last executing test programs: 2m36.08996941s ago: executing program 1 (id=249): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe5d, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x40}}, @NFT_MSG_NEWCHAIN={0x138, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xf1, 0xc, "9ffbd82ccb8419b95bf2ac633923770a0cc08c964d8957c6551cc4721d3feba54cc4df6d1074fa9ac1eb66ee6d3f40532aa1a9f8eb202e52bdd84c3d06ba29cd86c8eaf8e4014bf9bc2cf3e5fe0073d84378168fb38ee508080466ab65d0f07a55e0f151cc1c06ebba8c5c8f1da70839c8a268a4f571b2a38e16e5d35648c70b985ee990094bf107f4fe47170421223c2827e2ffe9e199d22e6cac6abe21478a48f394740a862b5aaab8da5b3acaaebf0713f9b58bb50bde721991c1b84fed42c7b2fa3a69ac9c21379d2a415e1af857bee55675c9062fe17a8bc261c5c54b8a8c734e89357ae25e8c3486bba1"}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x8040) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 2m34.814365465s ago: executing program 1 (id=257): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x4, r2, 0x0, 0x0, 0x5}, 0x0) 2m34.525279761s ago: executing program 1 (id=259): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="473a08b0a6e5d41e9c473b71c7b8c52688edc477b61193e169bbc7050478b1541870e4a81ad9ef7deb81f1753629257f278905000000000000f8fe49d73a81000e08000000024bf752e306d096339c5e74000000000000000000", 0x5a}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 2m34.294663735s ago: executing program 1 (id=260): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@nodiscard}, {@disable_ext_identify}, {@noheap}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@background_gc_on}, {@nogc_merge}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@noinline_dentry}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000940), 0x0) 2m32.207760866s ago: executing program 1 (id=272): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2m30.645299016s ago: executing program 1 (id=283): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip6gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) 2m30.180720606s ago: executing program 32 (id=283): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip6gretap0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) 2.803499685s ago: executing program 3 (id=1055): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000240)={0x20, 0x2, &(0x7f00000000c0), 0x8000, 0x10000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1}) 2.596658299s ago: executing program 2 (id=1057): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffe, 0x5b81, 0x0, 0x0, 0x9, 0x400, 0x0, 0x0, 0xde}) 2.470591902s ago: executing program 3 (id=1060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfff7f034}, {0x6, 0x4, 0x5, 0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0) 2.397405583s ago: executing program 2 (id=1062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.385855133s ago: executing program 4 (id=1063): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) listen(r0, 0xfffffbeb) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000001}) 2.352289454s ago: executing program 3 (id=1064): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xfffffffffffffffb) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.232187996s ago: executing program 2 (id=1066): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000b0000000a00000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x4}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) 2.219075987s ago: executing program 4 (id=1067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0xeeee8000, 0x6000, 0x2}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0a3df7d384c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15ee05f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) 2.106331969s ago: executing program 2 (id=1068): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818048, &(0x7f00000003c0)=ANY=[], 0x1, 0x1523, &(0x7f00000029c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x500c0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/191, 0xbf) 2.029889201s ago: executing program 3 (id=1070): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 1.916728492s ago: executing program 4 (id=1072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfff7f034}, {0x6, 0x4, 0x5, 0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0) 1.914334132s ago: executing program 0 (id=1073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.833830984s ago: executing program 2 (id=1074): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0xa00c40, &(0x7f0000000380)={[{@lazytime}, {@nolargeio}, {@quota}, {@filestreams}, {@bsdgroups}, {@nolazytime}, {@dax_never}]}, 0x4, 0x968d, &(0x7f000001c300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x10, 0x3, 0x7c27) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="fd", 0xfff5}], 0x1, 0xe7b, 0x2, 0x0) 1.783590395s ago: executing program 4 (id=1075): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000002c0)={0x17c04, 0xffffffffffffffff, 0x8006, 0x8a, 0x0, 0x8001}) 1.663063297s ago: executing program 4 (id=1076): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000a00)='./bus\x00', 0x10000, &(0x7f00000009c0)=ANY=[], 0x2, 0x62d2, &(0x7f0000006e00)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) 1.604123888s ago: executing program 0 (id=1077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000044d564b"]) 1.255321605s ago: executing program 0 (id=1078): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb7, &(0x7f0000000440)="$eJzs1y9OA0EUBvDHgoCgMIQEgV7DHTgDJwAEAgxBQZr0Cr1Ir9IjrK+oWNs0fc3sbtI/N2j7+4mZfN9k3Ih5s+X0cVJH5Dgi64efeW79/v1/XUVZ376Dk1TFTbdfR8TTXckRi5f+7CL63LSjj6a9PLya+X6bWR4OAABwFKp43s/rHIrVMAV24T5eP8uPf6cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA+bAAAA//8wajXB") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000003040)={0x8, {"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", 0x1000}}, 0xd31) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1) 1.085079779s ago: executing program 0 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.084881269s ago: executing program 3 (id=1080): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073"], 0x138) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000340)}, 0x20) 960.532051ms ago: executing program 3 (id=1081): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 947.582201ms ago: executing program 0 (id=1082): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000640)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeab4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55e269ecf90b1a7511bf746c6bec66ba3001792ce49af14f98134fd305fccb2f8c47c90fc307b978728e76b1ec875166fb008940e3bbb9ae6bc5e95454423a75ac8cebce0a2a8df64e58c4deea409ca7a79d400306d72ecbebcb8a02e7bd727a1937dd8ee481e781c1e61506154c8c1aca4c323951ef2efb50d6222f5ee5e896c1a213bff974c43ee648498f168ace3f792d5239d601978528278b1e9a895ac854f0aa885cb6b00c91c8f606120fde9e79dfa90d6888b0ebdbb6b01a96a0d3e8d168618b", 0xfffffffffffffde9, 0x4c011, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="93e959", 0x3}], 0x1}}], 0x1, 0x4000880) 638.432047ms ago: executing program 2 (id=1083): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfff7f034}, {0x6, 0x4, 0x5, 0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0) 637.649907ms ago: executing program 4 (id=1091): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) recvmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) shutdown(r0, 0x1) 0s ago: executing program 0 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) kernel console output (not intermixed with test programs): c7d4412cf [ 179.493267][ T5121] usb 1-1: USB disconnect, device number 6 [ 179.496510][ T5791] ocfs2: Unmounting device (7,3) on (node local) [ 179.950054][ T7693] loop3: detected capacity change from 0 to 2048 [ 180.021482][ T7693] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 180.026774][ T7691] loop4: detected capacity change from 0 to 4096 [ 180.052716][ T7693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.077012][ T7691] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 180.181178][ T9] cdc_ncm 3-1:1.0: bind() failure [ 180.219313][ T7695] loop0: detected capacity change from 0 to 1024 [ 180.227079][ T9] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 180.244550][ T9] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 180.273669][ T7691] ntfs3: loop4: MFT: r=18, expect seq=1 instead of 0! [ 180.285814][ T9] usbtest: probe of 3-1:1.1 failed with error -71 [ 180.295298][ T7691] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 180.350154][ T7691] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 180.372787][ T9] usb 3-1: USB disconnect, device number 8 [ 180.436936][ T28] audit: type=1800 audit(1758310414.785:135): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.487" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 180.604959][ T7697] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 180.682860][ T7699] loop0: detected capacity change from 0 to 512 [ 180.722491][ T7699] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.488: casefold flag without casefold feature [ 180.746912][ T7699] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.488: couldn't read orphan inode 15 (err -117) [ 180.769099][ T7699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.927974][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.929115][ T7708] loop3: detected capacity change from 0 to 1024 [ 181.015735][ T5121] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 181.062669][ T7710] loop2: detected capacity change from 0 to 1024 [ 181.120470][ T986] hfsplus: b-tree write err: -5, ino 4 [ 181.239376][ T5121] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.268739][ T5121] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.294716][ T3491] hfsplus: b-tree write err: -5, ino 4 [ 181.302239][ T5121] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.331842][ T5121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.357728][ T7701] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 181.398498][ T5121] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 181.821203][ T7712] loop0: detected capacity change from 0 to 32768 [ 181.836294][ T5121] usb 5-1: USB disconnect, device number 2 [ 181.865285][ T7712] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.494 (7712) [ 181.979040][ T7712] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.001862][ T7712] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 182.011365][ T7712] BTRFS info (device loop0): metadata ratio 2 [ 182.017624][ T7712] BTRFS info (device loop0): allowing degraded mounts [ 182.025718][ T7712] BTRFS info (device loop0): force zlib compression, level 3 [ 182.033262][ T7712] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 182.042942][ T7712] BTRFS info (device loop0): use zstd compression, level 3 [ 182.057407][ T7712] BTRFS info (device loop0): force clearing of disk cache [ 182.064866][ T7712] BTRFS info (device loop0): max_inline at 0 [ 182.074277][ T7712] BTRFS info (device loop0): using free space tree [ 182.124847][ T7712] BTRFS info (device loop0): enabling ssd optimizations [ 182.143491][ T7712] BTRFS info (device loop0): rebuilding free space tree [ 182.320123][ T7719] loop3: detected capacity change from 0 to 32768 [ 182.332021][ T7719] XFS: noikeep mount option is deprecated. [ 182.384561][ T7719] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.577290][ T7719] XFS (loop3): Ending clean mount [ 182.588839][ T5785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.607130][ T7719] XFS (loop3): Quotacheck needed: Please wait. [ 182.683515][ T7749] loop4: detected capacity change from 0 to 1024 [ 182.755593][ T7719] XFS (loop3): Quotacheck: Done. [ 182.925335][ T28] audit: type=1800 audit(1758310417.275:136): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.499" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 182.953203][ T7753] syz.2.502[7753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.953352][ T7753] syz.2.502[7753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.068947][ T28] audit: type=1800 audit(1758310417.415:137): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.497" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 183.274582][ T5791] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.334372][ T7758] netlink: 180 bytes leftover after parsing attributes in process `syz.4.503'. [ 183.344262][ T7758] NCSI netlink: No device for ifindex 0 [ 183.583244][ T7765] loop2: detected capacity change from 0 to 1024 [ 183.595633][ T5790] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 183.793995][ T2940] hfsplus: b-tree write err: -5, ino 4 [ 183.933773][ T7768] loop3: detected capacity change from 0 to 8192 [ 183.951960][ T7768] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.989597][ T7768] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 184.001158][ T7768] REISERFS (device loop3): using ordered data mode [ 184.009714][ T7768] reiserfs: using flush barriers [ 184.022803][ T7768] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.041388][ T7768] REISERFS (device loop3): checking transaction log (loop3) [ 184.358754][ T7768] REISERFS (device loop3): Using tea hash to sort names [ 184.370667][ T7768] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 184.457166][ T7768] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 184.506527][ T7768] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 184.546293][ T7768] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 184.575047][ T7768] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 184.616028][ T7768] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 184.645980][ T7768] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 184.685964][ T7768] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 184.725941][ T7768] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 184.755534][ T7768] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 184.790040][ T7768] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 184.840524][ T7768] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 185.070599][ T7781] loop4: detected capacity change from 0 to 32768 [ 185.133204][ T7779] loop2: detected capacity change from 0 to 32768 [ 185.155717][ T7779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.509 (7779) [ 185.175975][ T7781] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.199696][ T7779] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.213880][ T7777] loop0: detected capacity change from 0 to 32768 [ 185.238182][ T7779] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 185.252647][ T7779] BTRFS info (device loop2): metadata ratio 2 [ 185.259828][ T7779] BTRFS info (device loop2): allowing degraded mounts [ 185.267187][ T7779] BTRFS info (device loop2): force zlib compression, level 3 [ 185.274651][ T7779] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 185.284608][ T7779] BTRFS info (device loop2): use zstd compression, level 3 [ 185.295770][ T7779] BTRFS info (device loop2): force clearing of disk cache [ 185.359032][ T7779] BTRFS info (device loop2): max_inline at 0 [ 185.373431][ T7777] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.402587][ T7779] BTRFS info (device loop2): using free space tree [ 185.418208][ T7781] XFS (loop4): Ending clean mount [ 185.504061][ T7781] XFS (loop4): Quotacheck needed: Please wait. [ 185.556231][ T7777] XFS (loop0): Ending clean mount [ 185.591096][ T7777] XFS (loop0): Quotacheck needed: Please wait. [ 185.734640][ T7777] XFS (loop0): Quotacheck: Done. [ 185.745705][ T7779] BTRFS info (device loop2): enabling ssd optimizations [ 185.788738][ T7781] XFS (loop4): Quotacheck: Done. [ 185.826791][ T7779] BTRFS info (device loop2): rebuilding free space tree [ 185.981927][ T6701] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 186.113621][ T5785] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 186.237430][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 186.401887][ T7823] syz.4.514[7823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.402034][ T7823] syz.4.514[7823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.428479][ T5786] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.452099][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 186.488081][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.501535][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 186.539368][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.571055][ T9] usb 4-1: config 0 descriptor?? [ 187.034659][ T9] sunplus 0003:04FC:05D8.0008: unknown main item tag 0xd [ 187.069156][ T9] sunplus 0003:04FC:05D8.0008: unexpected long global item [ 187.089173][ T9] sunplus: probe of 0003:04FC:05D8.0008 failed with error -22 [ 187.285985][ T8] usb 4-1: USB disconnect, device number 7 [ 187.321057][ T7833] loop2: detected capacity change from 0 to 1024 [ 187.402517][ T7833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 187.451212][ T7833] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.533177][ T7833] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.520: lblock 3 mapped to illegal pblock 3 (length 3) [ 187.564618][ T7833] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 187.577168][ T7833] EXT4-fs (loop2): This should not happen!! Data will be lost [ 187.577168][ T7833] [ 187.604699][ T7833] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: comm syz.2.520: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.644163][ T7833] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 187.678947][ T5790] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 187.689420][ T5790] Bluetooth: hci2: Injecting HCI hardware error event [ 187.700400][ T5790] Bluetooth: hci2: hardware error 0x00 [ 187.725642][ T7833] EXT4-fs (loop2): This should not happen!! Data will be lost [ 187.725642][ T7833] [ 187.740143][ T7837] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.520: lblock 3 mapped to illegal pblock 3 (length 1) [ 187.770082][ T7827] loop4: detected capacity change from 0 to 32768 [ 187.780156][ T7827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.516 (7827) [ 187.800883][ T7827] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.811529][ T7827] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 187.820468][ T7827] BTRFS info (device loop4): turning on sync discard [ 187.821798][ T7837] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.520: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 187.827443][ T7827] BTRFS info (device loop4): setting nodatacow, compression disabled [ 187.853707][ T7827] BTRFS info (device loop4): turning off barriers [ 187.865234][ T7829] loop0: detected capacity change from 0 to 32768 [ 187.873635][ T7827] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 187.884919][ T7829] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.519 (7829) [ 187.896943][ T7837] EXT4-fs error (device loop2) in ext4_setattr:5645: Corrupt filesystem [ 187.910044][ T7827] BTRFS info (device loop4): trying to use backup root at mount time [ 187.918671][ T7827] BTRFS info (device loop4): metadata ratio 32769 [ 187.925351][ T7827] BTRFS info (device loop4): max_inline at 0 [ 188.006097][ T7827] BTRFS info (device loop4): using free space tree [ 188.122496][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 188.149041][ T3491] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 188.247588][ T7827] BTRFS error (device loop4): failed to load root extent [ 188.266865][ T7827] BTRFS warning (device loop4): try to load backup roots slot 1 [ 188.301407][ T7128] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 188.366373][ T7827] BTRFS warning (device loop4): couldn't read tree root [ 188.406942][ T7827] BTRFS warning (device loop4): try to load backup roots slot 2 [ 188.449064][ T7128] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 188.497044][ T7827] BTRFS warning (device loop4): couldn't read tree root [ 188.514393][ T7827] BTRFS warning (device loop4): try to load backup roots slot 3 [ 188.575672][ T7827] BTRFS info (device loop4): enabling ssd optimizations [ 188.600450][ T7827] BTRFS info (device loop4): rebuilding free space tree [ 188.660046][ T7827] BTRFS info (device loop4): checking UUID tree [ 188.666526][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.845627][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 188.867268][ T27] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 188.877870][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.895588][ T27] usb 1-1: Product: syz [ 188.900092][ T27] usb 1-1: Manufacturer: syz [ 188.910225][ T27] usb 1-1: SerialNumber: syz [ 188.936112][ T27] usb 1-1: config 0 descriptor?? [ 189.055716][ T6701] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.363466][ T7860] loop3: detected capacity change from 0 to 32768 [ 189.395782][ T27] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 189.431668][ T28] audit: type=1800 audit(1758310423.785:138): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.523" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 189.448415][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.494044][ T27] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 189.555874][ T27] usb 1-1: media controller created [ 189.600371][ T7857] dtv5100: wlen = 0, aborting. [ 189.709625][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.748048][ T5790] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 189.797060][ T7864] loop2: detected capacity change from 0 to 32768 [ 189.822255][ T27] zl10353_read_register: readreg error (reg=127, ret==0) [ 189.851413][ T27] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 189.868627][ T7864] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.883339][ T27] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 189.943413][ T27] usb 1-1: USB disconnect, device number 7 [ 190.073452][ T27] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 190.171479][ T7864] XFS (loop2): Ending clean mount [ 190.201783][ T7864] XFS (loop2): Quotacheck needed: Please wait. [ 190.310373][ T7864] XFS (loop2): Quotacheck: Done. [ 190.542538][ T7886] loop3: detected capacity change from 0 to 2048 [ 190.560739][ T7886] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 190.644857][ T7886] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.682885][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 191.167189][ T7897] loop7: detected capacity change from 0 to 7 [ 191.211068][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.220376][ C0] buffer_io_error: 190 callbacks suppressed [ 191.220392][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.242998][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.252299][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.260955][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.270212][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.278565][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.289198][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.298449][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.306626][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.315944][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.324064][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.333353][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.354338][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.363663][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.371730][ T7897] ldm_validate_partition_table(): Disk read failed. [ 191.394845][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.404140][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.413911][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.423200][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.431466][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 191.440474][ T7897] Dev loop7: unable to read RDB block 0 [ 191.447927][ T7897] loop7: unable to read partition table [ 191.453890][ T7897] loop7: partition table beyond EOD, truncated [ 191.479994][ T7897] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 191.799810][ T7895] loop4: detected capacity change from 0 to 32768 [ 191.837780][ T7895] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.536 (7895) [ 191.911914][ T7895] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 191.933591][ T7895] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 191.950318][ T7895] BTRFS info (device loop4): enabling disk space caching [ 191.978872][ T7895] BTRFS info (device loop4): enabling auto defrag [ 191.985392][ T7895] BTRFS info (device loop4): doing ref verification [ 192.015811][ T7895] BTRFS info (device loop4): use zlib compression, level 3 [ 192.023101][ T7895] BTRFS info (device loop4): force clearing of disk cache [ 192.035856][ T786] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.065660][ T7895] BTRFS info (device loop4): disabling disk space caching [ 192.067097][ T7902] loop3: detected capacity change from 0 to 32768 [ 192.094407][ T7902] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.535 (7902) [ 192.125362][ T7902] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.164358][ T7902] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 192.194005][ T7902] BTRFS info (device loop3): metadata ratio 2 [ 192.205700][ T7902] BTRFS info (device loop3): allowing degraded mounts [ 192.212903][ T7902] BTRFS info (device loop3): force zlib compression, level 3 [ 192.223879][ T7902] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 192.233522][ T7902] BTRFS info (device loop3): use zstd compression, level 3 [ 192.241010][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 192.246370][ T7902] BTRFS info (device loop3): force clearing of disk cache [ 192.255346][ T7902] BTRFS info (device loop3): max_inline at 0 [ 192.273539][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.289756][ T7900] loop2: detected capacity change from 0 to 32768 [ 192.296686][ T7895] BTRFS info (device loop4): enabling ssd optimizations [ 192.303730][ T7895] BTRFS info (device loop4): auto enabling async discard [ 192.325530][ T7902] BTRFS info (device loop3): using free space tree [ 192.340225][ T786] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 192.356709][ T7900] XFS: attr2 mount option is deprecated. [ 192.375558][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.397526][ T7895] BTRFS info (device loop4): rebuilding free space tree [ 192.419782][ T786] usb 1-1: config 0 descriptor?? [ 192.442306][ T786] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 192.471511][ T7900] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 192.486058][ T7895] BTRFS info (device loop4): disabling free space tree [ 192.528093][ T7895] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.573378][ T7895] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.671696][ T7902] BTRFS info (device loop3): enabling ssd optimizations [ 192.677352][ T7900] XFS (loop2): Ending clean mount [ 192.709263][ T7902] BTRFS info (device loop3): rebuilding free space tree [ 192.711666][ T7900] XFS (loop2): Quotacheck needed: Please wait. [ 192.823405][ T5145] bcm5974 1-1:0.0: could not read from device [ 192.885856][ T5145] bcm5974 1-1:0.0: could not read from device [ 192.916481][ T5145] bcm5974 1-1:0.0: could not read from device [ 192.934855][ T786] usb 1-1: USB disconnect, device number 8 [ 192.940879][ T7900] XFS (loop2): Quotacheck: Done. [ 193.007637][ T7900] XFS (loop2): User initiated shutdown received. [ 193.014194][ T7900] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 193.030633][ T7900] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 193.217994][ T5786] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 193.299951][ T5791] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.328714][ T6701] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.551579][ T7953] loop2: detected capacity change from 0 to 1024 [ 193.616501][ T7953] EXT4-fs: Ignoring removed nobh option [ 193.622139][ T7953] EXT4-fs: Ignoring removed bh option [ 193.686615][ T7953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.816535][ T7953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.004069][ T7953] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.538: Allocating blocks 385-513 which overlap fs metadata [ 194.112624][ T7952] EXT4-fs (loop2): pa ffff8880793f1e80: logic 16, phys. 129, len 24 [ 194.121728][ T7952] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 194.354888][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.516303][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.522679][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.575061][ T7976] loop2: detected capacity change from 0 to 2048 [ 194.678775][ T7976] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.745245][ T7976] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 194.807471][ T7985] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz.2.547: iget: bad i_size value: 8796093031208 [ 194.816777][ T7976] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 194.880123][ T7976] EXT4-fs (loop2): This should not happen!! Data will be lost [ 194.880123][ T7976] [ 194.894609][ T7978] loop3: detected capacity change from 0 to 8192 [ 194.907460][ T7976] EXT4-fs (loop2): Total free blocks count 0 [ 194.914535][ T7976] EXT4-fs (loop2): Free/Dirty block details [ 194.921062][ T7976] EXT4-fs (loop2): free_blocks=2415919104 [ 194.929012][ T7976] EXT4-fs (loop2): dirty_blocks=32 [ 194.938915][ T7976] EXT4-fs (loop2): Block reservation details [ 194.945043][ T7976] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 194.949823][ T7978] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 195.005641][ T7978] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 195.014953][ T7978] REISERFS (device loop3): using ordered data mode [ 195.021707][ T7978] reiserfs: using flush barriers [ 195.085567][ T7978] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.179507][ T7978] REISERFS (device loop3): checking transaction log (loop3) [ 195.267230][ T5786] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 195.406832][ T7978] REISERFS (device loop3): Using tea hash to sort names [ 195.436321][ T7978] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 195.465225][ T7978] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 195.581458][ T8002] sit0: entered promiscuous mode [ 195.604270][ T8002] netlink: 'syz.4.557': attribute type 1 has an invalid length. [ 195.635891][ T8002] netlink: 1 bytes leftover after parsing attributes in process `syz.4.557'. [ 195.856394][ T8006] netlink: 'syz.2.558': attribute type 12 has an invalid length. [ 195.878486][ T8006] netlink: 'syz.2.558': attribute type 29 has an invalid length. [ 195.919941][ T8006] netlink: 148 bytes leftover after parsing attributes in process `syz.2.558'. [ 195.976290][ T8006] netlink: 'syz.2.558': attribute type 2 has an invalid length. [ 196.013156][ T8006] netlink: 'syz.2.558': attribute type 3 has an invalid length. [ 196.168320][ T8012] input: syz0 as /devices/virtual/input/input13 [ 196.621232][ T8020] loop2: detected capacity change from 0 to 4096 [ 197.068900][ T8025] loop3: detected capacity change from 0 to 2048 [ 197.212905][ T8025] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.374085][ T8025] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 197.507673][ T8025] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 197.548671][ T8020] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 197.597644][ T8025] EXT4-fs (loop3): This should not happen!! Data will be lost [ 197.597644][ T8025] [ 197.672936][ T8029] EXT4-fs error (device loop3): ext4_lookup:1858: inode #16: comm syz.3.565: iget: bad i_size value: 8796093031208 [ 197.743459][ T8025] EXT4-fs (loop3): Total free blocks count 0 [ 197.744712][ T8023] loop0: detected capacity change from 0 to 131072 [ 197.764498][ T8023] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 197.772739][ T8023] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 197.794139][ T8023] F2FS-fs (loop0): invalid crc value [ 197.833709][ T8023] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.853259][ T8025] EXT4-fs (loop3): Free/Dirty block details [ 197.888511][ T8019] loop4: detected capacity change from 0 to 32768 [ 197.896036][ T8025] EXT4-fs (loop3): free_blocks=2415919104 [ 197.901833][ T8023] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 197.909025][ T8023] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 197.926094][ T8025] EXT4-fs (loop3): dirty_blocks=32 [ 197.931456][ T8019] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.562 (8019) [ 197.957820][ T8025] EXT4-fs (loop3): Block reservation details [ 197.963878][ T8025] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 198.025325][ T8019] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 198.048232][ T8019] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 198.093592][ T8019] BTRFS info (device loop4): using free space tree [ 198.136879][ T5791] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 198.344981][ T8019] BTRFS info (device loop4): enabling ssd optimizations [ 198.395823][ T8019] BTRFS info (device loop4): auto enabling async discard [ 198.610300][ T28] audit: type=1800 audit(1758310432.955:139): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.562" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 199.019980][ T6701] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 199.513808][ T8052] loop2: detected capacity change from 0 to 32768 [ 199.576727][ T8052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.568 (8052) [ 199.665823][ T8052] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.708433][ T8052] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 199.745670][ T8052] BTRFS info (device loop2): setting nodatacow, compression disabled [ 199.790378][ T8052] BTRFS info (device loop2): max_inline at 0 [ 199.796598][ T8052] BTRFS info (device loop2): enabling disk space caching [ 199.814013][ T8052] BTRFS info (device loop2): turning off barriers [ 199.830863][ T8052] BTRFS info (device loop2): turning on flush-on-commit [ 199.863017][ T8052] BTRFS info (device loop2): doing ref verification [ 199.895672][ T8052] BTRFS info (device loop2): force clearing of disk cache [ 199.923561][ T8052] BTRFS info (device loop2): enabling ssd optimizations [ 199.965907][ T8052] BTRFS info (device loop2): max_inline at 4096 [ 199.972253][ T8052] BTRFS info (device loop2): disk space caching is enabled [ 200.172094][ T8076] loop4: detected capacity change from 0 to 512 [ 200.221035][ T8064] loop3: detected capacity change from 0 to 32768 [ 200.232116][ T8064] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.574 (8064) [ 200.232470][ T8076] EXT4-fs (loop4): orphan cleanup on readonly fs [ 200.295700][ T8052] BTRFS info (device loop2): auto enabling async discard [ 200.334320][ T8052] BTRFS info (device loop2): rebuilding free space tree [ 200.355641][ T5903] blk_print_req_error: 11 callbacks suppressed [ 200.355660][ T5903] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.415514][ T8076] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.576: bg 0: block 248: padding at end of block bitmap is not set [ 200.446402][ T8052] BTRFS info (device loop2): disabling free space tree [ 200.454019][ T8052] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.470598][ T8076] Quota error (device loop4): write_blk: dquota write failed [ 200.516728][ T8076] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 200.527052][ T8052] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.575720][ T8076] EXT4-fs error (device loop4): ext4_acquire_dquot:6940: comm syz.4.576: Failed to acquire dquot type 1 [ 200.618719][ T8076] EXT4-fs (loop4): 1 truncate cleaned up [ 200.627456][ T8076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.797367][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.989463][ T5786] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.380359][ T8097] loop0: detected capacity change from 0 to 4096 [ 201.435564][ T8097] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 202.113423][ T8105] loop2: detected capacity change from 0 to 1024 [ 202.141461][ T8105] EXT4-fs: Ignoring removed orlov option [ 202.208032][ T8105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.468700][ T8093] loop4: detected capacity change from 0 to 32768 [ 202.485134][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.496362][ T8093] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.579 (8093) [ 202.571089][ T8093] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 202.600275][ T8093] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 202.625932][ T8093] BTRFS info (device loop4): force zlib compression, level 3 [ 202.633508][ T8093] BTRFS info (device loop4): force clearing of disk cache [ 202.660510][ T8093] BTRFS info (device loop4): setting nodatasum [ 202.672634][ T8093] BTRFS info (device loop4): allowing degraded mounts [ 202.685106][ T8093] BTRFS info (device loop4): enabling disk space caching [ 202.706202][ T8093] BTRFS info (device loop4): disk space caching is enabled [ 202.890999][ T8093] BTRFS info (device loop4): auto enabling async discard [ 202.906787][ T8093] BTRFS info (device loop4): rebuilding free space tree [ 202.943662][ T8093] BTRFS info (device loop4): disabling free space tree [ 202.965733][ T8093] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 203.005587][ T8093] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 203.105012][ T7128] Bluetooth: hci4: Frame reassembly failed (-84) [ 203.176057][ T8093] BTRFS info (device loop4): balance: start -susage=0..1048576,devid=0,limit=351830835986432,limit=0..81917,stripes=0..32767 [ 203.227457][ T8093] BTRFS info (device loop4): balance: ended with status: 0 [ 203.337857][ T8111] loop0: detected capacity change from 0 to 32768 [ 203.353331][ T8111] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.582 (8111) [ 203.376763][ T6701] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 203.503698][ T8111] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 203.534560][ T8111] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 203.636691][ T8111] BTRFS info (device loop0): using free space tree [ 204.256218][ T8111] BTRFS info (device loop0): enabling ssd optimizations [ 204.307829][ T8111] BTRFS info (device loop0): auto enabling async discard [ 204.644830][ T28] audit: type=1800 audit(1758310438.995:140): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.582" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 205.188558][ T5802] Bluetooth: hci4: command 0x1003 tx timeout [ 205.191030][ T5790] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 205.404977][ T5785] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 205.429213][ T8173] loop2: detected capacity change from 0 to 1024 [ 205.435950][ T5121] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 205.464972][ T8173] EXT4-fs: Ignoring removed orlov option [ 205.512369][ T8173] EXT4-fs (loop2): Test dummy encryption mode enabled [ 205.532567][ T8173] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 205.588801][ T8173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.635695][ T5121] usb 4-1: Using ep0 maxpacket: 8 [ 205.668300][ T5121] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.722862][ T5121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.771234][ T5121] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.815050][ T5121] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.856167][ T5121] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.869120][ T5121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.961824][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.073221][ T8181] loop4: detected capacity change from 0 to 512 [ 206.088927][ T8181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 206.145190][ T5121] usb 4-1: GET_CAPABILITIES returned 0 [ 206.172105][ T5121] usbtmc 4-1:16.0: can't read capabilities [ 206.172689][ T8181] EXT4-fs (loop4): DAX unsupported by block device. [ 206.418620][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 206.441638][ T8] usb 4-1: USB disconnect, device number 8 [ 206.492229][ T8191] loop4: detected capacity change from 0 to 256 [ 206.951252][ T8187] loop0: detected capacity change from 0 to 32768 [ 207.002891][ T8187] read_mapping_page failed! [ 207.016902][ T8187] ERROR: (device loop0): txCommit: [ 207.016902][ T8187] [ 207.151866][ T8196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.614'. [ 207.172026][ T8193] loop2: detected capacity change from 0 to 32768 [ 207.227604][ T8193] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.605 (8193) [ 207.260352][ T8193] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 207.282354][ T8193] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 207.291863][ T8193] BTRFS info (device loop2): using free space tree [ 207.435638][ T8193] BTRFS info (device loop2): enabling ssd optimizations [ 207.445868][ T8193] BTRFS info (device loop2): auto enabling async discard [ 207.494038][ T5160] udevd[5160]: worker [5793] terminated by signal 33 (Unknown signal 33) [ 207.516691][ T5160] udevd[5160]: worker [5793] failed while handling '/devices/virtual/block/loop2' [ 207.615579][ T28] audit: type=1800 audit(1758310441.965:141): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.605" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 208.026985][ T5786] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.213396][ T8213] loop4: detected capacity change from 0 to 32768 [ 208.238666][ T8213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.608 (8213) [ 208.300141][ T8213] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.385909][ T8213] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 208.405401][ T8213] BTRFS info (device loop4): force clearing of disk cache [ 208.415402][ T8213] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 208.455944][ T8213] BTRFS info (device loop4): turning on sync discard [ 208.485536][ T8213] BTRFS info (device loop4): enabling auto defrag [ 208.495760][ T8213] BTRFS info (device loop4): max_inline at 0 [ 208.515074][ T8213] BTRFS info (device loop4): enabling disk space caching [ 208.525592][ T8213] BTRFS info (device loop4): disk space caching is enabled [ 208.623752][ T8213] BTRFS info (device loop4): enabling ssd optimizations [ 208.637507][ T8213] BTRFS info (device loop4): rebuilding free space tree [ 208.646732][ T786] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 208.707042][ T8213] BTRFS info (device loop4): disabling free space tree [ 208.734497][ T8213] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 208.759616][ T8213] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 208.859469][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 208.886185][ T786] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.905548][ T786] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.944168][ T786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.963228][ T786] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 208.982741][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.997952][ T786] usb 1-1: config 0 descriptor?? [ 209.187468][ T5790] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 209.298845][ T8244] loop2: detected capacity change from 0 to 32768 [ 209.329930][ T986] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 209.334681][ T8244] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.613 (8244) [ 209.452494][ T8244] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 209.453937][ T6701] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.485990][ T8244] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 209.504955][ T786] corsair 0003:1B1C:1B34.0009: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.0-1/input0 [ 209.521024][ T8244] BTRFS info (device loop2): enabling auto defrag [ 209.547407][ T8244] BTRFS info (device loop2): doing ref verification [ 209.554188][ T8244] BTRFS info (device loop2): use no compression [ 209.578097][ T8244] BTRFS info (device loop2): force clearing of disk cache [ 209.595782][ T8244] BTRFS info (device loop2): disabling free space tree [ 209.823143][ T8244] BTRFS info (device loop2): enabling ssd optimizations [ 209.842787][ T8244] BTRFS info (device loop2): auto enabling async discard [ 209.860581][ T8244] BTRFS info (device loop2): rebuilding free space tree [ 209.926713][ T786] usb 1-1: USB disconnect, device number 9 [ 209.950319][ T8244] BTRFS info (device loop2): disabling free space tree [ 210.019540][ T8244] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 210.066714][ T8244] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 210.128992][ T8244] BTRFS info (device loop2): checking UUID tree [ 210.853822][ T5786] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.343481][ T8273] loop3: detected capacity change from 0 to 40427 [ 211.380864][ T8273] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 211.399779][ T8273] F2FS-fs (loop3): Image doesn't support compression [ 211.415552][ T8273] F2FS-fs (loop3): invalid crc value [ 211.452441][ T8273] F2FS-fs (loop3): Found nat_bits in checkpoint [ 211.714628][ T8273] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 211.849686][ T8273] F2FS-fs (loop3): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0 [ 211.879014][ T28] audit: type=1800 audit(1758310446.235:142): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.619" name="file1" dev="loop3" ino=14 res=0 errno=0 [ 211.910733][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 211.916942][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.029752][ T8273] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x1289/0x3d60 [ 212.220482][ T5791] syz-executor: attempt to access beyond end of device [ 212.220482][ T5791] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 212.257406][ T5791] F2FS-fs (loop3): Remounting filesystem read-only [ 212.264214][ T5791] F2FS-fs (loop3): Remounting filesystem read-only [ 212.688673][ T8307] loop4: detected capacity change from 0 to 128 [ 212.726328][ T8307] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.792292][ T8307] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 213.033920][ T8311] loop0: detected capacity change from 0 to 256 [ 213.145348][ T8311] FAT-fs (loop0): Directory bread(block 64) failed [ 213.173133][ T8311] FAT-fs (loop0): Directory bread(block 65) failed [ 213.211896][ T8311] FAT-fs (loop0): Directory bread(block 66) failed [ 213.235578][ T8311] FAT-fs (loop0): Directory bread(block 67) failed [ 213.243888][ T8311] FAT-fs (loop0): Directory bread(block 68) failed [ 213.293642][ T8311] FAT-fs (loop0): Directory bread(block 69) failed [ 213.300723][ T8311] FAT-fs (loop0): Directory bread(block 70) failed [ 213.320310][ T8311] FAT-fs (loop0): Directory bread(block 71) failed [ 213.356040][ T8311] FAT-fs (loop0): Directory bread(block 72) failed [ 213.363000][ T8311] FAT-fs (loop0): Directory bread(block 73) failed [ 213.682216][ T2940] kworker/u4:8: attempt to access beyond end of device [ 213.682216][ T2940] loop0: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 214.083042][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.641'. [ 214.289674][ T8329] loop0: detected capacity change from 0 to 512 [ 215.354878][ T8361] loop3: detected capacity change from 0 to 512 [ 215.365032][ T8361] EXT4-fs: Ignoring removed bh option [ 215.391347][ T8361] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 215.427779][ T8361] EXT4-fs (loop3): 1 truncate cleaned up [ 215.439320][ T8361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.569908][ T5791] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 215.612030][ T5791] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 215.663426][ T5791] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 215.756543][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.460891][ T8367] loop2: detected capacity change from 0 to 32768 [ 216.488057][ T8369] loop4: detected capacity change from 0 to 32768 [ 216.536149][ T8367] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.581050][ T8369] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 216.683097][ T6701] ocfs2: Unmounting device (7,4) on (node local) [ 216.733990][ T8367] XFS (loop2): Ending clean mount [ 216.954850][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.181443][ T8401] loop4: detected capacity change from 0 to 512 [ 217.266781][ T8401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.335039][ T8401] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.531886][ T8401] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #2: comm syz.4.670: corrupted inode contents [ 217.578598][ T8401] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #2: comm syz.4.670: mark_inode_dirty error [ 217.607905][ T8401] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #2: comm syz.4.670: corrupted inode contents [ 217.626056][ T8401] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.670: mark_inode_dirty error [ 217.825936][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.022697][ T8399] loop3: detected capacity change from 0 to 40427 [ 218.040236][ T8399] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 218.052295][ T8399] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 218.080991][ T8399] F2FS-fs (loop3): heap/no_heap options were deprecated [ 218.111836][ T8399] F2FS-fs (loop3): invalid crc value [ 218.153526][ T8399] F2FS-fs (loop3): Found nat_bits in checkpoint [ 218.292901][ T8399] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 218.303723][ T8399] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 218.473905][ T8399] syz.3.669: attempt to access beyond end of device [ 218.473905][ T8399] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 218.511236][ T8434] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 218.519777][ T8399] F2FS-fs (loop3): Remounting filesystem read-only [ 218.563218][ T8432] loop4: detected capacity change from 0 to 4096 [ 218.608516][ T8432] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 218.636337][ T8432] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 218.674295][ T8432] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 218.689544][ T8432] ntfs: volume version 3.1. [ 219.003965][ T6701] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 219.169004][ T8445] loop4: detected capacity change from 0 to 64 [ 219.444863][ T8449] sctp: [Deprecated]: syz.4.685 (pid 8449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.444863][ T8449] Use struct sctp_sack_info instead [ 219.963766][ T8462] binder: 8461:8462 ioctl c018620b 200000000100 returned -14 [ 220.222363][ T8468] loop2: detected capacity change from 0 to 4096 [ 220.288326][ T8471] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.450364][ T8454] loop3: detected capacity change from 0 to 40427 [ 220.509609][ T8454] F2FS-fs (loop3): invalid crc value [ 220.535373][ T8454] F2FS-fs (loop3): Found nat_bits in checkpoint [ 220.715756][ T8454] F2FS-fs (loop3): Start checkpoint disabled! [ 220.737011][ T8454] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 221.011526][ T8466] loop4: detected capacity change from 0 to 40427 [ 221.046991][ T8466] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 221.071538][ T8466] F2FS-fs (loop4): invalid crc value [ 221.098252][ T8466] F2FS-fs (loop4): Found nat_bits in checkpoint [ 221.190142][ T986] kworker/u4:5: attempt to access beyond end of device [ 221.190142][ T986] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 221.245643][ T986] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 221.252894][ T986] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 221.295765][ T8466] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 221.508626][ T6701] syz-executor: attempt to access beyond end of device [ 221.508626][ T6701] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.541950][ T6701] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 221.634014][ T8477] loop0: detected capacity change from 0 to 32768 [ 221.702956][ T8477] syz.0.696: attempt to access beyond end of device [ 221.702956][ T8477] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 221.755959][ T8477] lbmIODone: I/O error in JFS log [ 221.783239][ T8477] *** Log Format Error ! *** [ 221.789744][ T8477] lmLogInit: exit(-22) [ 221.808677][ T8477] lmLogOpen: exit(-22) [ 221.880809][ T8477] jfs_dirty_inode called on read-only volume [ 221.895610][ T8477] Is remount racy? [ 222.145798][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 222.258811][ T8496] syzkaller1: entered promiscuous mode [ 222.272381][ T8496] syzkaller1: entered allmulticast mode [ 222.325535][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 222.335337][ T8] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 222.354706][ T8] usb 3-1: config 0 has no interface number 0 [ 222.369362][ T8] usb 3-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65 [ 222.383238][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.405078][ T8] usb 3-1: Product: syz [ 222.410110][ T8] usb 3-1: Manufacturer: syz [ 222.414756][ T8] usb 3-1: SerialNumber: syz [ 222.427540][ T8] usb 3-1: config 0 descriptor?? [ 222.701848][ T8503] loop3: detected capacity change from 0 to 2048 [ 222.754103][ T8507] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.842728][ T28] audit: type=1800 audit(1758310457.195:143): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.707" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 222.870095][ T8] kaweth 3-1:0.20: Firmware present in device. [ 223.065878][ T8] kaweth 3-1:0.20: Statistics collection: 0 [ 223.075620][ T8] kaweth 3-1:0.20: Multicast filter limit: 0 [ 223.081683][ T8] kaweth 3-1:0.20: MTU: 0 [ 223.121063][ T8] kaweth 3-1:0.20: Read MAC address 00:00:00:00:00:00 [ 223.225698][ T5838] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 223.405665][ T5878] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 223.415628][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 223.427904][ T5838] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 223.437195][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.445266][ T5838] usb 5-1: Product: syz [ 223.449534][ T5838] usb 5-1: Manufacturer: syz [ 223.454164][ T5838] usb 5-1: SerialNumber: syz [ 223.461274][ T5838] usb 5-1: config 0 descriptor?? [ 223.469816][ T8] kaweth 3-1:0.20: Error setting SOFS wait [ 223.483445][ T8] kaweth: probe of 3-1:0.20 failed with error -5 [ 223.496184][ T8] usb 3-1: USB disconnect, device number 9 [ 223.585587][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 223.593842][ T5878] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 223.607447][ T5878] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 223.616621][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.624650][ T5878] usb 4-1: Product: syz [ 223.628919][ T5878] usb 4-1: Manufacturer: syz [ 223.633552][ T5878] usb 4-1: SerialNumber: syz [ 223.642263][ T5878] usb 4-1: config 0 descriptor?? [ 223.648577][ T8515] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 223.660073][ T5878] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 223.685564][ T5838] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 223.905111][ T8] usb 4-1: USB disconnect, device number 9 [ 224.106319][ T8522] loop2: detected capacity change from 0 to 2048 [ 224.145271][ T8523] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.284773][ T8523] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 224.300033][ T5838] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 224.339125][ T8523] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 224.352217][ T5838] usb 5-1: USB disconnect, device number 3 [ 224.394805][ T8523] Remounting filesystem read-only [ 224.446859][ T8522] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 224.456081][ T8522] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 224.468591][ T8522] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 224.485829][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.494768][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.510283][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.522899][ T8522] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 224.537749][ T8522] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 224.547916][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.560444][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.577370][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.598457][ T8522] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 224.615637][ T8522] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 224.639250][ T8522] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 224.652429][ T8530] loop3: detected capacity change from 0 to 4096 [ 224.657775][ T8522] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 224.696063][ T8522] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 224.713868][ T8522] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 224.723682][ T8522] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 224.732404][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.743881][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.756239][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.770602][ T8522] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 224.778643][ T8522] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 224.791586][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.805235][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.861154][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.904593][ T8522] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 224.925567][ T8522] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 224.933711][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.975804][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.984739][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.017985][ T8534] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004 [ 225.025978][ T8522] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 225.051667][ T8522] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 225.061814][ T8522] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 225.078320][ T8522] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 225.095625][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.107226][ T8522] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 225.114331][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.173474][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.208865][ T8522] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 225.256776][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.314891][ T8522] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 225.368436][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.413543][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 225.462059][ T8522] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 225.486363][ T8522] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 226.655862][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 226.875565][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 226.892810][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.952159][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 227.002161][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 227.044739][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 227.075615][ T8] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 227.114574][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.209559][ T8] hub 5-1:1.0: bad descriptor, ignoring hub [ 227.247422][ T8] hub: probe of 5-1:1.0 failed with error -5 [ 227.254316][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 227.290637][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 227.315833][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 227.337818][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 227.440990][ T8536] loop3: detected capacity change from 0 to 262144 [ 227.453560][ T8536] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.718 (8536) [ 227.484121][ T8536] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 227.495016][ T8536] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 227.504315][ T8536] BTRFS info (device loop3): using free space tree [ 227.603937][ T8536] BTRFS info (device loop3): enabling ssd optimizations [ 227.611064][ T8536] BTRFS info (device loop3): auto enabling async discard [ 227.966504][ T5791] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 228.013233][ T8584] loop2: detected capacity change from 0 to 512 [ 228.023049][ T8584] EXT4-fs: Ignoring removed nobh option [ 228.045322][ T5840] usb 5-1: USB disconnect, device number 4 [ 228.116003][ T8584] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.730: iget: bad i_size value: 38620345925642 [ 228.137214][ T8584] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.730: couldn't read orphan inode 15 (err -117) [ 228.183231][ T8584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.404802][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.616057][ T8595] loop4: detected capacity change from 0 to 32768 [ 229.637632][ T8595] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.734 (8595) [ 229.700517][ T8595] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.719582][ T8595] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 229.740468][ T8595] BTRFS info (device loop4): turning on sync discard [ 229.755882][ T8595] BTRFS info (device loop4): setting nodatacow, compression disabled [ 229.771798][ T8595] BTRFS info (device loop4): turning off barriers [ 229.816806][ T8595] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 229.845313][ T8595] BTRFS info (device loop4): trying to use backup root at mount time [ 229.858549][ T8595] BTRFS info (device loop4): metadata ratio 3 [ 229.864714][ T8595] BTRFS info (device loop4): enabling auto defrag [ 229.898700][ T8595] BTRFS info (device loop4): doing ref verification [ 229.921556][ T8595] BTRFS info (device loop4): max_inline at 0 [ 229.944963][ T8595] BTRFS info (device loop4): using free space tree [ 230.104914][ T3491] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 230.158979][ T8595] BTRFS error (device loop4): failed to load root extent [ 230.190918][ T8634] loop0: detected capacity change from 0 to 1024 [ 230.201954][ T8595] BTRFS warning (device loop4): try to load backup roots slot 1 [ 230.272495][ T7128] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 230.318470][ T8634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.341730][ T8595] BTRFS warning (device loop4): couldn't read tree root [ 230.408944][ T8595] BTRFS warning (device loop4): try to load backup roots slot 2 [ 230.429313][ T8634] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.467943][ T986] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 230.499080][ T8595] BTRFS warning (device loop4): couldn't read tree root [ 230.535485][ T8595] BTRFS warning (device loop4): try to load backup roots slot 3 [ 230.553910][ T8634] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 3: comm syz.0.746: lblock 3 mapped to illegal pblock 3 (length 13) [ 230.604993][ T8634] EXT4-fs (loop0): Remounting filesystem read-only [ 230.605137][ T8595] BTRFS info (device loop4): enabling ssd optimizations [ 230.633324][ T8595] BTRFS info (device loop4): rebuilding free space tree [ 230.694271][ T8595] BTRFS info (device loop4): checking UUID tree [ 230.741966][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.068741][ T8650] loop0: detected capacity change from 0 to 8192 [ 231.084561][ T8650] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 231.102024][ T8650] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 231.111691][ T8650] REISERFS (device loop0): using ordered data mode [ 231.118759][ T8650] reiserfs: using flush barriers [ 231.136082][ T8650] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 231.166376][ T8650] REISERFS (device loop0): checking transaction log (loop0) [ 231.323114][ T6701] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.369459][ T8650] REISERFS (device loop0): Using tea hash to sort names [ 231.394730][ T8650] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 231.591471][ T28] audit: type=1800 audit(1758310465.945:144): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.749" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 231.629757][ T8660] loop2: detected capacity change from 0 to 64 [ 232.400550][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 232.485183][ T8681] loop3: detected capacity change from 0 to 2048 [ 232.534516][ T8683] loop2: detected capacity change from 0 to 2048 [ 232.570446][ T8681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.605641][ T8683] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.675030][ T8705] loop3: detected capacity change from 0 to 2048 [ 233.723382][ T8705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.846948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 233.868998][ T28] audit: type=1326 audit(1758310468.225:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8706 comm="syz.4.774" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8f438ec29 code=0x0 [ 233.904976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 234.178354][ T8697] loop2: detected capacity change from 0 to 32768 [ 234.186357][ T8697] XFS: noikeep mount option is deprecated. [ 234.268859][ T8697] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 234.459843][ T8697] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 234.523489][ T8697] XFS (loop2): Starting recovery (logdev: internal) [ 234.627507][ T8697] XFS (loop2): Ending recovery (logdev: internal) [ 234.935156][ T5786] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 235.107802][ T8740] loop4: detected capacity change from 0 to 256 [ 235.163839][ T8740] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 235.518857][ T8736] loop0: detected capacity change from 0 to 32768 [ 235.540241][ T8736] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.782 (8736) [ 235.569047][ T8736] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 235.585262][ T8736] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 235.596989][ T8736] BTRFS info (device loop0): force zlib compression, level 3 [ 235.599474][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 235.605344][ T8736] BTRFS info (device loop0): force clearing of disk cache [ 235.622239][ T8736] BTRFS info (device loop0): turning off barriers [ 235.630759][ T8736] BTRFS info (device loop0): doing ref verification [ 235.638094][ T8736] BTRFS info (device loop0): enabling disk space caching [ 235.645291][ T8736] BTRFS info (device loop0): disk space caching is enabled [ 235.748890][ T8736] BTRFS info (device loop0): enabling ssd optimizations [ 235.759886][ T8736] BTRFS info (device loop0): auto enabling async discard [ 235.770439][ T8736] BTRFS info (device loop0): rebuilding free space tree [ 235.792057][ T8736] BTRFS info (device loop0): disabling free space tree [ 235.806865][ T8736] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 235.816266][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 235.825562][ T8736] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 235.834246][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.865590][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.874715][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.896226][ T9] usb 4-1: config 0 descriptor?? [ 235.975932][ T5838] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 235.980416][ T5785] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 236.180278][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 236.240481][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.262909][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.300201][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.332960][ T5838] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.357441][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.371522][ T5838] usb 5-1: config 0 descriptor?? [ 236.455627][ T5121] kernel write not supported for file /snd/pcmC0D0p (pid: 5121 comm: kworker/0:3) [ 236.694141][ T8] usb 4-1: USB disconnect, device number 10 [ 236.802891][ T5838] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 236.865156][ T5838] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 237.138149][ T5838] usb 5-1: USB disconnect, device number 5 [ 237.391248][ T8775] loop2: detected capacity change from 0 to 32768 [ 237.427586][ T8775] (syz.2.793,8775,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 237.457594][ T8775] (syz.2.793,8775,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 237.522335][ T8775] JBD2: Ignoring recovery information on journal [ 237.674271][ T8775] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 238.048523][ T8779] loop0: detected capacity change from 0 to 40427 [ 238.098001][ T8779] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 238.137597][ T8779] F2FS-fs (loop0): invalid crc value [ 238.141896][ T8781] loop3: detected capacity change from 0 to 40427 [ 238.189751][ T8779] F2FS-fs (loop0): Found nat_bits in checkpoint [ 238.208083][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 238.222730][ T8781] F2FS-fs (loop3): invalid crc value [ 238.302010][ T8781] F2FS-fs (loop3): Found nat_bits in checkpoint [ 238.308931][ T8793] loop4: detected capacity change from 0 to 2048 [ 238.401956][ T8793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.475531][ T8779] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 238.491847][ T8793] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.583663][ T8781] F2FS-fs (loop3): Start checkpoint disabled! [ 238.660165][ T8781] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 238.687728][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.700463][ T8779] syz.0.794: attempt to access beyond end of device [ 238.700463][ T8779] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.827301][ T8801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.798'. [ 238.862323][ T8781] syz.3.795: attempt to access beyond end of device [ 238.862323][ T8781] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 238.909497][ T8781] syz.3.795: attempt to access beyond end of device [ 238.909497][ T8781] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 238.930073][ T8803] syz.3.795: attempt to access beyond end of device [ 238.930073][ T8803] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 239.055712][ T5785] syz-executor: attempt to access beyond end of device [ 239.055712][ T5785] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 239.101913][ T5785] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 239.227437][ T2940] kworker/u4:8: attempt to access beyond end of device [ 239.227437][ T2940] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 239.269344][ T2940] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 239.305996][ T2940] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 240.234431][ T8832] Bluetooth: MGMT ver 1.22 [ 241.225693][ T5878] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 241.429061][ T5878] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 241.447143][ T5878] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.465538][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.482157][ T5878] usb 5-1: Product: syz [ 241.492132][ T5878] usb 5-1: Manufacturer: syz [ 241.501381][ T5878] usb 5-1: SerialNumber: syz [ 242.168326][ T8882] loop2: detected capacity change from 0 to 64 [ 242.552308][ T5878] cdc_ncm 5-1:1.0: bind() failure [ 242.585593][ T5878] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 242.606612][ T5878] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 242.643769][ T5878] usbtest: probe of 5-1:1.1 failed with error -71 [ 242.665922][ T5878] usb 5-1: USB disconnect, device number 6 [ 242.727643][ T8892] loop0: detected capacity change from 0 to 256 [ 242.785288][ T8892] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 243.002414][ T8892] exFAT-fs (loop0): error, invalid size(size(1) > aligned(9223372036854777344) [ 243.002414][ T8892] [ 243.075544][ T8892] exFAT-fs (loop0): Filesystem has been set read-only [ 243.125642][ T8897] exFAT-fs (loop0): error, invalid size(size(1) > aligned(9223372036854777344) [ 243.125642][ T8897] [ 243.185701][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 243.546615][ T8904] loop3: detected capacity change from 0 to 8 [ 243.773699][ T8894] loop2: detected capacity change from 0 to 32768 [ 243.902873][ T8894] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 243.991958][ T8910] loop4: detected capacity change from 0 to 4096 [ 244.026206][ T8910] NILFS (loop4): invalid segment: Checksum error in segment payload [ 244.045645][ T8910] NILFS (loop4): trying rollback from an earlier position [ 244.067468][ T8894] XFS (loop2): Ending clean mount [ 244.111353][ T8910] NILFS (loop4): recovery complete [ 244.127194][ T8894] XFS (loop2): Quotacheck needed: Please wait. [ 244.156026][ T8923] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.310916][ T8894] XFS (loop2): Quotacheck: Done. [ 244.589650][ T5786] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 246.114770][ T8932] loop2: detected capacity change from 0 to 40427 [ 246.138909][ T8932] F2FS-fs (loop2): invalid crc value [ 246.175632][ T8932] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.326231][ T8932] F2FS-fs (loop2): Start checkpoint disabled! [ 246.357874][ T8932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 246.377880][ T8928] loop3: detected capacity change from 0 to 32768 [ 246.476270][ T8928] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 246.496568][ T8932] syz.2.846: attempt to access beyond end of device [ 246.496568][ T8932] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 246.513882][ T8932] syz.2.846: attempt to access beyond end of device [ 246.513882][ T8932] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 246.551733][ T8932] syz.2.846: attempt to access beyond end of device [ 246.551733][ T8932] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 246.592691][ T8928] XFS (loop3): Ending clean mount [ 246.617929][ T8928] XFS (loop3): Quotacheck needed: Please wait. [ 246.762138][ T8928] XFS (loop3): Quotacheck: Done. [ 246.847744][ T1139] kworker/u4:6: attempt to access beyond end of device [ 246.847744][ T1139] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 246.897023][ T1139] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 246.904078][ T1139] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 247.088154][ T5791] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 247.856506][ T8974] loop2: detected capacity change from 0 to 2048 [ 247.885713][ T8974] EXT4-fs: Ignoring removed bh option [ 247.909849][ T8971] loop4: detected capacity change from 0 to 32768 [ 247.969521][ T8974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.069612][ T8974] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 248.098445][ T8974] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 248.145530][ T8974] EXT4-fs (loop2): This should not happen!! Data will be lost [ 248.145530][ T8974] [ 248.175054][ T8974] EXT4-fs (loop2): Total free blocks count 0 [ 248.182594][ T8974] EXT4-fs (loop2): Free/Dirty block details [ 248.196851][ T8974] EXT4-fs (loop2): free_blocks=2415919104 [ 248.202868][ T8974] EXT4-fs (loop2): dirty_blocks=16 [ 248.222549][ T8974] EXT4-fs (loop2): Block reservation details [ 248.245574][ T8974] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 248.335166][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.405497][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 249.020258][ T8983] loop0: detected capacity change from 0 to 32768 [ 249.164237][ T8983] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 249.317513][ T8994] loop2: detected capacity change from 0 to 512 [ 249.404879][ T8994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.466256][ T8994] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.614321][ T5785] (syz-executor,5785,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 249.649723][ T8994] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.866: bg 0: block 96: padding at end of block bitmap is not set [ 249.705775][ T5785] ocfs2: Unmounting device (7,0) on (node local) [ 249.720767][ T8994] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 249.948505][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.694103][ T9003] loop3: detected capacity change from 0 to 40427 [ 250.713974][ T9003] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 250.750370][ T9003] F2FS-fs (loop3): invalid crc value [ 250.768740][ T9018] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 250.772710][ T9003] F2FS-fs (loop3): Found nat_bits in checkpoint [ 250.926807][ T786] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 250.970191][ T9003] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 251.066078][ T9003] syz.3.868: attempt to access beyond end of device [ 251.066078][ T9003] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 251.146884][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 251.160307][ T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.180773][ T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.195604][ T786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 251.221364][ T786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 251.248766][ T786] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 251.259568][ T5791] syz-executor: attempt to access beyond end of device [ 251.259568][ T5791] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 251.284249][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.300672][ T5791] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 251.319872][ T786] hub 3-1:1.0: bad descriptor, ignoring hub [ 251.335917][ T786] hub: probe of 3-1:1.0 failed with error -5 [ 251.351535][ T786] cdc_wdm 3-1:1.0: skipping garbage [ 251.362756][ T9031] loop4: detected capacity change from 0 to 1024 [ 251.365567][ T786] cdc_wdm 3-1:1.0: skipping garbage [ 251.376237][ T786] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 251.384583][ T786] cdc_wdm 3-1:1.0: Unknown control protocol [ 251.391185][ T9031] EXT4-fs: Ignoring removed nobh option [ 251.417857][ T9031] EXT4-fs: Ignoring removed bh option [ 251.465697][ T9031] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.557253][ T9031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.654459][ T9024] loop0: detected capacity change from 0 to 32768 [ 251.671561][ T9024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.877 (9024) [ 251.704057][ T9031] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.880: Allocating blocks 385-513 which overlap fs metadata [ 251.731851][ T9024] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.756436][ T9024] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 251.769527][ T9031] EXT4-fs (loop4): pa ffff8880786da0e8: logic 16, phys. 129, len 24 [ 251.778441][ T9031] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 251.803094][ T9024] BTRFS info (device loop0): using free space tree [ 251.881124][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.927409][ T9024] BTRFS info (device loop0): enabling ssd optimizations [ 251.954937][ T9024] BTRFS info (device loop0): auto enabling async discard [ 252.300422][ T5785] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.549720][ T7565] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (7565) [ 252.823920][ T9053] loop4: detected capacity change from 0 to 32768 [ 252.875051][ T9053] JBD2: Ignoring recovery information on journal [ 253.072869][ T9053] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 253.217013][ T9059] loop0: detected capacity change from 0 to 40427 [ 253.232605][ T9059] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 253.241763][ T9059] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 253.293094][ T9059] F2FS-fs (loop0): invalid crc value [ 253.322296][ T9059] F2FS-fs (loop0): Found nat_bits in checkpoint [ 253.470524][ T9059] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 253.495777][ T9059] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 253.636754][ T6701] ocfs2: Unmounting device (7,4) on (node local) [ 253.656038][ T786] usb 3-1: USB disconnect, device number 10 [ 254.342608][ T9077] loop4: detected capacity change from 0 to 2048 [ 254.445799][ T9080] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.563599][ T9080] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 254.590866][ T9080] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 254.629008][ T9080] Remounting filesystem read-only [ 254.632844][ T9083] loop3: detected capacity change from 0 to 512 [ 254.701836][ T9083] EXT4-fs (loop3): orphan cleanup on readonly fs [ 254.715665][ T9077] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 254.726327][ T9077] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 254.740894][ T9077] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 254.744693][ T9083] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.886: bg 0: block 248: padding at end of block bitmap is not set [ 254.765804][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.774708][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.815531][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.824824][ T9077] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 254.885059][ T9083] Quota error (device loop3): write_blk: dquota write failed [ 254.885583][ T9077] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 254.904887][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.916755][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.931624][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 254.935692][ T9083] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 254.945998][ T9077] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 254.965366][ T9077] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 254.972891][ T9077] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 254.982402][ T9083] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.886: Failed to acquire dquot type 1 [ 255.009446][ T9077] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 255.026293][ T9077] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 255.034631][ T9077] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 255.051723][ T9083] EXT4-fs (loop3): 1 truncate cleaned up [ 255.059645][ T9077] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 255.071021][ T9083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.108140][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.131254][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.156259][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.168012][ T9077] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 255.174757][ T9077] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 255.222671][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.257158][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.277802][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.287219][ T9077] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 255.303269][ T9077] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 255.310805][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.310826][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.355566][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.374156][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.397716][ T9077] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 255.414586][ T9077] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 255.424722][ T9077] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 255.444691][ T9077] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 255.462863][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.482168][ T9077] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 255.495563][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.514769][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.534581][ T9077] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 255.547469][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.566563][ T9077] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 255.584038][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.603759][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.622998][ T9077] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 255.630480][ T9077] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 255.898207][ T9091] loop4: detected capacity change from 0 to 8192 [ 255.910247][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.916839][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.961657][ T9091] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 255.989783][ T9091] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 256.003935][ T9091] REISERFS (device loop4): using ordered data mode [ 256.045104][ T9091] reiserfs: using flush barriers [ 256.063112][ T9091] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 256.087858][ T9091] REISERFS (device loop4): checking transaction log (loop4) [ 256.317354][ T9091] REISERFS (device loop4): Using tea hash to sort names [ 256.338404][ T9091] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 256.495257][ T9091] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 256.532278][ T9091] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 256.548600][ T9091] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 256.565036][ T9091] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 256.580046][ T9091] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 256.604336][ T9091] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 256.624027][ T9091] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 256.658699][ T9091] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 256.677728][ T9091] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 256.735800][ T9091] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 256.768280][ T9091] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 257.053317][ T9113] loop3: detected capacity change from 0 to 512 [ 257.108874][ T9113] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 257.162412][ T9113] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #17: comm syz.3.900: iget: bad i_size value: -6917529027641081756 [ 257.184863][ T9113] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.900: couldn't read orphan inode 17 (err -117) [ 257.201957][ T9113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.364821][ T9113] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.900: bg 0: block 65: padding at end of block bitmap is not set [ 257.422206][ T9113] Quota error (device loop3): write_blk: dquota write failed [ 257.452003][ T9113] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 257.486603][ T9121] Quota error (device loop3): do_check_range: Getting block 144 out of range 0-5 [ 257.522400][ T9113] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.900: Failed to acquire dquot type 0 [ 257.647013][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.798620][ T9133] netlink: 428 bytes leftover after parsing attributes in process `syz.4.907'. [ 257.798658][ T9133] netlink: 32 bytes leftover after parsing attributes in process `syz.4.907'. [ 258.185523][ T5838] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 258.344538][ T9149] loop3: detected capacity change from 0 to 2048 [ 258.354482][ T9149] EXT4-fs: Ignoring removed bh option [ 258.384320][ T5838] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.410223][ T9149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.434817][ T5838] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 258.461809][ T5838] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.467253][ T9149] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 258.487008][ T9149] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 258.492313][ T5838] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 258.519971][ T9149] EXT4-fs (loop3): This should not happen!! Data will be lost [ 258.519971][ T9149] [ 258.532660][ T9149] EXT4-fs (loop3): Total free blocks count 0 [ 258.543245][ T9149] EXT4-fs (loop3): Free/Dirty block details [ 258.554167][ T9149] EXT4-fs (loop3): free_blocks=2415919104 [ 258.562110][ T5838] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.576843][ T9149] EXT4-fs (loop3): dirty_blocks=16 [ 258.582112][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.590355][ T9149] EXT4-fs (loop3): Block reservation details [ 258.600935][ T5838] usb 5-1: Product: syz [ 258.605276][ T5838] usb 5-1: Manufacturer: syz [ 258.610034][ T9149] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 258.616470][ T5838] usb 5-1: SerialNumber: syz [ 258.643126][ T9135] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 258.686551][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.878904][ T9135] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 259.212444][ T9164] loop2: detected capacity change from 0 to 128 [ 259.234914][ T9164] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.278200][ T9164] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 259.506345][ T9135] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 259.579671][ T9162] loop3: detected capacity change from 0 to 32768 [ 259.589650][ T9162] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 259.744535][ T5838] cdc_ncm 5-1:1.0: bind() failure [ 259.772291][ T5838] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 259.788068][ T5838] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 259.798381][ T5903] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 259.811585][ T5838] usbtest: probe of 5-1:1.1 failed with error -71 [ 259.840550][ T5838] usb 5-1: USB disconnect, device number 7 [ 260.061452][ T9174] loop3: detected capacity change from 0 to 512 [ 260.122489][ T9174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.136627][ T9174] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.306732][ T9170] loop2: detected capacity change from 0 to 32768 [ 260.338938][ T9170] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 260.374127][ T9174] fscrypt (loop3, inode 15): Error -61 getting encryption context [ 260.570412][ T5903] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 260.737270][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.825155][ T9215] loop2: detected capacity change from 0 to 2048 [ 261.849654][ T9215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.852850][ T9221] loop0: detected capacity change from 0 to 512 [ 261.989593][ T9221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.031273][ T9221] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.110426][ T9221] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.944: bg 0: block 96: padding at end of block bitmap is not set [ 262.171333][ T9221] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 262.288923][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.501203][ T9212] loop3: detected capacity change from 0 to 32768 [ 262.522840][ T9212] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.938 (9212) [ 262.614954][ T9212] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 262.656103][ T9212] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 262.693562][ T9212] BTRFS info (device loop3): using free space tree [ 262.891589][ T9212] BTRFS info (device loop3): enabling ssd optimizations [ 262.920568][ T9212] BTRFS info (device loop3): auto enabling async discard [ 263.134921][ T5791] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 263.395690][ T9263] loop0: detected capacity change from 0 to 64 [ 264.134007][ T9261] loop4: detected capacity change from 0 to 32768 [ 264.152017][ T9261] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.953 (9261) [ 264.237784][ T9261] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 264.265810][ T9261] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 264.286205][ T9261] BTRFS info (device loop4): enabling auto defrag [ 264.306203][ T9261] BTRFS info (device loop4): doing ref verification [ 264.312889][ T9261] BTRFS info (device loop4): use no compression [ 264.341207][ T9261] BTRFS info (device loop4): force clearing of disk cache [ 264.353070][ T9261] BTRFS info (device loop4): disabling free space tree [ 264.385646][ T5121] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 264.449875][ T9261] BTRFS info (device loop4): enabling ssd optimizations [ 264.466045][ T9261] BTRFS info (device loop4): auto enabling async discard [ 264.492367][ T9261] BTRFS info (device loop4): rebuilding free space tree [ 264.526282][ T9261] BTRFS info (device loop4): disabling free space tree [ 264.533268][ T9261] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 264.565710][ T9261] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 264.575949][ T5121] usb 4-1: Using ep0 maxpacket: 8 [ 264.595957][ T5121] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.611727][ T5121] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 264.623181][ T5121] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 264.623691][ T9261] BTRFS info (device loop4): checking UUID tree [ 264.648683][ T5121] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 264.661123][ T5121] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 264.670362][ T5121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.684857][ T5121] hub 4-1:1.0: bad descriptor, ignoring hub [ 264.693654][ T5121] hub: probe of 4-1:1.0 failed with error -5 [ 264.713348][ T5121] cdc_wdm 4-1:1.0: skipping garbage [ 264.731586][ T5121] cdc_wdm 4-1:1.0: skipping garbage [ 264.757152][ T5121] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 264.774247][ T5121] cdc_wdm 4-1:1.0: Unknown control protocol [ 264.871728][ T9269] loop0: detected capacity change from 0 to 32768 [ 265.013662][ T9269] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 265.131960][ T6701] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 265.143726][ T9269] XFS (loop0): Ending clean mount [ 265.317417][ T5785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 265.952521][ T9311] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.963'. [ 265.962473][ T9310] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.963'. [ 266.082264][ T9315] loop2: detected capacity change from 0 to 512 [ 266.098444][ T9315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 266.127295][ T9315] EXT4-fs (loop2): 1 truncate cleaned up [ 266.154888][ T9315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.297907][ T5121] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 266.489108][ T5121] usb 5-1: Using ep0 maxpacket: 8 [ 266.510860][ T5121] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 266.546956][ T5121] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.566233][ T5121] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.584729][ T5121] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.602854][ T5121] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.620100][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.621830][ T5121] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 266.646838][ T5121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.895602][ T5121] usb 5-1: usb_control_msg returned -32 [ 266.901378][ T5121] usbtmc 5-1:16.0: can't read capabilities [ 267.037831][ T9325] loop2: detected capacity change from 0 to 4096 [ 267.059066][ T9325] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 267.126066][ T5121] usb 4-1: USB disconnect, device number 11 [ 267.215175][ T9325] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 267.890404][ T9345] loop3: detected capacity change from 0 to 512 [ 267.934230][ T9345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.954374][ T9345] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.035247][ T9345] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.978: bg 0: block 96: padding at end of block bitmap is not set [ 268.071280][ T9345] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 268.158851][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.545516][ T5840] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 268.726374][ T5840] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 268.737120][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.750843][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.763374][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.772860][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.782041][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.793963][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.802327][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.825533][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.836568][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.844313][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.853566][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.865194][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.881192][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.890166][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.901097][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.909072][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.918195][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.929344][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.938458][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.947715][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.958959][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.967093][ T5840] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.976047][ T5840] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.987057][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.995820][ T5840] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 269.004963][ T5840] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 269.013390][ T5840] usb 4-1: Product: syz [ 269.017597][ T5840] usb 4-1: Manufacturer: syz [ 269.022214][ T5840] usb 4-1: SerialNumber: syz [ 269.030054][ T5840] usb 4-1: config 0 descriptor?? [ 269.042535][ T5840] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 269.079102][ T5840] usb 5-1: USB disconnect, device number 8 [ 269.448883][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 269.458857][ T5840] usb 4-1: USB disconnect, device number 12 [ 269.467354][ T5840] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 269.479808][ T9367] loop4: detected capacity change from 0 to 256 [ 269.514837][ T9367] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.564494][ T9367] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 269.629620][ T9367] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 269.906099][ T9373] loop2: detected capacity change from 0 to 512 [ 269.931489][ T9373] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.988109][ T9373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.014391][ T9373] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.109893][ T9380] loop4: detected capacity change from 0 to 2048 [ 270.150481][ T9380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.268766][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.504337][ T9384] loop4: detected capacity change from 0 to 4096 [ 270.532086][ T9384] EXT4-fs (loop4): Test dummy encryption mode enabled [ 270.551870][ T9384] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 270.566336][ T9384] System zones: 0-5 [ 270.579755][ T9384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.680015][ T6701] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.149664][ T9389] loop2: detected capacity change from 0 to 32768 [ 271.167603][ T9389] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.991 (9389) [ 271.206178][ T9389] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 271.273527][ T9389] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 271.315763][ T9389] BTRFS info (device loop2): force zlib compression, level 3 [ 271.333474][ T9389] BTRFS info (device loop2): force clearing of disk cache [ 271.353725][ T9389] BTRFS info (device loop2): setting nodatasum [ 271.375909][ T9389] BTRFS info (device loop2): allowing degraded mounts [ 271.382745][ T9389] BTRFS info (device loop2): enabling disk space caching [ 271.427685][ T9389] BTRFS info (device loop2): disk space caching is enabled [ 271.520022][ T9389] BTRFS info (device loop2): auto enabling async discard [ 271.534065][ T9389] BTRFS info (device loop2): rebuilding free space tree [ 271.534653][ T9411] loop3: detected capacity change from 0 to 4096 [ 271.554680][ T9411] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 271.556219][ T9389] BTRFS info (device loop2): disabling free space tree [ 271.570847][ T9411] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 271.571731][ T9389] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 271.585291][ T9411] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 271.594117][ T9389] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 271.618485][ T9411] ntfs: volume version 3.1. [ 271.670023][ T9389] BTRFS info (device loop2): balance: start -susage=0..1048576,devid=0,limit=351830835986432,limit=0..81917,stripes=0..32767 [ 271.683498][ T9389] BTRFS info (device loop2): balance: ended with status: 0 [ 271.731498][ T5791] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 271.747541][ T5786] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 272.237413][ T9433] loop3: detected capacity change from 0 to 2048 [ 272.250673][ T9433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.547340][ T9441] loop2: detected capacity change from 0 to 8192 [ 272.560596][ T9441] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 272.574795][ T9441] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 272.584682][ T9441] REISERFS (device loop2): using ordered data mode [ 272.591516][ T9441] reiserfs: using flush barriers [ 272.600155][ T9441] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 272.623369][ T9441] REISERFS (device loop2): checking transaction log (loop2) [ 272.752480][ T9441] REISERFS (device loop2): Using tea hash to sort names [ 272.761953][ T9441] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 272.780749][ T9441] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 272.992149][ T9443] loop3: detected capacity change from 0 to 40427 [ 273.017160][ T9443] F2FS-fs (loop3): invalid crc value [ 273.060030][ T9443] F2FS-fs (loop3): Found nat_bits in checkpoint [ 273.131977][ T9443] F2FS-fs (loop3): Start checkpoint disabled! [ 273.155720][ T9443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 273.322833][ T34] kworker/u4:2: attempt to access beyond end of device [ 273.322833][ T34] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 273.347616][ T34] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 273.358842][ T34] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 274.840577][ T9459] loop4: detected capacity change from 0 to 40427 [ 274.869179][ T9459] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 274.886911][ T9459] F2FS-fs (loop4): Image doesn't support compression [ 274.908880][ T9459] F2FS-fs (loop4): invalid crc value [ 274.942032][ T9459] F2FS-fs (loop4): Found nat_bits in checkpoint [ 275.122738][ T9459] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 275.181388][ T9471] loop3: detected capacity change from 0 to 32768 [ 275.230053][ T9459] F2FS-fs (loop4): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0 [ 275.249190][ T9471] syz.3.1017: attempt to access beyond end of device [ 275.249190][ T9471] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 275.259576][ T9473] loop0: detected capacity change from 0 to 32768 [ 275.263954][ T28] audit: type=1800 audit(1758310509.625:146): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1022" name="file1" dev="loop4" ino=14 res=0 errno=0 [ 275.277308][ T9473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1018 (9473) [ 275.289580][ T9471] lbmIODone: I/O error in JFS log [ 275.307869][ T9471] *** Log Format Error ! *** [ 275.313093][ T9471] lmLogInit: exit(-22) [ 275.321263][ T9473] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.335532][ T9471] lmLogOpen: exit(-22) [ 275.337504][ T9473] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 275.350961][ T9473] BTRFS info (device loop0): turning on sync discard [ 275.358451][ T6701] syz-executor: attempt to access beyond end of device [ 275.358451][ T6701] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 275.364474][ T9473] BTRFS info (device loop0): setting nodatacow, compression disabled [ 275.374444][ T6701] F2FS-fs (loop4): Remounting filesystem read-only [ 275.387173][ T9473] BTRFS info (device loop0): turning off barriers [ 275.388976][ T6701] F2FS-fs (loop4): Remounting filesystem read-only [ 275.394940][ T9473] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 275.401247][ T9471] jfs_dirty_inode called on read-only volume [ 275.418419][ T9473] BTRFS info (device loop0): trying to use backup root at mount time [ 275.429216][ T9473] BTRFS info (device loop0): metadata ratio 3 [ 275.435373][ T9473] BTRFS info (device loop0): enabling auto defrag [ 275.448850][ T9471] Is remount racy? [ 275.456708][ T9473] BTRFS info (device loop0): doing ref verification [ 275.463414][ T9473] BTRFS info (device loop0): max_inline at 0 [ 275.489108][ T9473] BTRFS info (device loop0): using free space tree [ 275.588185][ T34] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 275.614902][ T9473] BTRFS error (device loop0): failed to load root extent [ 275.632635][ T9473] BTRFS warning (device loop0): try to load backup roots slot 1 [ 275.653268][ T7128] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 275.689399][ T9473] BTRFS warning (device loop0): couldn't read tree root [ 275.706591][ T9473] BTRFS warning (device loop0): try to load backup roots slot 2 [ 275.724920][ T34] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 275.760219][ T9473] BTRFS warning (device loop0): couldn't read tree root [ 275.775514][ T9473] BTRFS warning (device loop0): try to load backup roots slot 3 [ 275.805532][ T9473] BTRFS info (device loop0): enabling ssd optimizations [ 275.825851][ T9473] BTRFS info (device loop0): rebuilding free space tree [ 275.855780][ T5838] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 275.867700][ T9473] BTRFS info (device loop0): checking UUID tree [ 275.883359][ T9500] loop4: detected capacity change from 0 to 128 [ 275.902955][ T9500] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 275.920847][ T9500] hpfs: filesystem error: improperly stopped [ 275.928037][ T9500] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 275.936389][ T9500] hpfs: You really don't want any checks? You are crazy... [ 275.944842][ T9500] hpfs: hpfs_map_sector(): read error [ 275.950617][ T9500] hpfs: code page support is disabled [ 275.958324][ T9500] hpfs: hpfs_map_4sectors(): unaligned read [ 275.964695][ T9500] hpfs: hpfs_map_4sectors(): unaligned read [ 275.978241][ T9500] hpfs: filesystem error: unable to find root dir [ 276.017865][ T9500] hpfs: hpfs_map_4sectors(): unaligned read [ 276.031794][ T9500] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 276.041545][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 276.056309][ T5838] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 276.067371][ T5838] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.080149][ T5838] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.108774][ T5838] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.143856][ T5838] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.176507][ T5838] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.195512][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.313684][ T5785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 276.427582][ T5838] usb 3-1: usb_control_msg returned -32 [ 276.444274][ T5838] usbtmc 3-1:16.0: can't read capabilities [ 276.626921][ T9497] loop3: detected capacity change from 0 to 32768 [ 276.651441][ T9497] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1020 (9497) [ 276.735092][ T9497] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 276.757605][ T9497] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 276.774535][ T9497] BTRFS info (device loop3): force zlib compression, level 3 [ 276.783371][ T9497] BTRFS info (device loop3): force clearing of disk cache [ 276.815543][ T9497] BTRFS info (device loop3): setting nodatasum [ 276.825636][ T9497] BTRFS info (device loop3): allowing degraded mounts [ 276.832483][ T9497] BTRFS info (device loop3): enabling disk space caching [ 276.867386][ T9497] BTRFS info (device loop3): disk space caching is enabled [ 276.933031][ T9497] BTRFS info (device loop3): auto enabling async discard [ 276.949156][ T9497] BTRFS info (device loop3): rebuilding free space tree [ 276.983906][ T9497] BTRFS info (device loop3): disabling free space tree [ 277.001313][ T9497] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 277.015585][ T9497] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 277.073163][ T9526] lo: entered allmulticast mode [ 277.081344][ T9497] BTRFS info (device loop3): balance: start -susage=0..1048576,devid=0,limit=351830835986432,limit=0..81917,stripes=0..32767 [ 277.085327][ T9526] lo: left allmulticast mode [ 277.107472][ T9497] BTRFS info (device loop3): balance: ended with status: 0 [ 277.169343][ T5791] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 277.862368][ T9544] syzkaller1: entered promiscuous mode [ 277.874714][ T9544] syzkaller1: entered allmulticast mode [ 278.639435][ T5840] usb 3-1: USB disconnect, device number 11 [ 278.695294][ T9568] loop4: detected capacity change from 0 to 1024 [ 278.808930][ T9568] hfsplus: b-tree write err: -5, ino 3 [ 278.817593][ T9572] loop0: detected capacity change from 0 to 1024 [ 278.874110][ T9574] loop3: detected capacity change from 0 to 4096 [ 278.897843][ T9574] EXT4-fs (loop3): Test dummy encryption mode enabled [ 278.956578][ T9574] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 278.980024][ T9574] System zones: 0-5 [ 279.005798][ T9574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.243988][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.468217][ T9588] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 280.028751][ T9616] loop2: detected capacity change from 0 to 256 [ 280.730108][ T9628] loop2: detected capacity change from 0 to 32768 [ 280.755491][ T9628] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.785253][ T9645] loop0: detected capacity change from 0 to 64 [ 280.881127][ T9632] loop4: detected capacity change from 0 to 32768 [ 280.946240][ T9632] [ 280.946240][ T9632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 280.946240][ T9632] [ 281.000104][ T28] audit: type=1800 audit(1758310515.355:147): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1076" name="file1" dev="loop4" ino=0 res=0 errno=0 [ 281.036327][ T9632] [ 281.036327][ T9632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.036327][ T9632] [ 281.060956][ T9628] XFS (loop2): Ending clean mount [ 281.075751][ T9628] XFS (loop2): Quotacheck needed: Please wait. [ 281.089058][ T9632] [ 281.089058][ T9632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.089058][ T9632] [ 281.140753][ T9632] [ 281.140753][ T9632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.140753][ T9632] [ 281.163019][ T9628] XFS (loop2): Quotacheck: Done. [ 281.166817][ T9632] [ 281.166817][ T9632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.166817][ T9632] [ 281.182275][ T9632] [ 281.182275][ T9632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.182275][ T9632] [ 281.248175][ T111] [ 281.248175][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.248175][ T111] [ 282.019253][ T7128] [ 282.019253][ T7128] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.019253][ T7128] [ 282.041429][ T7128] [ 282.041429][ T7128] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.041429][ T7128] [ 282.052339][ T6701] [ 282.052339][ T6701] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.052339][ T6701] [ 282.052372][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.068622][ T6701] [ 282.068622][ T6701] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.068622][ T6701] [ 282.090961][ T112] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 282.102826][ T112] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 282.111280][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 282.118533][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.128631][ T112] RIP: 0010:lmLogSync+0x139/0x9c0 [ 282.129415][ T9658] loop3: detected capacity change from 0 to 256 [ 282.133681][ T112] Code: 1a b3 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 35 fa dc fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 19 fa dc fe 49 8b 3f e8 f1 19 b3 fe [ 282.133702][ T112] RSP: 0018:ffffc90002cb7c40 EFLAGS: 00010202 [ 282.133720][ T112] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 58e387aa09e92100 [ 282.173640][ T112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.181625][ T112] RBP: ffffc90002cb7d48 R08: 0000000000000004 R09: 0000000000000004 [ 282.189627][ T112] R10: ffffc90002cb7b64 R11: fffff52000596f75 R12: ffff88807f03d000 [ 282.197615][ T112] R13: dffffc0000000000 R14: ffff88807c412438 R15: 0000000000000040 [ 282.205604][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 282.214639][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.221236][ T112] CR2: 000055556a082808 CR3: 00000000620d6000 CR4: 00000000003506f0 [ 282.229228][ T112] Call Trace: [ 282.232522][ T112] [ 282.235468][ T112] ? lmWriteRecord+0x1ac0/0x1ac0 [ 282.240425][ T112] ? __rwlock_init+0x150/0x150 [ 282.245206][ T112] jfs_syncpt+0x7b/0x90 [ 282.249420][ T112] txEnd+0x2e5/0x520 [ 282.253352][ T112] jfs_lazycommit+0x5a6/0xa60 [ 282.258071][ T112] ? txFreelock+0x5a0/0x5a0 [ 282.262597][ T112] ? do_task_dead+0xd0/0xd0 [ 282.267199][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 282.272166][ T112] kthread+0x2fa/0x390 [ 282.276251][ T112] ? txFreelock+0x5a0/0x5a0 [ 282.280782][ T112] ? kthread_blkcg+0xd0/0xd0 [ 282.285483][ T112] ret_from_fork+0x48/0x80 [ 282.289916][ T112] ? kthread_blkcg+0xd0/0xd0 [ 282.294522][ T112] ret_from_fork_asm+0x11/0x20 [ 282.299337][ T112] [ 282.302372][ T112] Modules linked in: [ 282.329159][ T112] ---[ end trace 0000000000000000 ]--- [ 282.334743][ T112] RIP: 0010:lmLogSync+0x139/0x9c0 [ 282.339961][ T112] Code: 1a b3 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 35 fa dc fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 19 fa dc fe 49 8b 3f e8 f1 19 b3 fe [ 282.360221][ T112] RSP: 0018:ffffc90002cb7c40 EFLAGS: 00010202 [ 282.368935][ T112] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 58e387aa09e92100 [ 282.377511][ T112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.418605][ T112] RBP: ffffc90002cb7d48 R08: 0000000000000004 R09: 0000000000000004 [ 282.447752][ T112] R10: ffffc90002cb7b64 R11: fffff52000596f75 R12: ffff88807f03d000 [ 282.455845][ T112] R13: dffffc0000000000 R14: ffff88807c412438 R15: 0000000000000040 [ 282.463890][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 282.472994][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.480085][ T112] CR2: 00007f2f565a4198 CR3: 000000002fd8c000 CR4: 00000000003506f0 [ 282.488254][ T112] Kernel panic - not syncing: Fatal exception [ 282.494693][ T112] Kernel Offset: disabled [ 282.499023][ T112] Rebooting in 86400 seconds..