device [ 234.016380][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 234.093858][ T4253] usb 6-1: 0:2 : does not exist [ 234.131824][ T4253] usb 6-1: USB disconnect, device number 9 [ 234.370825][ T4504] udevd[4504]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.441934][T10247] set_capacity_and_notify: 4 callbacks suppressed [ 234.441951][T10247] loop4: detected capacity change from 0 to 128 [ 234.538775][T10247] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.631004][T10252] loop1: detected capacity change from 0 to 4096 [ 234.638840][T10247] ext4 filesystem being mounted at /404/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 234.674982][T10252] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 234.752121][T10255] loop2: detected capacity change from 0 to 128 [ 234.841765][T10252] ntfs3: loop1: ino=5, "/" directory corrupted [ 234.865419][T10255] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 234.886370][T10255] hpfs: filesystem error: improperly stopped [ 234.903945][T10255] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 234.937206][T10255] hpfs: You really don't want any checks? You are crazy... [ 234.945219][ T4184] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 234.980720][T10255] hpfs: hpfs_map_sector(): read error [ 234.987454][ T4184] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 234.991740][T10255] hpfs: code page support is disabled [ 235.007394][ T4184] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 235.034912][T10255] hpfs: hpfs_map_4sectors(): unaligned read [ 235.059144][T10255] hpfs: hpfs_map_4sectors(): unaligned read [ 235.105293][T10255] hpfs: filesystem error: unable to find root dir [ 235.177949][T10255] hpfs: hpfs_map_4sectors(): unaligned read [ 235.214292][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2335'. [ 235.223874][T10255] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 235.349465][T10281] loop3: detected capacity change from 0 to 2048 [ 235.445723][T10281] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.216813][T10317] loop2: detected capacity change from 0 to 128 [ 236.229120][T10298] loop5: detected capacity change from 0 to 40427 [ 236.262336][T10297] loop1: detected capacity change from 0 to 32768 [ 236.288707][T10298] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 236.297706][T10298] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 236.318500][T10321] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2355'. [ 236.336232][T10298] F2FS-fs (loop5): invalid crc value [ 236.361162][ T26] audit: type=1800 audit(1771006211.354:113): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2344" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 236.399937][T10298] F2FS-fs (loop5): Found nat_bits in checkpoint [ 236.567664][T10298] F2FS-fs (loop5): Start checkpoint disabled! [ 236.574321][T10325] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 236.599206][T10328] loop2: detected capacity change from 0 to 256 [ 236.615672][T10298] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 236.954400][ T7065] attempt to access beyond end of device [ 236.954400][ T7065] loop5: rw=2049, want=40976, limit=40427 [ 237.443727][T10348] loop2: detected capacity change from 0 to 4096 [ 237.548185][T10348] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 237.629530][T10348] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 237.689852][ T7393] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 237.836573][T10370] loop2: detected capacity change from 0 to 4096 [ 237.912057][T10370] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 237.971762][ T7393] usb 2-1: Using ep0 maxpacket: 8 [ 238.090761][ T7393] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.101674][ T7393] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.118934][ T7393] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.143087][ T7393] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.156477][ T7393] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.165940][ T7393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.203226][T10374] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 238.214420][T10372] NILFS (loop2): invalid segment: Checksum error in segment payload [ 238.223772][T10372] NILFS (loop2): trying rollback from an earlier position [ 238.254078][T10372] NILFS (loop2): recovery complete [ 238.278314][T10375] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.476657][ T7393] usb 2-1: GET_CAPABILITIES returned 0 [ 238.483430][ T7393] usbtmc 2-1:16.0: can't read capabilities [ 238.701324][ T6211] usb 2-1: USB disconnect, device number 14 [ 238.902021][ T4253] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 238.921670][T10403] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2392'. [ 238.932283][T10403] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2392'. [ 239.103291][T10405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.190792][T10399] XFS (loop2): Mounting V5 Filesystem [ 239.263986][T10399] XFS (loop2): Ending clean mount [ 239.287863][T10399] XFS (loop2): Quotacheck needed: Please wait. [ 239.300115][ T4253] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 239.308331][ T4253] usb 6-1: config 0 has no interface number 0 [ 239.338899][ T4253] usb 6-1: config 0 interface 160 has no altsetting 0 [ 239.406229][T10399] XFS (loop2): Quotacheck: Done. [ 239.451829][T10418] sp0: Synchronizing with TNC [ 239.520097][ T4253] usb 6-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 239.535797][ T4253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.551782][ T4253] usb 6-1: Product: syz [ 239.556118][ T4253] usb 6-1: Manufacturer: syz [ 239.561900][ T4253] usb 6-1: SerialNumber: syz [ 239.568595][ T4253] usb 6-1: config 0 descriptor?? [ 239.607490][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 239.619110][ T4253] usb-storage 6-1:0.160: USB Mass Storage device detected [ 239.649094][ T4191] XFS (loop2): Unmounting Filesystem [ 239.920015][ T6211] usb 6-1: USB disconnect, device number 10 [ 240.194194][T10439] set_capacity_and_notify: 4 callbacks suppressed [ 240.194208][T10439] loop2: detected capacity change from 0 to 256 [ 240.651288][T10435] loop1: detected capacity change from 0 to 32768 [ 240.686967][T10449] loop5: detected capacity change from 0 to 256 [ 240.712428][T10437] loop4: detected capacity change from 0 to 32768 [ 240.775397][T10435] XFS (loop1): Mounting V5 Filesystem [ 240.903733][T10437] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 240.903733][T10437] [ 240.931635][T10437] ERROR: (device loop4): remounting filesystem as read-only [ 241.000510][T10435] XFS (loop1): Ending clean mount [ 241.017556][T10437] jfs_rename: dtInsert returned -EIO [ 241.096123][T10435] XFS (loop1): Quotacheck needed: Please wait. [ 241.189165][T10435] XFS (loop1): Quotacheck: Done. [ 241.364437][ T4184] XFS (loop1): Unmounting Filesystem [ 241.466723][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2417'. [ 242.083661][T10450] loop2: detected capacity change from 0 to 40427 [ 242.152303][T10450] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 242.218323][T10450] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 242.313468][T10450] F2FS-fs (loop2): invalid crc value [ 242.401512][T10450] F2FS-fs (loop2): Found nat_bits in checkpoint [ 242.653461][T10450] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 242.669850][T10450] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 242.962652][ T1181] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 242.982162][ T1181] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 243.172155][T10490] loop3: detected capacity change from 0 to 32768 [ 243.262987][T10536] loop1: detected capacity change from 0 to 256 [ 243.357415][T10490] XFS (loop3): Mounting V5 Filesystem [ 243.662490][T10490] XFS (loop3): Ending clean mount [ 243.741370][T10507] loop5: detected capacity change from 0 to 32768 [ 243.799599][T10490] XFS (loop3): Quotacheck needed: Please wait. [ 243.885530][T10553] loop1: detected capacity change from 0 to 1024 [ 244.143641][T10490] XFS (loop3): Quotacheck: Done. [ 244.168048][T10507] XFS (loop5): Mounting V5 Filesystem [ 244.340736][T10549] loop4: detected capacity change from 0 to 131072 [ 244.353788][T10553] hfsplus: b-tree write err: -5, ino 3 [ 244.480754][T10507] XFS (loop5): Ending clean mount [ 244.488959][T10507] XFS (loop5): Quotacheck needed: Please wait. [ 244.497160][T10549] F2FS-fs (loop4): Found nat_bits in checkpoint [ 244.534601][T10549] F2FS-fs (loop4): recover fsync data on readonly fs [ 244.542002][T10549] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955 [ 244.560284][ T4188] XFS (loop3): Unmounting Filesystem [ 244.863510][T10507] XFS (loop5): Quotacheck: Done. [ 245.055392][ T7853] XFS (loop5): Unmounting Filesystem [ 245.410654][T10596] bridge_slave_1: default FDB implementation only supports local addresses [ 245.451746][T10597] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan3: link becomes ready [ 245.751413][T10609] loop2: detected capacity change from 0 to 256 [ 245.928927][T10617] loop3: detected capacity change from 0 to 1024 [ 246.014358][T10620] loop5: detected capacity change from 0 to 64 [ 246.095600][ T26] audit: type=1326 audit(1771006221.084:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b265f79 code=0x7ffc0000 [ 246.118213][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.149752][ T6211] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 246.193006][T10617] hfsplus: request for non-existent node 211 in B*Tree [ 246.238189][T10617] hfsplus: request for non-existent node 211 in B*Tree [ 246.263473][ T26] audit: type=1326 audit(1771006221.124:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b265f79 code=0x7ffc0000 [ 246.285936][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.391113][T10628] loop7: detected capacity change from 0 to 7 [ 246.406991][ T26] audit: type=1326 audit(1771006221.124:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b265f79 code=0x7ffc0000 [ 246.409991][ T6211] usb 2-1: Using ep0 maxpacket: 16 [ 246.452705][ C1] print_req_error: 58 callbacks suppressed [ 246.452721][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.454312][ T154] hfsplus: b-tree write err: -5, ino 8 [ 246.458654][ C1] buffer_io_error: 56 callbacks suppressed [ 246.458681][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 246.514293][ T26] audit: type=1326 audit(1771006221.124:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f354b265f79 code=0x7ffc0000 [ 246.536819][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.546310][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.557439][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 246.578626][ T26] audit: type=1326 audit(1771006221.164:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b265f79 code=0x7ffc0000 [ 246.602529][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.613554][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 246.624787][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.625605][ T26] audit: type=1326 audit(1771006221.184:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b265f79 code=0x7ffc0000 [ 246.635870][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 246.668982][ T26] audit: type=1326 audit(1771006221.184:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b265f79 code=0x7ffc0000 [ 246.679024][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.702482][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 246.708297][ T26] audit: type=1326 audit(1771006221.184:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f354b265f79 code=0x7ffc0000 [ 246.711492][ T6211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.759760][ T6211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.770436][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.773980][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.781567][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 246.800556][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.811719][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 246.820109][T10628] ldm_validate_partition_table(): Disk read failed. [ 246.849929][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.853593][ T6211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.861043][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 246.870064][ T26] audit: type=1326 audit(1771006221.304:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f354b22684e code=0x7ffc0000 [ 246.904130][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.919831][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.930829][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 246.945614][ T6211] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 246.955433][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.966411][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 246.975753][T10628] Dev loop7: unable to read RDB block 0 [ 246.990098][ T26] audit: type=1326 audit(1771006221.304:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f354b22684e code=0x7ffc0000 [ 246.996379][ T6211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.040589][T10628] loop7: unable to read partition table [ 247.059535][T10628] loop7: partition table beyond EOD, truncated [ 247.090209][ T6211] usb 2-1: config 0 descriptor?? [ 247.120714][T10628] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 247.136331][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2471'. [ 247.423582][T10656] loop4: detected capacity change from 0 to 256 [ 247.436449][T10650] loop3: detected capacity change from 0 to 4096 [ 247.481525][T10650] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 247.512906][T10656] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 247.561687][T10615] loop1: detected capacity change from 0 to 8192 [ 247.636703][T10615] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 247.692928][T10615] loop1: partition table partially beyond EOD, truncated [ 247.734028][T10615] loop1: p1 start 100663296 is beyond EOD, truncated [ 247.758658][T10615] loop1: p2 size 134217732 extends beyond EOD, truncated [ 247.792804][T10615] loop1: p4 size 14876672 extends beyond EOD, truncated [ 247.810621][T10615] loop1: p5 size 134217732 extends beyond EOD, truncated [ 247.830762][T10615] loop1: p6 size 14876672 extends beyond EOD, truncated [ 247.897668][ T6211] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001A/input/input30 [ 247.926807][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 247.977289][ T6211] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 248.242302][ T6211] usb 2-1: USB disconnect, device number 15 [ 248.509292][T10680] loop2: detected capacity change from 0 to 4096 [ 248.530395][T10681] fido_id[10681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 248.605251][T10690] loop4: detected capacity change from 0 to 4096 [ 248.700793][T10690] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 248.823075][ T4191] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 248.862193][ T4191] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 249.143423][T10698] loop2: detected capacity change from 0 to 1024 [ 249.170306][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 249.186361][T10691] udevd[10691]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 249.203291][ T4478] udevd[4478]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 249.218019][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 249.231000][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 249.311926][T10698] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 249.456280][T10698] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 249.563338][T10698] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.661389][T10698] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 249.922218][T10722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2504'. [ 250.012685][T10693] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 250.054529][T10693] F2FS-fs (loop5): invalid crc value [ 250.096145][T10693] F2FS-fs (loop5): Found nat_bits in checkpoint [ 250.218046][T10693] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 250.361029][T10693] attempt to access beyond end of device [ 250.361029][T10693] loop5: rw=2049, want=45112, limit=40427 [ 250.438290][T10705] XFS (loop4): Mounting V5 Filesystem [ 250.538181][ T7853] attempt to access beyond end of device [ 250.538181][ T7853] loop5: rw=2049, want=45120, limit=40427 [ 250.590495][T10705] XFS (loop4): Ending clean mount [ 250.774313][T10725] F2FS-fs (loop3): invalid crc value [ 250.868026][T10725] F2FS-fs (loop3): Found nat_bits in checkpoint [ 250.905156][ T4193] XFS (loop4): Unmounting Filesystem [ 251.069449][T10725] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 251.210672][ T4188] attempt to access beyond end of device [ 251.210672][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 251.385757][T10758] set_capacity_and_notify: 3 callbacks suppressed [ 251.385772][T10758] loop2: detected capacity change from 0 to 8192 [ 251.487613][T10758] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 251.632031][T10758] REISERFS (device loop2): using ordered data mode [ 251.638685][T10758] reiserfs: using flush barriers [ 251.660103][T10758] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.710178][T10758] REISERFS (device loop2): checking transaction log (loop2) [ 251.741556][T10758] REISERFS (device loop2): Using r5 hash to sort names [ 251.781266][T10758] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 251.799617][T10772] loop5: detected capacity change from 0 to 4096 [ 251.858375][T10775] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 251.871532][T10772] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 252.228449][T10783] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2522'. [ 252.288389][T10785] syz.4.2525 uses obsolete (PF_INET,SOCK_PACKET) [ 252.329799][ T6212] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 252.374243][T10761] loop1: detected capacity change from 0 to 40427 [ 252.421672][T10761] F2FS-fs (loop1): Found nat_bits in checkpoint [ 252.455646][T10792] loop4: detected capacity change from 0 to 1024 [ 252.571895][T10761] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 252.706422][ T6212] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 252.725025][ T6212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.750141][ T4184] attempt to access beyond end of device [ 252.750141][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 252.757464][T10799] loop4: detected capacity change from 0 to 512 [ 252.774932][ T6212] usb 6-1: config 0 descriptor?? [ 252.802162][T10799] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 252.814513][T10799] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: comm syz.4.2530: inode #1792: comm syz.4.2530: iget: illegal inode # [ 252.833912][ T6212] cp210x 6-1:0.0: cp210x converter detected [ 252.852637][T10799] EXT4-fs (loop4): Remounting filesystem read-only [ 252.869248][T10799] EXT4-fs (loop4): no journal found [ 252.902662][T10799] EXT4-fs (loop4): can't get journal size [ 252.937262][T10799] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 252.993360][T10799] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 253.014093][T10799] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 253.269893][ T6212] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 253.322999][ T6212] usb 6-1: cp210x converter now attached to ttyUSB0 [ 253.444767][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2541'. [ 253.533722][ T4237] usb 6-1: USB disconnect, device number 11 [ 253.556361][ T4237] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 253.593894][ T4237] cp210x 6-1:0.0: device disconnected [ 253.753824][T10835] CUSE: unknown device info "sit0" [ 253.759000][T10835] CUSE: unknown device info "x" [ 253.777731][T10835] CUSE: unknown device info "" [ 253.785477][T10835] CUSE: unknown device info "" [ 253.792931][T10835] CUSE: unknown device info "ð" [ 253.798026][T10835] CUSE: unknown device info "ED" [ 253.809150][T10835] CUSE: unknown device info "" [ 253.815590][T10835] CUSE: unknown device info "h" [ 253.826461][T10835] CUSE: zero length info key specified [ 254.214347][T10846] loop2: detected capacity change from 0 to 4096 [ 254.701353][T10862] loop5: detected capacity change from 0 to 256 [ 254.819526][T10846] EXT4-fs (loop2): Test dummy encryption mode enabled [ 254.834351][T10862] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 254.882199][T10846] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 254.896584][T10846] System zones: 0-5 [ 254.944154][T10846] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 254.969161][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.007933][T10858] loop3: detected capacity change from 0 to 32768 [ 255.178777][T10858] XFS (loop3): Mounting V5 Filesystem [ 255.326369][T10846] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 255.435463][T10858] XFS (loop3): Ending clean mount [ 255.469827][T10846] overlayfs: upper fs does not support tmpfile. [ 255.476826][T10846] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 255.502548][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.508902][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.514440][T10858] XFS (loop3): Quotacheck needed: Please wait. [ 255.584854][T10867] loop4: detected capacity change from 0 to 32768 [ 255.701557][T10867] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 255.722238][T10858] XFS (loop3): Quotacheck: Done. [ 255.780734][T10867] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 255.881050][ T4188] XFS (loop3): Unmounting Filesystem [ 255.900557][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 255.900573][ T26] audit: type=1800 audit(2000000002.270:132): pid=10867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2558" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 256.090964][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 256.158081][T10910] loop1: detected capacity change from 0 to 1024 [ 256.324545][T10910] EXT4-fs (loop1): inline encryption not supported [ 256.341739][T10910] EXT4-fs (loop1): Ignoring removed bh option [ 256.361918][T10910] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.456720][T10910] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 256.862834][T10935] loop2: detected capacity change from 0 to 4096 [ 257.102766][T10943] loop1: detected capacity change from 0 to 4096 [ 257.165798][ T4191] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 257.205130][ T4191] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 257.225833][T10943] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 257.260295][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2587'. [ 257.698986][T10967] loop3: detected capacity change from 0 to 128 [ 257.726592][ T1236] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 257.743638][ T4184] ntfs3: loop1: ntfs_evict_inode r=1e failed, -22. [ 257.768447][T10967] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.785707][ T4184] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 257.832727][T10967] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.055535][ T1236] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.557290][T11010] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 258.606277][T11010] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 258.746441][T11014] loop1: detected capacity change from 0 to 1024 [ 258.787955][T10987] loop5: detected capacity change from 0 to 32768 [ 258.817830][T11014] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 258.828783][T11014] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.859244][T10987] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 258.895130][ T26] audit: type=1800 audit(2000000005.260:133): pid=11014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2613" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 258.924821][T10987] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 258.929512][T11014] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.2613: lblock 0 mapped to illegal pblock 0 (length 1) [ 258.960957][T11000] loop2: detected capacity change from 0 to 32768 [ 258.968811][T11014] EXT4-fs error (device loop1): ext4_ext_remove_space:2929: inode #15: comm syz.1.2613: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 259.019542][ T26] audit: type=1800 audit(2000000005.380:134): pid=10987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2604" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 259.084068][T11000] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 259.099495][T11013] EXT4-fs error (device loop1): ext4_ext_remove_space:2929: inode #15: comm syz.1.2613: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 259.134312][T11000] JBD2: Ignoring recovery information on journal [ 259.142497][T11013] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.2613: couldn't truncate inode 15 (err -117) [ 259.233248][ T7853] ocfs2: Unmounting device (7,5) on (node local) [ 259.268552][T11012] loop4: detected capacity change from 0 to 40427 [ 259.310761][T11012] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 259.397014][T11000] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 259.431815][T11012] F2FS-fs (loop4): invalid crc value [ 259.468690][T11012] F2FS-fs (loop4): Found nat_bits in checkpoint [ 259.530283][T11000] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 259.650808][T11000] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 259.664271][T11033] loop5: detected capacity change from 0 to 4096 [ 259.708052][T11012] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 259.729719][T11000] OCFS2: File system is now read-only. [ 259.735659][T11000] (syz.2.2608,11000,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 259.781816][T11000] (syz.2.2608,11000,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 259.799837][T11038] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.848272][T11000] (syz.2.2608,11000,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 259.859154][ T4193] attempt to access beyond end of device [ 259.859154][ T4193] loop4: rw=2049, want=45104, limit=40427 [ 259.887870][T11000] (syz.2.2608,11000,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 259.914698][T11000] (syz.2.2608,11000,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 259.966576][T11000] (syz.2.2608,11000,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 259.998200][T11000] (syz.2.2608,11000,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 260.017321][T11033] NILFS error (device loop5): nilfs_dotdot: directory #12 missing '.' [ 260.024435][T11000] (syz.2.2608,11000,0):ocfs2_mknod:385 ERROR: status = -30 [ 260.055610][T11000] (syz.2.2608,11000,0):ocfs2_mknod:502 ERROR: status = -30 [ 260.077948][T11033] Remounting filesystem read-only [ 260.080175][T11000] (syz.2.2608,11000,0):ocfs2_mkdir:659 ERROR: status = -30 [ 260.137103][ T7853] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 260.211172][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 260.461589][T11044] loop5: detected capacity change from 0 to 256 [ 260.480741][T11044] exfat: Deprecated parameter 'utf8' [ 260.556756][T11044] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 260.729159][T11054] loop1: detected capacity change from 0 to 64 [ 260.976636][T11062] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 261.501435][T11078] hfs: uid requires an argument [ 261.506345][T11078] hfs: unable to parse mount options [ 261.688262][T11079] EXT4-fs (loop5): 1 truncate cleaned up [ 261.703339][T11058] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 261.767788][T11079] EXT4-fs (loop5): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 261.817440][T11058] F2FS-fs (loop4): invalid crc value [ 261.863828][T11058] F2FS-fs (loop4): Found nat_bits in checkpoint [ 262.052192][T11098] set_capacity_and_notify: 3 callbacks suppressed [ 262.052209][T11098] loop5: detected capacity change from 0 to 128 [ 262.079954][T11058] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 262.296016][T11058] attempt to access beyond end of device [ 262.296016][T11058] loop4: rw=2049, want=45112, limit=40427 [ 263.088217][ T4193] attempt to access beyond end of device [ 263.088217][ T4193] loop4: rw=2049, want=45120, limit=40427 [ 263.093169][ T144] attempt to access beyond end of device [ 263.093169][ T144] loop5: rw=1, want=1041, limit=128 [ 263.125377][T11110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2651'. [ 263.361332][T11123] loop1: detected capacity change from 0 to 256 [ 263.452022][T11123] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 263.633301][T11137] hub 8-0:1.0: USB hub found [ 263.662749][T11137] hub 8-0:1.0: 1 port detected [ 263.682401][T11140] netlink: 'syz.2.2665': attribute type 6 has an invalid length. [ 263.734895][T11140] netlink: 'syz.2.2665': attribute type 6 has an invalid length. [ 263.818354][T11143] loop3: detected capacity change from 0 to 256 [ 263.954275][T11143] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x28b7239b, utbl_chksum : 0xe619d30d) [ 264.213815][T11162] loop2: detected capacity change from 0 to 1024 [ 264.431217][T11162] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 264.479931][T11162] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.244200][T11209] loop4: detected capacity change from 0 to 2048 [ 265.543258][T11222] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2701'. [ 265.601027][T11225] program syz.4.2699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.614248][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2701'. [ 265.633118][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2701'. [ 265.686340][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2701'. [ 265.924215][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 266.011506][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.019039][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.062816][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2709'. [ 266.138566][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan3: link becomes ready [ 266.220960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 266.302609][T11248] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.2711'. [ 266.334725][T11248] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 266.367491][T11250] loop4: detected capacity change from 0 to 2048 [ 266.970491][T11250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.175386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.487260][T11283] loop1: detected capacity change from 0 to 512 [ 267.495173][T11285] loop4: detected capacity change from 0 to 256 [ 267.561948][T11285] exfat: Deprecated parameter 'namecase' [ 267.579054][T11283] EXT4-fs (loop1): Ignoring removed orlov option [ 267.587511][T11285] exfat: Deprecated parameter 'utf8' [ 267.615680][T11283] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 267.633655][T11289] loop5: detected capacity change from 0 to 1024 [ 267.655528][T11285] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 267.678342][T11283] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2727: attempt to clear invalid blocks 2 len 1 [ 267.707179][T11283] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 267.731000][T11283] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2727: invalid indirect mapped block 1819239214 (level 0) [ 267.764918][T11289] EXT4-fs (loop5): inline encryption not supported [ 267.780458][T11283] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2727: invalid indirect mapped block 1819239214 (level 1) [ 267.808370][T11289] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 267.844857][T11283] EXT4-fs (loop1): 1 truncate cleaned up [ 267.860780][T11283] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,init_itable=0x0000000000000003,usrquota,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 267.921618][T11283] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.2727: corrupted in-inode xattr [ 267.982100][T11289] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,errors=remount-ro,grpquota,minixdf,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback. [ 268.007613][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.357473][T11302] program syz.1.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.467361][T11315] loop2: detected capacity change from 0 to 128 [ 268.503892][T11315] EXT4-fs (loop2): Ignoring removed nobh option [ 268.532783][T11315] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 268.600640][T11315] ext4 filesystem being mounted at /592/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.711475][T11315] EXT4-fs warning (device loop2): __ext4_ioctl:881: Setting inode version is not supported with metadata_csum enabled. [ 268.973868][T11343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2749'. [ 269.395104][T11367] loop5: detected capacity change from 0 to 1024 [ 269.439754][T11367] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 269.449410][T11367] EXT4-fs (loop5): group descriptors corrupted! [ 269.601898][T11377] loop5: detected capacity change from 0 to 128 [ 269.609409][T11377] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.660660][T11377] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.992706][T11390] loop5: detected capacity change from 0 to 256 [ 270.033761][T11383] loop3: detected capacity change from 0 to 4096 [ 270.064130][T11392] loop2: detected capacity change from 0 to 2048 [ 270.095012][T11390] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 270.119759][T11383] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 270.140855][T11394] loop1: detected capacity change from 0 to 1024 [ 270.174286][T11390] exFAT-fs (loop5): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 270.208892][T11392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.258974][T11394] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 270.380800][T11394] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.737000][T11374] JBD2: Ignoring recovery information on journal [ 270.956809][T11407] EXT4-fs (loop1): Ignoring removed nobh option [ 270.977949][T11409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.007992][T11374] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 271.015698][T11407] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 271.043043][T11407] ext4 filesystem being mounted at /587/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.058300][T11409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.070857][T11409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.135834][T11407] EXT4-fs warning (device loop1): __ext4_ioctl:881: Setting inode version is not supported with metadata_csum enabled. [ 271.217305][T11409] device hsr0 left promiscuous mode [ 271.266380][T11374] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 271.370495][T11374] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 271.454076][T11374] OCFS2: File system is now read-only. [ 271.459596][T11374] (syz.4.2765,11374,0):ocfs2_search_chain:1785 ERROR: status = -30 [ 271.498511][T11374] (syz.4.2765,11374,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 271.556703][T11374] (syz.4.2765,11374,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 271.612529][T11374] (syz.4.2765,11374,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 271.649911][T11374] (syz.4.2765,11374,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 271.658144][T11374] (syz.4.2765,11374,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 271.715345][T11374] (syz.4.2765,11374,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 271.744870][T11374] (syz.4.2765,11374,0):ocfs2_mknod:385 ERROR: status = -30 [ 271.783183][T11374] (syz.4.2765,11374,0):ocfs2_mknod:502 ERROR: status = -30 [ 271.809855][T11374] (syz.4.2765,11374,0):ocfs2_mkdir:659 ERROR: status = -30 [ 271.917503][T11402] (syz.5.2778,11402,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 271.983570][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 272.004586][T11402] (syz.5.2778,11402,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.021013][T11400] F2FS-fs (loop3): invalid crc value [ 272.052210][T11400] F2FS-fs (loop3): Found nat_bits in checkpoint [ 272.128839][T11402] JBD2: Ignoring recovery information on journal [ 272.269824][T11400] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 272.338018][T11402] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 272.374609][ T4188] attempt to access beyond end of device [ 272.374609][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 272.506238][T11417] set_capacity_and_notify: 4 callbacks suppressed [ 272.506253][T11417] loop1: detected capacity change from 0 to 40427 [ 272.672404][T11417] F2FS-fs (loop1): invalid crc value [ 272.705902][T11417] F2FS-fs (loop1): Found nat_bits in checkpoint [ 272.727212][T11444] loop4: detected capacity change from 0 to 512 [ 272.823096][T11444] EXT4-fs (loop4): Ignoring removed orlov option [ 272.834273][T11444] EXT4-fs (loop4): Invalid want_extra_isize 7 [ 272.908774][ T7853] ocfs2: Unmounting device (7,5) on (node local) [ 272.969307][T11417] F2FS-fs (loop1): Start checkpoint disabled! [ 273.025992][T11417] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 273.267194][ T144] attempt to access beyond end of device [ 273.267194][ T144] loop1: rw=2049, want=40984, limit=40427 [ 274.005231][T11484] loop2: detected capacity change from 0 to 512 [ 274.108366][T11484] EXT4-fs (loop2): 1 truncate cleaned up [ 274.124320][T11484] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 274.172639][T11465] loop3: detected capacity change from 0 to 40427 [ 274.205170][T11485] loop5: detected capacity change from 0 to 8192 [ 274.233903][T11465] F2FS-fs (loop3): invalid crc value [ 274.258197][ T26] audit: type=1800 audit(2000000020.620:135): pid=11484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2809" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 274.306152][T11485] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 274.323412][T11465] F2FS-fs (loop3): Found nat_bits in checkpoint [ 274.358858][T11485] REISERFS (device loop5): using ordered data mode [ 274.366313][T11485] reiserfs: using flush barriers [ 274.388468][T11485] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 274.423831][T11465] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 274.450759][T11485] REISERFS (device loop5): checking transaction log (loop5) [ 274.472331][T11485] REISERFS (device loop5): Using r5 hash to sort names [ 274.495984][T11485] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 274.545246][T11485] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 274.924767][T11515] loop2: detected capacity change from 0 to 1024 [ 275.012214][T11520] loop1: detected capacity change from 0 to 256 [ 275.646861][T11521] loop3: detected capacity change from 0 to 32768 [ 275.704276][T11521] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2819 (11521) [ 275.798962][T11521] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 275.829522][T11521] BTRFS info (device loop3): force zlib compression, level 3 [ 275.882830][T11521] BTRFS info (device loop3): force clearing of disk cache [ 275.912581][T11521] BTRFS info (device loop3): setting nodatasum [ 275.918811][T11521] BTRFS info (device loop3): allowing degraded mounts [ 275.932820][ T7405] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 275.947759][T11562] loop4: detected capacity change from 0 to 128 [ 275.966971][T11521] BTRFS info (device loop3): enabling disk space caching [ 275.999157][T11521] BTRFS info (device loop3): disk space caching is enabled [ 276.024127][T11521] BTRFS info (device loop3): has skinny extents [ 276.035532][T11560] loop2: detected capacity change from 0 to 4096 [ 276.086489][T11562] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 276.192936][T11575] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.204790][T11562] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.229898][ T7405] usb 6-1: Using ep0 maxpacket: 16 [ 276.370116][ T7405] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.387464][ T7405] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 276.454759][ T7405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.473451][T11521] BTRFS info (device loop3): clearing free space tree [ 276.488696][T11521] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 276.518419][T11521] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 276.559364][ T7405] usb 6-1: config 0 descriptor?? [ 276.964113][T11521] BTRFS info (device loop3): balance: start -s [ 276.974206][T11616] attempt to access beyond end of device [ 276.974206][T11616] loop2: rw=0, want=5780, limit=1024 [ 277.049725][T11617] FAT-fs (loop1): Directory bread(block 64) failed [ 277.057127][T11521] BTRFS info (device loop3): relocating block group 1048576 flags system [ 277.076043][ T7405] hid (null): nested delimiters [ 277.084598][T11617] FAT-fs (loop1): Directory bread(block 65) failed [ 277.098147][T11617] FAT-fs (loop1): Directory bread(block 66) failed [ 277.108483][T11617] FAT-fs (loop1): Directory bread(block 67) failed [ 277.137742][T11617] FAT-fs (loop1): Directory bread(block 68) failed [ 277.169562][T11617] FAT-fs (loop1): Directory bread(block 69) failed [ 277.192845][T11617] FAT-fs (loop1): Directory bread(block 70) failed [ 277.212003][T11617] FAT-fs (loop1): Directory bread(block 71) failed [ 277.247689][T11617] FAT-fs (loop1): Directory bread(block 72) failed [ 277.264458][T11617] FAT-fs (loop1): Directory bread(block 73) failed [ 277.320088][ T7393] usb 6-1: USB disconnect, device number 12 [ 277.414474][T11521] BTRFS info (device loop3): balance: ended with status: 0 [ 277.516489][T11621] set_capacity_and_notify: 2 callbacks suppressed [ 277.516506][T11621] loop4: detected capacity change from 0 to 8192 [ 277.561931][T11623] loop1: detected capacity change from 0 to 512 [ 277.678797][T11621] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 277.697525][T11621] REISERFS (device loop4): using ordered data mode [ 277.704374][T11621] reiserfs: using flush barriers [ 277.719302][T11621] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.737433][T11621] REISERFS (device loop4): checking transaction log (loop4) [ 277.747281][T11623] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 277.761205][T11621] REISERFS (device loop4): Using r5 hash to sort names [ 277.772795][T11623] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 277.780969][T11623] System zones: 0-1, 15-15, 18-18, 34-34 [ 277.786221][T11621] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 277.789278][T11623] EXT4-fs (loop1): orphan cleanup on readonly fs [ 277.803626][T11623] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 277.818490][T11623] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 277.835354][T11623] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 277.871563][T11623] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2860: bg 0: block 40: padding at end of block bitmap is not set [ 277.919181][T11628] loop5: detected capacity change from 0 to 512 [ 277.945921][T11623] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 277.970398][T11628] EXT4-fs (loop5): Test dummy encryption mode enabled [ 277.979835][T11623] EXT4-fs (loop1): 1 truncate cleaned up [ 277.985577][T11623] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 278.015833][T11628] EXT4-fs (loop5): 1 truncate cleaned up [ 278.029200][T11628] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,data_err=abort,barrier,test_dummy_encryption,noauto_da_alloc,,errors=continue. Quota mode: none. [ 278.085888][T11623] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 278.108305][T11628] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2863: bg 0: block 7: invalid block bitmap [ 278.153785][T11628] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 278.233451][T11633] loop2: detected capacity change from 0 to 1024 [ 278.341377][ T9] hfsplus: b-tree write err: -5, ino 3 [ 278.586900][T11637] loop5: detected capacity change from 0 to 4096 [ 278.655102][T11643] loop2: detected capacity change from 0 to 256 [ 278.663762][T11637] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 278.709822][T11637] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 278.762071][T11637] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 278.839785][T11637] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 278.869772][T11637] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 278.918399][T11637] ntfs: volume version 3.1. [ 278.939754][T11637] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 279.004987][T11637] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 279.034918][T11649] loop3: detected capacity change from 0 to 256 [ 279.048240][T11637] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 279.119951][T11649] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 279.332227][ T7392] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 279.643323][T11641] loop1: detected capacity change from 0 to 40427 [ 279.744827][T11641] F2FS-fs (loop1): Found nat_bits in checkpoint [ 279.764109][T11669] loop3: detected capacity change from 0 to 1024 [ 279.776125][T11662] loop4: detected capacity change from 0 to 4096 [ 279.789976][ T7392] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.819806][ T7392] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.853267][T11662] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 279.877350][ T7392] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 279.880202][T11641] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 279.945466][ T7392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.002100][T11641] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 280.041045][ T7392] hub 3-1:4.0: USB hub found [ 280.089720][T11662] ntfs3: loop4: failed to convert "076c" to cp857 [ 280.124642][T11662] ntfs3: loop4: ino=5, "/" directory corrupted [ 280.225765][ T4184] attempt to access beyond end of device [ 280.225765][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 280.234130][T11654] UFO tlock:0xffffc900028e2240 [ 280.249960][ T7392] hub 3-1:4.0: 13 ports detected [ 280.254990][ T7392] usb 3-1: selecting invalid altsetting 1 [ 280.274372][ T7392] hub 3-1:4.0: Using single TT (err -22) [ 280.312577][ T7392] hub 3-1:4.0: insufficient power available to use all downstream ports [ 280.457165][ T4188] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 280.480327][ T7392] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 280.487458][ T7392] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 280.504050][ T4188] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 280.570744][ T7392] usb 3-1: USB disconnect, device number 14 [ 281.067893][T11688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2889'. [ 281.399519][T11705] vivid-000: disconnect [ 281.605306][ T8111] attempt to access beyond end of device [ 281.605306][ T8111] loop1: rw=1, want=2621800, limit=32768 [ 281.652823][ T276] blkno = 5002c, nblocks = 1 [ 281.657482][ T276] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 281.657482][ T276] [ 281.668602][T11675] XFS (loop4): Mounting V5 Filesystem [ 281.688637][ T276] ERROR: (device loop1): remounting filesystem as read-only [ 281.754706][T11675] XFS (loop4): Ending clean mount [ 281.807162][ T4193] XFS (loop4): Unmounting Filesystem [ 281.943068][T11707] (syz.3.2896,11707,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 281.986718][T11707] (syz.3.2896,11707,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 282.070867][T11707] JBD2: Ignoring recovery information on journal [ 282.168698][T11702] vivid-000: reconnect [ 282.250995][T11707] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 282.326487][T11728] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 282.387246][T11731] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.452777][T11730] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 282.621244][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 282.794333][T11743] set_capacity_and_notify: 7 callbacks suppressed [ 282.794349][T11743] loop1: detected capacity change from 0 to 512 [ 282.912938][T11743] EXT4-fs (loop1): Ignoring removed bh option [ 282.919106][T11743] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.933246][T11741] loop3: detected capacity change from 0 to 4096 [ 283.039824][T11743] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 283.083588][T11752] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.110493][T11743] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 283.147031][T11743] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 283.220793][T11743] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 283.353456][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 283.353469][ T26] audit: type=1800 audit(2000000029.720:137): pid=11743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2908" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 283.479922][ T6215] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 283.552183][T11766] loop5: detected capacity change from 0 to 2048 [ 283.615908][T11769] loop3: detected capacity change from 0 to 2048 [ 283.667825][T11769] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 283.722319][T11769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.741416][T11766] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 283.750554][ T6215] usb 3-1: Using ep0 maxpacket: 32 [ 283.828436][T11769] UDF-fs: error (device loop3): udf_rename: directory (ino 1345) has parent entry pointing to another inode (1376 != 1367) [ 283.880025][ T6215] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 283.889129][ T6215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.945862][ T6215] usb 3-1: config 0 descriptor?? [ 284.091159][T11780] loop1: detected capacity change from 0 to 2048 [ 284.128458][T11780] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 284.204785][T11790] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.211335][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop1 [ 284.225506][ T6215] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 284.283567][ T6215] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.314366][T11789] loop5: detected capacity change from 0 to 4096 [ 284.336736][ T6215] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 284.349906][ T6215] usb 3-1: media controller created [ 284.383517][ T6215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.430027][T11797] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.519847][ T6215] az6027: usb out operation failed. (-71) [ 284.533620][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.588129][ T6215] az6027: usb out operation failed. (-71) [ 284.597303][ T6215] stb0899_attach: Driver disabled by Kconfig [ 284.618824][ T6215] az6027: no front-end attached [ 284.618824][ T6215] [ 284.679840][ T6215] az6027: usb out operation failed. (-71) [ 284.713826][ T6215] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 284.768377][ T6215] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 284.818160][ T6215] dvb-usb: schedule remote query interval to 400 msecs. [ 284.845243][ T6215] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 284.901357][ T6215] usb 3-1: USB disconnect, device number 15 [ 284.989084][ T6215] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 285.087872][T11826] loop5: detected capacity change from 0 to 8 [ 285.147158][T11826] squashfs image failed sanity check [ 285.164407][T11830] loop1: detected capacity change from 0 to 2048 [ 285.259339][T11826] loop5: detected capacity change from 0 to 1024 [ 285.266358][T11830] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 285.325021][T11826] EXT4-fs (loop5): Ignoring removed bh option [ 285.349934][T11836] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.439790][ T6215] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 285.470831][T11826] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,stripe=0x000000000000000c,barrier=0x0000000000000004,nolazytime,grpjquota=,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 285.709913][ T6215] usb 3-1: Using ep0 maxpacket: 8 [ 285.830067][ T6215] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 285.854600][ T6215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.931931][ T6215] pvrusb2: Hardware description: Terratec Grabster AV400 [ 285.949257][ T6215] pvrusb2: ********** [ 285.953839][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 285.959505][ T6215] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 286.013971][ T6215] pvrusb2: Important functionality might not be entirely working. [ 286.022239][T11851] netlink: 'syz.1.2951': attribute type 11 has an invalid length. [ 286.034295][ T6215] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 286.076270][ T6215] pvrusb2: ********** [ 286.155890][T11856] loop1: detected capacity change from 0 to 512 [ 286.162411][ T2426] pvrusb2: Invalid write control endpoint [ 286.210623][T11840] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x1ffff [ 286.235543][T11840] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 286.280267][T11840] F2FS-fs (loop3): invalid crc value [ 286.294759][T11856] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.378573][T11840] F2FS-fs (loop3): Found nat_bits in checkpoint [ 286.421271][ T2426] pvrusb2: Invalid write control endpoint [ 286.427130][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 286.438254][T11856] ext4 filesystem being mounted at /627/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.495850][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 286.513139][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 286.547283][ T2426] pvrusb2: Device being rendered inoperable [ 286.558156][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 286.562694][T11840] F2FS-fs (loop3): Start checkpoint disabled! [ 286.572641][ T7405] usb 3-1: USB disconnect, device number 16 [ 286.591542][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 286.611560][T11840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 286.631190][ T2426] pvrusb2: Attached sub-driver cx25840 [ 286.636766][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 286.672711][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 286.725441][T11840] F2FS-fs (loop3): access invalid blkaddr:4043309056 [ 286.760950][T11840] CPU: 0 PID: 11840 Comm: syz.3.2946 Not tainted syzkaller #0 [ 286.768463][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 286.778543][T11840] Call Trace: [ 286.781854][T11840] [ 286.784804][T11840] dump_stack_lvl+0x188/0x250 [ 286.789642][T11840] ? show_regs_print_info+0x20/0x20 [ 286.794866][T11840] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 286.800689][T11840] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 286.806165][T11840] f2fs_map_blocks+0xbcd/0x3300 [ 286.811064][T11840] ? f2fs_force_buffered_io+0x680/0x680 [ 286.816664][T11840] ? xa_load+0x276/0x2a0 [ 286.820933][T11840] f2fs_mpage_readpages+0xc95/0x2260 [ 286.826248][T11840] ? dquot_release_reservation_block+0xa0/0xa0 [ 286.832424][T11840] ? f2fs_is_compress_backend_ready+0x99/0x120 [ 286.838598][T11840] ? f2fs_readahead+0x163/0x2f0 [ 286.843506][T11840] ? f2fs_set_data_page_dirty+0xad0/0xad0 [ 286.849256][T11840] read_pages+0x175/0x930 [ 286.853616][T11840] ? page_cache_ra_unbounded+0x940/0x940 [ 286.859299][T11840] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 286.864802][T11840] page_cache_ra_unbounded+0x838/0x940 [ 286.870300][T11840] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 286.876970][T11840] f2fs_readdir+0x496/0xda0 [ 286.881515][T11840] ? f2fs_fill_dentries+0xd10/0xd10 [ 286.886740][T11840] ? end_current_label_crit_section+0x14b/0x170 [ 286.893009][T11840] ? iterate_dir+0x10d/0x560 [ 286.897633][T11840] ? down_read_killable+0x1ce/0x340 [ 286.902847][T11840] ? fsnotify_perm+0x254/0x560 [ 286.907632][T11840] iterate_dir+0x218/0x560 [ 286.912062][T11840] ? f2fs_fill_dentries+0xd10/0xd10 [ 286.917395][T11840] __se_sys_getdents+0xf2/0x260 [ 286.922257][T11840] ? __x64_sys_getdents+0x80/0x80 [ 286.927297][T11840] ? fillonedir+0x4e0/0x4e0 [ 286.931820][T11840] ? vtime_user_exit+0x2c8/0x3e0 [ 286.936791][T11840] ? lockdep_hardirqs_on+0x94/0x140 [ 286.942030][T11840] do_syscall_64+0x4c/0xa0 [ 286.946472][T11840] ? clear_bhb_loop+0x30/0x80 [ 286.951168][T11840] ? clear_bhb_loop+0x30/0x80 [ 286.955863][T11840] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.961782][T11840] RIP: 0033:0x7f354b265f79 [ 286.966244][T11840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.985858][T11840] RSP: 002b:00007f35494c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 286.994282][T11840] RAX: ffffffffffffffda RBX: 00007f354b4dffa0 RCX: 00007f354b265f79 [ 287.002294][T11840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 287.010282][T11840] RBP: 00007f354b2fc7e0 R08: 0000000000000000 R09: 0000000000000000 [ 287.018262][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.026236][T11840] R13: 00007f354b4e0038 R14: 00007f354b4dffa0 R15: 00007ffce8fe3d08 [ 287.034231][T11840] [ 287.206641][T11840] attempt to access beyond end of device [ 287.206641][T11840] loop3: rw=524288, want=45072, limit=40427 [ 287.221987][T11840] attempt to access beyond end of device [ 287.221987][T11840] loop3: rw=0, want=45072, limit=40427 [ 287.418257][ T154] attempt to access beyond end of device [ 287.418257][ T154] loop3: rw=2049, want=40976, limit=40427 [ 287.658229][T11853] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2952 (11853) [ 287.731876][T11849] XFS (loop5): Mounting V5 Filesystem [ 287.792092][T11853] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 287.827150][T11849] XFS (loop5): Ending clean mount [ 287.880624][ T7853] XFS (loop5): Unmounting Filesystem [ 287.960001][T11853] BTRFS info (device loop4): force zlib compression, level 3 [ 287.975658][T11853] BTRFS info (device loop4): force clearing of disk cache [ 287.995041][T11853] BTRFS info (device loop4): setting nodatasum [ 288.009171][T11853] BTRFS info (device loop4): allowing degraded mounts [ 288.017837][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.024967][T11853] BTRFS info (device loop4): enabling disk space caching [ 288.039954][T11853] BTRFS info (device loop4): disk space caching is enabled [ 288.070212][T11853] BTRFS info (device loop4): has skinny extents [ 288.256680][T11894] set_capacity_and_notify: 3 callbacks suppressed [ 288.256694][T11894] loop1: detected capacity change from 0 to 512 [ 288.291227][T11893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2956'. [ 288.305891][ T6215] Bluetooth: hci4: command 0x0406 tx timeout [ 288.333813][T11894] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 288.357955][T11894] ext4 filesystem being mounted at /630/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.657660][T11913] hugetlbfs: syz.1.2964 (11913): Using mlock ulimits for SHM_HUGETLB is deprecated [ 288.657692][T11853] BTRFS info (device loop4): clearing free space tree [ 288.773345][T11853] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 288.863133][T11853] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 289.231725][T11936] loop5: detected capacity change from 0 to 128 [ 289.297598][T11936] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 289.320095][T11936] hpfs: filesystem error: improperly stopped [ 289.344551][T11936] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 289.375869][T11936] hpfs: You really don't want any checks? You are crazy... [ 289.400487][T11936] hpfs: hpfs_map_sector(): read error [ 289.440861][T11936] hpfs: code page support is disabled [ 289.459030][T11936] hpfs: hpfs_map_4sectors(): unaligned read [ 289.468265][T11936] hpfs: hpfs_map_4sectors(): unaligned read [ 289.480081][T11936] hpfs: filesystem error: unable to find root dir [ 289.559001][T11936] hpfs: hpfs_map_4sectors(): unaligned read [ 289.567608][T11936] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 289.607014][T11943] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2975'. [ 289.804910][T11947] loop3: detected capacity change from 0 to 1024 [ 289.963004][T11947] hfsplus: invalid length 32517 has been corrected to 255 [ 290.087800][ T9] hfsplus: b-tree write err: -5, ino 4 [ 290.187238][ T8111] hfsplus: b-tree write err: -5, ino 4 [ 290.326089][T11968] loop3: detected capacity change from 0 to 8 [ 290.361743][T11971] loop1: detected capacity change from 0 to 1024 [ 290.439331][T11968] squashfs image failed sanity check [ 290.537536][ T7405] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 290.580142][T11981] loop5: detected capacity change from 0 to 512 [ 290.593916][T11982] loop1: detected capacity change from 0 to 2048 [ 290.608480][T11968] loop3: detected capacity change from 0 to 1024 [ 290.664756][T11968] EXT4-fs (loop3): Ignoring removed bh option [ 290.674502][T11983] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.695981][T11968] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,stripe=0x000000000000000c,barrier=0x0000000000000004,nolazytime,grpjquota=,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 290.792686][T11981] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,barrier=0x000000000000008e,bsddf,errors=remount-ro,init_itable,auto_da_alloc=0x00000000000000eb,quota,. Quota mode: writeback. [ 290.815366][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.821974][ T7405] usb 3-1: Using ep0 maxpacket: 32 [ 290.925196][T11981] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.969886][ T7405] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 290.978034][ T7405] usb 3-1: config 2 has no interface number 0 [ 290.994993][ T7405] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 291.019793][ T7405] usb 3-1: config 2 interface 88 has no altsetting 0 [ 291.039168][T11990] loop3: detected capacity change from 0 to 2048 [ 291.045568][T11981] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz.5.2991: directory missing '..' [ 291.215871][T11995] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.236480][ T26] audit: type=1800 audit(2000000037.600:138): pid=11990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2992" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 291.259872][ T7405] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 291.268980][ T7405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.305529][ T7405] usb 3-1: Product: syz [ 291.320920][ T7405] usb 3-1: Manufacturer: syz [ 291.325563][ T7405] usb 3-1: SerialNumber: syz [ 291.390012][T11965] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 291.618881][T11965] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 292.139839][T12018] sp0: Synchronizing with TNC [ 292.151552][T12017] [U] è [ 292.319986][ T7405] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 292.349844][ T7405] asix: probe of 3-1:2.88 failed with error -71 [ 292.370747][ T7405] usb 3-1: USB disconnect, device number 17 [ 292.613485][T12004] loop1: detected capacity change from 0 to 65536 [ 292.702385][T12004] XFS (loop1): Mounting V5 Filesystem [ 292.753709][T12004] XFS (loop1): Ending clean mount [ 292.837550][ T4184] XFS (loop1): Unmounting Filesystem [ 292.938972][T12042] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 292.959961][T12042] EXT4-fs (loop3): Ignoring removed nobh option [ 292.975345][T12042] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 292.982088][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.011907][T12042] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 293.228684][T12051] tap0: tun_chr_ioctl cmd 1074025678 [ 293.235644][T12051] tap0: group set to 0 [ 293.241645][T12056] netlink: 'syz.4.3019': attribute type 1 has an invalid length. [ 293.274568][T12054] sctp: [Deprecated]: syz.3.3018 (pid 12054) Use of int in max_burst socket option. [ 293.274568][T12054] Use struct sctp_assoc_value instead [ 293.333834][T12060] set_capacity_and_notify: 1 callbacks suppressed [ 293.333851][T12060] loop5: detected capacity change from 0 to 2048 [ 293.416606][T12060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.651184][T12071] loop5: detected capacity change from 0 to 16 [ 293.663880][T12071] erofs: (device loop5): mounted with root inode @ nid 36. [ 293.682199][T12071] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 293.698578][ T146] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4868] [ 293.728402][T12071] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 293.749345][ T26] audit: type=1800 audit(2000000040.110:139): pid=12071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3025" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 294.432703][T12083] loop5: detected capacity change from 0 to 4096 [ 294.469471][T12091] netlink: 'syz.1.3033': attribute type 5 has an invalid length. [ 294.487181][T12089] loop2: detected capacity change from 0 to 4096 [ 294.522677][T12093] loop1: detected capacity change from 0 to 256 [ 294.541009][T12083] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 294.594240][T12089] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 294.618160][T12093] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.636269][ T26] audit: type=1800 audit(2000000041.000:140): pid=12083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3029" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 294.661977][T12089] ntfs3: loop2: Failed to load $Extend. [ 294.670538][T12093] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 294.690992][T12093] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d5a5a, utbl_chksum : 0xe619d30d) [ 294.784320][T12089] ntfs3: loop2: ino=1b, "file0" directory corrupted [ 294.815289][ T7853] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 294.836997][ T7853] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 294.868268][ T7853] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 295.081144][T12067] loop3: detected capacity change from 0 to 65536 [ 295.207787][T12108] loop5: detected capacity change from 0 to 4096 [ 295.266827][T12115] loop1: detected capacity change from 0 to 128 [ 295.325463][T12115] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 295.338913][T12067] XFS (loop3): Mounting V5 Filesystem [ 295.406674][T12067] XFS (loop3): Ending clean mount [ 295.425032][T12115] hpfs: filesystem error: improperly stopped [ 295.432118][T12115] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 295.439988][T12115] hpfs: You really don't want any checks? You are crazy... [ 295.447655][T12115] hpfs: hpfs_map_sector(): read error [ 295.466691][T12115] hpfs: code page support is disabled [ 295.472752][T12115] hpfs: hpfs_map_4sectors(): unaligned read [ 295.478714][T12115] hpfs: hpfs_map_4sectors(): unaligned read [ 295.516514][T12115] hpfs: filesystem error: unable to find root dir [ 295.541680][ T7853] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 295.548179][ T7853] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 295.686985][ T4188] XFS (loop3): Unmounting Filesystem [ 295.789505][T12122] loop5: detected capacity change from 0 to 4096 [ 295.899183][T12122] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.927756][T12126] loop1: detected capacity change from 0 to 2048 [ 296.100797][T12126] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.228463][T12134] trusted_key: encrypted_key: keylen parameter is missing [ 296.756313][ T26] audit: type=1326 audit(2000000043.120:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12156 comm="syz.3.3043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f354b265f79 code=0x0 [ 296.818056][T12155] hfsplus: invalid length 32517 has been corrected to 255 [ 296.887329][T12159] EXT4-fs (loop1): inline encryption not supported [ 296.945233][T12159] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,inlinecrypt,,errors=continue. Quota mode: none. [ 297.345254][T12173] program syz.5.3059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.911409][T12190] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x311d6643, utbl_chksum : 0xe619d30d) [ 298.212868][T12199] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.277986][T12175] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 298.318553][ T144] (kworker/u4:1,144,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 298.371562][T12203] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3073'. [ 298.404235][ T26] audit: type=1800 audit(2000000044.770:142): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3072" name="file1" dev="loop3" ino=1048764 res=0 errno=0 [ 298.511581][ T26] audit: type=1800 audit(2000000044.800:143): pid=12199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3072" name="file1" dev="loop3" ino=1048764 res=0 errno=0 [ 298.558006][ T7853] (syz-executor,7853,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 298.596889][T12207] FAT-fs (loop3): error, corrupted file size (i_pos 196, 3938) [ 298.635492][ T7853] (syz-executor,7853,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 298.675357][ T7853] ocfs2: Unmounting device (7,5) on (node local) [ 298.681966][T12207] FAT-fs (loop3): Filesystem has been set read-only [ 298.836940][T12213] netem: change failed [ 299.194799][T12229] set_capacity_and_notify: 5 callbacks suppressed [ 299.194817][T12229] loop5: detected capacity change from 0 to 256 [ 299.626107][ T26] audit: type=1326 audit(2000000045.990:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12242 comm="syz.1.3091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc18f33f79 code=0x0 [ 299.667071][T12246] loop3: detected capacity change from 0 to 1024 [ 299.701770][T12248] loop4: detected capacity change from 0 to 64 [ 299.813204][T12246] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 299.839783][ T7405] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 300.006027][T12246] EXT4-fs warning (device loop3): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 300.052830][ T26] audit: type=1326 audit(2000000046.420:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.4.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0dff0f79 code=0x7ff00000 [ 300.099796][ T7405] usb 6-1: Using ep0 maxpacket: 32 [ 300.110663][ T26] audit: type=1326 audit(2000000046.440:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.4.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0dff0f79 code=0x7ff00000 [ 300.133261][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.177490][ T26] audit: type=1326 audit(2000000046.440:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.4.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0dff0f79 code=0x7ff00000 [ 300.234806][ T26] audit: type=1326 audit(2000000046.440:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.4.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0dff0f79 code=0x7ff00000 [ 300.260023][ T7405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.276741][ T7405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.298183][ T7405] usb 6-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 300.327126][ T26] audit: type=1326 audit(2000000046.440:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.4.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0dff0f79 code=0x7ff00000 [ 300.349690][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.358199][ T7405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.387235][ T7405] usb 6-1: config 0 descriptor?? [ 300.414130][ T26] audit: type=1326 audit(2000000046.440:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12252 comm="syz.4.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce0dff0f79 code=0x7ff00000 [ 300.436494][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.648019][T12263] loop4: detected capacity change from 0 to 256 [ 300.906083][ T7405] wacom 0003:056A:00C5.001C: hidraw0: USB HID vff.fe Device [HID 056a:00c5] on usb-dummy_hcd.5-1/input0 [ 301.089716][ T7393] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 301.105048][ T13] usb 6-1: USB disconnect, device number 13 [ 301.293931][T12259] loop1: detected capacity change from 0 to 40427 [ 301.340360][T12259] F2FS-fs (loop1): invalid crc value [ 301.361772][T12259] F2FS-fs (loop1): Found nat_bits in checkpoint [ 301.441838][T12259] F2FS-fs (loop1): Start checkpoint disabled! [ 301.466081][T12259] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 301.510292][ T7393] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 301.519426][ T7393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.557721][ T7393] usb 3-1: config 0 descriptor?? [ 301.602430][ T7393] cp210x 3-1:0.0: cp210x converter detected [ 301.622594][T12274] loop4: detected capacity change from 0 to 40427 [ 301.667800][T12274] F2FS-fs (loop4): invalid crc value [ 301.691146][T12274] F2FS-fs (loop4): Found nat_bits in checkpoint [ 301.721238][ T4184] F2FS-fs (loop1): access invalid blkaddr:4043309056 [ 301.728198][ T4184] CPU: 1 PID: 4184 Comm: syz-executor Not tainted syzkaller #0 [ 301.735780][ T4184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 301.745860][ T4184] Call Trace: [ 301.749159][ T4184] [ 301.752110][ T4184] dump_stack_lvl+0x188/0x250 [ 301.756815][ T4184] ? show_regs_print_info+0x20/0x20 [ 301.762042][ T4184] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 301.767888][ T4184] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 301.773301][ T4184] f2fs_map_blocks+0xbcd/0x3300 [ 301.778212][ T4184] ? f2fs_force_buffered_io+0x680/0x680 [ 301.783797][ T4184] ? xa_load+0x276/0x2a0 [ 301.788076][ T4184] f2fs_mpage_readpages+0xc95/0x2260 [ 301.793399][ T4184] ? dquot_release_reservation_block+0xa0/0xa0 [ 301.799605][ T4184] ? f2fs_is_compress_backend_ready+0x99/0x120 [ 301.805795][ T4184] ? f2fs_readahead+0x163/0x2f0 [ 301.810672][ T4184] ? f2fs_set_data_page_dirty+0xad0/0xad0 [ 301.816413][ T4184] read_pages+0x175/0x930 [ 301.820773][ T4184] ? page_cache_ra_unbounded+0x940/0x940 [ 301.826437][ T4184] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 301.831925][ T4184] page_cache_ra_unbounded+0x838/0x940 [ 301.837453][ T4184] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 301.844006][ T4184] f2fs_readdir+0x496/0xda0 [ 301.848558][ T4184] ? f2fs_fill_dentries+0xd10/0xd10 [ 301.853794][ T4184] ? end_current_label_crit_section+0x14b/0x170 [ 301.860069][ T4184] ? iterate_dir+0x10d/0x560 [ 301.864689][ T4184] ? down_read_killable+0x1ce/0x340 [ 301.869917][ T4184] ? fsnotify_perm+0x254/0x560 [ 301.874721][ T4184] iterate_dir+0x218/0x560 [ 301.879221][ T4184] ? f2fs_fill_dentries+0xd10/0xd10 [ 301.884464][ T4184] __se_sys_getdents64+0xf2/0x270 [ 301.889517][ T4184] ? __x64_sys_getdents64+0x80/0x80 [ 301.894752][ T4184] ? filldir+0x720/0x720 [ 301.899020][ T4184] ? vtime_user_exit+0x2c8/0x3e0 [ 301.903997][ T4184] ? lockdep_hardirqs_on+0x94/0x140 [ 301.909258][ T4184] do_syscall_64+0x4c/0xa0 [ 301.913721][ T4184] ? clear_bhb_loop+0x30/0x80 [ 301.918419][ T4184] ? clear_bhb_loop+0x30/0x80 [ 301.923123][ T4184] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.929082][ T4184] RIP: 0033:0x7fbc18f5c933 [ 301.933521][ T4184] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 301.953242][ T4184] RSP: 002b:00007ffee5edc7f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 301.961690][ T4184] RAX: ffffffffffffffda RBX: 00005555698bba30 RCX: 00007fbc18f5c933 [ 301.969685][ T4184] RDX: 0000000000008000 RSI: 00005555698bba60 RDI: 0000000000000005 [ 301.977714][ T4184] RBP: 00005555698bba60 R08: 00007fbc19182cc0 R09: 0000000000000001 [ 301.985721][ T4184] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555698bba34 [ 301.993745][ T4184] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffee5edeaa0 [ 302.001757][ T4184] [ 302.004888][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.026563][ T4184] attempt to access beyond end of device [ 302.026563][ T4184] loop1: rw=524288, want=45072, limit=40427 [ 302.037890][T12274] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 302.052903][ T4184] attempt to access beyond end of device [ 302.052903][ T4184] loop1: rw=0, want=45072, limit=40427 [ 302.206294][ T7065] attempt to access beyond end of device [ 302.206294][ T7065] loop1: rw=2049, want=40984, limit=40427 [ 302.269913][ T7393] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 302.333501][ T7393] usb 3-1: cp210x converter now attached to ttyUSB0 [ 302.540273][ T7393] usb 3-1: USB disconnect, device number 18 [ 302.560444][ T7393] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 302.621186][ T7393] cp210x 3-1:0.0: device disconnected [ 302.658045][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.675730][T12294] loop4: detected capacity change from 0 to 1024 [ 302.733731][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.743029][T12294] hfsplus: invalid length 32517 has been corrected to 255 [ 302.823572][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.934423][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.012727][T12298] loop5: detected capacity change from 0 to 256 [ 303.094388][T12298] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 303.106501][T12300] loop4: detected capacity change from 0 to 256 [ 303.136134][T12300] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 303.210949][T12303] sctp: [Deprecated]: syz.2.3113 (pid 12303) Use of int in maxseg socket option. [ 303.210949][T12303] Use struct sctp_assoc_value instead [ 303.254457][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 303.254473][ T26] audit: type=1800 audit(2000000049.620:225): pid=12300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3112" name="file1" dev="loop4" ino=1048765 res=0 errno=0 [ 303.281676][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.379356][T12304] FAT-fs (loop4): error, corrupted file size (i_pos 196, 3938) [ 303.399506][ T26] audit: type=1800 audit(2000000049.630:226): pid=12300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3112" name="file1" dev="loop4" ino=1048765 res=0 errno=0 [ 303.450437][T12304] FAT-fs (loop4): Filesystem has been set read-only [ 303.602732][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3116'. [ 304.029568][T12326] loop4: detected capacity change from 0 to 4096 [ 304.082892][T12326] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 304.190912][T12326] ntfs3: loop4: Failed to load $Extend. [ 304.200137][ T6220] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 304.346963][T12321] chnl_net:caif_netlink_parms(): no params data found [ 304.441596][T12329] loop2: detected capacity change from 0 to 40427 [ 304.470966][T12329] F2FS-fs (loop2): invalid crc value [ 304.501612][T12329] F2FS-fs (loop2): Found nat_bits in checkpoint [ 304.560136][ T6220] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 304.584420][ T6220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.608037][T12329] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 304.651466][ T6220] usb 6-1: config 0 descriptor?? [ 304.706795][T12321] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.714310][T12321] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.723650][T12321] device bridge_slave_0 entered promiscuous mode [ 304.751102][T12321] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.768512][T12321] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.787363][T12321] device bridge_slave_1 entered promiscuous mode [ 304.858503][T12321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.879507][T12321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.915382][ T6220] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 304.934408][ T6220] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 304.978514][ T9] device macvlan0 left promiscuous mode [ 304.990072][ T9] device batadv0 left promiscuous mode [ 305.028348][ T9] device hsr_slave_0 left promiscuous mode [ 305.038748][ T9] device hsr_slave_1 left promiscuous mode [ 305.052383][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.069950][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.088108][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.099939][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.119337][ T9] device bridge_slave_1 left promiscuous mode [ 305.125707][ T6220] [drm:udl_init] *ERROR* Selecting channel failed [ 305.132495][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.157238][ T6220] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 305.165604][ T6220] [drm] Initialized udl on minor 2 [ 305.180815][ T9] device bridge_slave_0 left promiscuous mode [ 305.187175][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.195447][ T6220] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 305.220714][ T6220] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 305.244930][ T6220] usb 6-1: USB disconnect, device number 14 [ 305.255563][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 305.268795][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 305.279244][ T13] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 305.314909][ T9] device veth1_macvtap left promiscuous mode [ 305.340467][ T9] device veth0_macvtap left promiscuous mode [ 305.351400][ T9] device veth1_vlan left promiscuous mode [ 305.358152][ T9] device veth0_vlan left promiscuous mode [ 305.470729][T12370] Can't find ip_set type [ 305.720787][ T9] team0 (unregistering): Port device team_slave_1 removed [ 305.741891][ T9] team0 (unregistering): Port device team_slave_0 removed [ 305.788700][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.808205][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.959718][ T9] bond0 (unregistering): Released all slaves [ 305.979825][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 306.058103][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3132'. [ 306.071801][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3132'. [ 306.117315][T12321] team0: Port device team_slave_0 added [ 306.129768][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3132'. [ 306.142731][T12321] team0: Port device team_slave_1 added [ 306.215012][T12321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.285756][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.312348][T12321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.370016][T12321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.405422][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.431510][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.487344][T12321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.743313][T12321] device hsr_slave_0 entered promiscuous mode [ 306.776725][T12384] loop5: detected capacity change from 0 to 32768 [ 306.796484][T12321] device hsr_slave_1 entered promiscuous mode [ 306.896840][T12321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.943641][T12321] Cannot create hsr debugfs directory [ 307.017540][T12402] loop2: detected capacity change from 0 to 256 [ 307.074060][T12399] loop3: detected capacity change from 0 to 2048 [ 307.120935][T12402] exfat: Deprecated parameter 'utf8' [ 307.207608][T12402] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 307.219663][ C0] sched: RT throttling activated [ 307.226182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.426674][T12399] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 307.531499][T12399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.906083][T12389] loop4: detected capacity change from 0 to 262144 [ 307.961220][T12389] F2FS-fs (loop4): invalid crc value [ 307.982735][T12321] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 307.998744][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.023737][T12321] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.040835][T12389] F2FS-fs (loop4): Found nat_bits in checkpoint [ 308.103823][T12389] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 308.126929][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 308.159796][T12321] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.198250][T12321] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.239286][T12389] F2FS-fs (loop4): inode (7) has corrupted xattr [ 308.386206][T12430] loop5: detected capacity change from 0 to 1764 [ 308.716337][T12321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.813376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.831168][T12456] loop4: detected capacity change from 0 to 256 [ 308.848004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.887021][T12321] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.924659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.948648][T12456] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.970617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.992766][T12456] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 309.019972][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.027127][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.044732][T12456] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 309.083356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.132184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.173064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.202039][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.209196][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.243154][T12461] loop5: detected capacity change from 0 to 256 [ 309.278154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.318107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.327303][T12461] exfat: Deprecated parameter 'utf8' [ 309.357108][T12461] exfat: Deprecated parameter 'namecase' [ 309.386188][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.398597][T12461] exfat: Deprecated parameter 'namecase' [ 309.424813][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.431175][T12461] exfat: Deprecated parameter 'utf8' [ 309.486605][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.517142][T12461] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 309.540501][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.560492][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.579177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.617792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.650948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.671421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.693165][T12321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.811333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.818858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.830905][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.890898][T12321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.077182][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 310.100695][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.147650][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.174591][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.216646][T12321] device veth0_vlan entered promiscuous mode [ 310.229944][ T4237] Bluetooth: hci0: command 0x040f tx timeout [ 310.254277][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.268743][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.324212][T12321] device veth1_vlan entered promiscuous mode [ 310.341116][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.414101][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.432967][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.473783][T12321] device veth0_macvtap entered promiscuous mode [ 310.495791][T12321] device veth1_macvtap entered promiscuous mode [ 310.515771][T12497] loop2: detected capacity change from 0 to 128 [ 310.550450][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.582056][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.608929][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.619961][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.630937][T12497] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 310.636191][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.653105][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.663055][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.673826][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.685033][T12321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.693854][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.694808][T12497] ext4 filesystem being mounted at /691/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 310.740470][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.796415][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.829461][ T7065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.895245][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.925388][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.947064][T12493] loop5: detected capacity change from 0 to 32768 [ 310.960186][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.973249][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.005056][T12493] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 scanned by syz.5.3163 (12493) [ 311.023677][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.102525][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.134657][T12493] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 311.149673][T12321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.176429][T12493] BTRFS info (device loop5): using free space tree [ 311.188498][T12321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.198717][T12493] BTRFS info (device loop5): has skinny extents [ 311.216001][T12321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.251672][T12503] udevd[12503]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 311.265499][T12501] loop3: detected capacity change from 0 to 4096 [ 311.274082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.294981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.346518][T12501] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 311.390652][T12321] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.435649][T12321] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.515737][T12321] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.553297][T12493] BTRFS info (device loop5): enabling ssd optimizations [ 311.581297][T12321] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.872076][ T7065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.897133][ T7065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.975798][ T1181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 312.042642][T12528] udevd[12528]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 312.076869][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.088814][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.142196][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.425632][T12510] loop2: detected capacity change from 0 to 40427 [ 312.589561][T12538] netlink: 'syz.4.3170': attribute type 1 has an invalid length. [ 312.605688][T12510] F2FS-fs (loop2): Found nat_bits in checkpoint [ 312.630357][T12538] NCSI netlink: No device for ifindex 131092 [ 312.695565][ T7410] Bluetooth: hci0: command 0x0419 tx timeout [ 312.714541][T12510] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 312.919076][ T4191] attempt to access beyond end of device [ 312.919076][ T4191] loop2: rw=2049, want=45104, limit=40427 [ 312.939150][T12549] loop4: detected capacity change from 0 to 1024 [ 313.125567][ T7393] hid-generic 0004:0004:FFFF0001.001D: unknown main item tag 0x0 [ 313.173795][ T7393] hid-generic 0004:0004:FFFF0001.001D: unknown main item tag 0x0 [ 313.188656][ T7393] hid-generic 0004:0004:FFFF0001.001D: unknown main item tag 0x0 [ 313.242052][ T144] hfsplus: b-tree write err: -5, ino 4 [ 313.292428][T12561] udevd[12561]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 313.330585][ T7393] hid-generic 0004:0004:FFFF0001.001D: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 313.355307][T12563] loop5: detected capacity change from 0 to 512 [ 313.437623][T12563] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 313.491119][T12563] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 313.521467][T12563] EXT4-fs (loop5): 1 truncate cleaned up [ 313.527649][T12563] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback. [ 313.624519][T12565] loop4: detected capacity change from 0 to 8192 [ 313.696803][T12565] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 313.721594][T12565] REISERFS (device loop4): using ordered data mode [ 313.743843][T12565] reiserfs: using flush barriers [ 313.754333][T12565] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 313.816644][T12565] REISERFS (device loop4): checking transaction log (loop4) [ 313.830994][T12565] REISERFS (device loop4): Using r5 hash to sort names [ 313.938121][T12565] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 313.994779][T12565] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 314.074160][ T7408] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 314.526282][ T7408] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.547637][ T7408] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.559344][ T7408] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 314.569194][ T7408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.597533][ T7408] usb 7-1: config 0 descriptor?? [ 314.791776][T12634] loop5: detected capacity change from 0 to 4096 [ 314.842382][T12634] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 314.883084][T12634] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 314.917016][ T4387] udevd[4387]: incorrect nilfs2 checksum on /dev/loop5 [ 314.956733][T12642] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.085079][ T7408] hid-led 0003:0FC5:B080.001E: unknown main item tag 0x0 [ 315.262792][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.510633][ T7408] hid-led: probe of 0003:0FC5:B080.001E failed with error -71 [ 315.561308][ T7408] usb 7-1: USB disconnect, device number 2 [ 315.568503][T12650] netlink: 'syz.2.3212': attribute type 2 has an invalid length. [ 315.615052][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'. [ 315.687262][T12653] netlink: 'syz.5.3211': attribute type 15 has an invalid length. [ 316.007000][T12661] netlink: 'syz.4.3215': attribute type 1 has an invalid length. [ 316.139616][T12666] loop6: detected capacity change from 0 to 16 [ 316.214415][T12666] erofs: (device loop6): mounted with root inode @ nid 36. [ 316.248730][T12666] erofs: (device loop6): erofs_read_inode: unsupported i_format 36 of nid 37 [ 316.296462][T12682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3223'. [ 316.371220][T12684] tun0: tun_chr_ioctl cmd 1074025677 [ 316.376705][T12684] tun0: linktype set to 825 [ 316.533796][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3230'. [ 316.946785][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.953278][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.060753][T12714] device macsec0 entered promiscuous mode [ 317.063560][T12703] loop5: detected capacity change from 0 to 40427 [ 317.075955][T12714] device macsec0 left promiscuous mode [ 317.101485][T12703] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 317.124315][T12703] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 317.143853][T12703] F2FS-fs (loop5): invalid crc value [ 317.157468][T12703] F2FS-fs (loop5): Found nat_bits in checkpoint [ 317.275204][T12703] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 317.288515][T12703] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 317.451831][T12726] loop2: detected capacity change from 0 to 64 [ 317.640086][T12728] loop5: detected capacity change from 0 to 128 [ 317.709460][T12728] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 317.726190][ T5198] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 317.739428][T12728] hpfs: filesystem error: improperly stopped [ 317.763842][T12728] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 317.794838][T12728] hpfs: You really don't want any checks? You are crazy... [ 317.806571][T12728] hpfs: hpfs_map_sector(): read error [ 317.819752][T12728] hpfs: code page support is disabled [ 317.860234][T12728] hpfs: hpfs_map_4sectors(): unaligned read [ 317.866278][T12728] hpfs: hpfs_map_4sectors(): unaligned read [ 317.883110][T12728] hpfs: filesystem error: unable to find root dir [ 317.980015][ T5198] usb 7-1: Using ep0 maxpacket: 8 [ 318.038001][T12742] loop5: detected capacity change from 0 to 2048 [ 318.085317][T12742] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.270060][ T5198] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 318.287928][ T5198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.308155][ T5198] usb 7-1: Product: syz [ 318.313138][ T5198] usb 7-1: Manufacturer: syz [ 318.339242][ T5198] usb 7-1: SerialNumber: syz [ 318.344797][T12754] loop2: detected capacity change from 0 to 256 [ 318.348729][ T5198] usb 7-1: config 0 descriptor?? [ 318.452316][ T5198] gspca_main: se401-2.14.0 probing 047d:5003 [ 318.624455][T12767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3262'. [ 318.694430][T12769] netlink: 'syz.2.3263': attribute type 1 has an invalid length. [ 318.917554][T12782] loop2: detected capacity change from 0 to 256 [ 318.998452][T12782] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 319.117583][ T5198] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input37 [ 319.134322][T12789] loop3: detected capacity change from 0 to 512 [ 319.235969][T12797] loop2: detected capacity change from 0 to 1024 [ 319.293394][T12798] udevd[12798]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory [ 319.329168][T12797] EXT4-fs (loop2): Ignoring removed orlov option [ 319.359419][T12797] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 319.424141][T12797] System zones: 0-1, 3-12 [ 319.441215][T12797] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: none. [ 319.466576][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.507304][ T7408] usb 7-1: USB disconnect, device number 3 [ 319.678499][T12815] loop5: detected capacity change from 0 to 512 [ 319.724621][T12818] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3281'. [ 319.853005][T12815] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 319.889945][T12815] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.102593][T12830] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 320.636216][T12850] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 320.699073][T12850] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 320.818323][T12850] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,mblk_io_submit,quota,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: writeback. [ 320.878314][T12850] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3294: bg 0: block 234: padding at end of block bitmap is not set [ 320.911347][T12854] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 320.922923][T12850] EXT4-fs (loop3): Remounting filesystem read-only [ 320.951436][T12824] F2FS-fs (loop2): invalid crc value [ 320.997258][T12854] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 321.023712][T12858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.034271][T12824] F2FS-fs (loop2): Found nat_bits in checkpoint [ 321.249849][T12824] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 321.518312][T12882] set_capacity_and_notify: 6 callbacks suppressed [ 321.518328][T12882] loop3: detected capacity change from 0 to 64 [ 321.538976][T12878] loop5: detected capacity change from 0 to 32768 [ 321.574035][T12880] loop6: detected capacity change from 0 to 4096 [ 321.589370][ T4191] attempt to access beyond end of device [ 321.589370][ T4191] loop2: rw=2049, want=45104, limit=40427 [ 321.676518][T12880] EXT4-fs (loop6): inline encryption not supported [ 321.688325][T12878] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.3303 (12878) [ 321.702291][T12880] EXT4-fs (loop6): Test dummy encryption mode enabled [ 321.732680][T12878] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 321.741451][T12878] BTRFS info (device loop5): using free space tree [ 321.748014][T12878] BTRFS info (device loop5): has skinny extents [ 321.900701][T12880] EXT4-fs (loop6): mounted filesystem without journal. Opts: inlinecrypt,usrquota,test_dummy_encryption=v1,data_err=ignore,,errors=continue. Quota mode: writeback. [ 321.958152][T12885] loop4: detected capacity change from 0 to 32768 [ 321.972751][T12880] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 322.010640][T12890] udevd[12890]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 322.102960][T12885] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.3304 (12885) [ 322.122246][T12321] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /13/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 322.148589][T12321] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 4c8, entries 1, max 4(0), depth 0(0) [ 322.190085][T12321] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 4c8, entries 1, max 4(0), depth 0(0) [ 322.330502][T12910] loop2: detected capacity change from 0 to 2048 [ 322.376783][T12878] BTRFS info (device loop5): enabling ssd optimizations [ 322.393064][T12913] udevd[12913]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 322.490092][ T4178] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4178) [ 322.540824][T12910] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 323.096581][T12923] loop4: detected capacity change from 0 to 4096 SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 323.154758][ T144] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.228820][T12923] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 323.276466][ T144] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.513186][ T26] audit: type=1800 audit(2000000069.880:227): pid=12923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3315" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 323.729356][ T144] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.868131][ T144] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.053365][ T144] device hsr_slave_0 left promiscuous mode [ 325.060483][ T144] device hsr_slave_1 left promiscuous mode [ 325.068314][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.078870][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.094586][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.104738][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.112700][ T144] device bridge_slave_1 left promiscuous mode [ 325.118933][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.130140][ T144] device bridge_slave_0 left promiscuous mode [ 325.136319][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.148523][ T144] device veth1_macvtap left promiscuous mode [ 325.154741][ T144] device veth0_macvtap left promiscuous mode [ 325.161419][ T144] device veth1_vlan left promiscuous mode [ 325.167352][ T144] device veth0_vlan left promiscuous mode [ 325.348077][ T144] team0 (unregistering): Port device team_slave_1 removed [ 325.365840][ T144] team0 (unregistering): Port device team_slave_0 removed [ 325.379438][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.394806][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.476655][ T144] bond0 (unregistering): Released all slaves [ 326.721542][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.813228][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.854345][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.898356][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.017510][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.096766][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.149577][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.231287][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.409380][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.456026][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.537621][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.595437][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.828333][ T144] tipc: Disabling bearer [ 327.834616][ T144] tipc: Disabling bearer [ 327.851974][ T144] tipc: Left network mode [ 327.877810][ T144] tipc: Left network mode [ 327.904773][ T144] tipc: Left network mode [ 328.552541][ T144] IPVS: stopping master sync thread 5521 ... [ 328.992575][ T144] device hsr_slave_0 left promiscuous mode [ 328.998800][ T144] device hsr_slave_1 left promiscuous mode [ 329.005539][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.014063][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.022589][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.030126][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.037768][ T144] device bridge_slave_1 left promiscuous mode [ 329.044168][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.057696][ T144] device bridge_slave_0 left promiscuous mode [ 329.064454][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.079175][ T144] device hsr_slave_0 left promiscuous mode [ 329.085817][ T144] device hsr_slave_1 left promiscuous mode [ 329.093631][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.101503][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.109608][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.117117][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.125601][ T144] device bridge_slave_1 left promiscuous mode [ 329.131890][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.141149][ T144] device bridge_slave_0 left promiscuous mode [ 329.147325][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.161581][ T144] device hsr_slave_0 left promiscuous mode [ 329.167793][ T144] device hsr_slave_1 left promiscuous mode [ 329.177079][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.184888][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.194213][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.202965][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.211738][ T144] device bridge_slave_1 left promiscuous mode [ 329.217981][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.226914][ T144] device bridge_slave_0 left promiscuous mode [ 329.233707][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.251435][ T144] device veth1_macvtap left promiscuous mode [ 329.257453][ T144] device veth0_macvtap left promiscuous mode [ 329.264300][ T144] device veth1_vlan left promiscuous mode [ 329.270921][ T144] device veth0_vlan left promiscuous mode [ 329.281286][ T144] device veth1_macvtap left promiscuous mode [ 329.287332][ T144] device veth0_macvtap left promiscuous mode [ 329.297393][ T144] device veth1_vlan left promiscuous mode [ 329.309173][ T144] device veth0_vlan left promiscuous mode [ 329.317253][ T144] device veth1_macvtap left promiscuous mode [ 329.323333][ T144] device veth0_macvtap left promiscuous mode [ 329.329820][ T144] device veth1_vlan left promiscuous mode [ 329.335788][ T144] device veth0_vlan left promiscuous mode [ 329.698712][ T144] team0 (unregistering): Port device team_slave_1 removed [ 329.716656][ T144] team0 (unregistering): Port device team_slave_0 removed [ 329.734070][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.750755][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.819413][ T144] bond0 (unregistering): Released all slaves [ 329.968186][ T144] team0 (unregistering): Port device team_slave_1 removed [ 329.983477][ T144] team0 (unregistering): Port device team_slave_0 removed [ 329.995765][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.014238][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.090043][ T144] bond0 (unregistering): Released all slaves [ 330.164692][ T144] bond1 (unregistering): Released all slaves [ 330.255538][ T144] team0 (unregistering): Port device team_slave_1 removed [ 330.275921][ T144] team0 (unregistering): Port device team_slave_0 removed [ 330.296530][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.313272][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.387547][ T144] bond0 (unregistering): Released all slaves