last executing test programs: 2.766361264s ago: executing program 2 (id=8662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x5, 0x0, 0xffffffffffffffff, 0x1c00}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000300)="0fea", 0x0}, 0x20) 2.625262226s ago: executing program 2 (id=8664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f00000009c0)="e02742e8680d8b94a42626f686dd", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.624824326s ago: executing program 0 (id=8665): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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") rmdir(&(0x7f0000000200)='./file0\x00') 2.114435005s ago: executing program 0 (id=8668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000000014038030"], 0x14b0}}, 0x0) 1.753843861s ago: executing program 0 (id=8672): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 1.449433506s ago: executing program 3 (id=8674): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0) 1.421956826s ago: executing program 2 (id=8675): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) 1.275914409s ago: executing program 0 (id=8677): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) 1.141238751s ago: executing program 3 (id=8679): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000800)='./bus\x00', 0x810094, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x2e5, &(0x7f0000000840)="$eJzs3T9rJGUYAPBnNrOzqxabwkoEB7SwOi62NglyB2IqjxSnhQYvB5INQgIR/+B6ldhpYSl+AEHwg9jYWQq2gp0nHIy8szPZPzese4cb8fL7FXfPzPs++z7vzJBMijx59/mT4ztl3L336a8xHGbR2x1E3M9iO3rR+jwW7H4VAMD/2f2qij+qqY7hX75cPM7mD3obrg0A2Ix/+P7fyOt/b6cZP15ebQDAZty6/dYbe/v7N94sy2HcPPni/CD9iJ/+n47v3Y33YxxHcT1G8SCiflHoR/22kMKbVVVN8jLZjpdOJucHKfPknZ+az9/7PaLO34lRbNenLt426vzX92/slFNz+ZNUx9PN+rsp/5UYxbNft8nz+dWkIz8Oinj5xbn6r8Uofn4vPohx3KmLmK3/2U5ZvlZ98+cnb6fyUn42OT8Y1PNmqq128f4l3yMAAAAAAAAAAAAAAAAAAAAAAJ4815reOYOo+/ekU03/na0H6aAfZWt7sT/PNP+iIfCsP1D0qqqaVPFt21/nelmWVTNxlp/Hc3nTWBAAAAAAAAAAAAAAAAAAAACuuLOPPj4+HI+PTv+VoO0GkEfEX7ciHvdzdufOvBCrJw+aNQ/H414TLs7J58/EVjsni1hZRtrE0el38fi7WDt46qGaU9CL0+9/6MxKOzrLo2tomIKic6gN+h1rPXrwYX96HTvntE/X8WEWnemDiwqH6fLG8o0ronv1fiydKdr7uTy5fRTX207ROTR65MtSPFMHkxVzIlv1RL3628J2suXHr6g7bnSm95ug62pMn43ue7EUxHCa/vDXiky3DgAAAAAAAAAAAAAAAAAA2KjZb/92DN5bmdqrBhsrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu1ezv/68T5IvJa2QVcXr2X+0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAq+PvAAAA///ZKk/V") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) 1.096395122s ago: executing program 0 (id=8680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x6c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3983}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) 1.032293233s ago: executing program 0 (id=8681): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000002100)='./bus\x00', 0x5) 824.599276ms ago: executing program 2 (id=8683): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) 731.518978ms ago: executing program 3 (id=8684): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x100}}, 0x0) 616.08733ms ago: executing program 1 (id=8685): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000380)={0x24, @short={0x2, 0xffff}}, 0x14) 569.279031ms ago: executing program 2 (id=8686): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x40}}, 0x0) 440.125463ms ago: executing program 3 (id=8687): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000), 0x4) 401.283593ms ago: executing program 2 (id=8688): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4e6, &(0x7f0000001240)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 379.010024ms ago: executing program 1 (id=8689): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/98, 0x62}, {&(0x7f00000000c0)=""/16, 0x10}], 0x2) 270.794986ms ago: executing program 3 (id=8690): r0 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 260.338516ms ago: executing program 1 (id=8691): r0 = memfd_secret(0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) 170.389797ms ago: executing program 1 (id=8692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000308010800000000000000000a000000060002408808000005000300060000002c00048008000940000080010800034000000080080001"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 109.345468ms ago: executing program 1 (id=8693): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000080001000d0c100000000000224e0000", 0x58}], 0x1) 20.75827ms ago: executing program 1 (id=8694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) 0s ago: executing program 3 (id=8695): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) kernel console output (not intermixed with test programs): T970] usb 4-1: Product: syz [ 774.000996][ T970] usb 4-1: Manufacturer: syz [ 774.004872][T21715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6945'. [ 774.005686][ T970] usb 4-1: SerialNumber: syz [ 774.031967][ T970] usb 4-1: config 0 descriptor?? [ 774.351246][T21721] loop0: detected capacity change from 0 to 8192 [ 774.374195][T21721] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 774.394582][T21721] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 774.440446][T21721] REISERFS (device loop0): using ordered data mode [ 774.447009][T21721] reiserfs: using flush barriers [ 774.568272][T21721] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 774.572332][ T6360] usb 4-1: USB disconnect, device number 33 [ 774.596027][T21718] loop1: detected capacity change from 0 to 32768 [ 774.612992][T21721] REISERFS (device loop0): checking transaction log (loop0) [ 774.661044][T21721] REISERFS (device loop0): Using r5 hash to sort names [ 774.671843][T21721] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 774.685622][T21718] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 774.696883][T21721] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 774.851183][T21738] loop2: detected capacity change from 0 to 64 [ 774.973770][T21718] XFS (loop1): Ending clean mount [ 775.013629][T21718] XFS (loop1): Quotacheck needed: Please wait. [ 775.138982][T21718] XFS (loop1): Quotacheck: Done. [ 775.151996][T21740] loop2: detected capacity change from 0 to 256 [ 775.215918][T21740] FAT-fs (loop2): Directory bread(block 64) failed [ 775.236529][T21740] FAT-fs (loop2): Directory bread(block 65) failed [ 775.271028][T21740] FAT-fs (loop2): Directory bread(block 66) failed [ 775.277609][T21740] FAT-fs (loop2): Directory bread(block 67) failed [ 775.332412][T21740] FAT-fs (loop2): Directory bread(block 68) failed [ 775.379615][T21740] FAT-fs (loop2): Directory bread(block 69) failed [ 775.412570][T21740] FAT-fs (loop2): Directory bread(block 70) failed [ 775.419148][T21740] FAT-fs (loop2): Directory bread(block 71) failed [ 775.443646][ T6410] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 775.447282][T21746] loop3: detected capacity change from 0 to 256 [ 775.456946][T21740] FAT-fs (loop2): Directory bread(block 72) failed [ 775.465444][T21740] FAT-fs (loop2): Directory bread(block 73) failed [ 775.542268][T21746] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 775.603459][T21746] FAT-fs (loop3): Filesystem has been set read-only [ 775.616326][T21748] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 775.666608][T21746] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 775.697115][T21746] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 775.730765][T21746] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 775.762521][T21746] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 775.773733][T21746] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 775.805818][T21746] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 775.839213][T21746] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 775.886066][T21746] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 775.915462][T21746] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 775.965650][ T28] audit: type=1800 audit(2000000044.390:79): pid=21746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6956" name="file1" dev="loop3" ino=1048664 res=0 errno=0 [ 775.993581][T21746] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 776.135842][T21746] syz.3.6956 (21746) used greatest stack depth: 19312 bytes left [ 776.395505][T21765] loop0: detected capacity change from 0 to 64 [ 776.505569][T21768] loop2: detected capacity change from 0 to 1764 [ 776.752101][ T970] IPVS: starting estimator thread 0... [ 776.875046][T21779] IPVS: using max 26 ests per chain, 62400 per kthread [ 776.927258][T21788] loop2: detected capacity change from 0 to 256 [ 776.982665][T21791] vivid-000: ================= START STATUS ================= [ 777.002410][T21791] vivid-000: Test Pattern: 75% Colorbar [ 777.024243][T21791] vivid-000: Fill Percentage of Frame: 100 [ 777.030130][T21791] vivid-000: Horizontal Movement: No Movement [ 777.036864][T21786] loop3: detected capacity change from 0 to 4096 [ 777.089527][T21791] vivid-000: Vertical Movement: No Movement [ 777.116992][T21791] vivid-000: OSD Text Mode: All [ 777.129360][T21795] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 777.149293][T21791] vivid-000: Show Border: false [ 777.161501][T21791] vivid-000: Show Square: false [ 777.175556][T21791] vivid-000: Sensor Flipped Horizontally: false [ 777.181877][T21791] vivid-000: Sensor Flipped Vertically: false [ 777.211474][T21786] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 777.217006][T21791] vivid-000: Insert SAV Code in Image: [ 777.237549][ T27] IPVS: starting estimator thread 0... [ 777.266132][T21791] false [ 777.269131][T21791] vivid-000: Insert EAV Code in Image: false [ 777.281123][T21791] vivid-000: Insert Video Guard Band: false [ 777.298977][T21791] vivid-000: Reduced Framerate: false [ 777.330357][T21791] vivid-000: Enable Capture Cropping: true [ 777.343675][T21791] vivid-000: Enable Capture Composing: true [ 777.350460][T21791] vivid-000: Enable Capture Scaler: true [ 777.357267][T21791] vivid-000: Timestamp Source: End of Frame [ 777.363234][T21791] vivid-000: Colorspace: sRGB [ 777.365928][T21800] IPVS: using max 21 ests per chain, 50400 per kthread [ 777.369040][T21791] vivid-000: Transfer Function: Default [ 777.402212][T21791] vivid-000: Y'CbCr Encoding: Default [ 777.407657][T21791] vivid-000: HSV Encoding: Hue 0-179 [ 777.454645][T21791] vivid-000: Quantization: Default [ 777.467068][T21791] vivid-000: Apply Alpha To Red Only: false [ 777.502467][T21791] vivid-000: Standard Aspect Ratio: 4x3 [ 777.513486][T21791] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 777.542450][T21791] vivid-000: DV Timings: 640x480p59 inactive [ 777.553630][T21791] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 777.579531][T21791] vivid-000: Maximum EDID Blocks: 2 [ 777.584809][T21791] vivid-000: Limited RGB Range (16-235): false [ 777.599632][T21791] vivid-000: Rx RGB Quantization Range: Automatic [ 777.620085][T21791] vivid-000: Power Present: 0x00000001 [ 777.637959][T21791] tpg source WxH: 1920x1080 (Y'CbCr) [ 777.669568][T21791] tpg field: 1 [ 777.672993][T21791] tpg crop: 1920x1080@0x0 [ 777.694670][T21791] tpg compose: 1920x1080@0x0 [ 777.723093][T21791] tpg colorspace: 8 [ 777.726950][T21791] tpg transfer function: 0/0 [ 777.745104][T21791] tpg Y'CbCr encoding: 0/0 [ 777.773538][T21791] tpg quantization: 0/0 [ 777.777756][T21791] tpg RGB range: 0/2 [ 777.781671][T21791] vivid-000: ================== END STATUS ================== [ 777.953939][T21822] xt_cluster: node mask cannot exceed total number of nodes [ 778.023450][T21826] loop1: detected capacity change from 0 to 256 [ 778.065280][T21826] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 778.074362][T21826] FAT-fs (loop1): Filesystem has been set read-only [ 778.083337][T21826] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 778.092699][T21826] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 778.104675][T21826] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 778.114667][T21826] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 778.126192][T21826] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 778.135461][T21826] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 778.144581][T21826] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 778.161176][T21826] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 778.185463][T21826] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 778.225156][ T28] audit: type=1800 audit(2000000046.514:80): pid=21826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6994" name="file1" dev="loop1" ino=1048670 res=0 errno=0 [ 778.254923][T21826] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 778.434123][T21833] loop3: detected capacity change from 0 to 4096 [ 778.500015][T21833] ntfs3: loop3: It is recommened to use chkdsk. [ 778.504306][ T28] audit: type=1326 audit(2000000046.776:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21837 comm="syz.1.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 778.537952][T21833] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 778.550722][T21833] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 778.581140][ T28] audit: type=1326 audit(2000000046.776:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21837 comm="syz.1.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 778.591446][T21833] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 778.657787][T21833] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 778.667806][ T28] audit: type=1326 audit(2000000046.813:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21837 comm="syz.1.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 778.680521][T21844] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7002'. [ 778.706794][T21833] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 778.723238][ T28] audit: type=1326 audit(2000000046.813:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21837 comm="syz.1.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 778.733753][T21833] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 778.782503][T21833] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 778.798554][ T28] audit: type=1326 audit(2000000046.813:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21837 comm="syz.1.6999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 778.835633][T21833] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 778.884119][T21833] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 779.103018][T21857] loop2: detected capacity change from 0 to 256 [ 779.157955][T21856] loop1: detected capacity change from 0 to 2048 [ 779.178097][T21857] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 779.215544][T21862] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 779.223540][T21857] FAT-fs (loop2): Filesystem has been set read-only [ 779.252596][T21857] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 779.280890][T21857] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 779.341071][T21857] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 779.359474][T21857] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 779.405822][T21857] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 779.435695][T21857] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 779.470812][T21857] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 779.498167][T21857] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 779.521009][T21857] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 779.544956][ T28] audit: type=1800 audit(2000000047.740:86): pid=21857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7008" name="file1" dev="loop2" ino=1048671 res=0 errno=0 [ 779.551921][T21857] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 779.959759][T21889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7024'. [ 780.143928][T21897] loop3: detected capacity change from 0 to 2048 [ 780.170695][T21897] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 780.215888][T21897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 780.394568][T21903] No such timeout policy "syz1" [ 780.581053][ T28] audit: type=1107 audit(2000000048.713:87): pid=21910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 780.814482][T21892] loop2: detected capacity change from 0 to 32768 [ 780.984271][T21892] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 781.003841][T21892] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 781.163966][T21892] XFS (loop2): Ending clean mount [ 781.178671][T21892] XFS (loop2): Quotacheck needed: Please wait. [ 781.202501][ T27] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 781.224936][ T27] XFS (loop2): Unmount and run xfs_repair [ 781.241560][ T27] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 781.256255][ T27] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 781.270433][ T27] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 781.288381][ T27] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 781.308453][ T27] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 781.329776][ T27] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 781.352547][ T27] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 781.361455][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 781.384517][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 781.404573][T18482] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 781.418187][T21914] loop3: detected capacity change from 0 to 32768 [ 781.428550][ T970] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 781.479899][T21892] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 781.522349][T21914] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 781.600487][ T6421] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 781.662425][ T970] usb 1-1: Using ep0 maxpacket: 16 [ 781.670692][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 781.693262][T21943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 781.704137][ T970] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 781.725458][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.733983][ T970] usb 1-1: Product: syz [ 781.738579][ T970] usb 1-1: Manufacturer: syz [ 781.757677][ T6417] ocfs2: Unmounting device (7,3) on (node local) [ 781.758505][ T970] usb 1-1: SerialNumber: syz [ 781.797007][ T970] usb 1-1: config 0 descriptor?? [ 782.052682][ T788] usb 1-1: USB disconnect, device number 13 [ 782.060269][T21949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 782.341365][T21961] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7054'. [ 782.362443][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7054'. [ 782.640970][ T28] audit: type=1326 audit(2000000050.640:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21970 comm="syz.1.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 782.710122][ T28] audit: type=1326 audit(2000000050.640:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21970 comm="syz.1.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 783.325296][T22003] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7075'. [ 783.383359][T22007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7077'. [ 783.392803][T22007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7077'. [ 783.579874][T22015] loop0: detected capacity change from 0 to 256 [ 783.599203][T22015] exfat: Deprecated parameter 'namecase' [ 783.604926][T22015] exfat: Deprecated parameter 'namecase' [ 783.694792][T22015] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 783.749262][T22021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7084'. [ 783.767032][T22015] UBIFS error (pid: 22015): cannot open "./file0", error -22 [ 783.791589][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7084'. [ 783.888315][T22023] loop3: detected capacity change from 0 to 1024 [ 783.984890][T22023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.014120][T22030] netlink: 'syz.0.7087': attribute type 10 has an invalid length. [ 784.054054][T22030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7087'. [ 784.127338][T22030] batman_adv: batadv0: Adding interface: virt_wifi0 [ 784.161847][T22030] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.190191][T22012] loop2: detected capacity change from 0 to 32768 [ 784.193365][T22030] batman_adv: batadv0: Interface activated: virt_wifi0 [ 784.218710][T22012] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.7080 (22012) [ 784.281391][T22012] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 784.326139][T22012] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 784.345753][T22012] BTRFS info (device loop2): force clearing of disk cache [ 784.352921][T22012] BTRFS info (device loop2): turning on sync discard [ 784.371743][T22012] BTRFS info (device loop2): force zlib compression, level 3 [ 784.380754][T22012] BTRFS info (device loop2): turning off discard [ 784.387119][T22012] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 784.421028][T22012] BTRFS info (device loop2): use zstd compression, level 3 [ 784.429011][T22012] BTRFS info (device loop2): turning on async discard [ 784.444122][ T6460] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 784.452388][T22012] BTRFS info (device loop2): using free space tree [ 784.644768][T22012] BTRFS info (device loop2): enabling ssd optimizations [ 784.672954][ T6460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 784.694569][ T6460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 225, changing to 7 [ 784.728708][ T6460] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 42279, setting to 1024 [ 784.729196][T22062] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 784.765125][ T6460] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 784.785428][ T6460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.793480][ T6460] usb 4-1: Product: syz [ 784.818312][ T6460] usb 4-1: Manufacturer: syz [ 784.825796][ T6460] usb 4-1: SerialNumber: syz [ 784.859036][ T6460] usb 4-1: config 0 descriptor?? [ 784.868654][ T6421] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 784.871956][ T6460] usb 4-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress f3 [ 785.133640][ T6460] usb 4-1: USB disconnect, device number 34 [ 785.253777][T22028] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 171: padding at end of block bitmap is not set [ 785.259902][T18969] udevd[18969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.634352][T22056] loop0: detected capacity change from 0 to 40427 [ 785.648947][T22072] loop2: detected capacity change from 0 to 4096 [ 785.656742][T22056] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 785.669607][T22056] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 785.707917][T22056] F2FS-fs (loop0): invalid crc value [ 785.725981][T22056] F2FS-fs (loop0): Found nat_bits in checkpoint [ 785.757455][T22072] ntfs3: loop2: ino=5, "/" directory corrupted [ 785.765594][T22072] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 785.812667][T22056] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 785.833999][T22056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 785.953146][ T6417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.164266][T22087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7104'. [ 786.303776][T22092] netlink: 'syz.3.7106': attribute type 10 has an invalid length. [ 786.311664][T22092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7106'. [ 786.325634][T22092] batman_adv: batadv0: Adding interface: virt_wifi0 [ 786.332266][T22092] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.386181][T22092] batman_adv: batadv0: Interface activated: virt_wifi0 [ 786.435847][T22096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7110'. [ 786.910413][T22110] loop0: detected capacity change from 0 to 64 [ 786.944511][T22113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7116'. [ 787.114858][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7119'. [ 787.174651][T22122] loop0: detected capacity change from 0 to 512 [ 787.204817][T22122] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 787.257462][T22122] EXT4-fs (loop0): re-mounted 00800000-0000-0000-0000-000000000000. [ 787.315854][T22129] loop1: detected capacity change from 0 to 64 [ 787.431178][ T6411] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 787.442437][T22129] Bad inode number on dev loop1: 6 is out of range [ 788.013647][T22126] loop2: detected capacity change from 0 to 32768 [ 788.595402][T22161] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7141'. [ 788.665836][T22163] AppArmor: change_hat: Invalid input 'ˆ' [ 788.870566][T22169] loop0: detected capacity change from 0 to 2048 [ 788.949451][T22169] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 789.047999][T22169] UDF-fs: unknown compression code (0) [ 789.112770][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7149'. [ 789.393938][T22190] loop0: detected capacity change from 0 to 256 [ 789.456231][T22190] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 789.525119][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 789.525134][ T28] audit: type=1800 audit(2000000057.086:93): pid=22190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7155" name="file1" dev="loop0" ino=1048673 res=0 errno=0 [ 790.072016][T22213] loop3: detected capacity change from 0 to 512 [ 790.159317][T22213] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.7166: casefold flag without casefold feature [ 790.233613][T22213] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.7166: couldn't read orphan inode 15 (err -117) [ 790.283795][T22213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.481946][ T6417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.663097][T22229] loop0: detected capacity change from 0 to 512 [ 790.694169][T22229] EXT4-fs: journaled quota format not specified [ 791.052974][T22223] loop2: detected capacity change from 0 to 32768 [ 791.150614][T22238] loop0: detected capacity change from 0 to 1024 [ 791.175989][T22238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 791.266283][T22238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.287459][T22244] loop3: detected capacity change from 0 to 128 [ 791.360923][T22244] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 791.534824][ T6411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.351332][T22275] loop3: detected capacity change from 0 to 2048 [ 792.437774][T22275] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.559934][ T6417] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 792.889817][T22300] loop3: detected capacity change from 0 to 1024 [ 792.982904][T22300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 792.989568][T22300] EXT4-fs: Ignoring removed i_version option [ 793.012092][T22300] EXT4-fs: inline encryption not supported [ 793.075196][T22300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.111416][T22313] x_tables: unsorted entry at hook 3 [ 793.293126][ T6417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.576319][T22331] loop3: detected capacity change from 0 to 16 [ 793.615392][T22331] erofs: (device loop3): mounted with root inode @ nid 36. [ 793.729013][T19003] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 793.821815][T22341] loop0: detected capacity change from 0 to 1024 [ 793.923861][T22345] loop3: detected capacity change from 0 to 64 [ 794.000906][T22347] loop1: detected capacity change from 0 to 2048 [ 794.057106][ T988] hfsplus: b-tree write err: -5, ino 4 [ 794.079747][T22347] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 794.207513][T22353] IPv6: Can't replace route, no match found [ 794.216883][T22352] netlink: 'syz.0.7224': attribute type 11 has an invalid length. [ 794.582203][ T28] audit: type=1326 audit(2000000061.811:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22364 comm="syz.3.7231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x0 [ 794.620126][T22367] kAFS: unable to lookup cell '.,' [ 794.647379][T22369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7233'. [ 795.223297][T22355] loop2: detected capacity change from 0 to 40427 [ 795.268629][T22355] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 795.276403][T22355] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 795.336383][T22355] F2FS-fs (loop2): invalid crc value [ 795.363242][T22397] tmpfs: Bad value for 'nr_blocks' [ 795.372767][T22355] F2FS-fs (loop2): Found nat_bits in checkpoint [ 795.520833][T22355] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 795.530242][T22355] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 795.756295][T22405] loop0: detected capacity change from 0 to 8192 [ 796.836387][T22417] loop0: detected capacity change from 0 to 32768 [ 797.157894][T22454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7274'. [ 797.715974][T22449] loop1: detected capacity change from 0 to 32768 [ 797.729159][T22471] loop2: detected capacity change from 0 to 256 [ 797.748414][T22471] exfat: Deprecated parameter 'namecase' [ 797.755133][T22473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7282'. [ 797.765867][T22471] exfat: Deprecated parameter 'namecase' [ 797.800067][T22471] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 797.802008][ T27] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 798.027414][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 798.037288][T22479] netlink: 'syz.2.7286': attribute type 1 has an invalid length. [ 798.046560][T22476] loop0: detected capacity change from 0 to 1024 [ 798.046701][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.103393][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 798.143813][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 798.181192][ T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 798.227878][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.269165][ T27] usb 4-1: config 0 descriptor?? [ 798.546904][T22490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7291'. [ 798.726997][T22499] loop1: detected capacity change from 0 to 1764 [ 798.754773][T22499] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 798.761472][ T6460] usb 4-1: USB disconnect, device number 35 [ 798.783301][T22501] loop2: detected capacity change from 0 to 64 [ 798.940742][T22506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7300'. [ 798.980524][T22506] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7300'. [ 799.200083][T22515] loop0: detected capacity change from 0 to 512 [ 799.272568][T22515] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 799.285032][T22515] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 799.335539][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7307'. [ 799.341060][T22515] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.7302: Failed to acquire dquot type 1 [ 799.408714][T22522] loop2: detected capacity change from 0 to 2048 [ 799.441760][T22515] EXT4-fs (loop0): 1 truncate cleaned up [ 799.452241][T22515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.473456][T22522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 799.488003][T22515] ext4 filesystem being mounted at /1709/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 799.560295][T22515] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 799.592658][T22515] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 799.638668][T22515] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.7302: Failed to acquire dquot type 1 [ 799.740149][T22532] ip6gre2: entered allmulticast mode [ 799.821488][ T6411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.032084][T22544] netlink: 'syz.1.7317': attribute type 12 has an invalid length. [ 800.218341][T22552] netlink: 680 bytes leftover after parsing attributes in process `syz.1.7321'. [ 800.388712][ T970] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 800.626037][ T970] usb 3-1: Using ep0 maxpacket: 16 [ 800.647453][ T970] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 800.659315][ T28] audit: type=1326 audit(2000000067.500:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22575 comm="syz.3.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 800.673923][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.719341][ T970] usb 3-1: Product: syz [ 800.724239][ T970] usb 3-1: Manufacturer: syz [ 800.728902][ T970] usb 3-1: SerialNumber: syz [ 800.730028][ T28] audit: type=1326 audit(2000000067.528:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22575 comm="syz.3.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 800.755859][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.777327][ T970] usb 3-1: config 0 descriptor?? [ 800.797677][ T970] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 800.806522][ T28] audit: type=1326 audit(2000000067.528:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22575 comm="syz.3.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 800.828859][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.836160][ T970] usb 3-1: Detected FT-X [ 800.857039][T22581] cgroup: name respecified [ 800.869425][ T28] audit: type=1326 audit(2000000067.565:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22575 comm="syz.3.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 800.942530][ T28] audit: type=1326 audit(2000000067.574:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10b5bc11e5 code=0x7ffc0000 [ 801.008642][ T28] audit: type=1326 audit(2000000067.733:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22579 comm="syz.3.7333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 801.148605][T22587] loop1: detected capacity change from 0 to 8192 [ 801.255335][ T970] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 801.279519][ T970] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 801.300185][ T970] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 801.335386][ T970] usb 3-1: USB disconnect, device number 27 [ 801.361483][ T970] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 801.408500][ T970] ftdi_sio 3-1:0.0: device disconnected [ 801.628888][T22605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.644232][T22605] bond0: (slave rose0): Enslaving as an active interface with an up link [ 801.807371][T22612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7350'. [ 801.880285][T22617] batadv1: entered promiscuous mode [ 802.269326][T22638] loop3: detected capacity change from 0 to 512 [ 802.287479][T22638] EXT4-fs: Ignoring removed mblk_io_submit option [ 802.345755][T22638] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 802.417492][T22638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 802.430473][T22638] System zones: 1-12 [ 802.442266][T22638] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.7358: corrupted in-inode xattr: e_value size too large [ 802.500796][T22638] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.7358: couldn't read orphan inode 15 (err -117) [ 802.564467][T22638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.607244][T22650] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7362'. [ 802.737125][T22655] netlink: 'syz.1.7364': attribute type 3 has an invalid length. [ 802.756341][ T6417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.838589][T22658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7366'. [ 802.864987][T22660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7368'. [ 802.889470][T22658] netlink: 'syz.0.7366': attribute type 1 has an invalid length. [ 802.974108][T22665] loop1: detected capacity change from 0 to 256 [ 803.010070][T22665] exfat: Deprecated parameter 'namecase' [ 803.033165][T22665] exfat: Deprecated parameter 'namecase' [ 803.071849][T22665] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 803.392494][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7374'. [ 803.467128][T22687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.514012][T22687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.535176][T22687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.556981][T22687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.584214][T22687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.632437][T22687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.975575][T22707] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 804.022074][T22711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7387'. [ 804.270227][T22723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7391'. [ 804.512711][T22735] netlink: 'syz.0.7396': attribute type 1 has an invalid length. [ 804.816164][T22749] loop2: detected capacity change from 0 to 64 [ 805.930498][T22795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 806.007846][T22769] loop3: detected capacity change from 0 to 32768 [ 806.061050][T22769] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 806.100481][T22802] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.7424'. [ 806.297147][T22769] syz.3.7409 (22769) used greatest stack depth: 18992 bytes left [ 806.382257][ T6417] ocfs2: Unmounting device (7,3) on (node local) [ 806.609015][ T970] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 806.710292][T22813] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 806.768119][T22803] loop2: detected capacity change from 0 to 32768 [ 806.831361][T22816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7430'. [ 806.842290][T22816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7430'. [ 806.856542][ T970] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 806.865942][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.874048][ T970] usb 2-1: Product: syz [ 806.897586][ T970] usb 2-1: Manufacturer: syz [ 806.902409][ T970] usb 2-1: SerialNumber: syz [ 806.928162][ T970] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 806.971044][ T788] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 807.206081][T22824] loop3: detected capacity change from 0 to 512 [ 807.256172][T22824] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.7435: bad orphan inode 11862016 [ 807.296303][T22824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 807.309299][T22824] ext4 filesystem being mounted at /1645/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 807.451239][ T970] usb 2-1: USB disconnect, device number 24 [ 807.620451][ T6417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 807.989572][T22851] batadv1: entered promiscuous mode [ 808.173118][ T788] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 808.190908][T22861] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7450'. [ 808.203089][ T788] ath9k_htc: Failed to initialize the device [ 808.210016][ T970] usb 2-1: ath9k_htc: USB layer deinitialized [ 808.479784][T22871] loop2: detected capacity change from 0 to 512 [ 808.558136][T22871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.631387][T22871] ext4 filesystem being mounted at /1691/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 808.755611][T22865] loop0: detected capacity change from 0 to 32768 [ 808.810963][T22865] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 808.961046][T22865] XFS (loop0): Ending clean mount [ 808.999953][ T6421] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.138495][ T6411] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 809.206299][T22897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7466'. [ 809.658528][T22895] loop1: detected capacity change from 0 to 32768 [ 809.702042][T22907] batadv1: entered promiscuous mode [ 809.709375][T22895] [ 809.709375][T22895] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 809.709375][T22895] [ 809.809014][T22895] [ 809.809014][T22895] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 809.809014][T22895] [ 809.826195][T22895] [ 809.826195][T22895] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 809.826195][T22895] [ 809.850677][T22895] [ 809.850677][T22895] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 809.850677][T22895] [ 809.896795][T22895] [ 809.896795][T22895] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 809.896795][T22895] [ 809.930046][ T113] [ 809.930046][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 809.930046][ T113] [ 810.030763][ T6410] [ 810.030763][ T6410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 810.030763][ T6410] [ 810.052488][ T6410] [ 810.052488][ T6410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 810.052488][ T6410] [ 810.062472][T22919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7474'. [ 810.422594][T22932] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7483'. [ 810.564587][T22937] batadv1: entered promiscuous mode [ 810.682966][T22941] pimreg: entered allmulticast mode [ 811.023302][T22933] loop2: detected capacity change from 0 to 32768 [ 811.069613][T22933] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 811.365505][T22945] loop1: detected capacity change from 0 to 32768 [ 811.437700][ T6421] ocfs2: Unmounting device (7,2) on (node local) [ 811.451745][T22945] [ 811.451745][T22945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 811.451745][T22945] [ 811.612004][T22945] [ 811.612004][T22945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 811.612004][T22945] [ 811.679002][T22945] [ 811.679002][T22945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 811.679002][T22945] [ 811.717426][T22943] loop3: detected capacity change from 0 to 32768 [ 811.724322][T22945] [ 811.724322][T22945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 811.724322][T22945] [ 811.751240][T22945] [ 811.751240][T22945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 811.751240][T22945] [ 811.788762][T22945] [ 811.788762][T22945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 811.788762][T22945] [ 811.817441][T22943] JBD2: Ignoring recovery information on journal [ 811.841281][T22945] [ 811.841281][T22945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 811.841281][T22945] [ 811.912938][ T28] audit: type=1326 audit(2000000078.034:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22966 comm="syz.2.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40078e929 code=0x7ffc0000 [ 811.952201][ T112] [ 811.952201][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 811.952201][ T112] [ 811.973388][T22943] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 811.985173][ T28] audit: type=1326 audit(2000000078.053:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22966 comm="syz.2.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40078e929 code=0x7ffc0000 [ 812.069380][ T28] audit: type=1326 audit(2000000078.053:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22966 comm="syz.2.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fa40078e929 code=0x7ffc0000 [ 812.071248][T22971] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7498'. [ 812.106888][ T6410] [ 812.106888][ T6410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 812.106888][ T6410] [ 812.125414][ T6410] [ 812.125414][ T6410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 812.125414][ T6410] [ 812.137897][ T28] audit: type=1326 audit(2000000078.053:104): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=22966 comm="syz.2.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40078e929 code=0x7ffc0000 [ 812.250165][ T28] audit: type=1326 audit(2000000078.053:105): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=22966 comm="syz.2.7497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40078e929 code=0x7ffc0000 [ 812.396472][ T6417] ocfs2: Unmounting device (7,3) on (node local) [ 812.813830][T22989] loop2: detected capacity change from 0 to 256 [ 813.014501][T22995] loop0: detected capacity change from 0 to 4096 [ 813.088254][T22995] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 813.163648][T22995] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 813.338370][T23007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7516'. [ 813.447537][T23012] overlayfs: missing 'lowerdir' [ 813.602229][T23015] geneve2: entered promiscuous mode [ 813.837072][T23027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7534'. [ 814.071285][T23033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 814.359011][T23051] loop0: detected capacity change from 0 to 256 [ 814.395676][T23051] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 814.441211][T23054] batadv1: entered promiscuous mode [ 815.023271][T23074] geneve4: entered promiscuous mode [ 815.370021][T23086] batadv1: entered promiscuous mode [ 815.505675][T23064] loop2: detected capacity change from 0 to 32768 [ 815.526840][T23064] (syz.2.7543,23064,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 815.548449][T23064] (syz.2.7543,23064,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 815.604174][T23064] JBD2: Ignoring recovery information on journal [ 815.765691][T23064] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 815.890751][T23106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7563'. [ 816.071223][ T6421] ocfs2: Unmounting device (7,2) on (node local) [ 816.750760][T23140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 816.945023][ T28] audit: type=1326 audit(2000000082.731:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23146 comm="syz.1.7584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 817.022503][ T28] audit: type=1326 audit(2000000082.731:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23146 comm="syz.1.7584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 817.066320][ T28] audit: type=1326 audit(2000000082.731:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23146 comm="syz.1.7584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 817.088668][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.152324][ T28] audit: type=1326 audit(2000000082.731:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23146 comm="syz.1.7584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 817.174755][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.265338][ T28] audit: type=1326 audit(2000000082.731:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23146 comm="syz.1.7584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 817.322379][T23163] tmpfs: Bad value for 'mpol' [ 817.419515][T23167] lo: left promiscuous mode [ 817.424132][T23167] lo: left allmulticast mode [ 817.515259][T23167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 818.269439][T23210] loop3: detected capacity change from 0 to 64 [ 818.373844][T23210] Trying to free block not in datazone [ 818.682009][T23226] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7616'. [ 818.830039][T23230] autofs4:pid:23230:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 819.501971][T23263] loop1: detected capacity change from 0 to 64 [ 820.455260][T23297] x_tables: duplicate entry at hook 1 [ 820.522175][T23277] loop0: detected capacity change from 0 to 32768 [ 820.550731][T23277] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.7641 (23277) [ 820.606450][T23277] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 820.638869][T23277] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 820.665417][T23277] BTRFS info (device loop0): force zlib compression, level 3 [ 820.683831][T23277] BTRFS info (device loop0): force clearing of disk cache [ 820.723003][T23277] BTRFS info (device loop0): setting nodatasum [ 820.732560][T23277] BTRFS info (device loop0): allowing degraded mounts [ 820.759145][T23277] BTRFS info (device loop0): enabling disk space caching [ 820.785168][T23277] BTRFS info (device loop0): disk space caching is enabled [ 820.986107][T23277] BTRFS info (device loop0): auto enabling async discard [ 821.042195][T23277] BTRFS info (device loop0): rebuilding free space tree [ 821.137335][T23337] loop1: detected capacity change from 0 to 64 [ 821.176143][T23277] BTRFS info (device loop0): disabling free space tree [ 821.192415][T23277] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 821.210842][T23341] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 821.217411][T23341] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 821.225503][T23277] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 821.252361][T23341] vhci_hcd vhci_hcd.0: Device attached [ 821.317374][T23341] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 821.323951][T23341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 821.365378][T23341] vhci_hcd vhci_hcd.0: Device attached [ 821.404345][T23342] vhci_hcd: connection closed [ 821.404546][T23344] vhci_hcd: connection closed [ 821.411121][T18482] vhci_hcd: stop threads [ 821.431581][T23277] BTRFS error (device loop0): balance: invalid convert metadata profile raid5 [ 821.435855][T18482] vhci_hcd: release socket [ 821.465962][ T788] vhci_hcd: vhci_device speed not set [ 821.480444][T18482] vhci_hcd: disconnect device [ 821.504540][T18482] vhci_hcd: stop threads [ 821.521238][T18482] vhci_hcd: release socket [ 821.530509][T18482] vhci_hcd: disconnect device [ 821.543350][ T788] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 821.551020][ T788] usb 39-1: enqueue for inactive port 0 [ 821.551938][ T6411] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 821.669021][ T788] vhci_hcd: vhci_device speed not set [ 821.811704][T23358] nftables ruleset with unbound chain [ 822.035760][T23364] loop2: detected capacity change from 0 to 1024 [ 822.295431][ T1097] hfsplus: b-tree write err: -5, ino 4 [ 822.298652][T23372] loop3: detected capacity change from 0 to 164 [ 822.361994][T23372] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 822.484259][T23376] loop1: detected capacity change from 0 to 1024 [ 822.553998][T23376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.763038][ T6410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.668755][T21754] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 823.880700][T23432] loop3: detected capacity change from 0 to 8192 [ 823.892808][T21754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.907196][T21754] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 823.931806][T23432] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 823.943642][T21754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.948253][T23434] loop2: detected capacity change from 0 to 8192 [ 823.965517][T21754] usb 2-1: config 0 descriptor?? [ 823.990192][T21754] usb 2-1: bad CDC descriptors [ 824.198680][T23436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 824.260639][ T6366] usb 2-1: USB disconnect, device number 25 [ 824.516922][T23448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7712'. [ 825.315092][T23481] loop0: detected capacity change from 0 to 16 [ 825.354197][T23481] erofs: (device loop0): mounted with root inode @ nid 36. [ 825.619464][T23469] loop1: detected capacity change from 0 to 32768 [ 826.264969][T23509] trusted_key: encrypted_key: insufficient parameters specified [ 826.463908][T23513] loop2: detected capacity change from 0 to 1024 [ 826.496170][T23487] loop3: detected capacity change from 0 to 32768 [ 826.518239][T23487] (syz.3.7725,23487,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 826.561460][T23513] syz.2.7738: attempt to access beyond end of device [ 826.561460][T23513] loop2: rw=0, sector=393260, nr_sectors = 2 limit=1024 [ 826.563729][T23487] (syz.3.7725,23487,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 826.718688][T23487] JBD2: Ignoring recovery information on journal [ 826.727097][T23519] loop0: detected capacity change from 0 to 2048 [ 826.759522][T23519] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 96: 0x25 != 0x13 [ 826.831258][T23519] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 826.836535][T23487] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 826.885404][T23519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.922432][T23525] netlink: 'syz.1.7744': attribute type 20 has an invalid length. [ 827.112197][T23529] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 827.139930][ T6417] ocfs2: Unmounting device (7,3) on (node local) [ 827.142507][T23533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7748'. [ 827.199490][T23533] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7748'. [ 828.506455][T23579] xt_TCPMSS: Only works on TCP SYN packets [ 828.667994][T23585] tmpfs: Bad value for 'mpol' [ 828.682608][T23583] loop3: detected capacity change from 0 to 4096 [ 828.731827][T23583] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 829.289721][ T788] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 829.310684][T23582] loop1: detected capacity change from 0 to 32768 [ 829.342096][T23582] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.7770 (23582) [ 829.392856][T23582] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 829.421075][T23582] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 829.442066][T23595] loop2: detected capacity change from 0 to 4096 [ 829.450802][T23570] loop0: detected capacity change from 0 to 32768 [ 829.452372][T23582] BTRFS info (device loop1): force zlib compression, level 3 [ 829.478124][T23595] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 829.493046][T23582] BTRFS info (device loop1): force clearing of disk cache [ 829.511793][T23582] BTRFS info (device loop1): setting nodatasum [ 829.514253][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 829.524838][T23582] BTRFS info (device loop1): allowing degraded mounts [ 829.536443][T23582] BTRFS info (device loop1): enabling disk space caching [ 829.552992][T23582] BTRFS info (device loop1): disk space caching is enabled [ 829.568989][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.638051][ T788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 829.657893][ T788] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 829.668226][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.676736][ T788] usb 4-1: Product: syz [ 829.681901][ T788] usb 4-1: Manufacturer: syz [ 829.689473][ T788] usb 4-1: SerialNumber: syz [ 829.703781][T23595] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 829.704593][ T788] usb 4-1: config 0 descriptor?? [ 829.750835][ T788] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 829.809989][T23582] BTRFS info (device loop1): auto enabling async discard [ 829.825258][T23582] BTRFS info (device loop1): rebuilding free space tree [ 829.862706][T23582] BTRFS info (device loop1): disabling free space tree [ 829.877121][T23582] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 829.911133][T23582] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 829.964866][ T788] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 830.006128][ T788] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 830.038525][ T788] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 830.093203][T23582] BTRFS error (device loop1): balance: invalid convert metadata profile raid5 [ 830.202017][ T6410] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 830.226454][ T6460] usb 4-1: USB disconnect, device number 36 [ 831.279564][T23645] netlink: 'syz.2.7793': attribute type 2 has an invalid length. [ 831.293216][T23645] netlink: 'syz.2.7793': attribute type 1 has an invalid length. [ 831.317820][T23645] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7793'. [ 831.460002][T23651] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 831.466583][T23651] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 831.517042][T23651] vhci_hcd vhci_hcd.0: Device attached [ 831.565337][T23651] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 831.572526][T23651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 831.655142][T23651] vhci_hcd vhci_hcd.0: Device attached [ 831.704562][T23658] vhci_hcd: connection closed [ 831.716331][T23652] vhci_hcd: connection closed [ 831.726900][ T988] vhci_hcd: stop threads [ 831.737381][ T6366] vhci_hcd: vhci_device speed not set [ 831.758902][ T988] vhci_hcd: release socket [ 831.769693][T23665] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7801'. [ 831.783318][ T988] vhci_hcd: disconnect device [ 831.805035][ T988] vhci_hcd: stop threads [ 831.809342][ T988] vhci_hcd: release socket [ 831.823893][ T6366] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 831.829385][ T988] vhci_hcd: disconnect device [ 832.365175][T23683] binder: 23681:23683 ioctl 40046205 0 returned -22 [ 832.662771][T23671] loop3: detected capacity change from 0 to 32768 [ 833.425984][ T6460] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 833.662207][ T6460] usb 2-1: unable to get BOS descriptor or descriptor too short [ 833.683140][ T6460] usb 2-1: not running at top speed; connect to a high speed hub [ 833.713791][ T6460] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 833.746705][ T6460] usb 2-1: config 1 interface 0 has no altsetting 0 [ 833.757841][ T6460] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 833.775880][ T6460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.784703][ T6460] usb 2-1: Product: syz [ 833.789082][ T6460] usb 2-1: Manufacturer: syz [ 833.800075][ T6460] usb 2-1: SerialNumber: syz [ 834.046639][ T6460] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input40 [ 834.069800][ T5126] bcm5974 2-1:1.0: could not read from device [ 834.115462][ T6460] usb 2-1: USB disconnect, device number 26 [ 834.804009][T23735] loop2: detected capacity change from 0 to 32768 [ 834.820581][T23728] loop0: detected capacity change from 0 to 32768 [ 834.830493][T23747] tipc: Can't bind to reserved service type 0 [ 834.848071][T23728] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.7829 (23728) [ 834.884707][T23728] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 834.899735][T23728] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 834.910623][T23728] BTRFS info (device loop0): force zlib compression, level 3 [ 834.919589][T23728] BTRFS info (device loop0): force clearing of disk cache [ 834.927985][T23728] BTRFS info (device loop0): setting nodatasum [ 834.935290][T23728] BTRFS info (device loop0): use zlib compression, level 3 [ 834.943028][T23728] BTRFS info (device loop0): allowing degraded mounts [ 834.950803][T23728] BTRFS info (device loop0): enabling disk space caching [ 834.958418][T23728] BTRFS info (device loop0): disk space caching is enabled [ 834.971657][T23735] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 835.109831][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 835.116835][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 835.136487][T23735] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 835.142808][T23728] BTRFS info (device loop0): enabling ssd optimizations [ 835.163710][T23735] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 835.163783][T23735] OCFS2: File system is now read-only. [ 835.163793][T23735] (syz.2.7834,23735,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 835.163822][T23735] (syz.2.7834,23735,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 835.207706][T23728] BTRFS info (device loop0): auto enabling async discard [ 835.215283][T23735] (syz.2.7834,23735,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 835.224548][T23728] BTRFS info (device loop0): rebuilding free space tree [ 835.273905][T23735] (syz.2.7834,23735,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 835.284142][T23728] BTRFS info (device loop0): disabling free space tree [ 835.294567][T23728] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 835.314680][T23735] (syz.2.7834,23735,1):ocfs2_read_virt_blocks:987 ERROR: status = -30 [ 835.327357][T23728] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 835.349099][T23735] (syz.2.7834,23735,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 835.378198][T23735] (syz.2.7834,23735,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 835.408417][T23735] (syz.2.7834,23735,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 835.443408][T23735] (syz.2.7834,23735,1):ocfs2_mknod:298 ERROR: status = -5 [ 835.472207][T23735] (syz.2.7834,23735,1):ocfs2_mknod:502 ERROR: status = -5 [ 835.492438][T23728] BTRFS info (device loop0): balance: start -f -svrange=5..9,limit=46533..0 [ 835.507874][T23735] (syz.2.7834,23735,1):ocfs2_create:676 ERROR: status = -5 [ 835.563185][T23728] BTRFS info (device loop0): balance: ended with status: 0 [ 835.615454][ T6421] ocfs2: Unmounting device (7,2) on (node local) [ 835.769363][ T6411] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 836.956186][T23819] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 836.999098][T23822] loop3: detected capacity change from 0 to 512 [ 837.046173][T23822] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 837.093362][T23822] EXT4-fs (loop3): orphan cleanup on readonly fs [ 837.113977][T23822] EXT4-fs error (device loop3): __ext4_iget:5047: inode #11: block 8: comm syz.3.7868: invalid block [ 837.221767][T23822] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.7868: couldn't read orphan inode 11 (err -117) [ 837.288969][T23822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 837.338260][ T6366] vhci_hcd: vhci_device speed not set [ 837.374099][T23822] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 837.572303][ T6417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.459566][T23921] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7916'. [ 839.574695][T23923] loop3: detected capacity change from 0 to 2048 [ 839.600400][T23923] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 839.677135][T23923] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 839.850256][T23929] netlink: 'syz.2.7920': attribute type 27 has an invalid length. [ 839.868562][T23929] C: renamed from team_slave_0 (while UP) [ 839.953064][T23901] loop1: detected capacity change from 0 to 32768 [ 840.180608][T23901] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 840.334740][T23951] binder: 23950:23951 ioctl c00c6211 ffffffffffffffff returned -14 [ 840.559489][T23901] XFS (loop1): Ending clean mount [ 840.614383][T23901] XFS (loop1): Quotacheck needed: Please wait. [ 840.795693][T23901] XFS (loop1): Quotacheck: Done. [ 841.010710][ T6410] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 841.070898][T23972] loop2: detected capacity change from 0 to 256 [ 841.139150][T23972] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x08fbab18, utbl_chksum : 0xe619d30d) [ 841.546367][T23979] loop2: detected capacity change from 0 to 512 [ 841.601650][T23979] EXT4-fs: Ignoring removed nobh option [ 841.696755][T23979] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7942: invalid indirect mapped block 256 (level 2) [ 841.831039][T23989] xt_hashlimit: max too large, truncated to 1048576 [ 841.838500][T23979] EXT4-fs (loop2): 2 truncates cleaned up [ 841.846693][T23979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.064847][ T6421] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.149971][T23993] loop3: detected capacity change from 0 to 4096 [ 842.195506][T23993] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 842.354980][T23993] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 842.377416][T23993] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 842.635303][ T1341] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 842.676565][ T6417] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 842.701016][ T6417] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 842.710125][ T6417] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 842.741305][ T1097] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 843.073231][T24029] loop3: detected capacity change from 0 to 256 [ 843.687267][T24055] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 844.013009][ T28] audit: type=1326 audit(2000000108.058:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24069 comm="syz.3.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 844.070245][ T28] audit: type=1326 audit(2000000108.058:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24069 comm="syz.3.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 844.141102][ T28] audit: type=1326 audit(2000000108.058:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24069 comm="syz.3.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 844.195480][T24074] bridge3: entered allmulticast mode [ 844.239685][ T28] audit: type=1326 audit(2000000108.058:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24069 comm="syz.3.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 845.074416][T24108] loop3: detected capacity change from 0 to 4096 [ 845.401812][T24126] loop3: detected capacity change from 0 to 256 [ 845.592877][T24134] random: crng reseeded on system resumption [ 845.904916][T24143] netlink: 'syz.0.8020': attribute type 21 has an invalid length. [ 845.955546][T24143] netlink: 'syz.0.8020': attribute type 6 has an invalid length. [ 845.978917][T24143] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8020'. [ 846.467576][T24161] loop1: detected capacity change from 0 to 4096 [ 846.488563][T24161] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 846.537675][T24161] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 846.554659][T24161] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 846.587854][T24168] netlink: 'syz.0.8032': attribute type 1 has an invalid length. [ 846.611869][T24168] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8032'. [ 846.731343][ T1308] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 846.764512][ T6410] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 846.772773][ T6410] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 846.793870][ T6410] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 846.807086][ T988] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 847.091294][T24183] loop1: detected capacity change from 0 to 1024 [ 847.170680][T24183] hfsplus: bad catalog entry type [ 847.201768][T24189] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8042'. [ 847.229163][T24189] openvswitch: netlink: Key type 2832 is out of range max 32 [ 847.311609][T24193] loop2: detected capacity change from 0 to 256 [ 847.433958][T24193] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 847.435688][T24199] loop0: detected capacity change from 0 to 64 [ 847.560470][T24201] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 847.777112][T24207] loop2: detected capacity change from 0 to 1024 [ 847.828630][ T28] audit: type=1326 audit(2000000111.632:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24209 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 847.851267][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.886642][ T28] audit: type=1326 audit(2000000111.632:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24209 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 847.915961][T24207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.923827][ T28] audit: type=1326 audit(2000000111.650:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24209 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 847.955637][ T28] audit: type=1326 audit(2000000111.650:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24209 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 847.979933][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.986582][ T28] audit: type=1326 audit(2000000111.650:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24209 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 848.048297][T24207] EXT4-fs error (device loop2): __ext4_remount:6741: comm syz.2.8049: Abort forced by user [ 848.067614][T24207] EXT4-fs (loop2): Remounting filesystem read-only [ 848.075619][T24207] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 848.194461][ T6421] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.725494][T24239] loop3: detected capacity change from 0 to 4096 [ 848.794976][T24239] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 848.827248][T24239] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 850.240419][T24305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8096'. [ 850.628726][T24320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8103'. [ 850.805390][T24326] loop2: detected capacity change from 0 to 512 [ 850.871103][T24326] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 850.902307][T24326] EXT4-fs (loop2): Remounting filesystem read-only [ 850.932740][T24332] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 850.944859][T24326] EXT4-fs (loop2): 1 truncate cleaned up [ 850.953081][T24326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.042879][ T6421] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.238551][T24338] loop3: detected capacity change from 0 to 4096 [ 851.259398][T24338] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 851.310642][T24344] xt_SECMARK: invalid mode: 2 [ 851.335466][T24338] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 851.472525][T24338] ntfs3: loop3: failed to convert "c46c" to iso8859-7 [ 851.862983][T24361] loop2: detected capacity change from 0 to 512 [ 851.930948][T24361] EXT4-fs: Ignoring removed nobh option [ 851.996172][T24361] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.8122: corrupted inode contents [ 852.052757][T24361] EXT4-fs error (device loop2): ext4_dirty_inode:6100: inode #3: comm syz.2.8122: mark_inode_dirty error [ 852.107845][T24361] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.8122: corrupted inode contents [ 852.176638][T24361] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.8122: mark_inode_dirty error [ 852.196158][T24361] Quota error (device loop2): write_blk: dquota write failed [ 852.232154][T24361] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 852.258171][T24361] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.8122: Failed to acquire dquot type 0 [ 852.283389][T24361] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.8122: corrupted inode contents [ 852.320788][T24361] EXT4-fs error (device loop2): ext4_dirty_inode:6100: inode #16: comm syz.2.8122: mark_inode_dirty error [ 852.347613][T24361] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.8122: corrupted inode contents [ 852.348873][ T28] audit: type=1400 audit(2000000115.851:120): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A0C7E pid=24372 comm="syz.1.8125" [ 852.389855][T24361] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.8122: mark_inode_dirty error [ 852.428445][T24361] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.8122: corrupted inode contents [ 852.459884][T24361] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 852.487749][T24361] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.8122: corrupted inode contents [ 852.518699][T24361] EXT4-fs error (device loop2): ext4_truncate:4283: inode #16: comm syz.2.8122: mark_inode_dirty error [ 852.550633][T24361] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 852.577764][T24361] EXT4-fs (loop2): 1 truncate cleaned up [ 852.596486][T24361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.658354][T24361] ext4 filesystem being mounted at /1880/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.704201][T24364] loop0: detected capacity change from 0 to 32768 [ 852.795656][T24364] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 852.828802][T24364] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 852.836196][ T6421] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.913453][T24392] loop1: detected capacity change from 0 to 4096 [ 852.970804][T24392] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 853.117521][T24392] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 853.183659][T24364] XFS (loop0): Ending clean mount [ 853.286960][T24392] ntfs3: loop1: failed to convert "c46c" to iso8859-7 [ 853.340091][ T6411] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 853.554604][T24407] bridge_slave_0: left allmulticast mode [ 853.562055][T24407] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.118166][T24423] loop1: detected capacity change from 0 to 512 [ 854.175875][T24423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.215026][T24423] ext4 filesystem being mounted at /1943/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 854.255996][T24423] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 854.340815][T24433] Invalid option length (1044984) for dns_resolver key [ 854.377452][ T6410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.883552][T24458] loop3: detected capacity change from 0 to 128 [ 854.918584][T24458] EXT4-fs (loop3): Test dummy encryption mode enabled [ 854.938588][T24458] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 854.956702][T24458] ext4 filesystem being mounted at /1832/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 855.183496][ T6417] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 855.798065][T24496] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8173'. [ 856.042459][ T6343] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 856.121155][T24506] binder: 24505:24506 ioctl c018620c 2000000001c0 returned -22 [ 856.247457][ T6343] usb 4-1: config 0 interface 0 has no altsetting 0 [ 856.265797][ T6343] usb 4-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 856.288411][ T6343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.342755][ T6343] usb 4-1: config 0 descriptor?? [ 856.743298][ T6343] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 856.759989][T24524] loop2: detected capacity change from 0 to 16 [ 856.791663][ T6343] usb 4-1: USB disconnect, device number 37 [ 856.865399][T24524] erofs: (device loop2): mounted with root inode @ nid 36. [ 857.445553][T24545] loop0: detected capacity change from 0 to 64 [ 857.933254][T24556] loop0: detected capacity change from 0 to 256 [ 857.936572][T24528] loop1: detected capacity change from 0 to 40427 [ 857.974497][T24528] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 858.009260][T24528] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 858.059152][T24528] F2FS-fs (loop1): invalid crc value [ 858.071498][T24556] FAT-fs (loop0): Directory bread(block 64) failed [ 858.090890][T24556] FAT-fs (loop0): Directory bread(block 65) failed [ 858.100147][ T28] audit: type=1326 audit(2000000121.250:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24557 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 858.111994][T24528] F2FS-fs (loop1): Found nat_bits in checkpoint [ 858.136237][T24556] FAT-fs (loop0): Directory bread(block 66) failed [ 858.159190][ T28] audit: type=1326 audit(2000000121.268:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24557 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 858.159646][T24556] FAT-fs (loop0): Directory bread(block 67) failed [ 858.228460][T24556] FAT-fs (loop0): Directory bread(block 68) failed [ 858.251882][ T28] audit: type=1326 audit(2000000121.278:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24557 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 858.279221][T24556] FAT-fs (loop0): Directory bread(block 69) failed [ 858.299120][T24556] FAT-fs (loop0): Directory bread(block 70) failed [ 858.306150][T24556] FAT-fs (loop0): Directory bread(block 71) failed [ 858.330875][ T28] audit: type=1326 audit(2000000121.278:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24557 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 858.364377][T24556] FAT-fs (loop0): Directory bread(block 72) failed [ 858.371269][T24556] FAT-fs (loop0): Directory bread(block 73) failed [ 858.394602][T24528] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 858.408869][T24543] loop2: detected capacity change from 0 to 32768 [ 858.409090][T24564] loop3: detected capacity change from 0 to 128 [ 858.425593][T24528] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 858.437813][ T28] audit: type=1326 audit(2000000121.278:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24557 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 858.439206][T24564] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 858.539604][T24543] ERROR: (device loop2): diAllocBit: iag inconsistent [ 858.539604][T24543] [ 858.553101][T24564] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 858.629749][T24543] ialloc: diAlloc returned -5! [ 858.916056][T24568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8206'. [ 859.057179][T24572] netlink: 'syz.0.8208': attribute type 7 has an invalid length. [ 859.083701][T24572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8208'. [ 859.105234][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8208'. [ 859.182495][T24576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 859.564936][T24586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8214'. [ 859.706605][T24590] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 859.715987][T24590] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 860.329099][T24614] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8228'. [ 860.381337][T24617] loop3: detected capacity change from 0 to 512 [ 860.426025][T24617] EXT4-fs: Ignoring removed nobh option [ 860.492564][T24617] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.8230: corrupted inode contents [ 860.590678][T24617] EXT4-fs error (device loop3): ext4_dirty_inode:6100: inode #3: comm syz.3.8230: mark_inode_dirty error [ 860.663587][T24617] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.8230: corrupted inode contents [ 860.674386][T24626] usb usb8: usbfs: process 24626 (syz.1.8232) did not claim interface 0 before use [ 860.706122][T24617] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.8230: mark_inode_dirty error [ 860.749174][T24617] Quota error (device loop3): write_blk: dquota write failed [ 860.788306][T24617] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 860.818242][T24612] loop2: detected capacity change from 0 to 32768 [ 860.845198][T24617] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.8230: Failed to acquire dquot type 0 [ 860.865350][T24612] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8227 (24612) [ 860.875419][T24617] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.8230: corrupted inode contents [ 860.908075][T24631] loop0: detected capacity change from 0 to 256 [ 860.929961][T24617] EXT4-fs error (device loop3): ext4_dirty_inode:6100: inode #16: comm syz.3.8230: mark_inode_dirty error [ 860.937772][T24612] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 860.958201][T24617] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.8230: corrupted inode contents [ 860.971377][T24612] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 861.021400][T24612] BTRFS info (device loop2): force clearing of disk cache [ 861.042557][T24617] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.8230: mark_inode_dirty error [ 861.065801][T24612] BTRFS info (device loop2): enabling auto defrag [ 861.096468][T24617] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.8230: corrupted inode contents [ 861.118341][T24612] BTRFS info (device loop2): max_inline at 0 [ 861.161313][T24612] BTRFS info (device loop2): enabling disk space caching [ 861.171823][T24617] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 861.200794][T24617] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.8230: corrupted inode contents [ 861.226363][T24612] BTRFS info (device loop2): disk space caching is enabled [ 861.267232][T24617] EXT4-fs error (device loop3): ext4_truncate:4283: inode #16: comm syz.3.8230: mark_inode_dirty error [ 861.272149][T24635] loop1: detected capacity change from 0 to 512 [ 861.324693][T24617] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 861.342727][T24617] EXT4-fs (loop3): 1 truncate cleaned up [ 861.362255][T24617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.394023][T24635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.399041][T24617] ext4 filesystem being mounted at /1848/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 861.451205][T24635] ext4 filesystem being mounted at /1959/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 861.518904][T24612] BTRFS info (device loop2): enabling ssd optimizations [ 861.561338][T24612] BTRFS info (device loop2): rebuilding free space tree [ 861.644821][T24612] BTRFS info (device loop2): disabling free space tree [ 861.676440][ T6410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.683060][T24612] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 861.734879][ T6417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.740031][T24612] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 861.991741][T24612] BTRFS warning (device loop2): can't clear the free_space_tree feature bit while mounted [ 862.155867][ T6421] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 862.481842][T24677] loop1: detected capacity change from 0 to 512 [ 862.640040][T24677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.692503][T24677] ext4 filesystem being mounted at /1962/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 862.744726][T24687] loop0: detected capacity change from 0 to 512 [ 862.746073][T24677] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.8250: corrupted inode contents [ 862.790909][T24687] EXT4-fs: Ignoring removed nobh option [ 862.823722][T24677] EXT4-fs error (device loop1): ext4_dirty_inode:6100: inode #2: comm syz.1.8250: mark_inode_dirty error [ 862.839715][T24677] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.8250: corrupted inode contents [ 862.901499][T24677] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.8250: mark_inode_dirty error [ 862.941880][T24687] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.8251: corrupted inode contents [ 862.969290][T24687] EXT4-fs error (device loop0): ext4_dirty_inode:6100: inode #3: comm syz.0.8251: mark_inode_dirty error [ 863.006840][T24687] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.8251: corrupted inode contents [ 863.043755][T24687] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.8251: mark_inode_dirty error [ 863.065593][T24687] Quota error (device loop0): write_blk: dquota write failed [ 863.101828][ T6410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.118281][T24687] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 863.140448][T24687] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.8251: Failed to acquire dquot type 0 [ 863.213032][T24700] loop2: detected capacity change from 0 to 8 [ 863.223794][T24687] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.8251: corrupted inode contents [ 863.302559][T24687] EXT4-fs error (device loop0): ext4_dirty_inode:6100: inode #16: comm syz.0.8251: mark_inode_dirty error [ 863.347997][T24700] SQUASHFS error: Failed to read block 0x2fc: -5 [ 863.373411][T24687] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.8251: corrupted inode contents [ 863.374603][T24700] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 863.416421][T24700] SQUASHFS error: Unable to read directory block [247:26] [ 863.436263][T24687] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.8251: mark_inode_dirty error [ 863.457093][T24687] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.8251: corrupted inode contents [ 863.476865][T24687] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 863.487611][T24687] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.8251: corrupted inode contents [ 863.569176][T24687] EXT4-fs error (device loop0): ext4_truncate:4283: inode #16: comm syz.0.8251: mark_inode_dirty error [ 863.619874][T24687] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 863.678457][T24687] EXT4-fs (loop0): 1 truncate cleaned up [ 863.698715][T24712] loop2: detected capacity change from 0 to 64 [ 863.712771][T24687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.745732][T24687] ext4 filesystem being mounted at /1945/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.916237][T24718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8266'. [ 864.039242][T24720] netlink: 'syz.3.8267': attribute type 1 has an invalid length. [ 864.068433][ T6411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.075261][T24720] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8267'. [ 864.102127][T24723] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8268'. [ 864.203640][T24727] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8271'. [ 865.019175][T24729] loop0: detected capacity change from 0 to 32768 [ 865.117034][ T55] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 865.353860][ T55] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 865.404577][ T55] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 865.442408][ T55] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 865.459187][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.758477][ T6343] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 865.930368][ T55] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 865.951726][ T55] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input42 [ 865.979247][ T55] input: failed to attach handler kbd to device input42, error: -5 [ 865.983336][ T6343] usb 2-1: Using ep0 maxpacket: 8 [ 866.008995][ T6343] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 866.017465][ T55] usb 3-1: USB disconnect, device number 28 [ 866.064281][ T6343] usb 2-1: config 179 has no interface number 0 [ 866.079194][ T6343] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 866.120872][ T6343] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 866.164347][ T6343] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 866.192916][ T6343] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 866.204925][ T6343] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 866.220085][ T6343] usb 2-1: config 179 interface 65 has no altsetting 0 [ 866.227609][ T6343] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 866.255150][ T6343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.330335][ T6343] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input43 [ 866.584703][ T6366] usb 2-1: USB disconnect, device number 27 [ 866.596342][ T6366] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 866.851526][ T28] audit: type=1326 audit(2000000001.271:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24803 comm="syz.0.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a5b8e929 code=0x7ffc0000 [ 866.897860][T24802] loop3: detected capacity change from 0 to 4096 [ 866.926897][ T28] audit: type=1326 audit(2000000001.290:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24803 comm="syz.0.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a5b8e929 code=0x7ffc0000 [ 866.953197][T24806] netlink: 'syz.2.8309': attribute type 15 has an invalid length. [ 866.965156][T24802] NILFS (loop3): invalid segment: Checksum error in segment payload [ 866.974120][T24802] NILFS (loop3): trying rollback from an earlier position [ 866.983373][ T28] audit: type=1326 audit(2000000001.299:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24803 comm="syz.0.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f96a5b8e929 code=0x7ffc0000 [ 867.044379][T24802] NILFS (loop3): recovery complete [ 867.064651][T24807] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 867.077515][ T28] audit: type=1326 audit(2000000001.299:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24803 comm="syz.0.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a5b8e929 code=0x7ffc0000 [ 867.111534][ T28] audit: type=1326 audit(2000000001.299:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24803 comm="syz.0.8308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a5b8e929 code=0x7ffc0000 [ 867.485390][ T28] audit: type=1326 audit(2000000001.860:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24816 comm="syz.3.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 867.598871][ T28] audit: type=1326 audit(2000000001.860:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24816 comm="syz.3.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 867.681909][ T28] audit: type=1326 audit(2000000001.860:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24816 comm="syz.3.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 867.736510][ T28] audit: type=1326 audit(2000000001.860:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24816 comm="syz.3.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 867.790077][ T28] audit: type=1326 audit(2000000001.860:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24816 comm="syz.3.8313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 867.939787][ T6366] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 868.143587][ T6366] usb 4-1: Using ep0 maxpacket: 32 [ 868.156012][ T6366] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 868.183878][T24839] loop2: detected capacity change from 0 to 764 [ 868.204880][T24821] loop0: detected capacity change from 0 to 32768 [ 868.215804][ T6366] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 868.264329][T24839] Symlink component flag not implemented [ 868.265118][ T6366] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.302322][T24839] Symlink component flag not implemented (116) [ 868.309413][ T6366] usb 4-1: Product: syz [ 868.309435][ T6366] usb 4-1: Manufacturer: syz [ 868.309451][ T6366] usb 4-1: SerialNumber: syz [ 868.332278][ T6366] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 868.369059][ T6366] imon 4-1:155.0: unable to initialize intf0, err -19 [ 868.405131][ T6366] imon:imon_probe: failed to initialize context! [ 868.432800][ T6366] imon 4-1:155.0: unable to register, err -19 [ 868.782334][T24855] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.827515][ T6366] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 869.072284][ T6366] usb 3-1: config 0 interface 0 has no altsetting 0 [ 869.090372][ T6366] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 869.107957][ T6366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.121830][ T6366] usb 3-1: config 0 descriptor?? [ 869.148193][ T6343] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 869.357672][ T6343] usb 2-1: config index 0 descriptor too short (expected 69, got 36) [ 869.391643][ T6343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.407555][ T6343] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 869.418424][ T6343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.430785][ T6343] usb 2-1: Product: syz [ 869.439355][ T6343] usb 2-1: Manufacturer: syz [ 869.444786][ T6343] usb 2-1: SerialNumber: syz [ 869.460548][ T6366] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 869.476677][T19003] udevd[19003]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.504441][ T6366] usb 3-1: USB disconnect, device number 29 [ 869.515850][ T6343] usb 2-1: config 0 descriptor?? [ 869.535358][ T6343] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 869.675724][T24869] loop0: detected capacity change from 0 to 2048 [ 869.713099][T24869] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 869.962121][ T6343] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 869.983644][ T6343] gspca_pac7302: probe of 2-1:0.0 failed with error -71 [ 870.017426][ T6343] usb 2-1: USB disconnect, device number 28 [ 870.149856][T24879] xt_hashlimit: max too large, truncated to 1048576 [ 870.866437][ T6366] usb 4-1: USB disconnect, device number 38 [ 871.573824][T24905] loop2: detected capacity change from 0 to 40427 [ 871.622889][T24905] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 871.672525][T24905] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 871.709469][T24905] F2FS-fs (loop2): invalid crc value [ 871.726337][T24905] F2FS-fs (loop2): Found nat_bits in checkpoint [ 871.744461][T24929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8369'. [ 871.865844][T24905] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 871.884811][T24905] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 871.935751][T24933] loop3: detected capacity change from 0 to 512 [ 871.964088][T24933] EXT4-fs: Ignoring removed oldalloc option [ 872.061656][T24933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.093377][T24934] loop1: detected capacity change from 0 to 4096 [ 872.098463][T24933] ext4 filesystem being mounted at /1884/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 872.109659][T24934] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 872.126128][T24937] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 872.225505][ T6417] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.594964][T24945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8375'. [ 873.208990][T24972] loop2: detected capacity change from 0 to 256 [ 873.235880][T24972] exfat: Deprecated parameter 'utf8' [ 873.310485][T24972] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 873.643724][T24986] usb usb8: usbfs: process 24986 (syz.2.8394) did not claim interface 0 before use [ 873.778878][T24990] loop1: detected capacity change from 0 to 256 [ 873.828395][T24990] FAT-fs (loop1): Directory bread(block 64) failed [ 873.859373][T24992] loop0: detected capacity change from 0 to 512 [ 873.873006][T24990] FAT-fs (loop1): Directory bread(block 65) failed [ 873.913059][T24990] FAT-fs (loop1): Directory bread(block 66) failed [ 873.924368][T24992] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 873.955100][T24990] FAT-fs (loop1): Directory bread(block 67) failed [ 874.003872][T24990] FAT-fs (loop1): Directory bread(block 68) failed [ 874.010747][T24990] FAT-fs (loop1): Directory bread(block 69) failed [ 874.056854][T24992] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.8398: invalid indirect mapped block 83886080 (level 1) [ 874.067813][T24990] FAT-fs (loop1): Directory bread(block 70) failed [ 874.078753][T24990] FAT-fs (loop1): Directory bread(block 71) failed [ 874.085502][T24990] FAT-fs (loop1): Directory bread(block 72) failed [ 874.092365][T24990] FAT-fs (loop1): Directory bread(block 73) failed [ 874.163335][T24992] EXT4-fs (loop0): Remounting filesystem read-only [ 874.210953][T25002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8401'. [ 874.228336][T24992] EXT4-fs (loop0): 1 orphan inode deleted [ 874.234211][T24992] EXT4-fs (loop0): 1 truncate cleaned up [ 874.259662][T25002] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8401'. [ 874.270955][T24992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 874.414338][ T6411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.769268][T25016] loop2: detected capacity change from 0 to 1024 [ 874.843142][ T28] audit: type=1800 audit(2000000008.743:136): pid=25016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8409" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 875.162657][T25024] loop3: detected capacity change from 0 to 4096 [ 875.199682][T25024] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 875.227250][T25036] i2c i2c-0: Invalid block write size 34 [ 875.858588][T25056] loop1: detected capacity change from 0 to 2048 [ 875.892957][ T28] audit: type=1326 audit(2000000009.725:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25057 comm="syz.2.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40078e929 code=0x7ffc0000 [ 875.970631][ T28] audit: type=1326 audit(2000000009.725:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25057 comm="syz.2.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40078e929 code=0x7ffc0000 [ 876.018708][ T28] audit: type=1326 audit(2000000009.772:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25057 comm="syz.2.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa40078e929 code=0x7ffc0000 [ 876.063436][T25056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.154292][T25056] ext4 filesystem being mounted at /2012/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.163860][ T28] audit: type=1326 audit(2000000009.772:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25057 comm="syz.2.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40078e929 code=0x7ffc0000 [ 876.212519][ T28] audit: type=1326 audit(2000000009.772:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25057 comm="syz.2.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40078e929 code=0x7ffc0000 [ 876.291544][ T28] audit: type=1326 audit(2000000010.024:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25071 comm="syz.3.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 876.323657][ T970] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 876.324269][T25056] fscrypt (loop1, inode 13): Error -61 getting encryption context [ 876.365919][ T28] audit: type=1326 audit(2000000010.024:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25071 comm="syz.3.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 876.415473][ T28] audit: type=1326 audit(2000000010.052:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25071 comm="syz.3.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 876.468680][ T28] audit: type=1326 audit(2000000010.052:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25071 comm="syz.3.8437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 876.541403][ T970] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 876.563759][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.573360][ T6410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.588497][ T970] usb 3-1: Product: syz [ 876.619930][ T970] usb 3-1: Manufacturer: syz [ 876.628661][ T970] usb 3-1: SerialNumber: syz [ 876.641673][ T970] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 876.692396][ T6343] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 877.077779][T25092] loop1: detected capacity change from 0 to 2048 [ 877.142358][T25092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 877.169231][ T6366] usb 3-1: USB disconnect, device number 30 [ 877.572879][T25110] loop1: detected capacity change from 0 to 1024 [ 877.863846][ T6343] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 877.893613][ T6343] ath9k_htc: Failed to initialize the device [ 877.942781][ T6366] usb 3-1: ath9k_htc: USB layer deinitialized [ 878.073002][T25127] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.8464'. [ 878.360020][T25138] loop1: detected capacity change from 0 to 1024 [ 878.374977][T25138] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 878.405741][T25138] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 878.472501][T25138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.503211][T25138] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: inode #11: comm syz.1.8469: missing EA_INODE flag [ 878.526530][T25138] EXT4-fs (loop1): Remounting filesystem read-only [ 878.593536][ T6410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.656342][T25151] netlink: 'syz.2.8476': attribute type 32 has an invalid length. [ 879.673490][T25190] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8493'. [ 879.702834][T25187] loop0: detected capacity change from 0 to 4096 [ 879.745009][T25187] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 879.799174][T25187] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 879.865445][T25194] loop1: detected capacity change from 0 to 128 [ 879.895385][T25187] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 879.923752][T25194] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 880.012592][T25194] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 880.039426][T25194] FAT-fs (loop1): Filesystem has been set read-only [ 880.852856][T25218] netlink: 'syz.0.8505': attribute type 1 has an invalid length. [ 880.865145][T25221] ufs: You didn't specify the type of your ufs filesystem [ 880.865145][T25221] [ 880.865145][T25221] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 880.865145][T25221] [ 880.865145][T25221] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 880.873848][T25218] netlink: 'syz.0.8505': attribute type 2 has an invalid length. [ 880.953170][T25221] ufs: ufstype=old is supported read-only [ 880.982193][T25221] syz.1.8508: attempt to access beyond end of device [ 880.982193][T25221] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 881.224700][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 881.224716][ T28] audit: type=1326 audit(2000000014.710:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25230 comm="syz.3.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 881.258775][T25232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8513'. [ 881.292366][ T28] audit: type=1326 audit(2000000014.738:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25230 comm="syz.3.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 881.292741][T25232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8513'. [ 881.327933][ T28] audit: type=1326 audit(2000000014.756:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25230 comm="syz.3.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 881.381409][T25232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8513'. [ 881.425562][ T28] audit: type=1326 audit(2000000014.756:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25230 comm="syz.3.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 881.497876][ T28] audit: type=1326 audit(2000000014.756:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25230 comm="syz.3.8514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b5b8e929 code=0x7ffc0000 [ 881.637924][ T28] audit: type=1326 audit(2000000015.093:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25242 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a5b8e929 code=0x7ffc0000 [ 881.672445][ T28] audit: type=1326 audit(2000000015.093:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25242 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a5b8e929 code=0x7ffc0000 [ 881.697341][ T28] audit: type=1326 audit(2000000015.130:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25242 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f96a5b8e929 code=0x7ffc0000 [ 881.814136][ T28] audit: type=1326 audit(2000000015.130:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25242 comm="syz.0.8519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a5b8e929 code=0x7ffc0000 [ 882.039534][T25259] loop3: detected capacity change from 0 to 1024 [ 882.369719][T25272] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 882.519679][T25277] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8535'. [ 882.553829][T25277] caif0: entered promiscuous mode [ 882.575188][T25277] caif0: entered allmulticast mode [ 882.660223][T25283] netlink: 'syz.2.8539': attribute type 3 has an invalid length. [ 883.236588][T25285] loop1: detected capacity change from 0 to 32768 [ 883.275757][T25285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.8540 (25285) [ 883.326560][T25285] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 883.412436][T25285] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 883.449459][T25285] BTRFS info (device loop1): setting nodatacow, compression disabled [ 883.465490][T25285] BTRFS info (device loop1): max_inline at 0 [ 883.477333][T25285] BTRFS info (device loop1): enabling disk space caching [ 883.484587][T25285] BTRFS info (device loop1): turning off barriers [ 883.497915][T25285] BTRFS info (device loop1): turning on flush-on-commit [ 883.539748][T25285] BTRFS info (device loop1): doing ref verification [ 883.562089][T25285] BTRFS info (device loop1): force clearing of disk cache [ 883.582084][T25289] loop0: detected capacity change from 0 to 32768 [ 883.584422][T25285] BTRFS info (device loop1): enabling ssd optimizations [ 883.618995][T25285] BTRFS info (device loop1): max_inline at 4096 [ 883.661660][T25289] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 883.684436][T25285] BTRFS info (device loop1): disk space caching is enabled [ 883.784115][T19165] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 883.892047][T25296] loop2: detected capacity change from 0 to 32768 [ 883.920424][T25296] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 883.920424][T25296] [ 883.936268][T25296] ERROR: (device loop2): remounting filesystem as read-only [ 883.946567][T25285] BTRFS info (device loop1): auto enabling async discard [ 883.987146][T25285] BTRFS info (device loop1): rebuilding free space tree [ 884.120457][T25285] BTRFS info (device loop1): disabling free space tree [ 884.134803][T25285] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 884.166071][T25285] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 884.172307][ T6343] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 884.396798][ T6343] usb 4-1: Using ep0 maxpacket: 8 [ 884.430919][ T6343] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 884.490398][ T6343] usb 4-1: config 0 has no interface number 0 [ 884.527495][ T6343] usb 4-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=f7.bd [ 884.559951][ T6343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.614507][ T6343] usb 4-1: Product: syz [ 884.619012][ T6343] usb 4-1: Manufacturer: syz [ 884.641785][ T6410] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 884.653976][ T6343] usb 4-1: SerialNumber: syz [ 884.678473][ T6343] usb 4-1: config 0 descriptor?? [ 884.944151][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.956847][T25341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8558'. [ 884.974499][T25341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8558'. [ 884.995847][ T6343] usb 4-1: USB disconnect, device number 39 [ 886.002233][T25372] loop3: detected capacity change from 0 to 2048 [ 886.059343][T25372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 886.214205][T25382] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 886.349325][T25381] loop0: detected capacity change from 0 to 4096 [ 886.401250][T25381] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 886.506104][T25390] loop1: detected capacity change from 0 to 2048 [ 886.522134][T25388] loop2: detected capacity change from 0 to 2048 [ 886.574187][T25390] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 886.607009][T25390] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 886.622261][T25388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.841478][ T6421] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.646536][T25430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8600'. [ 887.689954][T25430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8600'. [ 887.691436][T25436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8603'. [ 888.041586][T25448] xt_TCPMSS: Only works on TCP SYN packets [ 888.212323][T25456] netlink: 'syz.2.8613': attribute type 16 has an invalid length. [ 888.269535][T25456] netlink: 'syz.2.8613': attribute type 17 has an invalid length. [ 888.344456][ T28] audit: type=1326 audit(2000000021.368:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25461 comm="syz.1.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 888.369223][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.443091][ T28] audit: type=1326 audit(2000000021.368:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25461 comm="syz.1.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 888.459461][T25459] loop3: detected capacity change from 0 to 4096 [ 888.485336][T25459] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 888.556994][ T28] audit: type=1326 audit(2000000021.405:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25461 comm="syz.1.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 888.582949][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.690300][ T28] audit: type=1326 audit(2000000021.405:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25461 comm="syz.1.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 888.787028][T25468] loop1: detected capacity change from 0 to 512 [ 888.790446][ T28] audit: type=1326 audit(2000000021.405:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25461 comm="syz.1.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92d38e929 code=0x7ffc0000 [ 888.844212][T25468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 888.867763][T25468] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 888.986130][T25468] EXT4-fs (loop1): 1 truncate cleaned up [ 889.018866][T25468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.197685][T25460] loop0: detected capacity change from 0 to 32768 [ 889.354216][ T6410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.954126][T25502] loop1: detected capacity change from 0 to 1024 [ 890.008641][T25502] syz.1.8634: attempt to access beyond end of device [ 890.008641][T25502] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 890.077165][T25502] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 890.114278][T25502] hfsplus: unable to mark blocks free: error -5 [ 890.137004][T25502] hfsplus: can't free extent [ 890.406685][ T6460] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 890.617918][ T6460] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 890.636198][ T6460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.659027][ T6460] usb 3-1: Product: syz [ 890.666723][ T6460] usb 3-1: Manufacturer: syz [ 890.671959][ T6460] usb 3-1: SerialNumber: syz [ 890.678997][T25528] loop3: detected capacity change from 0 to 1024 [ 890.700002][ T6460] usb 3-1: config 0 descriptor?? [ 890.787846][T25531] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 890.944312][ T6460] hso 3-1:0.0: Failed to find BULK IN ep [ 890.964720][ T6460] usb-storage 3-1:0.0: USB Mass Storage device detected [ 891.163265][ T6460] usb 3-1: USB disconnect, device number 31 [ 891.604528][T25555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8654'. [ 891.646022][T25541] loop1: detected capacity change from 0 to 32768 [ 891.701928][T25541] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 891.820855][T25569] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 891.861661][T25541] XFS (loop1): Ending clean mount [ 891.982402][T25574] loop3: detected capacity change from 0 to 128 [ 892.000499][T25575] xt_hashlimit: size too large, truncated to 1048576 [ 892.032536][T25575] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 892.081167][ T6410] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 892.336852][T25581] loop0: detected capacity change from 0 to 1024 [ 892.444018][T25581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.611135][T25581] EXT4-fs warning (device loop0): empty_inline_dir:1838: bad inline directory (dir #12) - no `..' [ 892.757731][ T6411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.898818][T25594] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8668'. [ 892.934916][T25590] loop3: detected capacity change from 0 to 4096 [ 893.070767][T25590] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 893.110900][T25590] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 893.220238][T25590] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 893.611439][T25605] loop2: detected capacity change from 0 to 4096 [ 893.717014][T25605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.748622][T25614] loop3: detected capacity change from 0 to 256 [ 893.954844][T25621] loop1: detected capacity change from 0 to 256 [ 893.974918][ T6421] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.031624][T20621] Bluetooth: hci0: command tx timeout [ 894.455218][T25634] loop2: detected capacity change from 0 to 512 [ 894.561990][T25634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.603484][T25634] ext4 filesystem being mounted at /2022/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 894.619875][T25642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8692'. [ 894.818211][T25619] loop0: detected capacity change from 0 to 32768 [ 894.822081][T25634] [ 894.827049][T25634] ====================================================== [ 894.831774][T25619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.8681 (25619) [ 894.834063][T25634] WARNING: possible circular locking dependency detected [ 894.834084][T25634] 6.6.94-syzkaller #0 Not tainted [ 894.834093][T25634] ------------------------------------------------------ [ 894.834100][T25634] syz.2.8688/25634 is trying to acquire lock: [ 894.834109][T25634] ffff888077721768 (&dquot->dq_lock){+.+.}-{3:3}, at: dqget+0x6fc/0xeb0 [ 894.880458][T25634] [ 894.880458][T25634] but task is already holding lock: [ 894.887924][T25634] ffff8880738814c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 894.897271][T25634] [ 894.897271][T25634] which lock already depends on the new lock. [ 894.897271][T25634] [ 894.908145][T25634] [ 894.908145][T25634] the existing dependency chain (in reverse order) is: [ 894.917996][T25634] [ 894.917996][T25634] -> #5 (&ei->xattr_sem){++++}-{3:3}: [ 894.925774][T25634] down_read+0x46/0x2e0 [ 894.930750][T25634] ext4_setattr+0x86b/0x1c90 [ 894.936154][T25634] notify_change+0xb0d/0xe10 [ 894.941472][T25634] chown_common+0x3f9/0x5a0 [ 894.946881][T25634] do_fchownat+0x168/0x270 [ 894.952002][T25634] __x64_sys_chown+0x82/0x90 [ 894.957653][T25634] do_syscall_64+0x55/0xb0 [ 894.962818][T25634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 894.969696][T25634] [ 894.969696][T25634] -> #4 (jbd2_handle){++++}-{0:0}: [ 894.977010][T25634] start_this_handle+0x1e9d/0x20c0 [ 894.982675][T25634] jbd2__journal_start+0x2bb/0x5b0 [ 894.988412][T25634] jbd2_journal_start+0x2a/0x40 [ 894.994238][T25634] ocfs2_start_trans+0x376/0x6c0 [ 895.000317][T25634] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 895.006994][T25634] ocfs2_dismount_volume+0x1e2/0x890 [ 895.013115][T25634] generic_shutdown_super+0x134/0x2b0 [ 895.019036][T25634] kill_block_super+0x44/0x90 [ 895.024510][T25634] deactivate_locked_super+0x97/0x100 [ 895.030493][T25634] cleanup_mnt+0x429/0x4c0 [ 895.035544][T25634] task_work_run+0x1ce/0x250 [ 895.040686][T25634] exit_to_user_mode_loop+0xe6/0x110 [ 895.046843][T25634] exit_to_user_mode_prepare+0xb1/0x140 [ 895.053276][T25634] syscall_exit_to_user_mode+0x1a/0x50 [ 895.059447][T25634] do_syscall_64+0x61/0xb0 [ 895.064662][T25634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.071723][T25634] [ 895.071723][T25634] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 895.080510][T25634] down_read+0x46/0x2e0 [ 895.085286][T25634] ocfs2_start_trans+0x36a/0x6c0 [ 895.090765][T25634] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 895.097129][T25634] ocfs2_dismount_volume+0x1e2/0x890 [ 895.103048][T25634] generic_shutdown_super+0x134/0x2b0 [ 895.108998][T25634] kill_block_super+0x44/0x90 [ 895.114214][T25634] deactivate_locked_super+0x97/0x100 [ 895.120237][T25634] cleanup_mnt+0x429/0x4c0 [ 895.125296][T25634] task_work_run+0x1ce/0x250 [ 895.130665][T25634] exit_to_user_mode_loop+0xe6/0x110 [ 895.136661][T25634] exit_to_user_mode_prepare+0xb1/0x140 [ 895.142927][T25634] syscall_exit_to_user_mode+0x1a/0x50 [ 895.148975][T25634] do_syscall_64+0x61/0xb0 [ 895.154022][T25634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.160475][T25634] [ 895.160475][T25634] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 895.167996][T25634] ocfs2_start_trans+0x26b/0x6c0 [ 895.173632][T25634] ocfs2_acquire_dquot+0x67b/0xaf0 [ 895.180063][T25634] dqget+0x77c/0xeb0 [ 895.184663][T25634] dquot_set_dqblk+0x2b/0xf90 [ 895.189851][T25634] quota_setquota+0x4b0/0x530 [ 895.195236][T25634] __se_sys_quotactl+0x27b/0x950 [ 895.200976][T25634] do_syscall_64+0x55/0xb0 [ 895.206357][T25634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.213168][T25634] [ 895.213168][T25634] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 895.222312][T25634] down_write+0x97/0x1f0 [ 895.227087][T25634] ocfs2_create_local_dquot+0x1a4/0x1790 [ 895.233336][T25634] ocfs2_acquire_dquot+0x7cf/0xaf0 [ 895.239490][T25634] dqget+0x77c/0xeb0 [ 895.243970][T25634] dquot_set_dqblk+0x2b/0xf90 [ 895.249188][T25634] quota_setquota+0x4b0/0x530 [ 895.254485][T25634] __se_sys_quotactl+0x27b/0x950 [ 895.260068][T25634] do_syscall_64+0x55/0xb0 [ 895.265775][T25634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.273500][T25634] [ 895.273500][T25634] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 895.281164][T25634] __lock_acquire+0x2ddb/0x7c80 [ 895.286730][T25634] lock_acquire+0x197/0x410 [ 895.291965][T25634] __mutex_lock+0x129/0xcc0 [ 895.297042][T25634] dqget+0x6fc/0xeb0 [ 895.301498][T25634] dquot_transfer+0x4b9/0x6d0 [ 895.307052][T25634] ext4_setattr+0x87d/0x1c90 [ 895.312316][T25634] notify_change+0xb0d/0xe10 [ 895.317657][T25634] chown_common+0x3f9/0x5a0 [ 895.322776][T25634] do_fchownat+0x168/0x270 [ 895.328176][T25634] __x64_sys_lchown+0x85/0x90 [ 895.335500][T25634] do_syscall_64+0x55/0xb0 [ 895.340659][T25634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.350323][T25634] [ 895.350323][T25634] other info that might help us debug this: [ 895.350323][T25634] [ 895.362022][T25634] Chain exists of: [ 895.362022][T25634] &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem [ 895.362022][T25634] [ 895.375340][T25634] Possible unsafe locking scenario: [ 895.375340][T25634] [ 895.382800][T25634] CPU0 CPU1 [ 895.388179][T25634] ---- ---- [ 895.393545][T25634] rlock(&ei->xattr_sem); [ 895.398169][T25634] lock(jbd2_handle); [ 895.405056][T25634] lock(&ei->xattr_sem); [ 895.414012][T25634] lock(&dquot->dq_lock); [ 895.419063][T25634] [ 895.419063][T25634] *** DEADLOCK *** [ 895.419063][T25634] [ 895.428181][T25634] 3 locks held by syz.2.8688/25634: [ 895.433753][T25634] #0: ffff8880313c0418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 895.443100][T25634] #1: ffff888073881810 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: chown_common+0x313/0x5a0 [ 895.453934][T25634] #2: ffff8880738814c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 895.463774][T25634] [ 895.463774][T25634] stack backtrace: [ 895.470110][T25634] CPU: 1 PID: 25634 Comm: syz.2.8688 Not tainted 6.6.94-syzkaller #0 [ 895.478665][T25634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 895.489711][T25634] Call Trace: [ 895.493170][T25634] [ 895.496278][T25634] dump_stack_lvl+0x16c/0x230 [ 895.501338][T25634] ? load_image+0x3b0/0x3b0 [ 895.506288][T25634] ? show_regs_print_info+0x20/0x20 [ 895.511966][T25634] ? print_circular_bug+0x12b/0x1a0 [ 895.517897][T25634] check_noncircular+0x2bd/0x3c0 [ 895.523492][T25634] ? look_up_lock_class+0x75/0x140 [ 895.528626][T25634] ? print_deadlock_bug+0x5d0/0x5d0 [ 895.534155][T25634] ? lockdep_lock+0xe0/0x220 [ 895.538956][T25634] ? _find_first_zero_bit+0xd3/0x100 [ 895.544335][T25634] __lock_acquire+0x2ddb/0x7c80 [ 895.549265][T25634] ? mark_lock+0x94/0x320 [ 895.553959][T25634] ? verify_lock_unused+0x140/0x140 [ 895.559618][T25634] ? __lock_acquire+0x1334/0x7c80 [ 895.564848][T25634] lock_acquire+0x197/0x410 [ 895.569893][T25634] ? dqget+0x6fc/0xeb0 [ 895.574497][T25634] ? __might_sleep+0xe0/0xe0 [ 895.579553][T25634] ? read_lock_is_recursive+0x20/0x20 [ 895.585377][T25634] ? mark_lock+0x94/0x320 [ 895.589919][T25634] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 895.597056][T25634] __mutex_lock+0x129/0xcc0 [ 895.601935][T25634] ? dqget+0x6fc/0xeb0 [ 895.606699][T25634] ? percpu_counter_add_batch+0x1d9/0x280 [ 895.613160][T25634] ? lockdep_hardirqs_on+0x98/0x150 [ 895.618476][T25634] ? percpu_counter_add_batch+0x22b/0x280 [ 895.624247][T25634] ? dqget+0x6fc/0xeb0 [ 895.628803][T25634] ? mutex_lock_nested+0x20/0x20 [ 895.634133][T25634] ? percpu_counter_set+0x1a0/0x1a0 [ 895.639358][T25634] ? make_kgid+0x640/0x640 [ 895.644314][T25634] ? do_raw_spin_unlock+0x121/0x230 [ 895.649691][T25634] dqget+0x6fc/0xeb0 [ 895.653993][T25634] dquot_transfer+0x4b9/0x6d0 [ 895.658712][T25634] ? __dquot_transfer+0x22f0/0x22f0 [ 895.663933][T25634] ? down_read+0x1ac/0x2e0 [ 895.668351][T25634] ext4_setattr+0x87d/0x1c90 [ 895.673028][T25634] ? evm_inode_setattr+0x94/0x6a0 [ 895.678150][T25634] ? bpf_lsm_inode_setattr+0x9/0x10 [ 895.683475][T25634] ? try_break_deleg+0x79/0x120 [ 895.688603][T25634] ? ext4_write_inode+0x550/0x550 [ 895.693689][T25634] notify_change+0xb0d/0xe10 [ 895.698572][T25634] chown_common+0x3f9/0x5a0 [ 895.703103][T25634] ? __ia32_sys_chmod+0x70/0x70 [ 895.707964][T25634] ? rcu_read_lock_any_held+0xb4/0x120 [ 895.713510][T25634] ? __mnt_want_write+0x223/0x2a0 [ 895.718649][T25634] do_fchownat+0x168/0x270 [ 895.723206][T25634] ? chown_common+0x5a0/0x5a0 [ 895.728013][T25634] __x64_sys_lchown+0x85/0x90 [ 895.732781][T25634] do_syscall_64+0x55/0xb0 [ 895.737237][T25634] ? clear_bhb_loop+0x40/0x90 [ 895.742294][T25634] ? clear_bhb_loop+0x40/0x90 [ 895.746979][T25634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.752948][T25634] RIP: 0033:0x7fa40078e929 [ 895.757496][T25634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.777203][T25634] RSP: 002b:00007fa4015b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 895.785628][T25634] RAX: ffffffffffffffda RBX: 00007fa4009b5fa0 RCX: 00007fa40078e929 [ 895.793612][T25634] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 00002000000006c0 [ 895.801675][T25634] RBP: 00007fa400810b39 R08: 0000000000000000 R09: 0000000000000000 [ 895.809884][T25634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.818047][T25634] R13: 0000000000000000 R14: 00007fa4009b5fa0 R15: 00007fffee2ba9f8 [ 895.826135][T25634] [ 895.829244][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.844375][T25649] loop3: detected capacity change from 0 to 256 [ 895.854324][T25634] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6 [ 895.862130][T25649] exfat: Deprecated parameter 'namecase' [ 895.870186][T25649] exfat: Deprecated parameter 'utf8' [ 895.882880][T25619] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 895.892262][ T6490] kworker/dying (6490) used greatest stack depth: 15592 bytes left [ 895.915008][T25619] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 895.939999][T25649] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 895.940522][T25619] BTRFS info (device loop0): setting nodatacow, compression disabled [ 895.970435][T25634] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 895.999885][T25619] BTRFS info (device loop0): max_inline at 0 [ 896.011519][T25634] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.8688: Failed to acquire dquot type 1 [ 896.040692][T25619] BTRFS info (device loop0): enabling disk space caching [ 896.062798][T25619] BTRFS info (device loop0): turning off barriers [ 896.074991][ T6421] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.089935][T25619] BTRFS info (device loop0): turning on flush-on-commit [ 896.098095][T25619] BTRFS info (device loop0): doing ref verification [ 896.105246][T25619] BTRFS info (device loop0): force clearing of disk cache [ 896.114114][T25619] BTRFS info (device loop0): enabling ssd optimizations [ 896.137413][T25619] BTRFS info (device loop0): max_inline at 4096 [ 896.144280][T25619] BTRFS info (device loop0): disk space caching is enabled [ 896.168082][T25619] BTRFS info (device loop0): auto enabling async discard [ 896.177691][T25619] BTRFS info (device loop0): rebuilding free space tree [ 896.194193][T25619] BTRFS info (device loop0): disabling free space tree [ 896.202125][T25619] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 896.212842][T25619] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 896.281586][ T6411] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 900.791828][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.798928][ T1280] ieee802154 phy1 wpan1: encryption failed: -22