last executing test programs: 3.777232284s ago: executing program 0 (id=5004): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) 3.454982432s ago: executing program 0 (id=5010): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x1, 0x56595559, 0x9, 0x7, 0x932b, 0x2, 0x80004001, 0x1, 0x0, 0x1, 0x7}}) 3.231840773s ago: executing program 0 (id=5015): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x4000, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="cff89a75b5098722601d77398b1ac42a210e97c762deb6b32e640201be5cb4164d036ebb2137ca4f20c7f98f3238f72c162c350e9085ccc209a8f4c5ed56bdee129a07f2447f396e2098d5df30dde3403ed67c9aa5928c547953fac42a3a"]) 2.868810976s ago: executing program 5 (id=5022): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="007a93b9d6cfc45636b907277d9dbc239676439a4b03adcc20dc27453a1a833c802e8650810eff9fdc8bb6e768076d890752db516f649dec5891435b1f58f186364bdaa1125ea94a5612d57018cabe3abbf321deff9ed2c8785be41507def3240220d808940ac2bb251873ea3f1bdb0d5ee04cf4ffd184dbadc5c6f95ad3a49841645535cd00151145a07f0000007792c93473b9878343b5f12ef5329eb2f14caa61dc0dd0aa6d91ebd9522a076cb40792e8541570a733ad433f6fc926cfa2890a6005fd74a822076e172f1f5ca254e5936e8c3eb5b4d966f1d6b8772fcc0f000f85bd3ed8c95c267f4cd1acd681b1"], 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") open$dir(&(0x7f0000000000)='./file2\x00', 0x80000, 0x100) 2.759733846s ago: executing program 1 (id=5023): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) 2.542060447s ago: executing program 1 (id=5024): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}}, 0x8010) 2.508255308s ago: executing program 5 (id=5025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f00000084c0)="ee7e8fbebf"}, 0x20) 2.266411621s ago: executing program 1 (id=5026): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000380007012cbd7000fedbdf25157c00000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 2.194976937s ago: executing program 5 (id=5030): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$inet6(r0, &(0x7f0000002040)={0xa, 0x4e21, 0x10000, @local, 0x5}, 0x1c) 2.09117188s ago: executing program 1 (id=5031): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000002040)=@ethtool_per_queue_op={0x4b, 0x1, [0xffffffff, 0x81, 0xf8f0, 0x81, 0xcd, 0xa6ae, 0x401, 0x6, 0x9, 0x9, 0x94, 0x2, 0x0, 0x8, 0x0, 0x7e, 0x0, 0x0, 0x9, 0x7fffffff, 0x1, 0x75, 0x3ff, 0x4, 0xfffffffc, 0x3, 0x2, 0x200, 0x9da, 0x4, 0x0, 0x2, 0x8, 0x9, 0x200, 0x596f, 0x5, 0x2, 0x100000, 0x4, 0x1, 0x7f, 0x0, 0x8, 0x7, 0x10, 0x8, 0x7, 0x401, 0x1, 0x10000, 0x9, 0x5, 0x0, 0x66004002, 0x9, 0x7, 0x0, 0x3, 0xbd99, 0x180000, 0x3, 0x8, 0x7, 0x1, 0xd, 0x5, 0xfffffffd, 0xe6, 0x2, 0x2, 0x6, 0x9, 0x0, 0xffffffff, 0x0, 0x8, 0x7fffffff, 0xe170, 0x3, 0x5, 0xfffffffe, 0x8, 0x7, 0x5, 0x7, 0xfffffffd, 0x10, 0xffc00000, 0x3eee, 0xf47, 0x1, 0x30, 0x7f, 0x1, 0x400, 0x5, 0x5, 0xffff, 0x9d0, 0x6e0, 0x4, 0x0, 0x9, 0x2fd, 0x9, 0xa, 0xf, 0x30a, 0x5, 0xf8d7, 0x7ff, 0x4a40226c, 0x9, 0x5, 0x3, 0x6c4, 0x8001, 0xfff, 0x1, 0x9, 0x6, 0xb, 0x0, 0xfffffffb, 0x82d3, 0x8, 0x62]}}) 1.967550226s ago: executing program 5 (id=5033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.853818184s ago: executing program 1 (id=5035): syz_clone3(&(0x7f0000000580)={0x4f142000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x50000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.723365486s ago: executing program 3 (id=5037): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 1.704570724s ago: executing program 5 (id=5038): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'ip6_vti0\x00', 0x2}, 0x18) 1.538561861s ago: executing program 2 (id=5040): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x3ff, 0x120) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) 1.473992975s ago: executing program 3 (id=5041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) 1.473314273s ago: executing program 5 (id=5042): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000e00)='./file0\x00', 0x2008410, &(0x7f0000000180)=ANY=[], 0x1, 0x556e, &(0x7f000000b000)="$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") newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x1000) 1.36790134s ago: executing program 1 (id=5043): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.277449309s ago: executing program 4 (id=5044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@ipv6_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0) 1.239841057s ago: executing program 2 (id=5045): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000709000010d1f2b9bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x5}, 0x94) 1.174486293s ago: executing program 3 (id=5046): r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x8009, 0x0}) 1.068782992s ago: executing program 0 (id=5047): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000340)) 1.048000046s ago: executing program 4 (id=5048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x138}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 982.32096ms ago: executing program 2 (id=5049): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 981.236277ms ago: executing program 3 (id=5050): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)) 811.295706ms ago: executing program 4 (id=5051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x60, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) 810.761018ms ago: executing program 2 (id=5052): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="4500000006"], 0x45) 716.709908ms ago: executing program 3 (id=5053): io_setup(0xbf3, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x8000023, 0x800000000000087, &(0x7f00000001c0), &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000100)={&(0x7f00000002c0), 0x8}) 562.296165ms ago: executing program 2 (id=5054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff6c00000000000000000c00020001000000150000000c000c800600e9ffd33f0000060003000100"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 561.142521ms ago: executing program 4 (id=5055): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGKEY(r0, 0x8040453f, 0x0) 401.427365ms ago: executing program 3 (id=5056): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {0xffff, 0x10}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x920, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 386.389461ms ago: executing program 2 (id=5057): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x10042, &(0x7f0000000440)=ANY=[@ANYBLOB='discard=0x00000000000000f4,usrquota,errors=continue,iocharset=cp861,iocharset=iso8859-14,integrity,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00\x00'], 0x24, 0x623a, &(0x7f0000002780)="$eJzs3c1vHGcdB/Df7JtfQtOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqAXXQ2M/jzE53vXYS76wzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6I7eZ4PiKGSxHV9tv/PBvxekR8fDzi/oM769Xi8/vsx/f//I8//OTYj/7+p+GZ//7lVv+Naevdvv3b//z17qPvLwAAAHRRWZZlkT7mn4yIQfpsDwA8/fLrf5nk5eqFqzcXrD9qtVqtPoJ1XTnZ3XoREZv1bar3DE7HA8ARsxmftN0FWiT/ThtExLG2OwEstKLtDnAo7j+4s16kfIv668HaTnu+FmQs/81i9/6OadNZmteYzOv5tRX9eG5Kf1bm1IdFkvPvNfO/stM+Susddv7zMi3/0c6tT52T8+838294evLvTcy/q3L+gwPl35c/AAAAAAAssPz7/xMtn/9devxd2Ze9zv+uzakPAAAAAAAAAPCkHXT8v0Fj/L9dxv8DAACAhVV9Vq/87vjDZdP+Flu1/HIR8UxjfaBj0s0yq233AwAAAAAAAAAAAAC6ZLBzDe/lImIYEc+srpZlWX3VNeuDetztj7qu7z90Wds/5AEAYMfHxxv38hcRyxFxOf2tv+Hq6mpZLq+slqvlylJ+PztaWi5Xap9r87RatjTaxxviwaisvtlybbu6WZ+XZ7U3v1/1WKOyv4+OzUeLgQNAROy8Gt2f9or0P69XR1NZPhstv8nhiNjj+OeIcvyzH20/TwEAAIDDV5ZlWaQ/530ynfPvtd0pAGAu8ut/87yAWq1Wq9Xqp6+uKye7Wy8iYrO+TfWewXD8AHDEbMYnbXeBFsm/0wYR8ULbnQAWWtF2BzgU9x/cWS9SvkX99SCN756vBRnLf7PY3i5vP2k6S/Mak3k9v7aiH89N6c/zc+rDIsn595r5X9lpH6X1Hj//cuzXhG1dYzQt/2o/T7TQn7bl/PvN/BsO+/ifl63oTcy/q3L+gwPl35c/AAAAAAAssPz7/xMLdf539Ki7M9Ne53/XJm5xeH0BAAAAAAAAgCfl/oM76/m+13z+/wsT1nP/59Mp51/Iv5Ny/r1G/l9trNevzd97+2H+/35wZ/2Pt/71+Tzdb/5LeaZIz6wiPSOK9EjFIE0fZ+8+a2vYH1WPNCx6/UG65qccvhvX4npsxNmxdXvp/+Nh+7mx9qqnw+32sr/Tfn6sfbDbnre/MNY+TFcXlSu5/XSsx8/jeryz3V61Lc3Y/+UZ7eWM9px/3/HfSTn/Qe2ryn81tReNaeXeR73PHPf16aTHeevaF39z9vB3Z6at6O/uW121fy+10J/t/5Njo/jlzY0bp29fvXXrxrlIk7Gl5yNNnrCc/zB97f78f3mnPf/crx+v9z4aHTj/RbEVg6n5v1ybr/b3lTn3rQ05/1H6yvm/k9onH/9HOf/px/+rLfQHAAAAAAAAAAAAAAAA9lKW5fYtom9FxMV0/09b92YCAPOVX//LJC+fV92f8+Op1YdWF8U8Hq9YmP1tof60nPPjD8YXtL3/avWTqOvKyd6sFxHxt/o21XuGX0/6ZgDAIvs0Iv7Zdidojfw7LP+9v2p6qu3OAHN184MPf3r1+vWNGzfb7gkAAAAAAAAA8Kjy+J9rtfGfT5Vlebex3tj4r2/H2uOO/5lvp3k4wOiUgar7B9+nvWz1Rv1ebbjxF2Pa+N/D3bm9xv8ezHi84Yz20Yz2pRntyzPaJ97oUZPzf7E23vmpiDjZGH69C+O/Nse874Kc/0u153OV/1ca69XzL39/lPPvjeV/5tb7vzhz84MPX7v2/tX3Nt7b+NmFc+fOXrh48dKlS2fevXZ94+zOvy32+HDl/PPY164D7Zacf85c/t2S8/9SquXfLTn/L6da/t2S88/v9+TfLTn//NlH/t2S838l1fLvlpz/11It/27J+b+aavl3S87/66mWf7fk/F9Ltfy7Jed/OtXy75ac/5lU7zP/lcPuF/OR889nuBz/3ZLzz1c2yL9bcv7nUy3/bsn5X0i1/Lsl5/96quXfLTn/b6Ra/t2S87+Yavl3S87/m6mWf7fk/C+lWv7dkvP/Vqrl3y05/2+nWv7dkvN/I9Xy75ac/3dSLf9uyfl/N9Xy75ac//dSLf9uyfm/mWr5d8vDv/9vxowZM3mm7Z9MAAAAAAAAAAAAAEDTPC4nbnsfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgp7dxcj11neAfzsp9cOJAZC6qQGNo4JIdlk13biD9oUEz4bvkogFPqB7XrXZsGxjdcugUayaaBEwqioom24aAsItbmp8AUXtAKUC9QKqRK0F/QGUaFyEaGAAlIlWgFbzTnv++7M7Hzs2uP1mXN+P8l+vDNn5n3nzDtn59n1fw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS79bULnxzJsqzxJ/9ra5Y9r/HvzdNb88teda1nCAAAAFypX+Z/P3dDuuDgGm7UtM2/vvTbX1leXl7O3jP2lxOfXV5OV0xn2cSmLMuviy794L0jzdsEj2dTI6NNX4/2GX6sz/Xjfa6f6HP9ZJ/rN/W5fqrP9at2wCqbi5/H5He2M//n1mKXZjdmE/l1Ozvc6vGRTaOj8Wc5uZH8NssTx7LF7ES2kM21bF9sO5Jv/7VbG2O9KYtjjTaNtb2xQn762NE4h5Gwj3e2jLVyn9GPX5NN/+ynjx39+7PP3typ9t0NLfdXzPOOHY15fjxcUsx1JNuU9kmc52jTPLd3eE7GWuY5kt+u8e/2eT63xnmOrUxzQ7U/51PZaP7v7+T7abz5x3ppP20Pl/38tizLLqxMu32bVWNlo9mWlktGV56fqWJFNu6jsZRemI2va53euoZ12qjzO1vXaftrIj7/t4bbjXeZQ/PT9OOPTTY9779Yvpx1GjUedbfXSvsaHPRrpSxrMK6L7+QP+omOa3BnePyP3d59DXZcOx3WYHrcTWtwR781ODo5ls85PQkj+W1W1uCulu3H8pFG8vrM7b3X4OzZR07PLn3ko3cvPnLk+MLxhZN7du2a27N37/79+2ePLZ5YmCv+vsy9XX5bstH0GtgR9l18Dbyibdvmpbr8hclVx9/LfR1O9Xgdbm3bdtCvw/H2BzeyMS/I1Wu6eG28q7HTpy6OZl1eY/nzc+eVvw7T4256HY43vQ47fk/p8DocX8PrsLHN6TvX9p5lvOlPpzl0/15wZWtwa9MabH8/0r4GB/1+pCxrcCqsi+/d2f17wfYw3ydm1vt+ZGzVGkwPNxx7Gpek9/tT+/PSaV3e0rjiusns3NLCmXsePXL27JldWSgb4kVNa6V9vW5pekzZqvU6uu71enDxpU/c0uHyrWFfTd3d+Guq63PV2Obee3o/V/l3t877s+XS3VkoA7bR+7PTd/PG/pzMss9982MPff2xz7226/5s9Jsfn73y9+KpL206/k50Of7Gvv9XxXjprh4fmxgvXr9jae9MtByPW5+q8fzYNZKP/dzs2o7HE+HPRh+Pb+xxPN7Wtu2gj8cT7Q8uHo9H+v2048q0P59TYZ2cmOt9PG5ss233etfkeM/j8W2hjoT9/8rQKaS+qGntdFu3aazx8YnwuMbjCK3rdE/L9hOhN2uM9dTu8KYwzXJt6/SO24rtx5puF23UOp1u23bQ6zT97KvbOh3p99O3y9P+fE6FdXHjnt7rtLHN0/de+bFzc/xn07Fzst8anBibbMx5Ii3C/HifLW+Oa/Ce7Gh2KjuRzefXTubraSQfa+a+tR0rJ8OfjT5WbuuxBu9o23bQazB9H+u29kbGVz/4AWh/PqfCunjyvt5rsLHN6/YN9r3rHeGStE3Te9f2n691+5nXLW276WqtlfEwz2/u6/2z2cY2J/avt8/svZ/uCpdc12E/tb9+u72m5rON2U/bwjyf3d99PzXm09jmswfWuJ4OZll2/kMP5D/vDb9fOX/uu19p+b1Lp9/pnP/QAz95/rF/Wc/8ARh+vyrKluJ7XdNvptby+38AAABgKMS+fzTURP8PAAAAlRH7/vi/whP9PwAAAFRG7PvHQ02q0P//af9Ntr3u2cVfnc9SMn85iNen3fBgsV3MuM6Fr6eXVzQuf+BLC//zz+fXNr3RLMt+8eCfdNx+24NxXoXpMM9Lr2+9fJWv3L2msQ8/fD6N25xf/3y4//h41roMOkVw57Is+9oNn87HmX7vxbw+/eDhvD504YnHG9s8d6D4Ot7+mRcV2/9NCP8ePHak5fbPhP3ww1Dn3tx5f8TbffniK7fve/fKePF2Izuuzx/2k+8r7jd+Ts5nHi+2j/u52/y//qmnvtzY/tGXd57/+dHO838q3O+XQv3flxTbNz8Hja/j7T4R5h/Hi7e754vf6Dj/S58stj/9hmK7w6HG8e8IX+98w7OLzfvr0ZEjLY8re2OxXRx/7rt/nl8f7y/ef/v8pw5dbNkf7evj6f8o7me2bft4eRwn+qe28Rv307w+4/hP/dnhlv3cb/xLDz3zksb9to9/V9t2pz90Zz7+yv21fmLT337i0x3Hi/M5+I+nWx7PwXeE13EY/8n3hfUYrv+/S8X9tX+6wuF3tB5/4vaf33q+5fFEb/pZMf6lVx/P66apzVuue97zr7/wssa+y7LvbCrur9/4x//uVMv8v3BTsT/i9TGj3z5+N3H8Mx+eOXlq6dzifNqrj92Qf3bOW4r5xPneEI6t7V8fOnX2/Qtnpuem57JsurofoXfZvhjqT4pyoffWy6uOoHc+HJ7PW/76a1tu//dPxcv/813F5RffXHzfekXY7jPh8q3h+Vvf+Ks9eetN+et75Okww+XVnxd8Jbbv/NH+NW0YHn/7+4K43k+/+P35fmhcl3/fiK/rK5z/9+eL+/lq2K/L4ZOZd9y0Ml7z9vGzES6+s3i9X/H+C4e5+Lz+Q3i+3/rD4v7jvOLj/X54H/ONba3Hu7g+vnp+tP3+80/xuBCOJ9mF4vq4VdzfF5+7qeP04ueQZBduzr/+i3Q/N6/rYXaz9JGl2ROLJ889Ont2Yens7NJHPnrokVPnTp49lH+W56EP9Lv9yvFpS358ml/Ye2+WH61OFeUqu9bzP/3w0fl9c7fPLxw7cu7Y2YdPL5w5fnRp6ejC/NLtR44dW/hwv9svzt+/a/eBPft2zxxfnL9//4EDew7MLJ481ZhGMak+9s59cObkmUP5TZbuv/fArvvuu3du5pFT8wv375ubmznX7/b596aZxq3/eObMwokjZxcfWZhZWvzowv27Duzdu7vvpwE+cvrY0vTsmXMnZ88tLZyZLR7L9Nn84sb3vn63p5qW/qt4P9tupPggvuztd+1Nn8/a8KWPdb2rYpO2DxB9NnwWzbdecHr/Wr6Off9EqEkV+n8AAAAgF/v+yVAT/T8AAABURuz7N4Wa6P8BAACgMmLfPxVq+i8BNen/K5f/33Z+TePL/8v/N+8v+f+a5f/fWbb8f3G8kP8fjCvN38v/B/L/8v/y//L/8v8MQNny/7Hv35xlfv8PAAAAFRX7/i2hJvp/AAAAqIzY918XaqL/BwAAgMqIff/zQk1q0v/L/8v/y//L/8v/dx5f/n84yf/3Jv/fTfGJ0PL/S7NZvfL/FwY5/2uQ/9/c/IX8P2VUtvx/7PufH2pSk/4fAAAA6iD2/deHmuj/AQAAoDJi339DqIn+HwAAACoj9v1bQ01q0v/L/19R/j9lruT/W+cv/99K/j+sB/l/+f8NIP/fm/x/H/L/zv8/XPn/FvL/lFHZ8v+x739BqElN+n8AAACorImVf8a+/4WhJvp/AAAAKJ/xy7tZ7PtfFGqyqv+/zAEAAACAay72/TdmbUHwmvz+X/7f+f/l/+X/5f87j7/2/P9YJv9fHvL/vcn/9yH/L/9f3/z/VCb/z1VQtvx/3vdnU9mLQ01q0v8DAABAHcS+/6ZQE/0/AAAAVEbs+38t1ET/DwAAAJUR+/5toSY16f/l/yuT//9581Mn/y//32t8+X/n/68y+f/e5P/7kP+X/69v/t/5/7kqypb/j33/zaEmNen/AQAAoA5i339LqIn+HwAAACoj9v2/Hmqi/wcAAIDKiH3/9lCTmvT/8v8lz//H5Kjz/8v/y/+XMv8/Jf9fOvL/vcn/9yH/L/8v/y//z0CVLf8f+/6XhJrUpP8HAACAOoh9/0tDTfT/AAAAUBmx739ZqIn+HwAAACoj9v3ToSY16f/Xk/8fuSD/381VPv//5BrO/99C/l/+v9f48v/O/19l8v+9yf/3If8v/y//L//PQJUt/x/7/ltDTWrS/wMAAEAdxL5/R6iJ/h8AAAAqI/b9t4Wa6P8BAACgMmLfvzPUpCb9v/P/D0X+P5P/l/+X/5f/l/9fG/n/3uT/+5D/l/+X/5f/Z6AGnP8fbb9wvfn/2Pe/PNSkJv0/AAAA1EHs+28PNdH/AwAAQGXEvv8VoSb6fwAAAKiM2PffEWpSk/5f/l/+X/5f/l/+v/P48v/DSf6/N/n/PuT/5f/l/+X/Gaiynf8/9v2vDDWpSf8PAAAAdRD7/jtDTfT/AAAAUBmx778r1ET/DwAAAJUR+/6ZUJOa9P/y//L/8v/y//L/nceX/x9O8v+9yf/3If8v/y//L//PQJUt/x/7/rtDTWrS/wMAAEAdxL7/nlAT/T8AAABURuz7Z0NN9P8AAABQGbHvnws1qUn/L/8v/y//L/+/rvz/y1buV/6/IP9fLvL/vcn/9yH/L/9/zfP/E/L/VErZ8v+x798ValKT/h8AAADqIPb9u0NN9P8AAABQGbHv3xNqov8HAACAyoh9/72hJjXp/+X/5f/l/+X/nf+/8/jy/8NJ/r+3wef/40OU/5f/l/93/n/5f1YrW/4/9v33hZrUpP8HAACAOoh9/95QE/0/AAAAVEbs+/eFmuj/AQAAoDJi378/1KQm/b/8v/y//L/8v/x/5/Hl/4eT/H9vzv/fh/y//P8Q5/8ba0v+n7IpW/4/9v0HQk1q0v8DAABAHcS+/1WhJvp/AAAAqIzY9/9GqIn+HwAAACoj9v2/GWpSk/5f/l/+X/5f/r/s+f9J+X/5/3WQ/+9N/r8P+X/5/yHO/zv/P2VUtvx/7PvvDzWpSf8PAAAAdRD7/t8KNdH/AwAAQGXEvv/VoSb6fwAAAKiM2PcfDDWpSf8v/79B+f94ofy//L/8v/P/y/9fVfL/vcn/9yH/L/8v/y//z0CVLf8f+/7XhJrUpP8HAACAOoh9/wOhJvp/AAAAqIzY97821ET/DwAAAJUR+/7XhZrUpP+X/3f+/2uf/59ombv8/8rt5P8L8v/y/+sh/9+b/H8f8v/y//L/8v8MVNny/7Hvf32oSU36fwAAAKiD2Pe/IdRE/w8AAACVEfv+N4aa6P8BAACgMmLf/6ZQk5r0//L/8v/XPv/v/P/y/wX5f/n/QZD/72048/+N3Sj/n8n/l37+8v/y/6xWtvx/7Pt/O9SkJv0/AAAA1EHs+x8MNdH/AwAAQGXEvv/NoSb6fwAAAKiM2Pe/JdSkJv2//L/8v/y//L/8f+fx5f+Hk/x/b0OW///l9eFy5/8vyP+Xe/7rzf+Pt319VfL/P+iW/1/e1H57+X+uhrLl/2Pf/9ZQk5r0/wAAAFAHse9/W6iJ/h8AAAAqI/b9bw810f8DAABAZcS+/3dCTWrS/8v/N+axkl6W/5f/zy+Q/5f/l/8fWvL/vQ1Z/j+c/1/+P5L/L/f8nf9f/p/Vypb/j33/O0JNatL/AwAAQB3Evv+hUBP9PwAAAFRG7PvfGWqi/wcAAIDKiH3/u0JNatL/y/87/7/8v/y//H/n8eX/h9Ng8v9j8v/y//L/8v/lyP//t/w/w61s+f/Y9z8calKT/h8AAADqIPb97w410f8DAABAZcS+/3dDTfT/AAAAUBmx739PqElN+n/5/2HJ/0/L/68z/z8ZLpP/l/+X/68X5//vbfvOH3VPVjaT/5f/l/8vR/7f+f8ZcmXL/8e+/72hJmvv/6fWvCUAAABwTcS+//dCTWry+38AAACog9j3/36oif4fAAAAKiP2/X8QalKT/l/+f1jy/87/nzn/v/x/2+OR/5f/72Tj8v/xyDN0+X/n/+9F/l/+X/6/a/5/tM/t5f/ppGz5/9j3/2GoSU36fwAAAKiD2Pe/L9RE/w8AAABDodP/yW4X+/5DoSb6fwAAAKiM2PcfDjWpSf8v/y//L/9f0vz/X+34t+99+22Hd8n/y//L/6/Lhp7/v/HiH77z/8v/9yL/L/8v/+/8/wxU2fL/se8/Emqy0vi9xQn+AQAAYLjFvv+PQk1q8vt/AAAAqIPY9x8NNdH/AwAAQGXEvn8+1KQm/b/8v/y//H9J8/9DfP7/uD+GKf8/s2mI8v/xoCv/39GG5v/fvZITl/9fb/5/suOl7fn/Efn/FvL/657/t7Isk/+X/+caKlv+P/b9C6EmNen/AQAAoA5C3z96rKgrV+j/AQAAoDJi33881ET/DwAAAJUR+/73h5rUpP+X/5f/l/+X/3f+/87jlzb/7/z/Pcn/91ae/H9nzv8v/z/M85f/l/9ntbLl/2PfvxhqUpP+HwAAAOog9v0fCDXR/wMAAEBlxL7/g6Em+n8AAACojNj3nwg1qUn/L/8v/y//L/8v/995fPn/4ST/35v8fx/y//L/8v/y/wxU2fL//8/efTxZVpd/HL/NrylmivpVuXPhAvf+CSxkrX+ACzYutMqySlAxJwZzxJwDKgYMGEARE+YEJhSzqJiziBm1xprp53lmuvv0ud0z9/Y99/t9vRY+TENzL9oFfuh5z8nd/7C4pZP9DwAAAD3I3X9J3GL/AwAAQDNy918at9j/AAAA0Izc/Q+PW9Zy/2/cedBKUP+v/2+2/7+v/n+v19f/6/9bpv8fp/+fQ/+v/9f/6/9ZqKn1/7n7HxG3rOX+BwAAAIbk7n9k3GL/AwAAQDNy918Wt9j/AAAA0Izc/Y+KWzrZ/zv6/41Zn/1/Zrz6/5b6f8//3/P19f/6/5Ydbv9/xYm/8+n/9f/6/6D/1//r/9lpav1/7v5Hxy2d7H8AAADoQe7+x8Qt9j8AAAA0I3f/Y+MW+x8AAACakbv/cXFLJ/t/gs//P/k/guf/b/1Y/6//1//r//X/B+P5/+N66v8vu+38S+664V43HuT19f/6f/2//p/Fmlr/n7v/8XFLJ/sfAAAAepC7/wlxi/0PAAAAzcjd/8S4xf4HAACANXR08KO5+58Ut3Sy/yfY/2+9L/3/Sfr/Q+z/j+j/9f/6/xbo/8f11P+fyevr//X/J9//1TP9v/6fBZla/5+7/8lxSyf7HwAAAHqQu/8pcYv9DwAAANM19BOxR+Tuvzxusf8BAACgGbn7j8Utnex//f/y+///6v/Xo//3/H/9v/6/Cfr/cfr/OfT/+n/P/9f/s1BT6/9z918Rt3Sy/wEAAKAHufufGrfY/wAAANCM3P1Pi1vsfwAAAGhG7v6nxy2d7H/9v+f/6//1//r/4dfX/68n/f84/f8c+v+z7efP1f/r//X/nO6A/f/dI3/bXkj/n7v/GXFLJ/sfAAAAepC7/5lxi/0PAAAAzcjd/6y4xf4HAACAZuTuf3bc0sn+1//r//X/+v8z7v93f+mdpP8fpv8/HPr/cZPp/zc2Bz+s/1/7/t/z//X/+n+2mdrz/3P3Pydu6WT/AwAAQA9y9z83bhnZ/wf+l/kAAADASuXuf17c4vv/AAAAsPayOsvd//y4pZP9r//X/+v/9f+e/z/8+mP9/42nvT/9/7To/8dNpv/fg/5f/7/O71//r/9nt6n1/7n7XxC3dLL/AQAAoAe5+6+MW+x/AAAAaEbu/hfGLfY/AAAANCN3/4vilk72/3D/f+r36//3R/+//f3r/4e/PhbV/+efUf8/2v9f5Pn/fdL/j9P/z6H/1//r//fq/4/O+3z9P0Om1v/n7n9x3NLJ/gcAAIAe5O5/Sdxi/wMAAEAzcve/NG6x/wEAAKAZuftfFrd0sv89/1//r/9fv/7f8/+3rPL5/7ND7/839f/7pP8fp/+fQ/+v/9f/jz//f+RXAdD/M2Rq/X/u/pfHLZ3sfwAAAOhB7v5XxC32PwAAAKyH03/uwM6fUBpy978ybrH/AQAAoBm5+18Vt7Sz/0ef1an/1//r//X/+v/h159W/+/5//ul/x+n/59D/7+Mfn6zsf7/qr0+fwr9/+XL7v9H6P8Zsq3/v+nUx1fV/+fuf3Xc0s7+BwAAgO7l7n9N3GL/AwAAQDNy9782brH/AQAAoBm5+18Xt3Sy/5fe/4/86gP6f/2//l//r//X/y+a/n+c/n8O/b/n/3v+v/6fhdrW/59mVf1/7v7Xxy2d7H8AAADoQe7+N8Qt9j8AAAA0I3f/VXGL/Q8AAADNyN3/xrilk/3v+f/6f/2//l//P/z6+v/1dFb9/Tn6/6L/1//r//X/+n8WYGr9f+7+N8Utnex/AAAA6EHu/jfHLfY/AAAANCN3/9Vxi/0PAAAAzcjd/5a4pZP9r/9fbv+fH9f/6/9n+n/9v/7/UHT7/P+NoX8S7bZH/3/LQ47df/tH9P/6f/2//l//zz7dY+T3TaL/P37q/13m7n9r3NLJ/gcAAIAe5O5/W9xi/wMAAEAzcve/PW6x/wEAAKAZufuviVsOuP/Hmodhd15w4E9ZAv2/5//r//X/+v/h19f/r6du+/998vz/OfT/+n/9v/6fhZpE/3/aj3P3vyNu8f1/AAAAaEbu/nfGLfY/AAAANCN3/7viFvsfAAAAmpG7/91xSyf7X/+v/9f/6//1/8Ovr/9fT/r/cfr/Odap/7/mLPr/zeEPr7qfP1urfv/6f/0/u02t/8/df23c0sn+BwAAgB7k7n9P3GL/AwAAQDNy9783brH/AQAAoBm5+98Xt3Sy//X/+n/9v/5f/z/8+vr/9aT/H6f/n81m1428gaH+//h50+z/Pf9/cu9f/6//Z7ep9f+5+98ft3Sy/wEAAKAHufuvi1vsfwAAAGhG7v7r4xb7HwAAAJqRu/8DcUsn+1//r//X/+v/F9D/b+tr9f/D9P+HQ/8/Tv8/xzo9/1//P7n3r//X/7Pb1Pr/3P0fjFs62f8AAADQg9z9N8Qt9j8AAAA0I3f/h+IW+x8AAACakbv/xrilk/2v/9f/6//1/57/P/z6+v/1tLz+f6b/1//r/+fQ/+v/9f/sNLX+P3f/h+OWTvY/AAAA9CB3/0fiFvsfAAAAmpG7/6Nxi/0PAAAAzcjd/7G4pZP9r//X/+v/9f/6/+HX1/+vJ8//H6f/n0P/r//X/+v/Wajh/v/ylfX/ufs/Hrd0sv8BAACgB7n7b4pb7H8AAABoRu7+T8Qt9j8AAAA0I3f/J+OWTva//l//v73/n830//p//f+WQ+j/j8z0/wun/x+n/59D/99m/3/OrKH+/+ien6//Z4qm9vz/3P2fils62f8AAADQg9z9n45b7H8AAABoRu7+z8Qt9j8AAAA0I3f/Z+OWTva//l//7/n/+n/9//Dre/7/etL/j9P/z6H/b7P/9/x//T8rM7X+P3f/5+KWTvY/AAAA9CB3/+fjFvsfAAAAmpG7/wtxi/0PAAAAzcjd/8W4pZP9r//X/+v/9f/6/+HX1/+vJ/3/OP3/HPp//b/+X//PQk2t/8/d/6W4pZP9DwAAAD3I3X9z3GL/AwAAQDNy998St9j/AAAA0Izc/V+OWzrZ//p//b/+fz37/yP6f/2//n/QVPr/Cy+83636f/2//l//r//X//duav1/7v6vxC2d7H8AAADoQe7+r8Yt9j8AAAA0I3f/1+IW+x8AAACakbv/63FLJ/t/d/9/7myrUN0y1P9Ho6b/P43+f/v71/8Pf314/r/+X/+/fFPp/z3//8zev/5f/7/O7/9A/f+9d3++/p8WTa3/z91/a9zSyf4HAACAHuTu/0bcYv8DAABAM3L3fzNusf8BAACgGbn7b4tbOtn/nv+v/9f/6//1/8Ovr/9fT/r/cfr/OfT/+n/P/7/0Qf+n/2dxptb/5+7/VtzSyf4HAACAHuTu/3bcYv8DAABAM3L3fydusf8BAACgGbn7vxu3dLL/9f/6f/3/Evr/zeGvD/2//l//v3z6/3H6/7LzL21LP/3/kaEPrrqfP1urfv/N9P+e/88CTa3/z93/vbilk/0PAAAAPcjd//24xf4HAACAZuTu/0HcYv8DAABAM3L3/zBu6WT/6/8b7/9P/KD7/v+Bnv+/4/X1//r/lun/85/ow/T/c/TT/w9adT+/7u9f/6//Z7ep9f+5+2+PWzrZ/wAAANCD3P0/ilvsfwAAAGhG7v4fxy32PwAAADQjd/9P4pZO9r/+v/H+f8fz/zdmPfb/K3j+/x5fH/p//b/+f/n0/+P0/3Po//X/+n/9Pws1tf4/d/8dG5td7n8AAABYVw+4z0Nv3+8fe8fJ/zwy+2ncctHs+D6/jQ0AAABM3Indv7E5m/3s5I98/x8AAABalLv/53FLJ/tf/99X/9/n8/+X2P+feGH9v/5f/z8p+v9x+v859P/6f/2//p+Fmlr/n7v/F3HLacNv88B/lQAAAMCU5O7/ZdzSyff/AQAAoAe5+38Vt+za/345QAAAAFhXuft/Hbd08v1//f/E+//Zkvr/+OP0/1s8/1//P/T6+v/1pP8fd5b9//EN/b/+f4T+X/+v/2enqfX/uft/E7d0sv8BAACgUdv+jULu/t/GLfY/AAAANCN3/+/iFvsfAAAAmpG7//dxSyf7X/9/6P1/pupLfP7/0fotz//vvP+/8sjg6+v/9f8t0/+P8/z/OfT/rfT/5+n/9f9Mw9T6/9z9f4hbOtn/AAAA0IPc/X+MW+x/AAAAaEbu/j/FLfY/AAAANCN3/50nzv/3t/9X0v/Hn6TT/v9gz/8/o/5/H8//1//30f/v8frt9P/3PP/YzRc/+Ppr9f+ccpj9f34t6P/1//r/LRPq/z3/X//PRCy+/9/c9sGD9v8nd//syOzPcUsn+x8AAAB6kLv/rrjF/gcAAIBm5O7/S9xi/wMAAEAzcvf/NW7pZP97/r/+fyr9f/53vYL+/9gZ9/9HZ7PZSvr/bIp77/89/1//v5vn/4/T/8+h/9f/6//1/yzU4vv/7R88aP+fu/9vcUsn+x8AAAB6kLv/73FL7v+NA/+rewAAAGBicvf/I27x/X8AAABoRu7+f8Ytnex//b/+fyr9f/L8/1Of19bz/y+uOLXP/v+C+i39/3Lp/8fp/+fQ/+v/9f/6fxZqav1/7v5/xS2d7H8AAADoQe7+u+MW+x8AAACakbv/33GL/Q8AAADNyN3/n7ilk/2v/2+1/88iXv+v/59K/+/5/57/fzj0/+P0/3Po//X/+n/9Pws1tf4/d///AgAA//8kcHQC") linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 385.899153ms ago: executing program 4 (id=5058): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x7df, 0x88000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563e, &(0x7f0000000100)={0x1, 0x2}) 220.477754ms ago: executing program 4 (id=5059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000301010400000000000000000200000024000180140001"], 0x38}}, 0x0) 178.551204ms ago: executing program 0 (id=5060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 0s ago: executing program 0 (id=5061): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000001c0)={0x0, 0x6, 0x3002, 0x1}) kernel console output (not intermixed with test programs): 311][T14464] futex_wake_op: syz.4.3772 tries to shift op by 36; fix this program [ 449.464435][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 449.464982][ T6193] imon 4-1:155.0: panel buttons/knobs setup failed [ 449.492709][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.511650][ T6193] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 449.540126][ T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.552795][ T6193] (id 0x00) [ 449.639775][ T30] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.658855][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.698675][ T30] usb 6-1: Product: syz [ 449.708465][ T30] usb 6-1: Manufacturer: syz [ 449.721668][ T6193] rc_core: IR keymap rc-imon-pad not found [ 449.721985][ T30] usb 6-1: SerialNumber: syz [ 449.729895][ T6193] Registered IR keymap rc-empty [ 449.770940][ T6193] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 449.812534][ T6193] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 449.832344][ T6193] imon:send_packet: packet tx failed (-71) [ 449.847920][T14477] Mount JFS Failure: -5 [ 449.864578][ T6193] imon 4-1:155.0: remote input dev register failed [ 449.871256][ T6193] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 449.988231][ T6094] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 450.030678][ T30] usb 6-1: 0:2 : does not exist [ 450.035626][ T30] usb 6-1: unit 9 not found! [ 450.058883][ T6193] imon 4-1:155.0: unable to initialize intf0, err 0 [ 450.085801][ T6193] imon:imon_probe: failed to initialize context! [ 450.121597][ T6193] imon 4-1:155.0: unable to register, err -19 [ 450.150794][ T6193] usb 4-1: USB disconnect, device number 86 [ 450.204923][ T6094] usb 5-1: config 251 has an invalid interface number: 243 but max is 0 [ 450.229378][ T6094] usb 5-1: config 251 has no interface number 0 [ 450.256285][ T30] usb 6-1: USB disconnect, device number 96 [ 450.275158][ T6094] usb 5-1: config 251 interface 243 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 450.347707][ T6094] usb 5-1: config 251 interface 243 has no altsetting 0 [ 450.380711][ T6094] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=b8.82 [ 450.395078][ T6094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.409220][ T6094] usb 5-1: Product: syz [ 450.414361][ T6094] usb 5-1: Manufacturer: syz [ 450.420253][ T6094] usb 5-1: SerialNumber: syz [ 450.445918][ T5914] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 450.473993][ T6013] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 450.481670][ T6193] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 450.619447][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.630000][ T6094] sisusb 5-1:251.243: Invalid USB2VGA device [ 450.636092][ T6094] sisusb 5-1:251.243: probe with driver sisusb failed with error -22 [ 450.639808][ T6193] usb 4-1: Using ep0 maxpacket: 32 [ 450.651191][ T6013] usb 1-1: Using ep0 maxpacket: 32 [ 450.673487][ T5914] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 450.687136][ T6094] usb 5-1: USB disconnect, device number 89 [ 450.698256][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.707542][ T6193] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 450.716058][ T6013] usb 1-1: unable to get BOS descriptor or descriptor too short [ 450.726080][ T6193] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.736657][ T5914] usb 3-1: Product: syz [ 450.741182][ T5914] usb 3-1: Manufacturer: syz [ 450.746104][ T5914] usb 3-1: SerialNumber: syz [ 450.751213][ T6193] usb 4-1: config 0 has no interface number 0 [ 450.759199][ T6013] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.774630][ T6193] usb 4-1: config 0 interface 86 altsetting 16 endpoint 0x6 has invalid wMaxPacketSize 0 [ 450.784928][ T6013] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 450.797055][ T6193] usb 4-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 0 [ 450.808285][ T5914] usb 3-1: config 0 descriptor?? [ 450.818118][ T5914] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 450.826642][ T5914] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 450.834669][ T6013] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 450.844286][ T6013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.852384][ T6193] usb 4-1: config 0 interface 86 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.866733][ T6013] usb 1-1: Product: syz [ 450.870896][ T6013] usb 1-1: Manufacturer: syz [ 450.875658][ T5914] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 450.886672][ T6193] usb 4-1: config 0 interface 86 has no altsetting 0 [ 450.893471][ T6013] usb 1-1: SerialNumber: syz [ 450.905144][ T6193] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 450.914648][ T6193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.922827][ T6193] usb 4-1: Product: syz [ 450.927324][ T6193] usb 4-1: Manufacturer: syz [ 450.932747][ T6193] usb 4-1: SerialNumber: syz [ 450.955267][ T6193] usb 4-1: config 0 descriptor?? [ 450.962011][ T6013] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 450.962367][T14469] loop1: detected capacity change from 0 to 65536 [ 451.007941][ T9] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 451.053317][ T5914] usb 3-1: USB disconnect, device number 103 [ 451.063091][ T5914] garmin_gps 3-1:0.0: device disconnected [ 451.069102][T14469] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 451.172675][ T6193] ljca 4-1:0.86: bulk endpoints not found [ 451.181630][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 451.210667][ T6013] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 451.220381][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 451.247738][ T6193] usb 4-1: USB disconnect, device number 87 [ 451.253738][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 451.293352][ T9] usb 6-1: config 0 interface 0 has no altsetting 1 [ 451.303519][ T6013] usb 1-1: USB disconnect, device number 68 [ 451.359344][ T9] usb 6-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 451.384220][ T6407] udevd[6407]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.389107][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.438619][ T9] usb 6-1: Product: syz [ 451.454378][ T9] usb 6-1: Manufacturer: syz [ 451.463585][ T9] usb 6-1: SerialNumber: syz [ 451.480104][ T9] usb 6-1: config 0 descriptor?? [ 451.495431][ T9] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 451.598315][ T6094] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 451.763692][ T9] usb 6-1: USB disconnect, device number 97 [ 451.785613][ T6094] usb 5-1: unable to get BOS descriptor or descriptor too short [ 451.817691][ T6094] usb 5-1: not running at top speed; connect to a high speed hub [ 451.840114][ T6094] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 451.863662][T14508] loop0: detected capacity change from 0 to 512 [ 451.901200][ T6094] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 451.937229][ T6094] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 451.947961][ T5993] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 452.029823][T14508] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 452.084179][ T6094] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 452.105783][ T6094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.143241][T14508] EXT4-fs (loop0): mount failed [ 452.151733][ T6094] usb 5-1: Product: syz [ 452.155903][ T6094] usb 5-1: Manufacturer: syz [ 452.176332][ T6094] usb 5-1: SerialNumber: syz [ 452.419478][ T6094] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 452.517814][ T30] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 452.545467][ T6094] usb 5-1: USB disconnect, device number 90 [ 452.608416][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.648174][T14504] loop1: detected capacity change from 0 to 32768 [ 452.656439][ T6085] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 452.684251][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 452.691516][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.713161][T14504] (syz.1.3789,14504,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 452.738219][ T30] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 452.758461][T14504] (syz.1.3789,14504,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 452.769751][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.777740][ T30] usb 4-1: Product: syz [ 452.793837][ T30] usb 4-1: Manufacturer: syz [ 452.808282][ T30] usb 4-1: SerialNumber: syz [ 452.817203][ T6085] usb 1-1: Using ep0 maxpacket: 32 [ 452.830652][ T6085] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 165, changing to 7 [ 452.859523][ T6085] usb 1-1: config 1 interface 2 has no altsetting 0 [ 452.888399][ T6085] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 452.907142][ T6085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.925990][ T6085] usb 1-1: Product: syz [ 452.930183][ T6085] usb 1-1: Manufacturer: syz [ 452.950313][ T6085] usb 1-1: SerialNumber: syz [ 453.041741][ T30] snd-ua101 4-1:1.1: sample format descriptor not found [ 453.078218][ T30] snd-ua101 4-1:1.0: invalid num_altsetting [ 453.155404][ T30] usb 4-1: USB disconnect, device number 88 [ 453.215947][ T6085] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 453.244937][ T6085] usb 1-1: selecting invalid altsetting 0 [ 453.270968][ T6085] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 453.289098][ T6085] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 453.322218][ T6085] usb 1-1: selecting invalid altsetting 0 [ 453.355641][T14527] loop2: detected capacity change from 0 to 32768 [ 453.413121][T14527] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3799 (14527) [ 453.478198][T14525] loop5: detected capacity change from 0 to 32768 [ 453.487313][ T6085] usb 1-1: USB disconnect, device number 69 [ 453.507443][T14527] BTRFS info (device loop2): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 453.556084][T14525] (syz.5.3798,14525,0):ocfs2_find_slot:490 ERROR: no free slots available! [ 453.564869][T14527] BTRFS info (device loop2): using crc32c checksum algorithm [ 453.598521][T14525] (syz.5.3798,14525,1):ocfs2_mount_volume:1751 ERROR: status = -22 [ 453.710902][T14525] (syz.5.3798,14525,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 453.892890][T14554] loop0: detected capacity change from 0 to 4096 [ 453.903039][T14554] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 453.906671][T14527] BTRFS info (device loop2): enabling ssd optimizations [ 453.955082][T14527] BTRFS info (device loop2): turning on async discard [ 453.979296][T14527] BTRFS info (device loop2): enabling free space tree [ 454.021589][T14554] ntfs3(loop0): $Secure::$SDH is corrupted. [ 454.056537][T14554] ntfs3(loop0): Failed to initialize $Secure (-22). [ 454.201200][T14560] Invalid source name [ 454.213090][ T5980] BTRFS info (device loop2): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 454.236341][T14560] UBIFS error (pid: 14560): cannot open "ubifs", error -22 [ 454.263576][T14533] loop1: detected capacity change from 0 to 32768 [ 454.360777][T14533] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3801 (14533) [ 454.503129][T14533] BTRFS info (device loop1): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 454.509268][T14541] loop4: detected capacity change from 0 to 32768 [ 454.570394][T14541] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3804 (14541) [ 454.579486][T14533] BTRFS info (device loop1): using sha256 checksum algorithm [ 454.689189][T14541] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 454.692197][T14575] loop3: detected capacity change from 0 to 128 [ 454.712068][T14575] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d) [ 454.725863][T14575] FAT-fs (loop3): Filesystem has been set read-only [ 454.736619][T14541] BTRFS info (device loop4): using sha256 checksum algorithm [ 454.794623][T14533] BTRFS info (device loop1): enabling ssd optimizations [ 454.895716][T14533] BTRFS info (device loop1): turning on async discard [ 454.959644][T14533] BTRFS info (device loop1): enabling free space tree [ 455.285448][T14541] BTRFS info (device loop4): enabling ssd optimizations [ 455.292435][T14541] BTRFS info (device loop4): turning on async discard [ 455.322341][ T5986] BTRFS info (device loop1): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 455.333330][ T6277] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 455.349436][T14541] BTRFS info (device loop4): enabling free space tree [ 455.397180][T14594] loop5: detected capacity change from 0 to 4096 [ 455.432436][T14594] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 455.481886][T14610] loop0: detected capacity change from 0 to 2048 [ 455.520253][T14594] ntfs3(loop5): volume is dirty and "force" flag is not set! [ 455.536001][T14610] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=26504, location=26504 [ 455.552225][ T6277] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.597912][ T6277] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.643345][T14610] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.664979][ T5999] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 455.677326][ T6277] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.738043][ T6277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.799770][ T6277] usb 4-1: Product: syz [ 455.818602][ T6277] usb 4-1: Manufacturer: syz [ 455.823220][ T6277] usb 4-1: SerialNumber: syz [ 456.096718][ T6277] cdc_ncm 4-1:1.0: bind() failure [ 456.142518][ T6277] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 456.149440][ T6277] cdc_ncm 4-1:1.1: bind() failure [ 456.150131][T14617] loop0: detected capacity change from 0 to 16 [ 456.204283][T14617] erofs (device loop0): mounted with root inode @ nid 36. [ 456.264812][ T6277] usb 4-1: USB disconnect, device number 89 [ 456.387931][T14619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.579821][T14569] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3808 (14569) [ 456.662754][T14569] BTRFS info (device loop2): first mount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 456.714454][T14569] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 456.740637][ T5986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.898193][T14624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.960761][T14624] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.086595][T14569] BTRFS info (device loop2): enabling ssd optimizations [ 457.111450][T14638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.118949][T14569] BTRFS info (device loop2): turning on async discard [ 457.171877][T14569] BTRFS info (device loop2): enabling free space tree [ 457.264321][ T5980] BTRFS info (device loop2): last unmount of filesystem 18898830-c59e-4026-919d-fe1055706c2c [ 457.312540][ T5985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.355795][ T5995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.387608][T14614] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3820 (14614) [ 457.451250][T14621] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3822 (14621) [ 457.547665][T14621] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 457.590846][T14614] BTRFS info (device loop5): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 457.614972][T14621] BTRFS info (device loop4): using crc32c checksum algorithm [ 457.645726][T14614] BTRFS info (device loop5): using xxhash64 checksum algorithm [ 457.657376][T14650] set_capacity_and_notify: 6 callbacks suppressed [ 457.657396][T14650] loop3: detected capacity change from 0 to 512 [ 457.862988][T14650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.896785][T14646] loop1: detected capacity change from 0 to 32768 [ 457.903584][ T6013] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 457.967304][T14621] BTRFS info (device loop4): enabling ssd optimizations [ 457.982734][ T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 458.030705][T14621] BTRFS info (device loop4): turning on async discard [ 458.057891][T14614] BTRFS info (device loop5): enabling ssd optimizations [ 458.064856][T14614] BTRFS info (device loop5): turning on async discard [ 458.091864][T14621] BTRFS info (device loop4): enabling free space tree [ 458.109697][ T6013] usb 1-1: Using ep0 maxpacket: 16 [ 458.137568][T14614] BTRFS info (device loop5): enabling free space tree [ 458.138065][ T6013] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.157180][ T5981] loop1: p1 p2 p3 [ 458.203293][ T9] usb 3-1: config 9 has an invalid interface number: 164 but max is 1 [ 458.227221][ T6013] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 458.233369][ T5995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.238044][ T9] usb 3-1: config 9 has an invalid interface number: 82 but max is 1 [ 458.285616][ T6013] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 458.332173][ T9] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 458.357284][ T6013] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.377095][ T9] usb 3-1: config 9 has no interface number 0 [ 458.389501][ T5999] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 458.401336][T14646] loop1: p1 p2 p3 [ 458.406473][ T6013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 458.417574][ T9] usb 3-1: config 9 has no interface number 1 [ 458.423691][ T9] usb 3-1: config 9 interface 164 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 458.453817][ T6013] usb 1-1: SerialNumber: syz [ 458.478190][ T9] usb 3-1: config 9 interface 164 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 458.505537][ T5998] BTRFS info (device loop5): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 458.553477][ T9] usb 3-1: config 9 interface 164 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 458.569814][T14686] loop3: detected capacity change from 0 to 512 [ 458.608484][ T9] usb 3-1: config 9 interface 164 altsetting 1 endpoint 0x5 has invalid maxpacket 1648, setting to 64 [ 458.656734][ T9] usb 3-1: config 9 interface 164 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 458.699985][ T9] usb 3-1: config 9 interface 164 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 458.715344][T14686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.833976][ T9] usb 3-1: config 9 interface 164 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 458.864748][ T6013] usb 1-1: USB disconnect, device number 70 [ 458.917978][ T9] usb 3-1: config 9 interface 164 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 458.947207][ T9] usb 3-1: config 9 interface 82 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 458.953826][ T5995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.005477][ T9] usb 3-1: config 9 interface 82 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 459.071684][ T9] usb 3-1: config 9 interface 164 has no altsetting 0 [ 459.097067][ T9] usb 3-1: config 9 interface 82 has no altsetting 0 [ 459.158612][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=1017, bcdDevice=56.9b [ 459.189031][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.197052][ T9] usb 3-1: Product: syz [ 459.237492][ T9] usb 3-1: Manufacturer: syz [ 459.259994][ T9] usb 3-1: SerialNumber: syz [ 459.303993][T14664] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 459.562262][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.593705][ T9] snd-usb-audio 3-1:9.164: probe with driver snd-usb-audio failed with error -2 [ 459.681240][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 459.906479][ T9] snd-usb-audio 3-1:9.82: probe with driver snd-usb-audio failed with error -2 [ 459.933216][ T6193] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 459.984956][ T9] usb 3-1: USB disconnect, device number 104 [ 460.079750][ T6013] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 460.087294][ T6415] udevd[6415]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.103268][ T6193] usb 1-1: Using ep0 maxpacket: 8 [ 460.143594][ T6193] usb 1-1: unable to get BOS descriptor or descriptor too short [ 460.180392][ T6193] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 460.198940][ T6193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.210814][ T6193] usb 1-1: Product: syz [ 460.214984][ T6193] usb 1-1: Manufacturer: syz [ 460.248169][ T6193] usb 1-1: SerialNumber: syz [ 460.282785][ T6013] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 460.307590][ T6013] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.344268][ T6013] usb 5-1: config 0 has no interface number 0 [ 460.350414][ T6013] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 460.396549][ T6013] usb 5-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.461518][T14694] loop5: detected capacity change from 0 to 32768 [ 460.468152][ T6013] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 460.468209][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.468236][ T6013] usb 5-1: Product: syz [ 460.468256][ T6013] usb 5-1: Manufacturer: syz [ 460.468278][ T6013] usb 5-1: SerialNumber: syz [ 460.523024][ T6193] kalmia 1-1:1.0: probe with driver kalmia failed with error -22 [ 460.553720][ T6193] usb 1-1: USB disconnect, device number 71 [ 460.560960][T14694] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3831 (14694) [ 460.575629][ T6013] usb 5-1: config 0 descriptor?? [ 460.590131][T14704] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 460.607687][ T6013] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 460.632329][T14708] loop2: detected capacity change from 0 to 1024 [ 460.670639][ T6013] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 460.686005][T14694] BTRFS info (device loop5): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 460.701285][T14696] loop3: detected capacity change from 0 to 32768 [ 460.704608][T14694] BTRFS info (device loop5): using crc32c checksum algorithm [ 460.718128][ T6013] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 460.725046][ T5981] udevd[5981]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 460.746619][ T6307] udevd[6307]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 460.774944][T14696] read_mapping_page failed! [ 460.781727][ T7012] udevd[7012]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 460.789474][T14696] bread failed! [ 460.796761][T14696] xtLookup: xtSearch returned -5 [ 460.818807][T14696] read_mapping_page failed! [ 460.841843][T14696] jfs_mount: diMount failed w/rc = -5 [ 460.868702][T14696] Mount JFS Failure: -5 [ 460.873383][T14696] jfs_mount failed w/return code = -5 [ 460.981796][ T6277] usb 5-1: USB disconnect, device number 91 [ 460.997133][T14694] BTRFS info (device loop5): enabling ssd optimizations [ 461.065314][T14694] BTRFS info (device loop5): turning on async discard [ 461.072106][T14694] BTRFS info (device loop5): enabling free space tree [ 461.095615][ T6277] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 461.154613][ T6277] cyberjack 5-1:0.69: device disconnected [ 461.209181][T14725] loop2: detected capacity change from 0 to 1024 [ 461.350588][ T5998] BTRFS info (device loop5): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 [ 461.570330][T14731] loop2: detected capacity change from 0 to 736 [ 461.807246][T14737] loop4: detected capacity change from 0 to 2048 [ 461.866763][T14737] EXT4-fs: Ignoring removed mblk_io_submit option [ 461.935581][T14737] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 462.092983][T14742] loop2: detected capacity change from 0 to 256 [ 462.775991][T14752] loop5: detected capacity change from 0 to 512 [ 463.036613][T14739] loop3: detected capacity change from 0 to 32768 [ 463.092398][T14727] loop0: detected capacity change from 0 to 32768 [ 463.171109][T14727] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 463.199217][T14727] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 463.260059][T14748] loop2: detected capacity change from 0 to 32768 [ 463.282441][T14746] loop4: detected capacity change from 0 to 32768 [ 463.300606][T14746] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3849 (14746) [ 463.316384][T14756] loop5: detected capacity change from 0 to 2048 [ 463.390903][T14746] BTRFS info (device loop4): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 463.419844][T14727] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 463.449399][T14746] BTRFS info (device loop4): using blake2b checksum algorithm [ 463.477338][ T6277] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 463.504690][ T6277] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 463.639544][T14763] loop1: detected capacity change from 0 to 2048 [ 463.674237][T14764] loop3: detected capacity change from 0 to 128 [ 463.884020][T14746] BTRFS info (device loop4): enabling ssd optimizations [ 463.943188][T14746] BTRFS info (device loop4): turning on async discard [ 463.949993][T14746] BTRFS info (device loop4): enabling free space tree [ 463.982900][T14778] loop5: detected capacity change from 0 to 128 [ 464.066121][ T30] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 464.139906][ T6277] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 666ms [ 464.200444][ T6277] gfs2: fsid=syz:syz.0: jid=0: Done [ 464.236013][T14783] loop3: detected capacity change from 0 to 128 [ 464.237322][T14727] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 464.249602][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 464.304063][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 464.333690][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 464.354873][T14727] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 464.363599][ T5999] BTRFS info (device loop4): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 464.380299][ T30] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2F, changing to 0xF [ 464.437447][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 464.485133][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 464.582726][ T30] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 464.598385][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.645373][ T30] usb 3-1: Product: syz [ 464.674432][ T30] usb 3-1: Manufacturer: syz [ 464.689719][ T30] usb 3-1: SerialNumber: syz [ 464.772835][ T30] usb 3-1: config 0 descriptor?? [ 465.028083][ T6193] usb 3-1: USB disconnect, device number 105 [ 465.142298][ T6013] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 465.298908][T14780] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3858 (14780) [ 465.314527][ T6013] usb 5-1: Using ep0 maxpacket: 8 [ 465.335007][ T6013] usb 5-1: config 64 has an invalid interface number: 19 but max is 0 [ 465.359295][ T6013] usb 5-1: config 64 has no interface number 0 [ 465.372192][T14780] BTRFS info (device loop1): first mount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 465.387211][ T6013] usb 5-1: config 64 interface 19 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.414701][T14786] BTRFS error: device /dev/loop5 has incomplete metadata_uuid change, please use btrfstune to complete [ 465.427928][T14780] BTRFS info (device loop1): using crc32c checksum algorithm [ 465.445120][ T6013] usb 5-1: config 64 interface 19 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 465.458433][ T6013] usb 5-1: config 64 interface 19 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 465.470621][ T6013] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 465.482217][ T6013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.602380][ T6013] usb 5-1: probing VID:PID(2201:012C) [ 465.613925][ T7011] udevd[7011]: incorrect btrfs checksum on /dev/loop5 [ 465.624212][ T6013] usb 5-1: vub300 testing BULK IN EndPoint(0) 8F [ 465.643815][ T6013] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 465.664714][T14780] BTRFS info (device loop1): enabling ssd optimizations [ 465.665963][ T6013] vub300 5-1:64.19: probe with driver vub300 failed with error -22 [ 465.714034][T14780] BTRFS info (device loop1): turning on async discard [ 465.770901][T14780] BTRFS info (device loop1): enabling free space tree [ 465.866193][ T6013] usb 5-1: USB disconnect, device number 92 [ 465.901151][T14788] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3862 (14788) [ 466.065369][T14788] BTRFS info (device loop3 state S): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 466.092936][ T5986] BTRFS info (device loop1): last unmount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 466.119917][T14816] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 466.134740][T14788] BTRFS info (device loop3 state S): using sha256 checksum algorithm [ 466.186157][T14788] BTRFS error (device loop3 state S): ignoremetacsums must be used with ro mount option [ 466.218489][T14788] BTRFS error (device loop3 state S): cannot disable free-space-tree [ 466.268811][T14788] BTRFS error (device loop3 state S): open_ctree failed: -22 [ 466.285341][ T30] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 466.485337][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 466.525399][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.561105][ T30] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 466.618133][ T30] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 466.680773][ T30] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 466.763843][ T30] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.783797][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.818166][ T30] usb 1-1: Product: syz [ 466.822402][ T30] usb 1-1: Manufacturer: syz [ 466.862695][ T30] usb 1-1: SerialNumber: syz [ 466.924518][T14825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.032628][T14824] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 467.118364][ T30] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 467.138811][ T30] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 467.200143][ T30] usb 1-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 467.206629][ T5999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.217536][ T30] usb 1-1: 2:1 : invalid channels 0 [ 467.429515][ T30] usb 1-1: USB disconnect, device number 72 [ 467.547388][ T7012] udevd[7012]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.206492][T14834] set_capacity_and_notify: 9 callbacks suppressed [ 468.206514][T14834] loop4: detected capacity change from 0 to 32768 [ 468.280007][T14834] (syz.4.3874,14834,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 468.361797][T14834] (syz.4.3874,14834,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 468.415716][T14832] loop1: detected capacity change from 0 to 32768 [ 468.479598][T14832] (syz.1.3873,14832,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 468.555843][T14832] (syz.1.3873,14832,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 468.678758][T14836] loop3: detected capacity change from 0 to 32768 [ 468.745451][T14836] (syz.3.3875,14836,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 468.774670][T14830] loop2: detected capacity change from 0 to 32768 [ 468.831644][T14836] (syz.3.3875,14836,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 468.868889][T14830] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 468.938171][T14830] dlm: no local IP address has been set [ 468.985076][T14830] dlm: cannot start dlm midcomms -107 [ 469.049159][T14830] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 469.468536][T14851] loop3: detected capacity change from 0 to 2048 [ 469.581193][T14856] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 469.634099][T14838] loop0: detected capacity change from 0 to 65536 [ 469.674404][T14838] (syz.0.3876,14838,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 469.715099][T14838] (syz.0.3876,14838,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 469.845841][T14859] loop2: detected capacity change from 0 to 164 [ 470.092380][T14842] loop4: detected capacity change from 0 to 32768 [ 470.147499][T14842] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3877 (14842) [ 470.266078][T14842] BTRFS info (device loop4): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 470.362919][T14842] BTRFS info (device loop4): using sha256 checksum algorithm [ 470.391661][T14863] loop0: detected capacity change from 0 to 4096 [ 470.566838][T14842] BTRFS info (device loop4): enabling ssd optimizations [ 470.590435][T14842] BTRFS info (device loop4): turning on async discard [ 470.597242][T14842] BTRFS info (device loop4): enabling free space tree [ 470.896741][ T5999] BTRFS info (device loop4): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 471.290304][T14884] loop4: detected capacity change from 0 to 512 [ 471.326267][T14861] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3884 (14861) [ 471.383391][T14884] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 471.432054][T14884] UDF-fs: Scanning with blocksize 512 failed [ 471.454707][T14861] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 471.505764][T14884] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 471.513173][T14884] UDF-fs: Scanning with blocksize 1024 failed [ 471.534378][T14861] BTRFS info (device loop3): using crc32c checksum algorithm [ 471.565370][T14884] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 471.603702][T14865] (syz.2.3886,14865,1):ocfs2_verify_userspace_stack:858 ERROR: cluster stack passed to mount, but this filesystem does not support it [ 471.662761][T14884] UDF-fs: Scanning with blocksize 2048 failed [ 471.714182][T14884] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 471.769333][T14884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.788817][T14865] (syz.2.3886,14865,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 471.900318][T14861] BTRFS info (device loop3): enabling ssd optimizations [ 471.990045][T14861] BTRFS info (device loop3): turning on async discard [ 472.003280][T14861] BTRFS info (device loop3): enabling free space tree [ 472.248201][ T5995] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 472.263647][T14904] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 472.303469][T14904] UDF-fs: Scanning with blocksize 512 failed [ 472.343646][T14904] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 472.345202][T14882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3887 (14882) [ 472.399561][T14904] UDF-fs: Scanning with blocksize 1024 failed [ 472.442881][T14904] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 472.487736][T14882] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 472.498439][T14904] UDF-fs: Scanning with blocksize 2048 failed [ 472.542803][T14882] BTRFS info (device loop0): using crc32c checksum algorithm [ 472.556952][T14904] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 472.645168][T14904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.842995][T14882] BTRFS info (device loop0): enabling ssd optimizations [ 472.897244][T14882] BTRFS info (device loop0): turning on async discard [ 472.943925][T14882] BTRFS info (device loop0): enabling free space tree [ 473.146842][T14927] set_capacity_and_notify: 5 callbacks suppressed [ 473.146864][T14927] loop5: detected capacity change from 0 to 256 [ 473.165254][T14930] loop3: detected capacity change from 0 to 128 [ 473.371651][ T5985] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 473.491784][T14932] loop5: detected capacity change from 0 to 128 [ 473.529963][T14934] loop3: detected capacity change from 0 to 256 [ 473.749522][T14936] loop0: detected capacity change from 0 to 128 [ 473.931387][T14902] loop2: detected capacity change from 0 to 32768 [ 473.969597][T14902] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3890 (14902) [ 473.992772][T14940] loop3: detected capacity change from 0 to 512 [ 474.056474][T14902] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 474.123798][T14902] BTRFS info (device loop2): using blake2b checksum algorithm [ 474.353115][T14902] BTRFS info (device loop2): enabling ssd optimizations [ 474.360100][T14902] BTRFS info (device loop2): turning on async discard [ 474.406719][T14956] loop3: detected capacity change from 0 to 2048 [ 474.476799][T14902] BTRFS info (device loop2): enabling free space tree [ 474.551660][ T6407] loop3: p1 p2 p3 [ 474.635725][T14928] loop4: detected capacity change from 0 to 32768 [ 474.681576][T14928] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 474.698796][T14956] loop3: p1 p2 p3 [ 474.707608][ T5980] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 474.759051][T14928] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 474.899858][T14928] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 474.966187][ T30] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 474.993415][ T30] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 475.360901][ T7011] udevd[7011]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 475.361081][ T7012] udevd[7012]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 475.375931][ T6407] udevd[6407]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 475.556198][ T6407] udevd[6407]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 475.566911][ T7011] udevd[7011]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 475.587409][ T30] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 623ms [ 475.594883][ T7012] udevd[7012]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 475.611097][T14969] loop3: detected capacity change from 0 to 4096 [ 475.639393][T14969] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 475.714571][ T30] gfs2: fsid=syz:syz.0: jid=0: Done [ 475.722239][T14928] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 475.909748][T14943] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 476.104818][T14943] XFS (loop0): Ending clean mount [ 476.362430][ T5985] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 476.695006][T14967] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 477.004727][T14967] XFS (loop2): Ending clean mount [ 477.195108][ T5980] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 478.329020][T15032] overlayfs: missing 'lowerdir' [ 478.381141][T15034] set_capacity_and_notify: 4 callbacks suppressed [ 478.381162][T15034] loop0: detected capacity change from 0 to 512 [ 478.452079][T15038] bridge0: port 3(hsr0) entered blocking state [ 478.491930][T15038] bridge0: port 3(hsr0) entered disabled state [ 478.505142][T15038] hsr0: entered allmulticast mode [ 478.510182][T15038] hsr_slave_0: entered allmulticast mode [ 478.573654][T15038] hsr_slave_1: entered allmulticast mode [ 478.602342][T15038] hsr0: entered promiscuous mode [ 478.629371][T15038] bridge0: port 3(hsr0) entered blocking state [ 478.635674][T15038] bridge0: port 3(hsr0) entered forwarding state [ 478.896787][T15051] netlink: 'syz.3.3938': attribute type 1 has an invalid length. [ 478.904778][T15051] netlink: 'syz.3.3938': attribute type 2 has an invalid length. [ 479.027529][T15056] loop5: detected capacity change from 0 to 256 [ 479.329648][T15052] loop4: detected capacity change from 0 to 8192 [ 479.482480][ T31] audit: type=1800 audit(1773196532.631:11): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3937" name="file2" dev="loop4" ino=1048681 res=0 errno=0 [ 479.515791][T15073] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 479.645586][T15071] loop5: detected capacity change from 0 to 4096 [ 479.676767][T15071] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 479.754077][T15071] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 479.798860][T15071] ntfs3: Cannot use different iocharset when remounting! [ 480.124952][T15066] loop0: detected capacity change from 0 to 16384 [ 480.265005][T15093] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.907729][T15108] bond1: option primary_reselect: invalid value (252) [ 481.071849][T15108] bond1 (unregistering): Released all slaves [ 481.519433][T15128] loop4: detected capacity change from 0 to 512 [ 481.556655][T15128] EXT4-fs: Ignoring removed nobh option [ 481.572445][T15128] EXT4-fs (loop4): Test dummy encryption mode enabled [ 481.631382][T15128] EXT4-fs error (device loop4): __ext4_iget:5378: inode #11: block 1: comm syz.4.3968: invalid block [ 481.657413][T15064] loop3: detected capacity change from 0 to 65536 [ 481.706106][T15128] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 481.706578][T15128] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3968: couldn't read orphan inode 11 (err -117) [ 481.715952][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 481.715976][ C0] EXT4-fs (loop4): initial error at time 1773196534: __ext4_iget:5378: inode 11: block 1 [ 481.716024][ C0] EXT4-fs (loop4): last error at time 1773196534: __ext4_iget:5378: inode 11: block 1 [ 481.790234][T15144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.801359][T15064] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 481.841214][T15128] loop4: lost filesystem error report for type 5 error -117 [ 481.845548][T15128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.128390][ T5999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.362377][T15158] [U]  [ 482.476909][ T6013] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 482.563997][T15166] loop1: detected capacity change from 0 to 512 [ 482.657814][ T6013] usb 1-1: Using ep0 maxpacket: 8 [ 482.688925][T15166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.719259][ T6013] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 482.768137][ T6013] usb 1-1: config 0 has no interface number 0 [ 482.780783][T15175] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3982'. [ 482.791528][T15166] ext4 filesystem being mounted at /628/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.809276][T15166] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3979: corrupted xattr block 33: invalid header [ 482.829302][ T6013] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 482.853600][T15166] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3979: corrupted xattr block 33: invalid header [ 482.905513][ T6013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.954802][T15166] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 482.973760][ T6013] usb 1-1: config 0 descriptor?? [ 483.118371][ T6013] viperboard 1-1:0.143: version 0.00 found at bus 001 address 073 [ 483.172435][ T5986] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.233058][ T6013] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 483.299526][ T6013] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 483.372681][ T6013] usb 1-1: USB disconnect, device number 73 [ 483.427105][T15190] netlink: 'syz.1.3986': attribute type 3 has an invalid length. [ 483.456597][T15192] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3989'. [ 483.476412][T15190] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3986'. [ 483.509887][T15192] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 483.827005][T15116] loop2: detected capacity change from 0 to 65536 [ 483.928511][T15116] XFS (loop2): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 483.934508][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3995'. [ 483.971204][T15116] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR [ 483.972149][T15116] XFS (loop2): log mount failed [ 484.077452][ T6013] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 484.307762][ T6013] usb 2-1: unable to get BOS descriptor or descriptor too short [ 484.353254][ T6013] usb 2-1: not running at top speed; connect to a high speed hub [ 484.407270][ T6013] usb 2-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 484.445894][ T6013] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.487930][T15220] loop5: detected capacity change from 0 to 4096 [ 484.495949][ T6013] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 35 [ 484.533454][ T6013] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.619835][ T6013] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.644713][T15220] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 484.647690][ T6013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.691700][ T6013] usb 2-1: Product: syz [ 484.724394][ T6013] usb 2-1: Manufacturer: syz [ 484.729028][ T6013] usb 2-1: SerialNumber: syz [ 484.734539][T15220] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 484.820082][ T6013] cdc_ncm 2-1:1.0: skipping garbage [ 484.825327][ T6013] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 484.839214][T15239] loop0: detected capacity change from 0 to 4096 [ 484.873681][T15248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4007'. [ 484.877061][T15239] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 484.896142][ T6013] cdc_ncm 2-1:1.0: bind() failure [ 485.009441][ T30] usb 2-1: USB disconnect, device number 96 [ 485.122575][T15239] ntfs3(loop0): ino=19, mi_enum_attr [ 485.137685][T15252] loop2: detected capacity change from 0 to 512 [ 485.182939][T15252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 485.213949][T15256] loop4: detected capacity change from 0 to 256 [ 485.241598][T15252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 485.344271][T15252] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 485.432204][T15252] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.4009: Allocating blocks 41-42 which overlap fs metadata [ 485.468015][T15252] loop2: lost filesystem error report for type 5 error -117 [ 485.477056][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 485.490829][ C1] EXT4-fs (loop2): initial error at time 1773196538: ext4_mb_mark_diskspace_used:4222 [ 485.500473][ C1] EXT4-fs (loop2): last error at time 1773196538: ext4_mb_mark_diskspace_used:4222 [ 485.523771][T15252] EXT4-fs (loop2): Remounting filesystem read-only [ 485.540603][T15252] Quota error (device loop2): write_blk: dquota write failed [ 485.606565][T15252] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 485.665532][ T31] audit: type=1326 audit(1773196539.119:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.4015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93699c799 code=0x7ffc0000 [ 485.669538][T15252] Quota error (device loop2): write_blk: dquota write failed [ 485.772258][ T31] audit: type=1326 audit(1773196539.119:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.4015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93699c799 code=0x7ffc0000 [ 485.829923][T15252] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 485.884724][T15252] EXT4-fs (loop2): 1 truncate cleaned up [ 485.889834][ T31] audit: type=1326 audit(1773196539.119:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.4015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93699c799 code=0x7ffc0000 [ 485.924367][T15252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.025924][ T31] audit: type=1326 audit(1773196539.161:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.4015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa93699c799 code=0x7ffc0000 [ 486.170518][ T31] audit: type=1326 audit(1773196539.161:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.4015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93699c799 code=0x7ffc0000 [ 486.277434][ T31] audit: type=1326 audit(1773196539.161:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15266 comm="syz.0.4015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93699c799 code=0x7ffc0000 [ 486.371675][ T5980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.405158][T15295] netlink: 'syz.0.4024': attribute type 5 has an invalid length. [ 486.447670][T15295] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4024'. [ 486.504522][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4028'. [ 487.078865][T15319] team0: entered promiscuous mode [ 487.083933][T15319] team_slave_0: entered promiscuous mode [ 487.109598][T15319] team_slave_1: entered promiscuous mode [ 487.135158][T15319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4038'. [ 487.155426][T15323] loop2: detected capacity change from 0 to 16 [ 487.177829][T15319] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 487.201453][T15323] erofs (device loop2): mounted with root inode @ nid 36. [ 487.666132][T15305] loop3: detected capacity change from 0 to 32768 [ 487.734247][T15305] xfs: Deprecated parameter 'attr2' [ 487.739502][T15305] XFS: attr2 mount option is deprecated. [ 487.801024][ T6013] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 487.818928][T15305] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 487.930107][T15305] XFS (loop3): Ending clean mount [ 487.972271][ T6013] usb 6-1: Using ep0 maxpacket: 8 [ 487.982055][T15305] XFS (loop3): Quotacheck needed: Please wait. [ 488.029348][ T6013] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 488.037637][ T6013] usb 6-1: config 179 has no interface number 0 [ 488.096928][ T6013] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 488.100732][T15305] XFS (loop3): Quotacheck: Done. [ 488.163479][ T6013] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 488.238925][ T6013] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 488.241119][ T5995] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 488.272226][T15366] loop4: detected capacity change from 0 to 256 [ 488.280606][ T6013] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 488.315251][ T6013] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 488.331524][ T6013] usb 6-1: config 179 interface 65 has no altsetting 0 [ 488.352059][ T6013] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 488.361352][ T6013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.410366][T15366] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 488.441138][ T6013] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input40 [ 488.485373][T15366] overlay: filesystem on ./file0 not supported [ 488.553546][T15364] loop0: detected capacity change from 0 to 8192 [ 488.602183][ T6013] usb 6-1: USB disconnect, device number 98 [ 488.814820][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 488.822902][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 489.248312][T15384] loop4: detected capacity change from 0 to 1024 [ 489.327083][T15384] hfsplus: invalid xattr key length: 0 [ 489.813154][T15400] loop4: detected capacity change from 0 to 4096 [ 489.819889][T15404] loop0: detected capacity change from 0 to 128 [ 489.877088][T15404] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 489.887585][T15410] loop3: detected capacity change from 0 to 736 [ 490.000926][T15400] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 490.040577][T15404] ext4 filesystem being mounted at /595/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 490.098780][T15400] ntfs3(loop4): ino=1a, mi_enum_attr [ 490.104212][T15400] ntfs3(loop4): ino=1a, mi_enum_attr [ 490.129421][T15400] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 490.232831][T15415] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4080'. [ 490.263722][T15400] ntfs3(loop4): ino=1a, mi_enum_attr [ 490.294406][T15417] capability: warning: `syz.1.4081' uses 32-bit capabilities (legacy support in use) [ 490.313936][ T5985] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 490.381982][T15355] loop2: detected capacity change from 0 to 65536 [ 490.475970][T15355] XFS (loop2): Mounting V5 Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591 [ 490.672038][T15431] loop5: detected capacity change from 0 to 256 [ 490.713235][T15355] XFS (loop2): Ending clean mount [ 490.772941][T15431] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 490.890718][ T5980] XFS (loop2): Unmounting Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591 [ 491.043829][T15445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4091'. [ 491.096775][T15449] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4093'. [ 491.206392][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 491.206413][ T31] audit: type=1326 audit(1773196544.936:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.4.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 491.260382][ T31] audit: type=1326 audit(1773196544.999:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.4.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 491.316354][ T31] audit: type=1326 audit(1773196544.999:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.4.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 491.385014][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 491.423342][ T31] audit: type=1326 audit(1773196544.999:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.4.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 491.454905][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 491.473967][T15427] loop0: detected capacity change from 0 to 32768 [ 491.498257][T15427] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4083 (15427) [ 491.506007][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 491.540431][ T31] audit: type=1326 audit(1773196544.999:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15450 comm="syz.4.4094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 491.576803][T15427] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 491.577483][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 491.615766][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 491.636181][T15427] BTRFS info (device loop0): using xxhash64 checksum algorithm [ 491.641486][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 491.680473][T15427] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 491.698500][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 491.804868][T15453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.905027][T15427] BTRFS info (device loop0): rebuilding free space tree [ 492.049531][T15427] BTRFS info (device loop0): disabling free space tree [ 492.056499][T15427] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 492.139947][T15427] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 492.187894][T15427] BTRFS info (device loop0): setting nodatasum [ 492.220076][T15427] BTRFS info (device loop0): allowing degraded mounts [ 492.226877][T15427] BTRFS info (device loop0): turning on async discard [ 492.297417][T15427] BTRFS info (device loop0): enabling disk space caching [ 492.304664][T15427] BTRFS info (device loop0): force clearing of disk cache [ 492.368361][T15494] loop3: detected capacity change from 0 to 512 [ 492.376751][T15427] BTRFS info (device loop0): force zlib compression, level 3 [ 492.480003][T15494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 492.493128][T15494] ext4 filesystem being mounted at /704/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.635784][ T5995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 492.709514][ T5985] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 493.656337][T15539] loop3: detected capacity change from 0 to 1024 [ 493.744016][ T5993] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 494.223804][ T31] audit: type=1326 audit(1773196548.107:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 494.312814][ T31] audit: type=1326 audit(1773196548.149:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 494.382207][T15565] loop1: detected capacity change from 0 to 4096 [ 494.431666][ T31] audit: type=1326 audit(1773196548.149:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 494.525733][T15565] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 494.560089][ T31] audit: type=1326 audit(1773196548.149:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 494.792285][ T31] audit: type=1326 audit(1773196548.695:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.0.4150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93699c799 code=0x7ffc0000 [ 494.842972][T15574] loop3: detected capacity change from 0 to 4096 [ 495.149929][T15596] __nla_validate_parse: 11 callbacks suppressed [ 495.149952][T15596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4155'. [ 495.348182][T15604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4160'. [ 495.397413][T15604] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4160'. [ 495.421051][T15606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4159'. [ 495.552810][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4162'. [ 495.681877][T15616] loop4: detected capacity change from 0 to 1024 [ 495.702902][T15616] EXT4-fs: Ignoring removed oldalloc option [ 495.760079][T15616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.772369][ T6193] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 495.781021][T15625] xt_CT: You must specify a L4 protocol and not use inversions on it [ 495.859126][ T6094] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 495.930376][ T6193] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.941300][ T6193] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 495.957391][ T6193] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 495.972845][ T6193] usb 2-1: config 1 interface 0 has no altsetting 0 [ 495.979935][T15629] loop0: detected capacity change from 0 to 1024 [ 495.994053][ T6193] usb 2-1: string descriptor 0 read error: -22 [ 496.002073][ T5999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.036927][ T6193] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 496.057138][ T6193] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 496.057455][ T6094] usb 6-1: Using ep0 maxpacket: 8 [ 496.083746][ T6094] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.096191][T15629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.103013][ T6094] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 496.122059][ T6094] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x43, changing to 0x3 [ 496.133507][ T6094] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 254, changing to 11 [ 496.144608][ T6094] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 496.155704][ T6094] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 496.166212][ T6094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.200528][T15614] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 496.204398][ T6193] usb 2-1: 0:2 : does not exist [ 496.211880][ T6094] hub 6-1:1.0: bad descriptor, ignoring hub [ 496.221958][ T6094] hub 6-1:1.0: probe with driver hub failed with error -5 [ 496.229675][ T6094] cdc_wdm 6-1:1.0: skipping garbage [ 496.235202][ T6094] cdc_wdm 6-1:1.0: skipping garbage [ 496.242145][ T6094] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 496.249540][ T6013] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 496.258346][T15637] loop4: detected capacity change from 0 to 8 [ 496.273223][T15629] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.4171: missing EA_INODE flag [ 496.294361][T15637] SQUASHFS error: Failed to read block 0x2d7: -5 [ 496.302809][T15637] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 496.312113][T15629] EXT4-fs (loop0): Remounting filesystem read-only [ 496.321886][T15637] SQUASHFS error: Failed to read block 0x85: -5 [ 496.334142][T15637] SQUASHFS error: Failed to read block 0x85: -5 [ 496.404158][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 496.404180][ T31] audit: type=1800 audit(1773196550.395:35): pid=15637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4173" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 496.460833][ T6013] usb 4-1: Using ep0 maxpacket: 8 [ 496.469030][ T6013] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 496.481249][ T6193] usb-storage 2-1:1.1: USB Mass Storage device detected [ 496.482880][ T5985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.517494][ T6013] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 178, changing to 7 [ 496.553760][ T6013] usb 4-1: string descriptor 0 read error: -22 [ 496.560506][ T6013] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.572681][ T6013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.602535][ T6013] usb 4-1: 1:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 496.610993][ T6013] usb 4-1: found format II with max.bitrate = 1, frame size=10 [ 496.622290][ T6013] usb 4-1: 1:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 496.634636][ T6013] usb 4-1: found format II with max.bitrate = 1, frame size=10 [ 496.681768][T15644] loop2: detected capacity change from 0 to 256 [ 496.690144][ T6094] usb 6-1: USB disconnect, device number 99 [ 496.749846][T15644] FAT-fs (loop2): Directory bread(block 64) failed [ 496.770953][T15644] FAT-fs (loop2): Directory bread(block 65) failed [ 496.788247][T15644] FAT-fs (loop2): Directory bread(block 66) failed [ 496.799751][ T6013] usb 4-1: found format II with max.bitrate = 1, frame size=2048 [ 496.808971][T15644] FAT-fs (loop2): Directory bread(block 67) failed [ 496.831376][T15647] pimreg: entered allmulticast mode [ 496.840002][ T6193] usb 2-1: us122l: couldn't allocate write buffer [ 496.848403][T15644] FAT-fs (loop2): Directory bread(block 68) failed [ 496.851299][ T6013] usb 4-1: found format II with max.bitrate = 1, frame size=2048 [ 496.863173][ T6193] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 496.870982][T15644] FAT-fs (loop2): Directory bread(block 69) failed [ 496.901444][ T6193] usb 2-1: USB disconnect, device number 97 [ 496.930934][T15644] FAT-fs (loop2): Directory bread(block 70) failed [ 496.982021][T15644] FAT-fs (loop2): Directory bread(block 71) failed [ 497.001704][T15644] FAT-fs (loop2): Directory bread(block 72) failed [ 497.015908][T15644] FAT-fs (loop2): Directory bread(block 73) failed [ 497.168792][ T6013] usb 4-1: USB disconnect, device number 90 [ 497.518567][T15662] loop3: detected capacity change from 0 to 164 [ 497.668891][T15671] loop0: detected capacity change from 0 to 1024 [ 497.719629][T15671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 497.754375][T15671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 497.764438][T15671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 497.825483][T15671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.928349][T15682] loop3: detected capacity change from 0 to 1024 [ 498.079781][T15688] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 498.112056][ T5985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.455258][T15704] loop2: detected capacity change from 0 to 128 [ 498.526751][ T6013] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 498.707267][ T6013] usb 1-1: Using ep0 maxpacket: 8 [ 498.724065][ T6013] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 498.768724][ T6013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 498.812619][ T6013] usb 1-1: Product: syz [ 498.830604][ T6013] usb 1-1: Manufacturer: syz [ 498.876364][ T6013] usb 1-1: SerialNumber: syz [ 498.913522][ T6013] usb 1-1: config 0 descriptor?? [ 498.951071][ T6013] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 499.066677][T15677] F2FS-fs (loop1): invalid crc value [ 499.207685][ T5914] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 499.343984][ T6013] gspca_sn9c2028: read1 error -71 [ 499.380939][ T6013] gspca_sn9c2028: read1 error -71 [ 499.395627][ T5914] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 499.406463][ T6013] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 499.444677][T15677] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 499.451165][ T5914] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 499.470072][ T6013] usb 1-1: USB disconnect, device number 74 [ 499.502247][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.511070][T15677] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 499.937734][ T5914] ath6kl: Failed to read usb control message: -71 [ 499.960427][ T5914] ath6kl: Unable to read the bmi data from the device: -71 [ 499.992253][ T5914] ath6kl: Unable to recv target info: -71 [ 500.013823][ T5914] ath6kl: Failed to init ath6kl core: -71 [ 500.037586][ T5914] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 500.051616][T15738] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 500.067865][ T5914] usb 6-1: USB disconnect, device number 100 [ 500.127406][T15740] tmpfs: User quota inode hardlimit too large. [ 500.859154][T15762] set_capacity_and_notify: 2 callbacks suppressed [ 500.859180][T15762] loop0: detected capacity change from 0 to 1024 [ 500.888036][T15725] loop3: detected capacity change from 0 to 40427 [ 500.918128][T15725] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 500.927297][T15725] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 500.955245][T15725] F2FS-fs (loop3): invalid crc value [ 501.372288][T15725] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 501.409563][T15783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4241'. [ 501.421672][T15725] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 501.453370][T15725] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 501.461208][T15783] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4241'. [ 502.030035][T15808] loop5: detected capacity change from 0 to 2048 [ 502.077277][T15808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.106662][T15808] ext4 filesystem being mounted at /715/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.183466][T15808] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4254: corrupted xattr block 128: overlapping e_value [ 502.375425][ T5998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.909105][T15842] netlink: 'syz.1.4270': attribute type 2 has an invalid length. [ 502.961242][T15843] loop5: detected capacity change from 0 to 1764 [ 502.996097][T15847] loop3: detected capacity change from 0 to 1024 [ 503.096065][T15844] loop0: detected capacity change from 0 to 4096 [ 503.112659][T15847] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 503.136538][T15844] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 503.164668][T15847] System zones: 0-1, 3-36 [ 503.217139][T15847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.272857][T15857] syz.5.4275 uses obsolete (PF_INET,SOCK_PACKET) [ 503.557213][ T5995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.757434][T15868] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4281'. [ 503.982294][T15875] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4283'. [ 504.114341][T15852] loop1: detected capacity change from 0 to 32768 [ 504.160854][T15852] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4274 (15852) [ 504.185926][T15878] loop3: detected capacity change from 0 to 4096 [ 504.233402][T15878] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 504.287636][T15852] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 504.330790][T15852] BTRFS info (device loop1): using crc32c checksum algorithm [ 504.394437][T15878] ntfs3(loop3): ino=18, mi_enum_attr [ 504.399763][T15878] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 504.530226][ T61] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 504.551182][T15878] ntfs3(loop3): ino=0, attr_set_size_ex [ 504.584717][T15852] BTRFS warning (device loop1): couldn't read tree root [ 504.631124][T15852] BTRFS warning (device loop1): try to load backup roots slot 1 [ 504.639293][ T61] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 504.728433][T15852] BTRFS warning (device loop1): couldn't read tree root [ 504.735419][T15852] BTRFS warning (device loop1): try to load backup roots slot 2 [ 504.806021][ T61] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 504.851315][T15852] BTRFS warning (device loop1): couldn't read tree root [ 504.886034][T15852] BTRFS warning (device loop1): try to load backup roots slot 3 [ 504.957971][T15852] BTRFS info (device loop1): checking UUID tree [ 504.973212][T15852] BTRFS info (device loop1): setting nodatasum [ 505.009429][T15852] BTRFS info (device loop1): enabling ssd optimizations [ 505.031966][T15852] BTRFS info (device loop1): turning on flush-on-commit [ 505.089626][T15852] BTRFS info (device loop1): turning on async discard [ 505.126695][T15852] BTRFS info (device loop1): enabling free space tree [ 505.137224][T15921] loop3: detected capacity change from 0 to 1024 [ 505.154242][T15852] BTRFS info (device loop1): trying to use backup root at mount time [ 505.185430][T15852] BTRFS info (device loop1): max_inline set to 0 [ 505.212414][T15925] netlink: 'syz.5.4297': attribute type 11 has an invalid length. [ 505.247649][T15921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 505.331346][T15880] loop2: detected capacity change from 0 to 40427 [ 505.355081][T15880] F2FS-fs (loop2): invalid crc value [ 505.368455][T15929] netlink: 'syz.4.4298': attribute type 3 has an invalid length. [ 505.379076][T15929] netlink: 'syz.4.4298': attribute type 27 has an invalid length. [ 505.563679][ T5995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 505.607370][T15932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4299'. [ 505.638586][ T5986] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 505.711571][T15880] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 505.840881][T15880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 506.096528][T15949] trusted_key: encrypted_key: hex blob is missing [ 506.155144][T15948] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.173951][T15982] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 507.402605][T15990] IPv6: NLM_F_CREATE should be specified when creating new route [ 507.519464][T15993] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4328'. [ 507.536040][ T6085] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 507.554477][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 507.582391][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 507.597472][T15960] loop5: detected capacity change from 0 to 32768 [ 507.612945][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 507.653664][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 507.670971][T15971] loop1: detected capacity change from 0 to 32768 [ 507.671668][T15960] find_entry called with index >= next_index [ 507.688541][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 507.721815][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 507.735675][ T6085] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 507.764637][T15960] find_entry called with index >= next_index [ 507.768462][ T6085] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 507.780690][T15960] find_entry called with index >= next_index [ 507.783873][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 507.820463][T15960] find_entry called with index >= next_index [ 507.827374][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 507.846281][ T6085] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 507.860983][T15960] find_entry called with index >= next_index [ 507.876275][ T6085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.889508][T15960] add_index: next_index = 0. Resetting! [ 507.896283][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4327'. [ 507.913916][T15960] find_entry called with index >= next_index [ 507.924069][ T6085] usb 4-1: Product: syz [ 507.938466][T15960] find_entry called with index >= next_index [ 507.947741][ T6085] usb 4-1: Manufacturer: syz [ 507.965870][T15960] find_entry called with index >= next_index [ 507.974967][ T6085] usb 4-1: SerialNumber: syz [ 508.000017][ T6085] usb 4-1: config 0 descriptor?? [ 508.067378][T15994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.128421][T16002] veth0_to_bond: entered promiscuous mode [ 508.153277][T16002] veth0_to_bond: entered allmulticast mode [ 508.199821][T16002] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 508.259802][ T6085] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 508.301453][ C1] powermate: config urb returned -71 [ 508.311391][ C1] powermate: config urb returned -71 [ 508.317675][ C1] powermate: config urb returned -71 [ 508.323365][ C1] powermate: config urb returned -71 [ 508.350971][ T6085] usb 4-1: USB disconnect, device number 91 [ 508.356991][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 508.405114][ T31] audit: type=1400 audit(1773196562.984:36): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16007 comm="syz.0.4337" [ 509.015627][T16024] warning: `syz.0.4345' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 509.421992][T16044] openvswitch: netlink: ufid size 260 bytes exceeds the range (1, 16) [ 509.430193][T16044] openvswitch: netlink: Message has 16 unknown bytes. [ 509.831881][T16057] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 509.882522][T16057] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 510.218135][T16083] macsec0: mtu greater than device maximum [ 510.240249][T16084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.480422][T16096] netlink: 'syz.1.4378': attribute type 2 has an invalid length. [ 510.488171][T16096] netlink: 'syz.1.4378': attribute type 2 has an invalid length. [ 510.622749][T16096] netlink: 'syz.1.4378': attribute type 1 has an invalid length. [ 510.802957][ T5968] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 510.959729][ T5968] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.990808][ T5968] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.053488][ T5968] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.081532][ T5968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.119161][ T5968] usb 4-1: Product: syz [ 511.123361][ T5968] usb 4-1: Manufacturer: syz [ 511.154353][ T5968] usb 4-1: SerialNumber: syz [ 511.207285][ T5968] cdc_ncm 4-1:1.0: skipping garbage [ 511.231218][ T5968] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 511.251437][ T5968] cdc_ncm 4-1:1.0: bind() failure [ 511.307441][ T5968] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 511.329202][ T5968] cdc_ncm 4-1:1.1: bind() failure [ 511.434434][ T5968] usb 4-1: USB disconnect, device number 92 [ 511.604053][T16090] loop2: detected capacity change from 0 to 32768 [ 511.665187][T16090] read_mapping_page failed! [ 511.684846][T16090] ERROR: (device loop2): txCommit: [ 511.684846][T16090] [ 511.697404][T16133] loop1: detected capacity change from 0 to 4096 [ 511.765210][T16133] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 511.827694][ T61] read_mapping_page failed! [ 511.854648][ T61] ERROR: (device loop2): txCommit: [ 511.854648][ T61] [ 511.879300][T16141] bridge2: entered promiscuous mode [ 511.879848][T16133] ntfs3(loop1): ino=19, mi_enum_attr [ 511.890124][ T30] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 511.899358][ T61] jfs_write_inode: jfs_commit_inode failed! [ 512.036763][T16133] ntfs3(loop1): failed to convert "c46c" to iso8859-6 [ 512.069750][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 512.086377][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.110791][T16133] ntfs3(loop1): ino=20, mi_enum_attr [ 512.116446][T16133] ntfs3(loop1): failed to convert "0030" to iso8859-6 [ 512.133288][T16147] Driver unsupported XDP return value 0 on prog (id 288) dev N/A, expect packet loss! [ 512.150307][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 512.189209][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 512.223402][T16133] ntfs3(loop1): failed to convert "0031" to iso8859-6 [ 512.266107][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 512.271468][T16133] ntfs3(loop1): failed to convert "0032" to iso8859-6 [ 512.285262][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.326394][ T30] usb 5-1: Product: syz [ 512.330593][ T30] usb 5-1: Manufacturer: syz [ 512.368770][ T30] usb 5-1: SerialNumber: syz [ 512.430959][ T30] cdc_ncm 5-1:1.0: skipping garbage [ 512.450233][ T30] cdc_ncm 5-1:1.0: skipping garbage [ 512.455467][ T30] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 512.502233][ T30] cdc_ncm 5-1:1.0: bind() failure [ 512.636552][ T6094] usb 5-1: USB disconnect, device number 93 [ 512.739819][T16163] __nla_validate_parse: 12 callbacks suppressed [ 512.739841][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4413'. [ 513.028839][T16178] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4418'. [ 513.468388][T16195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4428'. [ 513.511096][T16195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4428'. [ 513.579344][T16201] tmpfs: Bad value for 'mpol' [ 513.998514][T16218] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 514.005064][T16218] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 514.114615][T16218] vhci_hcd vhci_hcd.0: Device attached [ 514.156431][T16220] vhci_hcd: connection closed [ 514.162565][ T131] vhci_hcd vhci_hcd.2: stop threads [ 514.195290][ T131] vhci_hcd vhci_hcd.2: release socket [ 514.198145][T16229] openvswitch: netlink: Tunnel attr 154 out of range max 16 [ 514.210830][ T131] vhci_hcd vhci_hcd.2: disconnect device [ 514.260315][T16231] netlink: 'syz.5.4445': attribute type 10 has an invalid length. [ 514.305659][T16185] loop1: detected capacity change from 0 to 32768 [ 514.327636][T16185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4421 (16185) [ 514.415879][T16185] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 514.418784][T16231] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 514.441961][T16185] BTRFS info (device loop1): using sha256 checksum algorithm [ 514.655034][T16185] BTRFS info (device loop1): enabling ssd optimizations [ 514.666789][T16185] BTRFS info (device loop1): turning on async discard [ 514.674268][T16185] BTRFS info (device loop1): enabling free space tree [ 514.868037][ T31] audit: type=1326 audit(1773196569.777:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.3.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 514.944111][T16264] loop4: detected capacity change from 0 to 1024 [ 514.962876][ T31] audit: type=1326 audit(1773196569.777:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.3.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 515.005886][ T5986] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 515.018974][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4456'. [ 515.046625][ T31] audit: type=1326 audit(1773196569.777:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.3.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 515.153088][ T31] audit: type=1326 audit(1773196569.819:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.3.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 515.180306][T16272] loop3: detected capacity change from 0 to 64 [ 515.220153][ T31] audit: type=1326 audit(1773196569.819:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.3.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 515.290795][ T1156] hfsplus: b-tree write err: -5, ino 25 [ 515.296532][ T1156] hfsplus: b-tree write err: -5, ino 4 [ 515.342235][T16272] syz.3.4459: attempt to access beyond end of device [ 515.342235][T16272] loop3: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 515.359498][ T1156] hfsplus: b-tree write err: -5, ino 2 [ 515.373653][T16276] loop0: detected capacity change from 0 to 2048 [ 515.402472][ T31] audit: type=1326 audit(1773196569.819:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.3.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 515.468987][T16272] Buffer I/O error on dev loop3, logical block 512, async page read [ 515.503418][T16276] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 515.537879][T16272] syz.3.4459: attempt to access beyond end of device [ 515.537879][T16272] loop3: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 515.564872][ T31] audit: type=1326 audit(1773196569.819:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.3.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 515.666862][T16272] Buffer I/O error on dev loop3, logical block 56576, async page read [ 515.701133][ T31] audit: type=1326 audit(1773196569.819:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16259 comm="syz.3.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 515.905029][T16289] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 516.105243][T16295] netlink: 'syz.3.4469': attribute type 7 has an invalid length. [ 516.113414][T16294] netlink: 'syz.0.4465': attribute type 21 has an invalid length. [ 516.154222][T16294] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4465'. [ 516.202711][T16294] netlink: 'syz.0.4465': attribute type 5 has an invalid length. [ 516.237476][T16294] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4465'. [ 516.417266][T16305] tmpfs: Bad value for 'mpol' [ 516.527752][T16314] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 516.813106][ T5914] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 516.913406][T16327] netlink: 'syz.0.4483': attribute type 7 has an invalid length. [ 517.009873][ T5914] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 517.041706][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.111724][ T5914] usb 2-1: config 0 descriptor?? [ 517.138018][ T31] audit: type=1326 audit(1773196572.171:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 517.171474][ T5914] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 517.240100][ T31] audit: type=1326 audit(1773196572.171:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16336 comm="syz.2.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 517.507028][ T5914] gp8psk: usb in 137 operation failed. [ 517.520636][ T5914] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 517.565857][ T5914] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 517.622842][T16353] netlink: 'syz.5.4496': attribute type 1 has an invalid length. [ 517.623795][ T5914] usb 2-1: USB disconnect, device number 98 [ 518.173637][T16374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4506'. [ 518.236445][T16379] loop2: detected capacity change from 0 to 128 [ 518.575229][T16351] loop4: detected capacity change from 0 to 32768 [ 518.589181][T16351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4495 (16351) [ 518.668998][T16351] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 518.721955][T16351] BTRFS info (device loop4): using sha256 checksum algorithm [ 518.947610][T16351] BTRFS info (device loop4): enabling ssd optimizations [ 518.979197][T16351] BTRFS info (device loop4): turning on async discard [ 519.051561][T16351] BTRFS info (device loop4): enabling free space tree [ 519.120513][T16417] bond1: entered promiscuous mode [ 519.131476][T16417] bond1: entered allmulticast mode [ 519.152894][T16351] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 520.007474][T16451] netlink: 'syz.4.4537': attribute type 21 has an invalid length. [ 520.073500][T16451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4537'. [ 520.107693][T16415] loop0: detected capacity change from 0 to 32768 [ 520.159595][T16415] (syz.0.4520,16415,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 520.199960][T16415] (syz.0.4520,16415,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 520.228787][T16457] process 'syz.2.4539' launched '/dev/fd/3' with NULL argv: empty string added [ 520.296952][T16415] JBD2: Ignoring recovery information on journal [ 520.444980][T16415] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 520.495323][T16466] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4541'. [ 520.540148][T16428] loop3: detected capacity change from 0 to 32768 [ 520.646956][T16428] ERROR: (device loop3): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 520.646956][T16428] [ 520.714622][T16428] ERROR: (device loop3): remounting filesystem as read-only [ 520.733472][T16428] ERROR: (device loop3): jfs_rename: [ 520.733472][T16428] [ 520.887542][ T5985] ocfs2: Unmounting device (7,0) on (node local) [ 520.905577][ T5995] ERROR: (device loop3): xtTruncate: xt_getpage: xtree page corrupt [ 520.905577][ T5995] [ 521.714047][T16463] syz.4.4542 (16463): drop_caches: 2 [ 521.785961][T16500] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 521.823102][ T6013] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 521.925888][T16505] netlink: 'syz.3.4562': attribute type 4 has an invalid length. [ 522.025658][ T6013] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 522.041749][ T6013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.079158][ T6013] usb 6-1: config 0 descriptor?? [ 522.103840][ T6013] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 522.483365][ T6013] gp8psk: usb out operation failed. [ 522.488595][ T6013] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 522.538268][ T6013] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 522.594389][ T6013] usb 6-1: USB disconnect, device number 101 [ 522.934164][T16540] sock: sock_timestamping_bind_phc: sock not bind to device [ 523.195915][T16512] loop2: detected capacity change from 0 to 32768 [ 523.307473][T16512] JBD2: Ignoring recovery information on journal [ 523.449369][T16512] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 523.574150][T16557] bond1: Removing last arp target with arp_interval on [ 523.624884][T16557] bond1: option min_links: invalid value (18446744071562067973) [ 523.651838][T16557] bond1: option min_links: allowed values 0 - 2147483647 [ 523.689306][T16557] bond1 (unregistering): Released all slaves [ 523.697171][ T5980] ocfs2: Unmounting device (7,2) on (node local) [ 523.755323][T16546] loop3: detected capacity change from 0 to 32768 [ 523.778323][T16546] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4583 (16546) [ 523.805480][ T5914] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 523.834197][T16546] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 523.876789][T16546] BTRFS info (device loop3): using sha256 checksum algorithm [ 523.984914][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 523.994998][T16546] BTRFS info (device loop3): enabling ssd optimizations [ 524.001965][T16546] BTRFS info (device loop3): turning on async discard [ 524.010615][T16546] BTRFS info (device loop3): enabling free space tree [ 524.049877][ T5914] usb 6-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 524.121202][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.150246][ T5914] usb 6-1: Product: syz [ 524.154514][ T5914] usb 6-1: Manufacturer: syz [ 524.175025][ T5914] usb 6-1: SerialNumber: syz [ 524.194743][ T5914] usb 6-1: config 0 descriptor?? [ 524.266050][ T5995] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 524.466674][ T5914] snd-usb-hiface 6-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 524.655641][T16598] loop4: detected capacity change from 0 to 4096 [ 524.660104][ T6193] usb 6-1: USB disconnect, device number 102 [ 524.677712][T16598] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 524.693209][T16601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.855067][T16598] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 525.194603][T16617] loop2: detected capacity change from 0 to 128 [ 525.316811][T16617] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 525.337601][T16617] ext4 filesystem being mounted at /708/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 525.579475][ T5980] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 525.775370][T16636] loop0: detected capacity change from 0 to 4096 [ 526.042662][ T5914] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 526.097597][T16649] loop5: detected capacity change from 0 to 512 [ 526.112926][T16653] loop4: detected capacity change from 0 to 256 [ 526.160959][T16649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.213795][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 526.219688][T16649] ext4 filesystem being mounted at /782/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.224972][ T5914] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 526.246770][ T5914] usb 3-1: config 0 has no interface number 0 [ 526.254189][ T5914] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 526.266105][ T5914] usb 3-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 526.278995][ T5914] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 526.289194][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.300569][ T5914] usb 3-1: Product: syz [ 526.304742][ T5914] usb 3-1: Manufacturer: syz [ 526.309437][ T5914] usb 3-1: SerialNumber: syz [ 526.317813][ T5914] usb 3-1: config 0 descriptor?? [ 526.323110][T16658] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4625'. [ 526.350000][ T5914] redrat3 3-1:0.83: Couldn't find all endpoints [ 526.478834][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 526.478855][ T31] audit: type=1400 audit(1773196581.966:54): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=16660 comm="syz.1.4627" [ 526.560136][ T5998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.636151][ T5914] usb 3-1: USB disconnect, device number 106 [ 526.820309][T16675] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 526.860620][T16678] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4635'. [ 526.944845][T16671] loop5: detected capacity change from 0 to 4096 [ 527.051130][T16671] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 527.147813][T16688] loop1: detected capacity change from 0 to 256 [ 527.561408][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4645'. [ 527.727628][ T5914] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 527.875392][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.904727][ T5914] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 527.968809][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.002704][T16719] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.4651'. [ 528.017024][ T5914] usb 6-1: config 0 descriptor?? [ 528.051542][T16719] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.4651'. [ 528.073445][ T5914] usb 6-1: bad CDC descriptors [ 528.118630][T16722] loop3: detected capacity change from 0 to 1024 [ 528.245153][ T5914] usb 6-1: USB disconnect, device number 103 [ 528.323871][ T12] hfsplus: b-tree write err: -5, ino 25 [ 528.342201][ T12] hfsplus: b-tree write err: -5, ino 4 [ 528.376501][ T12] hfsplus: b-tree write err: -5, ino 2 [ 528.638335][T16743] loop1: detected capacity change from 0 to 128 [ 528.671699][T16743] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 528.704990][T16743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.412909][T16767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4673'. [ 529.695087][T16738] loop2: detected capacity change from 0 to 32768 [ 529.700913][T16779] SET target dimension over the limit! [ 529.735521][T16738] JBD2: Ignoring recovery information on journal [ 529.852241][T16749] loop0: detected capacity change from 0 to 32768 [ 529.878605][T16738] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 530.018112][T16738] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 530.018186][T16738] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 530.133493][T16738] OCFS2: File system is now read-only. [ 530.158989][T16738] (syz.2.4659,16738,0):ocfs2_setattr:1306 ERROR: status = -117 [ 530.208045][T16795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4687'. [ 530.379137][ T5980] ocfs2: Unmounting device (7,2) on (node local) [ 530.499733][ T6277] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 530.594838][T16807] overlayfs: conflicting options: nfs_export=on,index=off [ 530.690606][ T6277] usb 6-1: Using ep0 maxpacket: 16 [ 530.705728][ T6277] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.721076][ T6277] usb 6-1: config 0 has no interface number 0 [ 530.777725][ T6277] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 530.797176][ T6277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.842662][ T6277] usb 6-1: Product: syz [ 530.846877][ T6277] usb 6-1: Manufacturer: syz [ 530.873830][ T6277] usb 6-1: SerialNumber: syz [ 530.900520][ T6277] usb 6-1: config 0 descriptor?? [ 530.925418][ T6277] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 531.004675][T16821] netlink: 'syz.4.4699': attribute type 1 has an invalid length. [ 531.312756][ T6277] gspca_spca1528: reg_w err -71 [ 531.347068][ T6277] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 531.383894][ T6277] usb 6-1: USB disconnect, device number 104 [ 531.848788][T16822] loop3: detected capacity change from 0 to 32768 [ 531.868400][T16822] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4698 (16822) [ 531.938162][T16822] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 532.008670][T16822] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 532.171504][T16822] BTRFS info (device loop3): enabling ssd optimizations [ 532.205363][T16822] BTRFS info (device loop3): turning on async discard [ 532.218227][T16822] BTRFS info (device loop3): enabling free space tree [ 532.241737][T16818] loop2: detected capacity change from 0 to 40427 [ 532.290724][T16862] bond3: Removing last arp target with arp_interval on [ 532.307654][T16818] F2FS-fs (loop2): invalid crc value [ 532.328930][T16862] bond3: option min_links: invalid value (18446744071562067973) [ 532.360095][T16862] bond3: option min_links: allowed values 0 - 2147483647 [ 532.402863][T16862] bond3 (unregistering): Released all slaves [ 532.424540][ T5995] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 532.464922][T16876] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 532.617358][T16818] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 532.689362][T16818] F2FS-fs (loop2): Start checkpoint disabled! [ 532.767610][T16818] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 532.785415][T16818] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 532.922540][T16886] binder: 16885:16886 ioctl c018620c 2000000001c0 returned -22 [ 533.657174][T16913] overlayfs: conflicting options: nfs_export=on,index=off [ 534.452513][T16949] xt_ecn: cannot match TCP bits for non-tcp packets [ 534.598991][T16957] ±ÿ: renamed from lo (while UP) [ 534.725358][T16962] loop5: detected capacity change from 0 to 16 [ 534.764556][T16962] erofs (device loop5): mounted with root inode @ nid 36. [ 535.059590][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4765'. [ 535.169148][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4765'. [ 535.493074][T16994] loop3: detected capacity change from 0 to 64 [ 536.200907][T17021] loop2: detected capacity change from 0 to 256 [ 536.242289][T17023] loop0: detected capacity change from 0 to 256 [ 536.338890][T17023] FAT-fs (loop0): Directory bread(block 64) failed [ 536.345446][T17023] FAT-fs (loop0): Directory bread(block 65) failed [ 536.427494][T17023] FAT-fs (loop0): Directory bread(block 66) failed [ 536.443033][T17023] FAT-fs (loop0): Directory bread(block 67) failed [ 536.452613][T17023] FAT-fs (loop0): Directory bread(block 68) failed [ 536.459141][T17023] FAT-fs (loop0): Directory bread(block 69) failed [ 536.522607][T17023] FAT-fs (loop0): Directory bread(block 70) failed [ 536.547594][T17023] FAT-fs (loop0): Directory bread(block 71) failed [ 536.609750][T17033] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4795'. [ 536.614575][T17023] FAT-fs (loop0): Directory bread(block 72) failed [ 536.657556][T17023] FAT-fs (loop0): Directory bread(block 73) failed [ 537.186365][T17057] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.193822][T17057] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.254489][T17057] bridge0: entered promiscuous mode [ 537.256284][T17062] usb usb8: usbfs: process 17062 (syz.3.4809) did not claim interface 0 before use [ 537.355884][T17066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.493293][ T31] audit: type=1326 audit(1773196593.537:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 537.576253][ T31] audit: type=1326 audit(1773196593.537:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 537.606106][T17073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.690961][ T31] audit: type=1326 audit(1773196593.537:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 537.766994][ T31] audit: type=1326 audit(1773196593.589:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 537.802239][T17081] loop1: detected capacity change from 0 to 128 [ 537.826840][ T31] audit: type=1326 audit(1773196593.589:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17068 comm="syz.3.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66e79c799 code=0x7ffc0000 [ 537.884385][T17081] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 538.058301][T17094] openvswitch: netlink: IP tunnel dst address not specified [ 538.734729][T17121] netlink: 'syz.1.4838': attribute type 10 has an invalid length. [ 538.765651][T17121] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4838'. [ 538.879473][T17127] netlink: 'syz.3.4841': attribute type 16 has an invalid length. [ 538.945876][T17127] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.4841'. [ 539.166363][T17142] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4848'. [ 539.352781][T17152] ip6t_REJECT: ECHOREPLY is not supported [ 539.524191][T17158] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4855'. [ 539.646758][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4858'. [ 539.874723][ T6094] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 539.967369][T17172] loop2: detected capacity change from 0 to 4096 [ 539.991916][T17172] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 540.054316][ T6094] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 540.072017][ T6094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.080018][ T6094] usb 5-1: Product: syz [ 540.126802][ T6094] usb 5-1: Manufacturer: syz [ 540.146950][T17172] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 540.151580][ T6094] usb 5-1: SerialNumber: syz [ 540.208775][ T6094] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 540.284984][ T6085] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 540.536619][T17196] dvmrp1: entered allmulticast mode [ 540.669313][T17193] loop5: detected capacity change from 0 to 4096 [ 540.692742][T17193] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 541.593739][ T30] usb 5-1: USB disconnect, device number 94 [ 541.606819][ T6085] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 541.613979][ T6085] ath9k_htc: Failed to initialize the device [ 541.635591][ T30] usb 5-1: ath9k_htc: USB layer deinitialized [ 541.748794][T17193] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 541.779016][T17193] ntfs3(loop5): ino=19, mi_enum_attr [ 541.867424][T17193] ntfs3(loop5): failed to convert "c46c" to iso8859-7 [ 541.875446][ T31] audit: type=1326 audit(1773196598.125:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.4.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 541.918949][T17193] ntfs3(loop5): ino=20, mi_enum_attr [ 541.987553][ T31] audit: type=1326 audit(1773196598.125:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.4.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 542.094726][ T31] audit: type=1326 audit(1773196598.125:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.4.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 542.186958][ T31] audit: type=1326 audit(1773196598.146:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.4.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 542.215181][T17234] loop0: detected capacity change from 0 to 1024 [ 542.268118][T17234] EXT4-fs: Ignoring removed nobh option [ 542.281510][T17234] EXT4-fs: Ignoring removed bh option [ 542.310224][ T31] audit: type=1326 audit(1773196598.146:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.4.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 542.376810][ T31] audit: type=1326 audit(1773196598.146:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.4.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 542.466780][T17234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.483981][ T31] audit: type=1326 audit(1773196598.146:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.4.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 542.514641][ T31] audit: type=1326 audit(1773196598.146:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.4.4887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa981f9c799 code=0x7ffc0000 [ 542.519775][T17234] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.4892: iget: bogus i_mode (7755) [ 542.819287][ T5985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.843979][T17264] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 543.109161][T17275] netlink: 'syz.4.4907': attribute type 13 has an invalid length. [ 543.278989][T17275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.391720][T17287] loop3: detected capacity change from 0 to 128 [ 543.429141][T17287] EXT4-fs (loop3): Test dummy encryption mode enabled [ 543.483011][T17287] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 543.658164][T17287] ext4 filesystem being mounted at /832/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 543.711460][T17295] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4916'. [ 543.888446][ T5995] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 543.918192][T17282] loop0: detected capacity change from 0 to 32768 [ 544.037753][T17307] xt_addrtype: ipv6 does not support BROADCAST matching [ 544.912269][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4939'. [ 544.938742][T17340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4939'. [ 544.972037][T17344] loop1: detected capacity change from 0 to 256 [ 544.999052][T17341] loop3: detected capacity change from 0 to 1764 [ 545.301478][T17358] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 545.312001][T17359] loop3: detected capacity change from 0 to 16 [ 545.329358][ T29] IPVS: starting estimator thread 0... [ 545.394224][T17359] erofs (device loop3): mounted with root inode @ nid 36. [ 545.472521][T17360] IPVS: using max 25 ests per chain, 60000 per kthread [ 545.758848][T17375] loop5: detected capacity change from 0 to 256 [ 545.796714][T17375] exfat: Deprecated parameter 'utf8' [ 545.862096][T17375] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 545.981750][T17375] overlay: filesystem on ./file0 not supported [ 546.081964][T17389] loop0: detected capacity change from 0 to 256 [ 546.131507][T17389] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 546.446649][T17402] IPv6: NLM_F_CREATE should be specified when creating new route [ 546.491631][T17409] usb usb9: usbfs: process 17409 (syz.4.4972) did not claim interface 0 before use [ 546.795982][T17425] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4979'. [ 547.008935][T17435] wlan0 speed is unknown, defaulting to 1000 [ 547.023659][T17435] wlan0 speed is unknown, defaulting to 1000 [ 547.033237][T17435] wlan0 speed is unknown, defaulting to 1000 [ 547.118370][T17435] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 547.198003][T17440] loop0: detected capacity change from 0 to 764 [ 547.198781][T17435] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 547.254375][T17440] Symlink component flag not implemented [ 547.260182][T17440] Symlink component flag not implemented [ 547.299699][T17440] Symlink component flag not implemented (129) [ 547.318151][T17440] Symlink component flag not implemented (6) [ 547.329046][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 547.329375][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 547.339858][T17435] wlan0 speed is unknown, defaulting to 1000 [ 547.413507][T17435] wlan0 speed is unknown, defaulting to 1000 [ 547.462364][T17435] wlan0 speed is unknown, defaulting to 1000 [ 547.494665][T17435] wlan0 speed is unknown, defaulting to 1000 [ 547.540340][T17435] wlan0 speed is unknown, defaulting to 1000 [ 547.571764][T17435] wlan0 speed is unknown, defaulting to 1000 [ 547.775255][T17461] loop3: detected capacity change from 0 to 512 [ 547.782867][T17434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 547.808669][T17462] Device name not specified. [ 547.808669][T17462] [ 547.919571][T17461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.024758][T17461] ext4 filesystem being mounted at /846/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.293619][ T5995] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.395121][T17489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5007'. [ 548.520343][T17491] openvswitch: netlink: IP tunnel dst address not specified [ 548.604483][T17499] loop4: detected capacity change from 0 to 1024 [ 548.716736][T17499] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 548.766339][ T31] audit: type=1326 audit(1773196605.369:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17504 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 548.797788][T17499] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 548.870572][ T31] audit: type=1326 audit(1773196605.369:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17504 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 548.931953][ T5993] Bluetooth: hci0: command 0x0406 tx timeout [ 548.960342][ T12] hfsplus: b-tree write err: -5, ino 25 [ 548.982817][ T12] hfsplus: b-tree write err: -5, ino 4 [ 549.006610][ T31] audit: type=1326 audit(1773196605.369:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17504 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 549.035706][T17517] loop5: detected capacity change from 0 to 22 [ 549.053121][T17517] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 549.053616][ T12] hfsplus: b-tree write err: -5, ino 2 [ 549.077780][T17517] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 549.119846][ T31] audit: type=1326 audit(1773196605.401:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17504 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 549.181253][ T31] audit: type=1326 audit(1773196605.401:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17504 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 549.305962][ T31] audit: type=1326 audit(1773196605.401:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17504 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 549.382326][ T31] audit: type=1326 audit(1773196605.401:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17504 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 549.488682][ T31] audit: type=1326 audit(1773196605.401:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17504 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 549.625325][ T31] audit: type=1326 audit(1773196605.401:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17504 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f0f39c799 code=0x7ffc0000 [ 549.823965][T17535] loop4: detected capacity change from 0 to 1764 [ 550.080825][T17506] loop0: detected capacity change from 0 to 32768 [ 550.132280][T17551] netlink: 'syz.4.5034': attribute type 1 has an invalid length. [ 550.153026][T17506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5015 (17506) [ 550.208728][T17506] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 550.236375][T17506] BTRFS info (device loop0): using sha256 checksum algorithm [ 550.510090][T17506] BTRFS info (device loop0): enabling ssd optimizations [ 550.569947][T17506] BTRFS info (device loop0): turning on async discard [ 550.576754][T17506] BTRFS info (device loop0): enabling free space tree [ 550.748718][ T30] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 550.778507][ T5985] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 550.932381][ T30] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 550.941761][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.968396][ T30] usb 2-1: config 0 descriptor?? [ 550.999479][ T30] cp210x 2-1:0.0: cp210x converter detected [ 551.206341][ T30] usb 2-1: cp210x converter now attached to ttyUSB0 [ 551.393348][ T6085] usb 2-1: USB disconnect, device number 99 [ 551.402635][ T6085] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 551.437891][ T6085] cp210x 2-1:0.0: device disconnected [ 551.563804][T17612] netlink: 'syz.3.5056': attribute type 13 has an invalid length. [ 551.693968][T17583] loop5: detected capacity change from 0 to 40427 [ 551.711734][T17583] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 551.727456][T17583] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 551.738108][T17612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.763560][T17583] F2FS-fs (loop5): invalid crc value [ 551.773370][T17618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5059'. [ 551.798678][T17618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5059'. [ 551.877548][ T175] [ 551.879913][ T175] ====================================================== [ 551.886925][ T175] WARNING: possible circular locking dependency detected [ 551.893935][ T175] syzkaller #0 Not tainted [ 551.898383][ T175] ------------------------------------------------------ [ 551.905391][ T175] kworker/u8:7/175 is trying to acquire lock: [ 551.911441][ T175] ffff88803659a950 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a9/0x280 [ 551.921028][ T175] [ 551.921028][ T175] but task is already holding lock: [ 551.928376][ T175] ffff88803659cb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 551.938397][ T175] [ 551.938397][ T175] which lock already depends on the new lock. [ 551.938397][ T175] [ 551.948783][ T175] [ 551.948783][ T175] the existing dependency chain (in reverse order) is: [ 551.957778][ T175] [ 551.957778][ T175] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 551.966202][ T175] percpu_down_read_internal+0x48/0x1c0 [ 551.972270][ T175] ext4_writepages+0x205/0x3b0 [ 551.977559][ T175] do_writepages+0x32e/0x550 [ 551.982679][ T175] __writeback_single_inode+0x133/0x11a0 [ 551.988870][ T175] writeback_single_inode+0x4ac/0xdc0 [ 551.994757][ T175] write_inode_now+0x1c2/0x290 [ 552.000033][ T175] iput+0x8c1/0xe80 [ 552.004386][ T175] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 552.010273][ T175] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 552.016682][ T175] __ext4_expand_extra_isize+0x30d/0x400 [ 552.022832][ T175] __ext4_mark_inode_dirty+0x45c/0x730 [ 552.028813][ T175] ext4_evict_inode+0x7a1/0xeb0 [ 552.034182][ T175] evict+0x61e/0xb10 [ 552.038590][ T175] ext4_orphan_cleanup+0xc38/0x1470 [ 552.044305][ T175] ext4_fill_super+0x59ff/0x6320 [ 552.049774][ T175] get_tree_bdev_flags+0x431/0x4f0 [ 552.055404][ T175] vfs_get_tree+0x92/0x2a0 [ 552.060329][ T175] do_new_mount+0x341/0xd30 [ 552.065349][ T175] __se_sys_mount+0x31d/0x420 [ 552.070546][ T175] do_syscall_64+0x14d/0xf80 [ 552.075641][ T175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.082043][ T175] [ 552.082043][ T175] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 552.089601][ T175] down_read+0x47/0x2e0 [ 552.094269][ T175] ext4_setattr+0x888/0x1c60 [ 552.099374][ T175] notify_change+0xc1a/0xf40 [ 552.104484][ T175] chown_common+0x466/0x6b0 [ 552.109502][ T175] do_fchownat+0x14c/0x250 [ 552.114435][ T175] __x64_sys_chown+0x82/0xa0 [ 552.119539][ T175] do_syscall_64+0x14d/0xf80 [ 552.124636][ T175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.131039][ T175] [ 552.131039][ T175] -> #0 (jbd2_handle){++++}-{0:0}: [ 552.138333][ T175] __lock_acquire+0x15a5/0x2cf0 [ 552.143699][ T175] lock_acquire+0xf0/0x2e0 [ 552.148627][ T175] wait_transaction_locked+0x1c2/0x280 [ 552.154599][ T175] start_this_handle+0x7dc/0x2290 [ 552.160142][ T175] jbd2__journal_start+0x2c0/0x5b0 [ 552.165767][ T175] __ext4_journal_start_sb+0x203/0x620 [ 552.171738][ T175] ext4_do_writepages+0xf94/0x46e0 [ 552.177358][ T175] ext4_writepages+0x241/0x3b0 [ 552.182640][ T175] do_writepages+0x32e/0x550 [ 552.187744][ T175] __writeback_single_inode+0x133/0x11a0 [ 552.193895][ T175] writeback_sb_inodes+0x992/0x1a20 [ 552.199616][ T175] __writeback_inodes_wb+0x111/0x240 [ 552.205421][ T175] wb_writeback+0x46a/0xb70 [ 552.210440][ T175] wb_workfn+0xb4c/0xf50 [ 552.215194][ T175] process_scheduled_works+0xb02/0x1830 [ 552.221260][ T175] worker_thread+0xa50/0xfc0 [ 552.226369][ T175] kthread+0x388/0x470 [ 552.230948][ T175] ret_from_fork+0x51e/0xb90 [ 552.236052][ T175] ret_from_fork_asm+0x1a/0x30 [ 552.241339][ T175] [ 552.241339][ T175] other info that might help us debug this: [ 552.241339][ T175] [ 552.251548][ T175] Chain exists of: [ 552.251548][ T175] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 552.251548][ T175] [ 552.264944][ T175] Possible unsafe locking scenario: [ 552.264944][ T175] [ 552.272383][ T175] CPU0 CPU1 [ 552.277726][ T175] ---- ---- [ 552.283075][ T175] rlock(&sbi->s_writepages_rwsem); [ 552.288400][ T175] lock(&ei->xattr_sem); [ 552.295328][ T175] lock(&sbi->s_writepages_rwsem); [ 552.303041][ T175] lock(jbd2_handle); [ 552.307100][ T175] [ 552.307100][ T175] *** DEADLOCK *** [ 552.307100][ T175] [ 552.315227][ T175] 4 locks held by kworker/u8:7/175: [ 552.320410][ T175] #0: ffff88801baf2948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 552.331651][ T175] #1: ffffc90003037c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 552.344106][ T175] #2: ffff88803659e0e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 552.354670][ T175] #3: ffff88803659cb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 552.365131][ T175] [ 552.365131][ T175] stack backtrace: [ 552.370999][ T175] CPU: 1 UID: 0 PID: 175 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 552.371025][ T175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 552.371042][ T175] Workqueue: writeback wb_workfn (flush-8:0) [ 552.371074][ T175] Call Trace: [ 552.371084][ T175] [ 552.371094][ T175] dump_stack_lvl+0xe8/0x150 [ 552.371127][ T175] print_circular_bug+0x2e1/0x300 [ 552.371165][ T175] check_noncircular+0x12e/0x150 [ 552.371204][ T175] __lock_acquire+0x15a5/0x2cf0 [ 552.371237][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.371265][ T175] ? do_raw_spin_lock+0x12b/0x2f0 [ 552.371289][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.371320][ T175] lock_acquire+0xf0/0x2e0 [ 552.371348][ T175] ? wait_transaction_locked+0x1a9/0x280 [ 552.371383][ T175] ? wait_transaction_locked+0x1a9/0x280 [ 552.371413][ T175] wait_transaction_locked+0x1c2/0x280 [ 552.371442][ T175] ? wait_transaction_locked+0x1a9/0x280 [ 552.371473][ T175] ? __pfx_wait_transaction_locked+0x10/0x10 [ 552.371503][ T175] ? __pfx_autoremove_wake_function+0x10/0x10 [ 552.371528][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.371556][ T175] ? __pfx_stack_trace_save+0x10/0x10 [ 552.371583][ T175] start_this_handle+0x7dc/0x2290 [ 552.371622][ T175] ? process_scheduled_works+0xb02/0x1830 [ 552.371659][ T175] ? __pfx_start_this_handle+0x10/0x10 [ 552.371694][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.371720][ T175] ? rcu_is_watching+0x15/0xb0 [ 552.371752][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.371778][ T175] ? trace_kmem_cache_alloc+0x29/0xf0 [ 552.371801][ T175] ? jbd2__journal_start+0x1db/0x5b0 [ 552.371826][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.371853][ T175] ? kmem_cache_alloc_noprof+0x307/0x650 [ 552.371876][ T175] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 552.371900][ T175] jbd2__journal_start+0x2c0/0x5b0 [ 552.371929][ T175] __ext4_journal_start_sb+0x203/0x620 [ 552.371961][ T175] ext4_do_writepages+0xf94/0x46e0 [ 552.372010][ T175] ? __pfx_ext4_do_writepages+0x10/0x10 [ 552.372051][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.372081][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.372110][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.372139][ T175] ext4_writepages+0x241/0x3b0 [ 552.372172][ T175] ? __pfx_ext4_writepages+0x10/0x10 [ 552.372211][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.372238][ T175] ? do_raw_spin_unlock+0xf5/0x210 [ 552.372261][ T175] ? __pfx_ext4_writepages+0x10/0x10 [ 552.372293][ T175] do_writepages+0x32e/0x550 [ 552.372332][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.372359][ T175] ? reacquire_held_locks+0x104/0x190 [ 552.372392][ T175] ? writeback_sb_inodes+0x477/0x1a20 [ 552.372426][ T175] __writeback_single_inode+0x133/0x11a0 [ 552.372458][ T175] ? do_raw_spin_unlock+0xf5/0x210 [ 552.372483][ T175] writeback_sb_inodes+0x992/0x1a20 [ 552.372528][ T175] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 552.372576][ T175] ? __pfx_down_read_trylock+0x10/0x10 [ 552.372598][ T175] ? __pfx___up_read+0x10/0x10 [ 552.372623][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.372653][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.372682][ T175] __writeback_inodes_wb+0x111/0x240 [ 552.372717][ T175] wb_writeback+0x46a/0xb70 [ 552.372748][ T175] ? queue_io+0x1d1/0x4a0 [ 552.372781][ T175] ? __pfx_wb_writeback+0x10/0x10 [ 552.372809][ T175] ? do_raw_spin_lock+0x12b/0x2f0 [ 552.372840][ T175] wb_workfn+0xb4c/0xf50 [ 552.372873][ T175] ? __pfx_wb_workfn+0x10/0x10 [ 552.372896][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.372924][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.372952][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.372979][ T175] ? do_raw_spin_unlock+0xf5/0x210 [ 552.373006][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.373034][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.373062][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.373089][ T175] ? process_scheduled_works+0xa25/0x1830 [ 552.373118][ T175] ? process_scheduled_works+0xa25/0x1830 [ 552.373148][ T175] process_scheduled_works+0xb02/0x1830 [ 552.373192][ T175] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.373224][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.373251][ T175] ? assign_work+0x3d5/0x5e0 [ 552.373282][ T175] worker_thread+0xa50/0xfc0 [ 552.373312][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.373347][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.373378][ T175] kthread+0x388/0x470 [ 552.373400][ T175] ? __pfx_worker_thread+0x10/0x10 [ 552.373429][ T175] ? __pfx_kthread+0x10/0x10 [ 552.373451][ T175] ret_from_fork+0x51e/0xb90 [ 552.373482][ T175] ? __pfx_ret_from_fork+0x10/0x10 [ 552.373510][ T175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 552.373537][ T175] ? __switch_to+0xc7d/0x1450 [ 552.373563][ T175] ? __pfx_kthread+0x10/0x10 [ 552.373585][ T175] ret_from_fork_asm+0x1a/0x30 [ 552.373633][ T175] [ 552.955249][T17583] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 552.956940][T17611] loop2: detected capacity change from 0 to 32768 [ 553.032339][T17611] read_mapping_page failed! [ 553.036930][T17611] ERROR: (device loop2): txCommit: [ 553.036930][T17611] [ 553.044661][T17583] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 553.051692][T17583] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 553.060194][T17611] ERROR: (device loop2): remounting filesystem as read-only