last executing test programs: 6m36.213618787s ago: executing program 3 (id=6115): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xc8640) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x8000000000000000, 0x6, 0x3, @scatter={0x0, 0x12, 0xfffffffffffffffd}, &(0x7f0000000200)="5375f2c04e0c", 0x0, 0x80000001, 0x1, 0xffffffffffffffff, 0x0}) 6m35.883446979s ago: executing program 3 (id=6122): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0x1, 0x61f5, &(0x7f00000075c0)="$eJzs3U1vHVf9B/DfffRD/k2tLqr+I4TctDyU0iROSggUaLsoCzZdoGxRItetIlJASUBpZRFX3rBgxSsAIbFEiCViwQvogi07VqyIZCOBumLQ2OfE48m9vXYd37n2fD6SPfObM9c+4++d++A7MycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjed7+/0omIGz9LC5Yi/i96Ed2IhbJejoiF5aW8fj8inoud5ng2IgZzEeXtd749HfFqRHx8NmJre321XHz5gP146w9/++0Pzrz9198PLv7nj/d6r41b7/79X/77Tw+Ots0AAADQNkVRFJ30Nv9cen/fbbpTAMBU5Of/IsnLT339q3+8/edZ6o9arVar1VOoq4rRHlSLiNio3qZ8zeDjeAA4YTbik6a7QIPk32r9iDjTdCeAmdZpugMci63t9dVOyrdTfT5Y3m3Px4Lsy3+j8+j8jnHTSerHmEzr/rUZvXhmTH8WptSHWZLz79bzv7HbPkzrHXf+0zIu/+HuqU+tk/Pv1fOvOT35d0fm31Y5//6h8u/JHwAAAAAAZlj+//9Sw5//zh19Uw7k0z7/XZ5SHwAAAAAAAADgSTvq+H+PGP8PAAAAZlb5Xr3067N7y8Zdi61cfr0T8VRtfaBl0skyi033AwAAAAAAAAAAAADapL97DO/1TsQgIp5aXCyKovyqqteHddTbnwI71yxouhPA9DX9IA8AALs+Pls7l78TMR8R16O7c62/weLiYlHMLywWi8XCXH49O5ybLxYq7+vztFw2NzzAC+L+sCh/2HzldlWT/l8wqb3+88rfNSx6B+jYEzJIf80xzQ2FDQDJ7rPRlmekU6YonvZpAwdi/z+FlmKp6fsVs6/puykAAABw/IqiKDrpct7n0vh+3aY7BQBMRX7+r38ucKS6O6Y94sn8fLVarVar1Z+pripGe1AtImKjepvyNYPh+AHghNmIT5ruAg2Sf6v1I+K5pjsBzLRO0x3gWGxtr692Ur6d6vNBGt89HwuyL/+Nzs7t8u1HTSepH2MyrfvXZvTimTH9eXZKfZglOf9uPf8bu+3DtN5x5z8t4/If7pwy1z45/149/5rTk393ZP5tlfPvHyr/nvwBAAAAAGCG5f//L/n8N28yAAAAAAAAAJw4W9vrq/m81/z5/+dGrOf8z9Mp5985bP4LaV7+J1rOv1vL/8u19XqV+Ydv7u3//9peX/3dvX/+f54eNP+5PNNJ96xOukd00m/q9NP0KFv3uM1Bb1j+pkGn2+unY36KwbtxK27HWlzat243/T322lf2tZc9Hexrv7yvvf9Y+5V97YN03YFiIbdfiNX4cdyOd3bay7a5Cds/P6G9mNCe8+95/G+lnH+/8lXmv5jaO7Vp6eFH3cf2++p01O9549bnf3Hp+Ddnos3oPdq2qnL7zjfQn/Jv8lYM46d31+5cuH/z3r07K5EmZ6pLL0eaPGE5/8HO19ze4/8Lu+35cb+6vz78aHjo/GfFZvTH5v9CZb7c3pem3Lcm5PyH6Svn/05qH73/n+T8x+//LzfQHwAAAAAAAAAAAAAAAPg0RVHsnCL6RkRcTef/NHVuJgAwXfn5v0jycrVarVar1aevripGe71aRMRfqrcpXzP8fNQPAwBm2X8j4u9Nd4LGyL/F8vX+yumLTXcGmKq7H3z4w5u3b6/dudt0TwAAAAAAAACAzyqP/7lcGf/5xYhYqq23b/zXN2P5qON/9vPMowFGn/BA32Nsdoe9bmW48edjZ3zuC+PG/z4fj4//ncfE7VW3Y4zBhPbhhPa5Ce3zI5fupTXyRI+KnP/zlfHOy/zP1YZfb8P4r/Ux79sg53++cn8u8/9Sbb1q/sVvZi7/jYOuuBndfflfvPf+Ty7e/eDDV269f/O9tffWfnRlZeXSlatXr127dvHdW7fXLu1+P55ez4Ccfx772nGg7ZLzz5nLv11y/l9ItfzbJef/xVTLv11y/vn1nvzbJeef3/vIv11y/i+lWv7tkvP/Sqrl3y5b2+tzZf4vp1r+7ZL3/6+mWv7tkvN/JdXyb5ec/4VUy79dcv4XU32A/F0e/hTJ+edPuOz/7ZLzX0m1/Nsl53851fJvl5z/lVTLv11y/q+mWv7tkvP/Wqrl3y45/6upln+75Py/nurD5L9wjP1iOnL+11Jt/2+XnP83Ui3/dsn5fzPV8m+XnP9rqZZ/u+T8v5Vq+bdLzv/bqZZ/u+T8v5Nq+bdLzv/1VMu/Xfau/2/GjBkzeabpRyYAAAAAAAAAAAAAoG4ahxM3vY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe/uYuQ66/uBn1nv2muHEAMhOPkb2CQmhMRk13biF/5NMYEADVAKJBT6guN612bBb3jtEiiSTQMlEkZFFVXTi7aAojZSVRFVXNCK0lxUfbkq7QW9qagqITWqDAqoSG0F2WrmPM/jmdnZmVnveH32PJ+PlPx2Z86Z88yZ55yd366/cwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHa3vnnuc42iKJr/tf63tShe1Px689TW1m1vuNYjBAAAAFbrp63/P39DuuHgECu1LfN3r/rHry8uLi4WH9jwuxPjxWK6Y6ooJjYVReu+6Jl//2DjS23fB48Xk42xtu/HBmx+w4D7xwfcPzHg/o0D7t804P7JAfcv2QFLbC5/H9N6sB2tL7eWu7S4sZho3bejx1qPNzaNjcXf5bQ0WussThwt5ovjxVwx07F8uWyjtfw3b21u6+1F3NZY27a2N2fIDz91JI6hEfbxjo5tXX7M6PtvKqZ+9MNPHfnjs5du7lUH7oaOxyvHeedtzXF+JtxSjrVRbEr7JI5zrG2c23u8Jhs6xtlordf8unuczw85zg2Xh7mmul/zyWKs9fW3W/tpvP3Xemk/bQ+3/fftRVFcuDzs7mWWbKsYK7Z03DJ2+fWZLGdk8zGaU+mlxfiK5umtQ8zTZp3d0TlPu4+J+PrfGtYbX2YM7S/T9z+9ccnrvtJ5GjWf9XLHSvccHPWxUpU5GOfFt1tP+omec3BHeP6fumP5Odhz7vSYg+l5t83B2wbNwbGNG1pjTi9Co7XO5Tm4q2P5Da0tNVr1uTv6z8HpsydOTy984pOvnz9x+NjcsbmTe3btmtmzd+/+/funj84fn5sp/3+Fe7v6thRj6Ri4Ley7eAy8tmvZ9qm6+JXRHYeTfY7DrV3Ljvo4HO9+co21OSCXzuny2Hi4udMnL44VyxxjrdfnrtUfh+l5tx2H423HYc+fKT2Ow/EhjsPmMqfvGu49y3jbf73GcLV+Fmxtm4Pd70e65+Co349UZQ5Ohnnxr3ct/7NgexjvEztX+n5kw5I5mJ5uOPc0b0nv9yf3t0qveXlL847rNhbnFubO3PPY4bNnz+wqQlkTL2ubK93zdUvbcyqWzNexFc/Xg/OveuKWHrdvDftq8vXN/00u+1o1l7n3nv6vVeunW+/92XHr7iKUEVvr/dnrp3lzf6Zess/+bC7zmenVvxdPfWnb+XdimfNv7PtfKLeXHurxDRPj5fG7Ie2diY7zcedLNd46dzVa235+erjz8UT4b63Pxzf2OR9v61p21Ofjie4nF8/HjUG/7Vid7tdzMsyT4zP9z8fNZbbtXumcHO97Pr491EbY/68LnULqi9rmznLzNm1rfHwiPK/xuIXOebqnY/mJ0Js1t/X07iubp3feXj7WhvTsLlureTrVteyo52k6Xy03TxuDfvt2Zbpfz8kwL27c03+eNpd59t7Vnzs3xy/bzp0bB83BiQ0bm2OeSJOwPN8vbo5z8J7iSHGqOF7Mtu7d2JpPjda2dt433BzcGP5b63Pltj5z8M6uZUc9B9PPseXmXmN86ZMfge7XczLMiyfv6z8Hm8u8Zd9o37veGW5Jy7S9d+3+/dpyv/O6pWs3Xc3feTXH+Tf7+v9utrnM8f0r7TP776e7wy3X9dhP3cfvcsfUbLE2+2lbGOel/cvvp+Z4mst86cCQ8+lgURTnP/ZA6/e94e8rf37uO1/v+LtLr7/pnP/YAz+4/ujfrmT8AKx/L5RlS/mzru0vU8P8/R8AAABYF2LfPxZqov8HAACA2oh9f/xX4Yn+HwAAAGoj9v3joSaZ9P/b3nJp/oXzRUrmLwbx/rQbHiqXixnXmfD91OJlzdsfeGrux395frhtjxVF8ZOHfqPn8tseiuMqTYVxPvNg5+1LVzw/1PYffeTycu359S+Hx4/PZ9hp0CuCO1MUxTdv+EJrO1MfvNiqzz70aKu+98ITjzeXef5A+X1c/7mXlcv/QQj/Hjx6uGP958J++F6oM+/ovT/iel+7+Lrt+95/eXtxvcZtL2497Sc/VD5u/JycLz5eLh/383Lj/6vPP/215vKPvab3+M+P9R7/0+Fxn3rw0nxzxv3PK8vl21+D5vdxvc+G8cftPRXWv+er3+o5/mc+Vy5/+q3lco+GGrd/Z/h+x1svzbfvr8cahzueV/G2crm4/Znv/Hbr/vh48fG7xz956GLH/uieH8/+c/k4013Lx9vjdqK/6Np+83Ha52fc/tO/9WjHfh60/Wfe+9wrm4/bvf27u5bb0LV+9yc2/eFnv9Bze3E8B//sdMfzOfiecByH7T/5oTAfw/3/+8wXOrYbPfqezvNPXP7LW893PJ/o7T8qt//MG4+16n9M/fj3r3vR9S++8OrmviuKb7+vfLxB2z/2R6c6xv+Vm+5qvR7x/pjR797+cuL2z3x858lTC+fmZ9v2auuzc95ZjmfT5OYtzfHeEM6t3d8fOnX2w3NnpmamZopiqr4foXfFvhrqD8pyYaXr3/VIeD1v+b1vbrnjnz4fb/+Xh8vbL76j/Ln12rDcF8PtW8vXb7Gxyu0/eetNreO78Wz5fUeOfQS27/jP/UMtGJ5/9/uCON9Pv/zDrf3QvK/1cyMe16sc/3dny8f5Rtivi+GTmW+76fL22pePn41w8X3l8b7q/RdOc/F1/ZPwer/re+Xjx3HF5/vd8D7mW9s6z3dxfnzj/Fj347c+xeNCOJ8UF8r741Jxf198/qaew4ufQ1JcuLn1/e+kx7l5RU9zOQufWJg+Pn/y3GPTZ+cWzk4vfOKTh06cOnfy7KHWZ3ke+sig9S+fn7a0zk+zc3vvLWY2F0VxqphZgxPW1Rl/86vhxn/6kSOz+2bumJ07evjc0bOPnJ47c+zIwsKRudmFOw4fPTr38UHrz8/ev2v3gT37du88Nj97//4DB/Yc2Dl/8lRzGOWgBtg789GdJ88caq2ycP+9B3bdd9+9MztPnJqdu3/fzMzOc4PWb/1s2tlc+9d3npk7fvjs/Im5nQvzn5y7f9eBvXt3D/w0wBOnjy5MTZ85d3L63MLcmenyuUydbd3c/Nk3aH3qaeHfyvez3RrlB/EV7757b/p81qanPr3sQ5WLdH2A6KXwWTT/8JLT+4f5Pvb9E6EmmfT/AAAAkIPY928MNdH/AwAAQG3Evn9TqIn+HwAAAGoj9v2ToSaZ9P/y//L/w+X/y/tHmf/vlZ8v5P8rlf8//bEyV7re8/8xPy//n4drnP9f9fbl/+X/65f/Hz4/v97HL/8v/89SVcv/x75/c1Fk2f8DAABADmLfvyXURP8PAAAAtRH7/utCTfT/AAAAUBux739RqEkm/b/8/1D5/92DAlf1z/+P/vr/8v/y/2uS/48vjvx/Nlacv3//wx3fyv8H8v/y//L/8v/y/6zaxLL3XKv8f+z7rw81yaT/BwAAgBzEvv/FoSb6fwAAAKiN2PffEGqi/wcAAIDaiH3/1lCTTPp/+X/X/5f/l/+vdf5/tdf/bxuM/P/64Pr//cn/D3DF+f9J+f/1mP+fGO34q53/Hzh8+X+uiqpd/z/2/S8JNcmk/wcAAIAcxL7/paEm+n8AAACojdj3vyzURP8PAAAAtRH7/htDTTLp/+X/5f/l/+X/5f97b3/w9f/Lr+T/q0X+vz/5/wFc/z+v/P+Ix1/t/P+or/8/8WD3+vL/9FK1/H/s+18eapJJ/w8AAAA5iH3/TaEm+n8AAACojdj3vyLURP8PAAAAtRH7/m2hJpn0//L/VyP//9PW2vL/8v/d80P+v275/5L8f7XI//cn/z+A/L/8v/z/cPn/Hh9+Jf9PL1XL/8e+/+ZQk0z6fwAAAMhB7PtvCTVZpv9fHPJv2wAAAEB1xL7//4Wa+Ps/AAAA1Ebs+7eHmmTS/8v/u/6//H9e+f+7N8r/y//Xm/x/f/L/A8j/y//L/w95/f+lVpL/3zTowaiNquX/Y9//ylCTTPp/AAAAyEHs+18VaqL/BwAAgNqIff+rQ030/wAAAFAbse+fCjXJpP+X/69X/v9P//rJVxfy//L/A7Zf0/x/nAby/5mT/+9P/n8A+X/5f/n/Ncn/k4+q5f9j339rqEkm/T8AAADkIPb9t4Wa6P8BAACgNmLff3uoif4fAAAAaiP2/TtCTTLp/+X/65X/j+T/5f/7bb+m+f9E/j9v8v89tB2k8v8DyP/L/2ef/4/vfuX/GY2q5f9j3/+aUJNM+n8AAADIQez77wg10f8DAABAbcS+/7WhJvp/AAAAqI3Y998ZapJJ/y//L/8v/y//L//fe/vy/+uT/H9/K83/b5T/l/+X/88s/+/6/4xW1fL/se9/XahJJv0/AAAA5CD2/XeFmuj/AQAAoDbiv98s/92r/h8AAADqKPb9O0NNMun/5f/l/3PK/zfk/+X/5f9rT/6/P9f/H0D+X/5f/l/+n5GqWv4/9v2vDzXJpP8HAACAHMS+/55QE/0/AAAA1Ebs+6dDTfT/AAAAUBux758JNcmk/5f/l//PKf/v+v/y//L/9Sf/398o8v+L5+X/5f97k/+vYP6/KOT/uaaqlv+Pff+uUJNM+n8AAADIQez7d4ea6P8BAACgNmLfvyfURP8PAAAAtRH7/ntDTTLp/+X/5f/l/+X/5f97b1/+f32S/+/P9f8HkP+X/69b/t/1/7nGqpb/j33/faEmmfT/AAAAkIPY9+8NNdH/AwAAQG3Evn9fqEno/3v9u24AAABgfYl9//5Qk0z+/i//X5P8/2/+fce25f/l//ttfzT5/83y/6HK/1dLTfP/3YfFFZP/H0D+/6rl54uxkQzxmo1f/l/+nytTtfx/7PsPhJpk0v8DAABADmLf/4ZQE/0/AAAA1Ebs+/9/qIn+HwAAAGoj9v0/E2qSSf8v/1+T/H8X+X/5/37bd/1/+f86q2n+f2Rqlf8fk/9fT/l/1/+X/x+0PvV09fP/8avh8v+x778/1CST/h8AAAByEPv+nw010f8DAABAbcS+/42hJvp/AAAAqI3Y9x8MNcmk/5f/l/+/Wvn/C2Py/93zI6/8/xuLblXM/zcnj/x/vVQ4/z8xzPbl/13/X/5/Tcbf/aNmJOOX/5f/Z6mqXf8/9v1vCjXJpP8HAACAHMS+/4FQE/0/AAAA1Ebs+98caqL/BwAAgNqIff9bQk0y6f/l/+X/Xf9f/t/1/3tvX/5/fapw/n8o8v/y//L/63f88v/y/yxVtfx/7PsfDDXJpP8HAACAHMS+/62hJvp/AAAAqI3Y978t1ET/DwAAALUR+/63h5pk0v/L/8v/y//L/8v/996+/P/6JP/fn/z/APL/8v/y//L/jFTV8v+x7/+5UJNM+n8AAADIQez7Hwo10f8DAABAbcS+/x2hJvp/AAAAqI3Y978z1CST/l/+X/5f/l/+X/6/9/bl/9cn+f/+5P8HkP+X/5f/l/9npKqW/499/7tCTTLp/wEAACAHse//+VAT/T8AAADURuz73x1qov8HAACA2oh9/y+EmmTS/8v/y/9XK/+/eL59Pfl/+f9iVPn/5kry/1mQ/+9P/n+AHvn/TfL/8v/y//L/XLGq5f9j3/+eUJNM+n8AAADIQez73xtqov8HAACA2oh9//tCTfT/AAAAUBux73841CST/l/+P8v8f3rK1cv/u/6//L/r/8v/r478f3/y/wO4/r/8v/y//D8jVbX8f+z7Hwk1yaT/BwAAgBzEvv/9oSb6fwAAAKiN2Pf/YqiJ/h8AAABqI/b9Hwg1yaT/l//PMv9f4ev/1y3/P94xP3LK/0+2vZ5pXsr/y/+vAfn//uT/B5D/l/+vcv4/zObNy6wv/08VVS3/H/v+D4aaZNL/AwAAQA5i3/9LoSb6fwAAAKiN2Pf/cqiJ/h8AAABqI/b9vxJqkkn/X8P8/4VC/l/+vzL5/875kVP+3/X/l5L/Xxvy//3J/w8g/y//X+X8/wDy/1RR1fL/se//1VCTZRu/H/zXEE8TAAAAqJDY938o1CSTv/8DAABADmLffyjURP8PAAAAtRH7/kdDTTLp/2uY/1/l9f/jFVXl/+X/R53/H5P/l/+X/18Do8v/v+L6opD/l/+X/5f/l/+X/2c1qpb/j33/4VCTTPp/AAAAyEHs+38t1ET/DwAAALUR+/4joSb6fwAAAKiN2PfPhppk0v9fw/z/RDXz/67/f6X5/5/I/7v+fyD/35v8/9pw/f/+5P8HkP+X/5f/l/9npKqW/499/1yoSSb9PwAAANRY+nVw7PuPhpro/wEAAKA2Yt9/LNRE/w8AAAC1Efv+D4eaZNL/u/6//L/r/1+L/P94x/Ly/yX5f/n/UZD/70/+fwD5f/l/+X/5f0aqavn/2PfPh5pk0v8DAABADmLf/5FQE/0/AAAA1Ebs+z8aaqL/BwAAgNqIff/xUJNM+n/5f/n/3PP/jaK44Pr/o83/b5L/70n+f23I//cn/z+A/P9a5uevH8mgr934l5D/l/9nqarl/2PffyLUJJP+///Yu48mu85qj8MbY0vdI/gIjBkxhJH5CEyZUcWYaJODZXIGk3MwOedgosk552iTczTRUNWUW2stqfsc7S2pj/rs/b7PM1lXuhZ9hBtz/1f1qxcAAAB6kLv/vnGL/Q8AAADNyN1/v7jF/gcAAIBm5O6/f9zSyf7X/+v/e+//h628/3/wr2+t//f+/3r6/+Ox0t9fvv6vO1cUfs7+/y53vfpe+n/9v/5/lPf/9f/6fw6bW/+fu/8BcUsn+x8AAAB6kLv/gXGL/Q8AAADNyN1/Vdxi/wMAAEAzcvdfHbd0sv/1//p//b/+/0D/f6P+X/+/bN7/H6f/n6D/1//r//X/bNTc+v/c/Q+KWzrZ/wAAANCD3P0PjlvsfwAAAGhG7v6HxC32PwAAADQjd/9D45ZO9r/+X/+v/19K/3/C+/+Hfj/6f/3/Ovr/cfr/Cfp//b/+X//PRs2t/8/d/7C4pZP9DwAAAD3I3f/wuMX+BwAAgGbk7n9E3GL/AwAAQDNy9z8ybulk/+v/9f/6/6X0/8f0/r/+X/+/cNcPZ/6ZoP9fpf+fMNH/D4P+f8x59/Prf3vL+fznoP/X/7Nqbv1/7v5HxS13H4YTF/ubBAAAAGYld/+j45ZO/vwfAAAAepC7/5q4xf4HAACAZuTuPxW3dLL/9f/6f/2//l//v/7r6/+Xyfv/447e/9/5jve5d7/9v/f/x3n/f9P9/23fGfp/lm1u/X/u/mvjlk72PwAAAPQgd/9j4hb7HwAAAJqRu/+xcYv9DwAAAM3I3f+4uKWT/a//b63/v/2BX3dW/79fu+j/9f/6f/1/6/T/47z/P2H/H3O79UP9v/7f+//6f45mbv1/7v7Hxy2d7H8AAADoQe7+J8Qt9j8AAAA0I3f/E+MW+x8AAACakbv/SXFLJ/tf/99a/3/w13n/X/+/7uvr//X/LdP/j9P/T2jl/f+L/K7Zdj9/VNv+/Pp//T+r5tb/5+5/ctzSyf4HAACAHuTuf0rcYv8DAABAM3L3PzVusf8BAACgGbn7nxa3dLL/9f/6/2X0//kV5tT/7+3tHfoe0v+ftvT+P+n/l0n/P07/P6GV/v8ibbufX/rn1//r/1k1t/4/d//T45ZO9j8AAAD0IHf/M+IW+x8AAACakbv/mXGL/Q8AAADNyN3/rLilk/2v/9f/L6P/9/6//t/7//r/86P/H6f/n6D/1//r//X/bNTc+v/c/dfFLZ3sfwAAAOhB7v5nxy32PwAAADQjd/9z4hb7HwAAAJqRu/+5cUsn+1//r//X/+v/9f/rv77+f5n0/+P0/xM67/+HU/p//b/+n82aUf9/1q/aGZ4Xt3Sy/wEAAKAHufufH7fY/wAAANCM3P0viFvsfwAAAGhG7v4Xxi2d7H/9/2z6//2cr63+f3cYBv3/0Gn/v3vW38/6vtT/6/+Pgf5/nP5/Quf9/7b7+aV/fv2//p/Dds75v9nW+/+5+190+PN1sv8BAACgB7n7Xxy32P8AAADQjNz9L4lb7H8AAABoRu7+l8Ytnex//f9s+v99bfX/3v8//P3RU//v/f9V+v/jof8fp/+foP/X/+v/9f9s1FU3nf6/Zw/bVv+fu/9lcdOJKy76twgAAADMTO7+l8ctnfz5PwAAAPQgd/8r4hb7HwAAABbqupWfyd3/yrilk/2v/99s/3/irJ/T/+v/D39/6P/1//r/S0//P07/P0H/r//X/+v/2ai59f+5+18Vt3Sy/wEAAKAHufuvj1vsfwAAAGhG7v5Xxy32PwAAADQjd/9r4pZO9r/+3/v/+n/9/1T/f+Y5VP2//n/+9P/j9P8T9P/6/5HPf/i/nw7bQP9/8sz/qP+nDRfQ/+/t7V1zyfv/3P2vjVs62f8AAADQg9z9r4tb7H8AAABoRu7+18ct9j8AAAA047bdvzsMwxv2f9Tf/tf/d9r/57f6svr/U8Og//f+v/5f/z9O/z9O/z9B/6//9/6//p+Nmtv7/7n73xi3dLL/AQAAoAe5+98Ut9j/AAAA0Izc/W+OW+x/AAAAaEbu/rfELZ3sf/1/p/2/9//1//r/4+7/bx30/8diEf3/7rm//tz7/2v1//r/Ed31//e424Ef6v/1/6yaW/+fu/+tcUsn+x8AAAB6kLv/bXGL/Q8AAADNyN3/9rjF/gcAAIBm5O5/R9x0eSf7X/+v/9f/6//1/+u//jG//39iGAb9/wYsov8fMff+fzPv/x/+T/kZ+n/9/5I/v/5f/8+qufX/ufvfGbd0sv8BAACgB7n73xW32P8AAADQjNz9745b7H8AAABoRu7+98Qtnex//b/+X/+v/2++/792Ef2/9/83RP8/bh79/7np//X/S/78+n/9P+dvW/1/7v73xi2d7H8AAADoQe7+98Ut9j8AAAA0I3f/++MW+x8AAACakbv/A3FLJ/tf/6//v5D+Pz+n/r+t/v/ksfT/p4bhvPv/nQP/ep28/6//3xD9/7jz6f/3v7f1//p//X+v/f91+n82aW7v/+fuvyFu6WT/AwAAQA9y938wbv2/bu1/AAAAaEbu/g/FLfY/AAAANCN3/4fjlk72v/5f/+/9f/1/8+//6/+7ov8f5/3/Cfp//b/+3/v/bNTc+v/c/R+JWzrZ/wAAANCD3P0fjVvsfwAAAGhG7v6PxS32PwAAADQjd/+NcUsn+1//r//X/+v/9f+n/x7q/9ug/x93PP3/rv5f/1/9/O3iPwX6f/3/1K+nTXPr/3P3fzxu6WT/AwAAQA9y938ibrH/AQAAoBm5+z8Zt9j/AAAAsEiXr/m53P2fils62f/6f/2//l//r/9f//X1/8u0lf4/vyn0/97/D/30/3c68KOlvf9/+L+/9P/6fzZvbv1/7v5Pxy2d7H8AAADoQe7+z8Qt9j8AAAA0I3f/Z+MW+x8AAACakbv/c3FLJ/tf/6//1//r//X/67++/n+ZvP8/Tv8/Qf+/1ffzl/759f/6f1bNrf/P3f/5uKWT/Q8AAAA9yN3/hbjF/gcAAIBm5O7/Ytxi/wMAAEAz9nd/xmUd7n/9v/5f/6//1/+v//r6/2XS/4/T/0/Q/+v/9f/6fzZqbv3/l/Z/1c7w5bilk/0PAAAAPcjd/5W4xf4HAACAZuTu/2rcYv8DAABAM3L3fy1u6WT/6//1/8vo//f29q7R/+v/D/5+zvT/N+v/Kfr/cfr/Cfp//b/+X//PRs2t/8/d//W4pZP9DwAAAD3I3f+NuMX+BwAAgGbk7v9m3GL/AwAAQDNy938rbulk/+v/Z9D/7+j/vf+v/x+8/7/a/192+h/K+v8Lo/8fp/+f0GL/v3P+v/1t9/NHdck+/47+X//PxZpb/5+7/9txSyf7HwAAAHqQu/87cYv9DwAAAM3I3f/duMX+BwAAgGbk7v9e3NLJ/tf/H1//f9u/d728/787rP/8+n/9v/7f+/+Xmv5/nP5/Qov9/wXQ/3v/X//Pps2t/8/d//245eDwu+LCfpcAAADAnOTu/0Hc0smf/wMAAEAPcvf/MG6x/wEAAKAZuft/FLd0sv/1/zN4/7/B/t/7/+u/P/T/s+7/L9P/t+EC+/sbDv+E/j/o//X/+n/9/5H6//xu1v/3bm79f+7+H8ctnex/AAAA6EHu/p/ELfY/AAAANCN3/01xi/0PAAAAzcjdf3Pcctb+X9d2t0L/r//X/+v/9f/rv77+f5m8/z/ufPv/k8PR+v/Uff+/s/Kvr/+/hLb9+fX/3v9n1dz6/9z9P41b/Pk/AAAALM4V5/j53P0/i1vsfwAAAGhG7v6fxy32PwAAADQjd/8v4pZbLtvWRzpW+n/9v/5f/6//X//19f/LpP8f5/3/Cd7/30Q/f6X+v43+fxj0/xzd3Pr/3P2/jFv8+T8AAAA0I3f/r+IW+x8AAACakbv/13GL/Q8AAADNyN3/m7ilk/2v/9f/H7H/308z9f+n6f9P0/+vp/8/Hvr/cfr/Cfp/7//r/73/z0bNrf/P3f/buKWT/Q8AAAA9yN3/u7jF/gcAAIBm5O7/fdxi/wMAAEAzcvf/IW7pZP9vrf+Pf6v1/4vv/73/r//X/+v/Z0X/P67R/n93GAb9/wZsu59f+ufX/+v/WTW3/j93/x/jlk72PwAAAPQgd/+f4hb7HwAAAJqRu//PcYv9DwAAAM3I3f+XuKWT/e/9f/2//l//r/9f//X1/8uk/x/XaP9/5Pf/62+U/l//r//X/7NRc+v/c/f/NW7pZP8DAABAD3L3/y1usf8BAACgGbn7b4lb7H8AAABoRu7+v8ctnex//b/+X/+v/9f/r//6+v9l0v+P22b/f887TH/ZbfX/Rf+fH0H/r//X/7MRc+v/c/f/I27pZP8DAABAD3L3/zNusf8BAACgGbn7/xW32P8AAADQjNz9/45bOtn/E/3/yfoL9f+j9P8HP7/+f/33h/5f/6//v/T0/+O8/z9B/+/9f/2//p+Nmlv/n7v/P3FLJ/sfAAAAepC7/9a4xf4HAACAZuTu/2/cYv8DAABAM3L3/y9u6WT/e/9/Sf3/lfp//b/+X/+v/5+g/x+n/5+g/9f/6//1/2zU3Pr/3P3/DwAA//+2vUye") symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m34.704710951s ago: executing program 3 (id=6135): r0 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000380)=@ethtool_rxfh={0x1, 0x6, 0xffffffff, 0xff, 0x6, '\x00\b\x00', 0x3}}) 6m34.311679075s ago: executing program 3 (id=6141): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m33.569597544s ago: executing program 3 (id=6151): r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2) lseek(r0, 0x90, 0x1) 6m32.620639645s ago: executing program 3 (id=6161): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) open_by_handle_at(r0, &(0x7f0000000000)=@reiserfs_5={0x14, 0x5, {0x2, 0x9, 0xde, 0x2, 0x81}}, 0x20080) 6m32.015615147s ago: executing program 32 (id=6161): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) open_by_handle_at(r0, &(0x7f0000000000)=@reiserfs_5={0x14, 0x5, {0x2, 0x9, 0xde, 0x2, 0x81}}, 0x20080) 6.124412121s ago: executing program 4 (id=10480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.74606771s ago: executing program 4 (id=10496): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x15}) 4.267066906s ago: executing program 4 (id=10501): prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x8052, 0x1, 0x1}, 0x18, 0x0) 4.240501323s ago: executing program 1 (id=10502): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x7e9d19db568a1fea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.187843611s ago: executing program 4 (id=10503): r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x1, 0x0, 0x0, 0xffffffff], [0xfffffffd, 0x100003], [0x91]], '\x00', [{0xfffffffc, 0xfffffffe}, {}, {}, {0x0, 0x9}, {0x0, 0x200000}], '\x00', 0x300}) 3.934888649s ago: executing program 4 (id=10506): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.727296458s ago: executing program 1 (id=10507): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) 3.472473275s ago: executing program 1 (id=10510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x3e}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x342}}]}, 0x154}}, 0x0) 3.247424053s ago: executing program 1 (id=10511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000540)="b820090546ce985eb511351604cd", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.077034806s ago: executing program 5 (id=10514): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 2.095048278s ago: executing program 2 (id=10521): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_to_team\x00', &(0x7f00000002c0)=@ethtool_rxnfc={0x2a, 0x9, 0x40, {0xa, @ah_ip4_spec={@multicast1, @broadcast, 0x4, 0x5}, {0x0, @link_local, 0xff, 0x0, [0x1, 0x4]}, @hdata="cdbbf34f55a6d18320a994bb1799c44ced3a2aa5ed3b8b393aa148fd50df08b342c92d7ce79eb759735dd71f172467e76b97122d", {0x0, @empty, 0x7, 0x8f, [0x4, 0x8]}, 0xffffffffdaed86cb, 0x1}}}) 1.984641925s ago: executing program 1 (id=10523): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_usb_connect(0x0, 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cbe8d0205e040307c06e0102030109027e00010000000009044400000e0100000a240140000d0201020c240205010205090100010e0c240804010000a401883db20d240703020007e24dd0feeb710c24020603013f07ff00ea0e092403050101050109052406000005240000000d240f018d040000800004000f06241a0500180c"], 0x0) 1.653830885s ago: executing program 6 (id=10526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x38}}, 0x0) 1.623062748s ago: executing program 4 (id=10527): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f0000000100), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 1.592216343s ago: executing program 2 (id=10528): creat(&(0x7f0000000100)='./bus\x00', 0x8c) mount$nfs(&(0x7f0000000000)='^)&\x00', &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x2, &(0x7f00000002c0)={[{'\x00'}]}) 1.585749937s ago: executing program 5 (id=10529): r0 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x6}) 1.569970731s ago: executing program 0 (id=10530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 1.416890495s ago: executing program 6 (id=10531): pipe2$watch_queue(&(0x7f00000035c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 1.353241194s ago: executing program 2 (id=10532): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.351618287s ago: executing program 5 (id=10533): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x58, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7fffffff}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 1.228174657s ago: executing program 0 (id=10534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4) 1.131266787s ago: executing program 6 (id=10535): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 1.001680204s ago: executing program 0 (id=10536): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 939.453202ms ago: executing program 2 (id=10537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) 905.193023ms ago: executing program 5 (id=10538): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 702.146215ms ago: executing program 0 (id=10539): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) 655.789419ms ago: executing program 6 (id=10540): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setresgid(0xffffffffffffffff, 0x0, 0x0) 623.736777ms ago: executing program 2 (id=10541): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f00000001c0)) 584.672036ms ago: executing program 5 (id=10542): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 422.388586ms ago: executing program 0 (id=10543): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 419.80495ms ago: executing program 6 (id=10544): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x3, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x6, 0x0, 0x200000}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}}, 0x0) 291.167749ms ago: executing program 2 (id=10545): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x400, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'maccyrillic'}}, {@type={'type', 0x3d, "98acdea6"}}, {@part={'part', 0x3d, 0x9}}, {@type={'type', 0x3d, "0f6638d5"}}]}, 0x1, 0x5f1, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) 162.851431ms ago: executing program 6 (id=10546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x12, 0x68, 0x1, 0xfffffffd, 0x0, {0xa, 0x0, 0x3}}, 0x18}}, 0x0) 54.005147ms ago: executing program 0 (id=10547): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) 53.055864ms ago: executing program 1 (id=10548): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) 0s ago: executing program 5 (id=10549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0x9, 0x0, 0x0, {0x4}, [@typed={0x4, 0x3ffd}, @typed={0x8, 0x8, 0x0, 0x0, @binary='a^&/'}]}, 0x20}}, 0x4004080) kernel console output (not intermixed with test programs): tected capacity change from 0 to 256 [ 1163.516199][T27157] No source specified [ 1163.538672][T27154] FAT-fs (loop2): Directory bread(block 64) failed [ 1163.575149][T27154] FAT-fs (loop2): Directory bread(block 65) failed [ 1163.620068][T27154] FAT-fs (loop2): Directory bread(block 66) failed [ 1163.653061][T27154] FAT-fs (loop2): Directory bread(block 67) failed [ 1163.694446][T27154] FAT-fs (loop2): Directory bread(block 68) failed [ 1163.729751][T27154] FAT-fs (loop2): Directory bread(block 69) failed [ 1163.741927][T27158] netlink: set zone limit has 4 unknown bytes [ 1163.778221][T27154] FAT-fs (loop2): Directory bread(block 70) failed [ 1163.799793][T27154] FAT-fs (loop2): Directory bread(block 71) failed [ 1163.836415][T27154] FAT-fs (loop2): Directory bread(block 72) failed [ 1163.858829][T27154] FAT-fs (loop2): Directory bread(block 73) failed [ 1163.896252][T27164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1164.099347][T27168] loop5: detected capacity change from 0 to 2048 [ 1164.168351][T27168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1164.490042][T27149] loop0: detected capacity change from 0 to 32768 [ 1164.540227][T27149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8966 (27149) [ 1164.588273][T27184] affs: No valid root block on device nbd5 [ 1164.644283][T27149] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1164.672255][T27149] BTRFS info (device loop0): using sha256 checksum algorithm [ 1164.831564][T27149] BTRFS info (device loop0): enabling ssd optimizations [ 1164.919798][T27149] BTRFS info (device loop0): turning on async discard [ 1164.952212][T27149] BTRFS info (device loop0): enabling free space tree [ 1164.967615][T27210] netlink: 'syz.2.8990': attribute type 8 has an invalid length. [ 1165.141368][ T5850] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1165.744813][T27232] loop1: detected capacity change from 0 to 64 [ 1165.919497][T27235] loop5: detected capacity change from 0 to 2048 [ 1165.930338][T27237] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9003'. [ 1165.981519][T27235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1165.995405][T27237] netlink: 15 bytes leftover after parsing attributes in process `syz.6.9003'. [ 1167.234111][T27270] netdevsim netdevsim1: Direct firmware load for / [ 1167.234111][T27270] failed with error -2 [ 1167.279739][T27270] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 1167.279739][T27270] [ 1167.379720][T27279] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1167.469492][T27281] netlink: 'syz.2.9024': attribute type 5 has an invalid length. [ 1167.544439][T27284] loop4: detected capacity change from 0 to 256 [ 1167.549664][T27285] netlink: 'syz.0.9026': attribute type 3 has an invalid length. [ 1167.595630][T27285] netlink: 'syz.0.9026': attribute type 3 has an invalid length. [ 1167.709604][T27284] FAT-fs (loop4): Directory bread(block 64) failed [ 1167.719638][T27285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9026'. [ 1167.747497][T27284] FAT-fs (loop4): Directory bread(block 65) failed [ 1167.774858][T27291] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9028'. [ 1167.782478][T27284] FAT-fs (loop4): Directory bread(block 66) failed [ 1167.805968][T27284] FAT-fs (loop4): Directory bread(block 67) failed [ 1167.826590][T27284] FAT-fs (loop4): Directory bread(block 68) failed [ 1167.837991][T27293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9029'. [ 1167.862896][T27284] FAT-fs (loop4): Directory bread(block 69) failed [ 1167.877101][T27293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9029'. [ 1167.894546][T27284] FAT-fs (loop4): Directory bread(block 70) failed [ 1167.909511][T27284] FAT-fs (loop4): Directory bread(block 71) failed [ 1167.923521][T27284] FAT-fs (loop4): Directory bread(block 72) failed [ 1167.930862][T27284] FAT-fs (loop4): Directory bread(block 73) failed [ 1167.992824][T27295] netlink: 'syz.6.9030': attribute type 21 has an invalid length. [ 1168.018824][T27295] netlink: 168 bytes leftover after parsing attributes in process `syz.6.9030'. [ 1168.392165][T27308] loop1: detected capacity change from 0 to 256 [ 1168.947420][ T5978] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1169.160443][ T5978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1169.190250][ T5978] usb 3-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 1169.224730][ T5978] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1169.265508][ T5978] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1169.310960][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24395, setting to 1024 [ 1169.339890][ T5978] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1169.378063][ T5978] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1169.410699][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.440415][ T5978] usb 3-1: Product: syz [ 1169.455620][ T5978] usb 3-1: Manufacturer: syz [ 1169.470987][ T5978] usb 3-1: SerialNumber: syz [ 1169.491114][ T5978] usb 3-1: config 0 descriptor?? [ 1169.507152][T27315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1169.510331][T27344] loop1: detected capacity change from 0 to 4096 [ 1169.523690][T27315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1169.536058][T27344] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1169.583859][ C1] usb 3-1: NFC: Urb failure (status -71) [ 1169.590894][T27344] ntfs3(loop1): Failed to load $Extend (-22). [ 1169.597889][T27344] ntfs3(loop1): Failed to initialize $Extend. [ 1169.600907][ C1] usb 3-1: NFC: Urb failure (status -71) [ 1169.612830][ T5978] usb 3-1: NFC: Unable to get FW version [ 1169.653256][ T5978] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -71 [ 1169.853623][T27350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1169.881822][ T5978] usb 3-1: USB disconnect, device number 61 [ 1170.271153][T27330] loop6: detected capacity change from 0 to 40427 [ 1170.275756][T27360] netlink: 'syz.1.9061': attribute type 5 has an invalid length. [ 1170.300139][T27330] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1170.323479][T27330] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1170.360429][T27330] F2FS-fs (loop6): invalid crc value [ 1170.399353][T27367] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1170.653531][T27372] loop5: detected capacity change from 0 to 64 [ 1170.743193][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1170.752576][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1170.839245][T27330] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1170.843472][T27376] bridge1: entered promiscuous mode [ 1170.923529][T27330] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1170.966729][T27330] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1171.204344][T27389] netlink: 212 bytes leftover after parsing attributes in process `syz.1.9074'. [ 1171.429052][T27395] loop5: detected capacity change from 0 to 256 [ 1171.525319][T27395] FAT-fs (loop5): Directory bread(block 64) failed [ 1171.571559][T27395] FAT-fs (loop5): Directory bread(block 65) failed [ 1171.607743][T27395] FAT-fs (loop5): Directory bread(block 66) failed [ 1171.634152][T27395] FAT-fs (loop5): Directory bread(block 67) failed [ 1171.648738][T27397] loop2: detected capacity change from 0 to 4096 [ 1171.656542][T27395] FAT-fs (loop5): Directory bread(block 68) failed [ 1171.669039][T27397] ntfs3(loop2): Primary boot: invalid bytes per MFT record 0 (0). [ 1171.679010][T27403] netlink: 'syz.0.9080': attribute type 1 has an invalid length. [ 1171.692781][T27395] FAT-fs (loop5): Directory bread(block 69) failed [ 1171.711035][T27395] FAT-fs (loop5): Directory bread(block 70) failed [ 1171.717100][T27400] loop1: detected capacity change from 0 to 2048 [ 1171.720563][T27395] FAT-fs (loop5): Directory bread(block 71) failed [ 1171.734797][T27397] ntfs3(loop2): try to read out of volume at offset 0x1ffe00 [ 1171.751059][T27403] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9080'. [ 1171.767626][T27395] FAT-fs (loop5): Directory bread(block 72) failed [ 1171.786228][T27397] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1171.794489][T27400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1171.806120][T27395] FAT-fs (loop5): Directory bread(block 73) failed [ 1172.815778][T27427] loop5: detected capacity change from 0 to 1024 [ 1172.849362][T27427] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1172.867973][T27431] loop2: detected capacity change from 0 to 64 [ 1172.872197][T27427] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1173.027930][T27429] bridge2: entered promiscuous mode [ 1173.098911][T27427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1173.334749][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.353012][T27443] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.9098'. [ 1173.738796][T27458] loop6: detected capacity change from 0 to 256 [ 1173.761989][T27458] exfat: Deprecated parameter 'utf8' [ 1173.769848][T27459] loop2: detected capacity change from 0 to 256 [ 1173.829956][T27458] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1173.872759][T27459] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 1173.951669][T27465] netlink: 'syz.5.9110': attribute type 1 has an invalid length. [ 1174.280975][T27473] loop5: detected capacity change from 0 to 128 [ 1174.346996][T27473] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1174.436343][T27480] bridge2: entered promiscuous mode [ 1174.450771][T27483] loop2: detected capacity change from 0 to 512 [ 1174.461817][T27483] EXT4-fs: Ignoring removed orlov option [ 1174.473903][T27483] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1174.485611][T27485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9118'. [ 1174.547253][T27483] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1174.561778][T27485] netlink: 15 bytes leftover after parsing attributes in process `syz.1.9118'. [ 1174.598410][T27483] EXT4-fs (loop2): 1 truncate cleaned up [ 1174.616805][T27483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.643159][ T5999] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1174.669083][ T5866] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1174.815806][ T5999] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1174.832157][T27488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9121'. [ 1174.873940][T27488] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9121'. [ 1174.875112][ T5999] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1174.919152][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1174.951619][ T5999] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1174.999035][ T5999] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1175.019839][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.035593][ T5999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.073243][ T5999] usb 1-1: Product: syz [ 1175.081150][ T5999] usb 1-1: Manufacturer: syz [ 1175.086018][ T5999] usb 1-1: SerialNumber: syz [ 1175.096731][ T5999] usb 1-1: config 0 descriptor?? [ 1175.122915][T27481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1175.179931][ T5999] usb 1-1: ucan: probing device on interface #0 [ 1175.215548][ T5999] usb 1-1: ucan: invalid in_ep MaxPacketSize [ 1175.234205][ T5999] usb 1-1: ucan: probe failed; try to update the device firmware [ 1175.263127][T27496] loop5: detected capacity change from 0 to 1024 [ 1175.291326][T27496] EXT4-fs: Ignoring removed orlov option [ 1175.351204][T27496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1175.507963][T11882] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1175.703169][T11882] usb 7-1: Using ep0 maxpacket: 8 [ 1175.717020][T11882] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1175.736341][T11882] usb 7-1: config 179 has no interface number 0 [ 1175.753583][T11882] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1175.782668][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.806819][T11882] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1175.824274][T11882] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1175.838412][T11882] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1175.851364][T11882] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1175.875425][T11882] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1175.919227][T11882] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1175.943205][T11882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.957796][ T30] audit: type=1800 audit(1150.748:167): pid=27512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.9130" name="/newroot/1516/file0" dev="tmpfs" ino=7902 res=0 errno=0 [ 1176.079453][T11882] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input58 [ 1176.237953][T11882] usb 7-1: USB disconnect, device number 20 [ 1176.240691][T27526] loop4: detected capacity change from 0 to 8 [ 1176.307414][T27526] SQUASHFS error: Failed to read block 0x6de: -5 [ 1176.354668][T27526] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 1176.376838][T27526] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1176.378386][T27521] bond3 (unregistering): Released all slaves [ 1177.268402][T27530] loop2: detected capacity change from 0 to 32768 [ 1177.485587][T27534] loop5: detected capacity change from 0 to 32768 [ 1177.557165][T27534] JBD2: Ignoring recovery information on journal [ 1177.761651][ T5970] usb 1-1: USB disconnect, device number 53 [ 1177.819770][T27534] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1178.101771][T27553] netdevsim netdevsim0: Direct firmware load for / [ 1178.101771][T27553] failed with error -2 [ 1178.121964][T27538] loop4: detected capacity change from 0 to 32768 [ 1178.173488][T27553] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 1178.173488][T27553] [ 1178.278691][T27538] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1178.438149][T27538] XFS (loop4): Ending clean mount [ 1178.478152][T27548] loop2: detected capacity change from 0 to 32768 [ 1178.491103][T27538] XFS (loop4): Quotacheck needed: Please wait. [ 1178.497692][ T5866] ocfs2: Unmounting device (7,5) on (node local) [ 1178.826025][T27538] XFS (loop4): Quotacheck: Done. [ 1179.112576][ T5861] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1179.522978][T27575] bond1 (unregistering): Released all slaves [ 1179.799664][T27586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9160'. [ 1179.844596][T27586] netlink: 15 bytes leftover after parsing attributes in process `syz.5.9160'. [ 1180.417956][T27607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9169'. [ 1182.186038][T27674] netlink: 'syz.0.9201': attribute type 39 has an invalid length. [ 1182.316693][T27678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1182.358198][T27674] hsr_slave_0 (unregistering): left promiscuous mode [ 1182.485025][T27676] vti0: entered promiscuous mode [ 1182.506390][T27676] vti0: entered allmulticast mode [ 1182.715459][T27690] netlink: 'syz.0.9208': attribute type 11 has an invalid length. [ 1182.760693][T27692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9209'. [ 1182.780236][T27692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9209'. [ 1182.798899][ T30] audit: type=1800 audit(1157.158:168): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.9204" name="/newroot/1553/file0" dev="tmpfs" ino=8101 res=0 errno=0 [ 1182.806920][T11883] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1182.887023][T27651] loop5: detected capacity change from 0 to 32768 [ 1182.966208][T27651] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1182.991017][T27703] JFS: charset not found [ 1183.068263][T11883] usb 7-1: config 0 has an invalid interface number: 110 but max is 0 [ 1183.076792][T11883] usb 7-1: config 0 has no interface number 0 [ 1183.083024][T11883] usb 7-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1183.093576][T11883] usb 7-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1183.104200][T11883] usb 7-1: config 0 interface 110 has no altsetting 0 [ 1183.123906][T11883] usb 7-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1183.147281][T11883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.169005][T11883] usb 7-1: Product: syz [ 1183.173646][T11883] usb 7-1: Manufacturer: syz [ 1183.178295][T11883] usb 7-1: SerialNumber: syz [ 1183.179838][T27708] netlink: 'syz.4.9214': attribute type 1 has an invalid length. [ 1183.188803][T11883] usb 7-1: config 0 descriptor?? [ 1183.204895][T27651] XFS (loop5): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 1183.267650][T27708] netlink: 228 bytes leftover after parsing attributes in process `syz.4.9214'. [ 1183.282847][T27651] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1183.425221][T27651] XFS (loop5): Starting recovery (logdev: internal) [ 1183.551062][T27651] XFS (loop5): Ending recovery (logdev: internal) [ 1183.602420][T27651] XFS (loop5): Quotacheck needed: Please wait. [ 1183.706045][T11883] usb 7-1: USB disconnect, device number 21 [ 1183.926094][T27651] XFS (loop5): Quotacheck: Done. [ 1184.202470][ T5866] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1184.761877][T27754] Cannot find del_set index 4 as target [ 1185.056279][T27762] loop6: detected capacity change from 0 to 1024 [ 1185.135103][T27762] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1185.155954][T27766] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1185.318780][T27770] netlink: 'syz.0.9243': attribute type 21 has an invalid length. [ 1185.906877][T27752] loop1: detected capacity change from 0 to 32768 [ 1185.936897][T27752] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9235 (27752) [ 1186.001567][T27752] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1186.059108][T27752] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 1186.310824][T27752] BTRFS info (device loop1): enabling ssd optimizations [ 1186.333125][T27752] BTRFS info (device loop1): turning on async discard [ 1186.350907][T27752] BTRFS info (device loop1): enabling free space tree [ 1186.353376][T27811] loop5: detected capacity change from 0 to 64 [ 1186.655125][T27817] loop4: detected capacity change from 0 to 1024 [ 1186.714935][T27817] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1186.837171][T27782] loop2: detected capacity change from 0 to 32768 [ 1186.882810][T27782] (syz.2.9249,27782,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1186.939762][T27782] (syz.2.9249,27782,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1187.130566][T27782] JBD2: Ignoring recovery information on journal [ 1187.261565][T27782] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1187.299328][ T5851] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1188.524617][T27860] loop5: detected capacity change from 0 to 1024 [ 1188.564142][T27860] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1189.304237][T27876] loop6: detected capacity change from 0 to 1024 [ 1189.332189][T27876] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1189.344703][ T5849] ocfs2: Unmounting device (7,2) on (node local) [ 1189.364297][T27876] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1189.591608][T27876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1189.809614][T20664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.961213][T27888] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1190.264949][T27892] loop6: detected capacity change from 0 to 4096 [ 1190.302773][T27892] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1190.402718][T27892] ntfs3(loop6): Failed to load $Extend (-22). [ 1190.424596][T27892] ntfs3(loop6): Failed to initialize $Extend. [ 1190.509667][T27900] loop1: detected capacity change from 0 to 4096 [ 1190.535986][T27907] loop5: detected capacity change from 0 to 1024 [ 1190.555813][T27900] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 1190.679890][T27900] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 1191.269843][T27920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9306'. [ 1191.331839][T27920] netlink: 15 bytes leftover after parsing attributes in process `syz.0.9306'. [ 1191.576211][T27934] netlink: 92 bytes leftover after parsing attributes in process `syz.4.9314'. [ 1191.777879][T27940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1191.856488][T27942] netlink: 'syz.4.9318': attribute type 3 has an invalid length. [ 1191.886703][T27942] netlink: 'syz.4.9318': attribute type 3 has an invalid length. [ 1191.923660][T27942] netlink: 'syz.4.9318': attribute type 3 has an invalid length. [ 1191.957494][T27942] netlink: 'syz.4.9318': attribute type 3 has an invalid length. [ 1191.985500][T27942] netlink: 'syz.4.9318': attribute type 3 has an invalid length. [ 1192.017857][T27942] netlink: 'syz.4.9318': attribute type 3 has an invalid length. [ 1192.058018][T27942] netlink: 'syz.4.9318': attribute type 3 has an invalid length. [ 1192.076951][T27942] netlink: 'syz.4.9318': attribute type 3 has an invalid length. [ 1192.094767][T27942] netlink: 'syz.4.9318': attribute type 3 has an invalid length. [ 1192.138146][T27942] netlink: 'syz.4.9318': attribute type 3 has an invalid length. [ 1192.168762][T27952] loop1: detected capacity change from 0 to 2048 [ 1192.221201][T27952] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1192.827644][T27974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9333'. [ 1192.856554][T27974] netlink: 15 bytes leftover after parsing attributes in process `syz.4.9333'. [ 1192.857726][T27965] bond4 (unregistering): Released all slaves [ 1193.643819][T27998] CIFS mount error: No usable UNC path provided in device string! [ 1193.643819][T27998] [ 1193.686419][T27998] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1193.944414][T28000] hsr_slave_0 (unregistering): left promiscuous mode [ 1194.177345][T27982] loop6: detected capacity change from 0 to 32768 [ 1194.241481][T28008] lo speed is unknown, defaulting to 1000 [ 1194.270878][T27982] JBD2: Ignoring recovery information on journal [ 1194.390130][T28013] loop0: detected capacity change from 0 to 2048 [ 1194.453760][T28013] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1194.487807][T27982] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1194.534132][T28013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1194.931446][T28023] loop2: detected capacity change from 0 to 1024 [ 1194.954471][T28023] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1194.972460][T20664] ocfs2: Unmounting device (7,6) on (node local) [ 1195.021836][T28023] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1195.527969][T28023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1196.150031][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.284712][T28043] hsr_slave_0 (unregistering): left promiscuous mode [ 1196.350455][T28008] wlan1 speed is unknown, defaulting to 1000 [ 1196.360745][T28033] loop6: detected capacity change from 0 to 32768 [ 1196.421759][T28033] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1196.489380][T28008] virt_wifi0 speed is unknown, defaulting to 1000 [ 1196.538127][T28033] XFS (loop6): Ending clean mount [ 1196.733401][T28063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9371'. [ 1196.748343][ T5985] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 [ 1196.810702][ T5985] XFS (loop6): Unmount and run xfs_repair [ 1196.839526][ T5985] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1196.865677][T20664] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1196.909061][ T5985] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1196.963900][ T5985] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1197.030043][ T5985] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1197.071219][T28074] Cannot find map_set index 135 as target [ 1197.086928][ T5985] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1197.163383][ T5985] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1197.189770][T28078] xfrm0: entered promiscuous mode [ 1197.216002][ T5985] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1197.255207][ T5985] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1197.300601][ T5985] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1197.352466][ T5985] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x4 len 4 error 74 [ 1197.416065][ T5985] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1197.491504][ T5985] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 1197.523858][ T5985] loop6: lost filesystem error report for type 5 error -108 [ 1197.523934][ T5985] loop6: lost filesystem error report for type 5 error -117 [ 1197.543925][T28083] loop1: detected capacity change from 0 to 2048 [ 1197.692200][T28083] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1197.958336][T28097] validate_nla: 47 callbacks suppressed [ 1197.958364][T28097] netlink: 'syz.4.9388': attribute type 1 has an invalid length. [ 1198.012893][T28097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9388'. [ 1198.648023][T28116] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.9396'. [ 1198.693047][T28118] loop2: detected capacity change from 0 to 256 [ 1199.360290][T28130] m1Ie5nè‹Ò: entered promiscuous mode [ 1199.885132][T28112] loop6: detected capacity change from 0 to 32768 [ 1199.925146][T28112] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.9375 (28112) [ 1199.990825][T28112] BTRFS info (device loop6): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1200.026689][T28112] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 1200.296599][T28112] BTRFS info (device loop6): enabling ssd optimizations [ 1200.339437][T28112] BTRFS info (device loop6): turning on async discard [ 1200.381941][T28112] BTRFS info (device loop6): enabling free space tree [ 1201.141162][T20664] BTRFS info (device loop6): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1201.932357][T28225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1202.338969][T28237] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1202.856782][T28255] loop4: detected capacity change from 0 to 16 [ 1202.886650][T28255] erofs (device loop4): DAX unsupported by block device. Turning off DAX. [ 1203.574675][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1203.858770][T28255] erofs (device loop4): mounted with root inode @ nid 36. [ 1203.924623][T15632] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1203.941200][T28255] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 1204.025811][T28255] erofs (device loop4): read error -117 @ 0 of nid 89 [ 1204.033951][T28259] loop2: detected capacity change from 0 to 32768 [ 1204.064178][ T30] audit: type=1800 audit(1177.062:169): pid=28255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9458" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1204.102495][T28259] JBD2: Ignoring recovery information on journal [ 1204.238568][T28289] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9474'. [ 1204.289158][T28259] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1204.521743][T28292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1204.579152][T28292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.626497][T28294] loop1: detected capacity change from 0 to 64 [ 1204.681098][T28292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.735188][T28292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.859881][ T5849] ocfs2: Unmounting device (7,2) on (node local) [ 1205.049984][T28280] syz.0.9470 (28280): drop_caches: 2 [ 1205.093975][T28297] loop2: detected capacity change from 0 to 64 [ 1206.019101][T28318] loop5: detected capacity change from 0 to 4096 [ 1206.059043][T28318] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1206.096142][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9493'. [ 1206.191321][T28318] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1206.439906][T28341] random: crng reseeded on system resumption [ 1206.585441][T28344] bond0: Error: Cannot enslave bond to itself. [ 1206.626307][ T5985] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1206.658766][ T5999] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 1206.731006][T28348] loop0: detected capacity change from 0 to 2048 [ 1206.786316][T28348] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1206.807981][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 1206.833581][ T5985] usb 5-1: config 4 has an invalid interface number: 202 but max is 2 [ 1206.865405][ T5985] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.892662][ T5999] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1206.896797][ T5985] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 1206.932984][ T5999] usb 7-1: config 0 has no interface number 0 [ 1206.947116][ T5985] usb 5-1: config 4 has no interface number 0 [ 1206.957723][ T5999] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1206.971833][ T5985] usb 5-1: too many endpoints for config 4 interface 202 altsetting 31: 115, using maximum allowed: 30 [ 1207.010095][ T5999] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1207.012668][ T5985] usb 5-1: config 4 interface 202 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 1207.052678][ T5999] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1207.101955][ T5999] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1207.105280][ T5985] usb 5-1: config 4 interface 202 has no altsetting 0 [ 1207.152867][ T5999] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1207.159323][T28358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9508'. [ 1207.184197][ T5985] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=9a.c8 [ 1207.206782][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.211637][ T5999] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1207.228753][ T5985] usb 5-1: Product: syz [ 1207.247629][ T5985] usb 5-1: Manufacturer: syz [ 1207.259456][T28360] QAT: Stopping all acceleration devices. [ 1207.266838][ T5985] usb 5-1: SerialNumber: syz [ 1207.288236][ T5999] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1207.319031][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.357513][ T5999] usb 7-1: config 0 descriptor?? [ 1207.376478][T28339] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1207.394100][ T30] audit: type=1400 audit(1180.169:170): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=28363 comm="syz.2.9510" [ 1207.402461][T28339] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1207.485688][ T5999] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1207.526453][T28366] netlink: 'syz.1.9511': attribute type 11 has an invalid length. [ 1207.561812][ T5985] usb 5-1: USB disconnect, device number 60 [ 1207.918549][T11883] usb 7-1: USB disconnect, device number 22 [ 1207.941512][T28376] loop5: detected capacity change from 0 to 2048 [ 1207.947011][T11883] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1207.976793][T28376] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=301129, location=301129 [ 1208.035679][T28376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1208.289155][T28388] netlink: 5012 bytes leftover after parsing attributes in process `syz.1.9522'. [ 1208.503025][T28394] loop0: detected capacity change from 0 to 1024 [ 1208.536923][T28394] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1208.583514][T28394] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1208.618286][T28394] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1208.668622][T28394] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #3: comm syz.0.9525: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 1208.745714][T28394] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1208.748872][T28394] EXT4-fs (loop0): no journal found [ 1208.758069][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1208.758106][ C1] EXT4-fs (loop0): initial error at time 1181: ext4_ext_check_inode:521: inode 3 [ 1208.758164][ C1] EXT4-fs (loop0): last error at time 1181: ext4_ext_check_inode:521: inode 3 [ 1208.878257][T28394] EXT4-fs (loop0): can't get journal size [ 1208.926975][T28394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1209.005278][T28409] loop4: detected capacity change from 0 to 4096 [ 1209.015323][T28409] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 1209.042118][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1209.116470][T28409] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1209.196701][T28416] xt_TCPMSS: Only works on TCP SYN packets [ 1209.243464][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.546025][T28426] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1209.577691][T28428] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 1210.619634][T28463] loop2: detected capacity change from 0 to 512 [ 1210.701925][T28463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.840738][T28442] loop1: detected capacity change from 0 to 32768 [ 1210.849355][T28442] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9547 (28442) [ 1210.862978][T28474] netlink: 'syz.5.9563': attribute type 1 has an invalid length. [ 1210.895497][T28442] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1210.944715][T28442] BTRFS info (device loop1): using crc32c checksum algorithm [ 1211.068373][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.200128][T28494] bridge0: port 4(netdevsim1) entered blocking state [ 1211.222287][T28442] BTRFS info (device loop1): enabling ssd optimizations [ 1211.250957][T28489] loop0: detected capacity change from 0 to 2048 [ 1211.274355][T28494] bridge0: port 4(netdevsim1) entered disabled state [ 1211.286223][T28442] BTRFS info (device loop1): turning on flush-on-commit [ 1211.311511][T28489] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=301129, location=301129 [ 1211.340890][T28494] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1211.356092][T28442] BTRFS info (device loop1): enabling free space tree [ 1211.369596][T28489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1211.378127][T28442] BTRFS info (device loop1): enabling auto defrag [ 1211.403945][T28442] BTRFS info (device loop1): use lzo compression, level 1 [ 1211.436414][T28442] BTRFS info (device loop1): max_inline set to 4096 [ 1211.525648][T28503] netlink: 'syz.4.9570': attribute type 1 has an invalid length. [ 1211.588405][T28494] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1211.881811][T28511] netlink: 'syz.4.9574': attribute type 6 has an invalid length. [ 1212.134068][T28516] CIFS mount error: No usable UNC path provided in device string! [ 1212.134068][T28516] [ 1212.151328][T28516] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1212.347516][ T5851] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1212.466329][T28525] binder: 28523:28525 ioctl c0306201 2000000001c0 returned -14 [ 1212.795646][T28537] loop0: detected capacity change from 0 to 64 [ 1214.034409][T28572] autofs4:pid:28572:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 1214.078840][T28572] autofs4:pid:28572:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1214.169951][T28577] loop1: detected capacity change from 0 to 1024 [ 1214.469426][T28590] sit0: entered promiscuous mode [ 1214.524023][T28590] netlink: 'syz.5.9613': attribute type 1 has an invalid length. [ 1214.569050][T28590] netlink: 1 bytes leftover after parsing attributes in process `syz.5.9613'. [ 1214.853266][T28600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9617'. [ 1214.950984][T11883] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1214.993070][T28602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9618'. [ 1215.152410][T11883] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1215.189002][T11883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.229070][T11883] usb 1-1: Product: syz [ 1215.250802][T11883] usb 1-1: Manufacturer: syz [ 1215.274259][T11883] usb 1-1: SerialNumber: syz [ 1215.307194][T11883] usb 1-1: config 0 descriptor?? [ 1215.343660][T11883] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1215.444813][T28616] trusted_key: encrypted_key: keylen parameter is missing [ 1215.601721][T28618] loop6: detected capacity change from 0 to 64 [ 1215.715059][T28622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9629'. [ 1215.795378][T11883] gspca_m5602: Failed to find a sensor [ 1215.820432][T11883] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 1215.868502][T11883] usb 1-1: USB disconnect, device number 54 [ 1216.038778][T28628] netlink: 'syz.2.9632': attribute type 4 has an invalid length. [ 1216.465233][T28636] loop6: detected capacity change from 0 to 2048 [ 1216.614660][T28636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1216.731947][T28636] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #12: block 2: comm syz.6.9636: lblock 0 mapped to illegal pblock 2 (length 1) [ 1216.941667][T20664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.139851][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9646'. [ 1217.310666][T28661] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1217.366005][T28661] overlayfs: overlapping lowerdir path [ 1217.796358][ T5999] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1217.987986][ T5999] usb 3-1: Using ep0 maxpacket: 8 [ 1218.010663][ T5999] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1218.049499][ T5999] usb 3-1: config 0 has no interface number 0 [ 1218.079297][ T5999] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1218.098194][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.107557][ T5999] usb 3-1: Product: syz [ 1218.127205][ T5999] usb 3-1: Manufacturer: syz [ 1218.136211][ T5999] usb 3-1: SerialNumber: syz [ 1218.171611][ T5999] usb 3-1: config 0 descriptor?? [ 1218.335535][ T30] audit: type=1326 audit(1190.406:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28682 comm="syz.6.9659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1218.361782][T28684] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1218.363396][T28626] syz.4.9631 (28626): drop_caches: 2 [ 1218.419814][ T5999] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1218.455477][ T5999] uvcvideo 3-1:0.31: Failed to initialize entity for entity 32774 [ 1218.462557][ T30] audit: type=1326 audit(1190.444:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28682 comm="syz.6.9659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1218.487277][ T5999] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 1218.497709][T28687] loop1: detected capacity change from 0 to 256 [ 1218.544477][T28689] netlink: zone id is out of range [ 1218.571136][ T30] audit: type=1326 audit(1190.453:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28682 comm="syz.6.9659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1218.596398][T28689] netlink: zone id is out of range [ 1218.596420][T28689] netlink: zone id is out of range [ 1218.596436][T28689] netlink: zone id is out of range [ 1218.596451][T28689] netlink: zone id is out of range [ 1218.596466][T28689] netlink: zone id is out of range [ 1218.596481][T28689] netlink: zone id is out of range [ 1218.596495][T28689] netlink: zone id is out of range [ 1218.596511][T28689] netlink: zone id is out of range [ 1218.686714][T11882] usb 3-1: USB disconnect, device number 62 [ 1218.698348][T28687] FAT-fs (loop1): Directory bread(block 64) failed [ 1218.711559][T28687] FAT-fs (loop1): Directory bread(block 65) failed [ 1218.737785][T28687] FAT-fs (loop1): Directory bread(block 66) failed [ 1218.763181][T28687] FAT-fs (loop1): Directory bread(block 67) failed [ 1218.802731][T28687] FAT-fs (loop1): Directory bread(block 68) failed [ 1218.821766][T28687] FAT-fs (loop1): Directory bread(block 69) failed [ 1218.841388][ T30] audit: type=1326 audit(1190.453:174): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=28682 comm="syz.6.9659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1218.884107][T28687] FAT-fs (loop1): Directory bread(block 70) failed [ 1218.892786][T28687] FAT-fs (loop1): Directory bread(block 71) failed [ 1218.926265][T28687] FAT-fs (loop1): Directory bread(block 72) failed [ 1218.933483][ T30] audit: type=1326 audit(1190.463:175): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=28682 comm="syz.6.9659" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1218.960652][T28687] FAT-fs (loop1): Directory bread(block 73) failed [ 1218.984739][T28699] loop4: detected capacity change from 0 to 764 [ 1219.066338][T28699] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1219.108597][T28699] Symlink component flag not implemented [ 1219.126838][T28699] Symlink component flag not implemented (7) [ 1219.269880][T28704] netlink: 'syz.0.9669': attribute type 2 has an invalid length. [ 1219.548905][T28715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9672'. [ 1220.802492][T28719] syz.2.9675 (28719): drop_caches: 2 [ 1221.437412][ T5978] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1221.610699][ T5978] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.643444][ T5978] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1221.646411][T28753] binder: 28752:28753 ioctl c00c620f 2000000003c0 returned -22 [ 1221.673893][ T5978] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1221.698922][ T5978] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1221.718850][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.737416][ T5978] usb 3-1: Product: syz [ 1221.742026][ T5978] usb 3-1: Manufacturer: syz [ 1221.746673][ T5978] usb 3-1: SerialNumber: syz [ 1222.000006][ T5978] uvcvideo 3-1:220.0: probe with driver uvcvideo failed with error -22 [ 1222.015414][ T5978] usb 3-1: USB disconnect, device number 63 [ 1222.217419][ T5999] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1222.382723][ T5999] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1222.397034][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1222.408631][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1222.428140][ T5999] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1222.440480][ T5999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.448967][ T5999] usb 1-1: Product: syz [ 1222.453584][ T5999] usb 1-1: Manufacturer: syz [ 1222.458217][ T5999] usb 1-1: SerialNumber: syz [ 1222.466891][ T5999] usb 1-1: config 0 descriptor?? [ 1222.719078][T28763] loop2: detected capacity change from 0 to 164 [ 1223.637254][T28777] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1223.856144][T28781] loop0: detected capacity change from 0 to 64 [ 1224.096723][T28783] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5850] was attempted by ""[28783] [ 1225.283636][T28791] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9713'. [ 1226.093040][T28811] loop6: detected capacity change from 0 to 512 [ 1226.099959][T28814] xt_ecn: cannot match TCP bits for non-tcp packets [ 1226.121646][T28811] EXT4-fs: Ignoring removed mblk_io_submit option [ 1226.139009][T28811] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1226.237149][T28811] EXT4-fs (loop6): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1226.711114][T20664] EXT4-fs (loop6): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1227.066958][T28844] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1227.503495][T28854] loop1: detected capacity change from 0 to 128 [ 1227.558014][T28854] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1227.884477][ T5851] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1228.064808][T28873] loop2: detected capacity change from 0 to 8 [ 1228.177517][T28873] SQUASHFS error: Unable to read directory block [629:26] [ 1228.601947][T28887] net_ratelimit: 63 callbacks suppressed [ 1228.601975][T28887] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1228.846359][T28886] loop1: detected capacity change from 0 to 4096 [ 1228.899560][T28886] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1229.420732][T28905] loop5: detected capacity change from 0 to 512 [ 1229.495573][T28905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.533264][ T30] audit: type=1800 audit(1200.887:176): pid=28886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9752" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 1229.595041][T28910] netlink: 'syz.4.9763': attribute type 1 has an invalid length. [ 1229.629475][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.349835][T28928] IPv6: NLM_F_CREATE should be specified when creating new route [ 1230.782431][T28940] loop0: detected capacity change from 0 to 512 [ 1230.791207][T28934] loop5: detected capacity change from 0 to 1024 [ 1230.888657][T28940] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1230.961916][T28940] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1231.011694][T28940] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1231.039110][T28940] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e02c, mo2=0006] [ 1231.123553][T28940] System zones: 0-2, 18-18, 34-35 [ 1231.192836][T28940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1231.246666][T28944] loop6: detected capacity change from 0 to 4096 [ 1231.273919][T28944] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1231.662347][ T30] audit: type=1800 audit(1202.880:177): pid=28944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9779" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 1231.722804][T28913] loop4: detected capacity change from 0 to 32768 [ 1231.770506][T28913] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.9766 (28913) [ 1231.793099][T28945] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 1231.859080][T28913] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1231.923429][T28913] BTRFS info (device loop4): using crc32c checksum algorithm [ 1231.939222][T28945] EXT4-fs (loop0): Remounting filesystem read-only [ 1232.053862][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.182880][T28971] netlink: 'syz.6.9786': attribute type 22 has an invalid length. [ 1232.301124][T28913] BTRFS info (device loop4): enabling ssd optimizations [ 1232.351160][T28913] BTRFS info (device loop4): turning on flush-on-commit [ 1232.358368][T28913] BTRFS info (device loop4): enabling free space tree [ 1232.365770][T28913] BTRFS info (device loop4): enabling auto defrag [ 1232.374974][T28913] BTRFS info (device loop4): use lzo compression, level 1 [ 1232.382889][T28913] BTRFS info (device loop4): max_inline set to 4096 [ 1232.664489][T28986] bond0: (slave sit0): refused to change device type [ 1232.913334][ T30] audit: type=1326 audit(1204.050:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.6.9795" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1233.058324][ T30] audit: type=1326 audit(1204.078:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.6.9795" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1233.188334][ T5861] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1233.209083][ T30] audit: type=1326 audit(1204.088:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.6.9795" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1233.209163][ T30] audit: type=1326 audit(1204.088:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.6.9795" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1233.209239][ T30] audit: type=1326 audit(1204.097:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.6.9795" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1233.213111][ T30] audit: type=1326 audit(1204.097:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.6.9795" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1233.213214][ T30] audit: type=1326 audit(1204.097:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.6.9795" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1233.213289][ T30] audit: type=1326 audit(1204.097:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28991 comm="syz.6.9795" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1233.407657][T28998] lo speed is unknown, defaulting to 1000 [ 1233.697261][ T5999] iguanair 1-1:0.0: failed to get version [ 1233.698163][ T5999] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 1233.712839][ T5999] usb 1-1: USB disconnect, device number 55 [ 1233.778444][T29007] loop2: detected capacity change from 0 to 128 [ 1233.830216][T29008] loop0: detected capacity change from 0 to 1024 [ 1233.855961][T29007] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1234.146093][ T5849] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1234.957659][T29035] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1235.184739][T29044] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1235.197323][T29043] loop5: detected capacity change from 0 to 256 [ 1235.323591][T29050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9822'. [ 1235.347526][T28998] wlan1 speed is unknown, defaulting to 1000 [ 1235.561099][T28998] virt_wifi0 speed is unknown, defaulting to 1000 [ 1236.092308][T29065] loop5: detected capacity change from 0 to 1024 [ 1236.115196][T29049] loop4: detected capacity change from 0 to 32768 [ 1236.146632][T29070] loop0: detected capacity change from 0 to 256 [ 1236.148503][T29060] loop2: detected capacity change from 0 to 4096 [ 1236.154727][T29070] exfat: Deprecated parameter 'utf8' [ 1236.166606][T29070] exfat: Deprecated parameter 'utf8' [ 1236.187169][T29060] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1236.200018][T29049] (syz.4.9821,29049,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1236.204872][T29070] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1236.238838][T29049] (syz.4.9821,29049,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1236.266613][T29065] hfsplus: extend alloc file! (16384,256,150995124) [ 1236.300828][T29065] hfsplus: failed to extend attributes file [ 1236.344837][T29049] JBD2: Ignoring recovery information on journal [ 1236.475693][T29060] ntfs3(loop2): ino=19, mi_enum_attr [ 1236.484471][T29049] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1236.506534][T29060] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1237.228939][T29090] netlink: 'syz.6.9839': attribute type 1 has an invalid length. [ 1237.270816][T29090] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9839'. [ 1237.557032][T29098] loop1: detected capacity change from 0 to 128 [ 1238.040714][ T5861] ocfs2: Unmounting device (7,4) on (node local) [ 1238.431581][T29118] loop0: detected capacity change from 0 to 4096 [ 1238.529598][T29125] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1238.675137][T29118] NILFS error (device loop0): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 1238.713114][T29118] Remounting filesystem read-only [ 1238.821448][ T5850] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1239.023931][T29135] netlink: 'syz.2.9861': attribute type 22 has an invalid length. [ 1239.529913][T29147] loop1: detected capacity change from 0 to 1764 [ 1239.555136][T29122] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1239.587826][T29122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1239.678153][T29122] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1239.745776][T29153] loop4: detected capacity change from 0 to 64 [ 1239.810184][T29155] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9870'. [ 1239.887058][T29155] 0·: renamed from hsr0 (while UP) [ 1239.995312][T29155] 0·: entered allmulticast mode [ 1240.038532][T29155] hsr_slave_1: entered allmulticast mode [ 1240.039193][T29155] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1240.470161][T29166] loop1: detected capacity change from 0 to 2048 [ 1240.538505][T29166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1240.641658][T29141] loop5: detected capacity change from 0 to 32768 [ 1240.665608][T29166] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 100 [ 1240.725764][T29141] (syz.5.9863,29141,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1240.765717][T29141] (syz.5.9863,29141,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1240.895894][T29141] JBD2: Ignoring recovery information on journal [ 1241.203302][T29141] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1241.309181][T29186] loop4: detected capacity change from 0 to 4096 [ 1241.452700][T29186] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1241.570016][T29186] ntfs3(loop4): ino=1a, mi_enum_attr [ 1241.600034][T29186] ntfs3(loop4): ino=1a, mi_enum_attr [ 1241.627294][T29186] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1242.106853][T29203] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.9891'. [ 1242.577520][ T5866] ocfs2: Unmounting device (7,5) on (node local) [ 1243.428549][T29245] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.9911'. [ 1243.468664][T29245] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.9911'. [ 1243.522246][T29248] netlink: 9 bytes leftover after parsing attributes in process `syz.6.9912'. [ 1243.570978][T29248] 0·: renamed from hsr0 (while UP) [ 1243.619261][T29248] 0·: entered allmulticast mode [ 1243.645018][T29248] hsr_slave_0: entered allmulticast mode [ 1243.672750][T29248] hsr_slave_1: entered allmulticast mode [ 1243.684185][T29248] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1243.793764][T29257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1243.948778][T29261] loop4: detected capacity change from 0 to 1764 [ 1244.572588][T29285] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1245.697786][T29332] loop5: detected capacity change from 0 to 128 [ 1245.746020][T29332] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1245.810692][ T30] audit: type=1326 audit(1216.122:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29336 comm="syz.0.9956" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8a39ce59 code=0x7ffc0000 [ 1245.840215][ T30] audit: type=1326 audit(1216.150:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29336 comm="syz.0.9956" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8a39ce59 code=0x7ffc0000 [ 1245.865442][ T30] audit: type=1326 audit(1216.150:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29336 comm="syz.0.9956" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f4a8a39ce59 code=0x7ffc0000 [ 1245.890694][ T30] audit: type=1326 audit(1216.150:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29336 comm="syz.0.9956" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8a39ce59 code=0x7ffc0000 [ 1245.944180][ T30] audit: type=1326 audit(1216.150:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29336 comm="syz.0.9956" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8a39ce59 code=0x7ffc0000 [ 1246.071614][ T5866] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1246.390571][T29354] loop4: detected capacity change from 0 to 256 [ 1246.418162][T29354] exfat: Deprecated parameter 'utf8' [ 1246.440737][T29354] exfat: Deprecated parameter 'utf8' [ 1246.502309][T29354] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1246.503181][T29348] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1246.609493][T29348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1246.640906][T29358] loop6: detected capacity change from 0 to 2048 [ 1246.686788][T29348] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1246.713726][T15054] virt_wifi0 speed is unknown, defaulting to 1000 [ 1246.746884][T29358] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1246.911536][T29363] loop1: detected capacity change from 0 to 512 [ 1247.592954][T29375] loop1: detected capacity change from 0 to 4096 [ 1247.638372][T29375] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1247.727050][T29375] ntfs3(loop1): ino=19, mi_enum_attr [ 1247.752323][T29375] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1247.816793][T29385] tunl0: entered promiscuous mode [ 1247.853277][T29385] netlink: 'syz.2.9979': attribute type 4 has an invalid length. [ 1247.896521][T29385] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9979'. [ 1248.732842][T29371] loop5: detected capacity change from 0 to 32768 [ 1248.809657][T29371] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1248.863197][T29399] 0·: left allmulticast mode [ 1248.867988][T29399] hsr_slave_1: left allmulticast mode [ 1248.886457][T29399] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1248.945315][T29399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1248.980176][T29371] XFS (loop5): Ending clean mount [ 1249.215882][ T5866] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1249.692457][T29433] loop0: detected capacity change from 0 to 16 [ 1249.815880][T29433] erofs (device loop0): mounted with root inode @ nid 36. [ 1250.415467][T29439] syz.6.10002 (29439): drop_caches: 2 [ 1250.574066][T29448] loop5: detected capacity change from 0 to 4096 [ 1250.611713][T29448] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1250.726582][T29448] ntfs3(loop5): ino=19, mi_enum_attr [ 1250.754354][T29448] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1251.177836][ T30] audit: type=1326 audit(1221.147:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29468 comm="syz.4.10015" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2219ce59 code=0x7ffc0000 [ 1251.305843][ T30] audit: type=1326 audit(1221.147:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29468 comm="syz.4.10015" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2219ce59 code=0x7ffc0000 [ 1251.413816][ T30] audit: type=1326 audit(1221.203:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29468 comm="syz.4.10015" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2219ce59 code=0x7ffc0000 [ 1251.459594][T29461] bond2: left allmulticast mode [ 1251.474361][T29461] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1251.489120][T29461] bridge2: left promiscuous mode [ 1251.493302][ T30] audit: type=1326 audit(1221.203:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29468 comm="syz.4.10015" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fdf2219ce59 code=0x7ffc0000 [ 1251.528262][ T30] audit: type=1326 audit(1221.203:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29468 comm="syz.4.10015" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2219ce59 code=0x7ffc0000 [ 1251.556921][ T30] audit: type=1326 audit(1221.203:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29468 comm="syz.4.10015" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2219ce59 code=0x7ffc0000 [ 1251.588970][T29472] loop5: detected capacity change from 0 to 4096 [ 1251.602759][T29461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1251.648559][T29476] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1251.670684][ T30] audit: type=1326 audit(1221.203:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29468 comm="syz.4.10015" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2219ce59 code=0x7ffc0000 [ 1251.802059][ T30] audit: type=1326 audit(1221.213:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29468 comm="syz.4.10015" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdf2219ce59 code=0x7ffc0000 [ 1251.933999][ T30] audit: type=1326 audit(1221.213:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29468 comm="syz.4.10015" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdf2219ce59 code=0x7ffc0000 [ 1252.541731][T29499] loop2: detected capacity change from 0 to 128 [ 1252.557691][T29496] usb usb8: usbfs: process 29496 (syz.4.10030) did not claim interface 0 before use [ 1252.583593][T29503] netlink: 'syz.6.10032': attribute type 64 has an invalid length. [ 1252.619368][T29503] netlink: 9 bytes leftover after parsing attributes in process `syz.6.10032'. [ 1252.671520][T29499] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1252.726721][T29499] FAT-fs (loop2): Filesystem has been set read-only [ 1252.765806][T29499] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1252.822305][T29499] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1252.856184][T29499] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1252.902487][T29499] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1252.944876][T29499] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1252.987506][T29499] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1253.008548][T29499] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1253.042795][T29499] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1253.089036][T29499] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1253.131751][ T30] audit: type=1800 audit(1222.972:200): pid=29499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10029" name="file2" dev="loop2" ino=1048753 res=0 errno=0 [ 1253.193239][T29482] loop0: detected capacity change from 0 to 32768 [ 1253.219352][T29482] (syz.0.10020,29482,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1253.263869][T29482] (syz.0.10020,29482,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1253.359806][T29518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10039'. [ 1253.435096][T29482] JBD2: Ignoring recovery information on journal [ 1253.662520][T29482] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1254.564468][ T5850] ocfs2: Unmounting device (7,0) on (node local) [ 1254.786798][T29521] loop2: detected capacity change from 0 to 32768 [ 1254.858203][T29521] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1254.950423][T29565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10058'. [ 1254.981242][T29565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10058'. [ 1254.989366][T29521] XFS (loop2): Ending clean mount [ 1255.029260][T29563] loop1: detected capacity change from 0 to 2048 [ 1255.161658][T29566] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1255.311770][ T5849] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1256.091058][T29588] netlink: 'syz.5.10069': attribute type 7 has an invalid length. [ 1256.648874][T29606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1257.333721][T29590] loop6: detected capacity change from 0 to 32768 [ 1257.376795][T29590] (syz.6.10067,29590,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1257.425630][T29590] (syz.6.10067,29590,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1257.512787][T29590] JBD2: Ignoring recovery information on journal [ 1257.594901][T29590] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1258.030862][T29608] loop1: detected capacity change from 0 to 32768 [ 1258.093854][T29608] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1258.159566][T29642] loop2: detected capacity change from 0 to 4096 [ 1258.251349][T29642] ntfs3(loop2): ino=19, mi_enum_attr [ 1258.260061][T29608] XFS (loop1): Ending clean mount [ 1258.697855][ T5851] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1258.777087][T20664] ocfs2: Unmounting device (7,6) on (node local) [ 1259.115719][T29655] loop4: detected capacity change from 0 to 4096 [ 1259.186355][T29655] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1259.356624][T29655] ntfs3(loop4): ino=19, mi_enum_attr [ 1259.382948][T29655] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1259.892943][T29650] loop5: detected capacity change from 0 to 32768 [ 1259.909885][T29650] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.10094 (29650) [ 1259.985383][T29650] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1260.024680][T29668] netlink: 'syz.1.10104': attribute type 5 has an invalid length. [ 1260.041302][T29650] BTRFS info (device loop5): using crc32c checksum algorithm [ 1260.082499][T29670] netlink: 'syz.0.10114': attribute type 10 has an invalid length. [ 1260.256300][T29650] BTRFS info (device loop5): enabling ssd optimizations [ 1260.282441][T29650] BTRFS info (device loop5): turning on flush-on-commit [ 1260.289440][T29650] BTRFS info (device loop5): enabling free space tree [ 1260.298660][T29650] BTRFS info (device loop5): force zlib compression, level 3 [ 1260.310364][T29650] BTRFS info (device loop5): max_inline set to 4096 [ 1260.475038][T29661] loop2: detected capacity change from 0 to 32768 [ 1260.501631][ T5866] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1260.522805][T29661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10100 (29661) [ 1260.541171][T29695] TCP: TCP_TX_DELAY enabled [ 1260.636422][T29661] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1260.701177][T29661] BTRFS info (device loop2): using sha256 checksum algorithm [ 1261.028865][T29661] BTRFS info (device loop2): enabling ssd optimizations [ 1261.073644][T29661] BTRFS info (device loop2): turning on async discard [ 1261.126465][T29661] BTRFS info (device loop2): enabling free space tree [ 1261.165008][T29670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.232680][T29670] team0: Port device bond0 added [ 1261.492839][ T5849] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1261.498174][T29726] netlink: 'syz.1.10116': attribute type 1 has an invalid length. [ 1261.569848][T29726] netlink: 244 bytes leftover after parsing attributes in process `syz.1.10116'. [ 1261.647735][T29732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10119'. [ 1261.691206][T29732] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10119'. [ 1261.753666][T29732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10119'. [ 1262.059023][T29738] loop1: detected capacity change from 0 to 128 [ 1262.176150][T29742] loop5: detected capacity change from 0 to 2048 [ 1262.185149][T29741] loop6: detected capacity change from 0 to 1024 [ 1262.197382][T29738] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1262.260283][T29741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1262.265851][T29750] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1262.286872][T29742] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1262.289927][T29738] EXT4-fs warning (device loop1): verify_group_input:136: Cannot add at group 7 (only 1 groups) [ 1262.350532][T29741] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1262.362028][T29742] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1262.382575][T29741] System zones: 0-1, 3-36 [ 1262.431839][T29741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1262.679876][T20664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.801341][ T5851] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1263.013454][T29758] loop2: detected capacity change from 0 to 4096 [ 1263.035648][T29758] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1263.069426][T29763] xt_NFQUEUE: number of total queues is 0 [ 1263.897126][T29783] loop5: detected capacity change from 0 to 16 [ 1263.917271][T29782] loop6: detected capacity change from 0 to 512 [ 1263.951181][T29783] erofs (device loop5): mounted with root inode @ nid 36. [ 1263.975366][T29782] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1264.036811][T29782] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.10141: bad orphan inode 15 [ 1264.099190][T29782] loop6: lost filesystem error report for type 5 error -117 [ 1264.107351][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1264.121270][ C1] EXT4-fs (loop6): initial error at time 1233: ext4_orphan_get:1423 [ 1264.129367][ C1] EXT4-fs (loop6): last error at time 1233: ext4_orphan_get:1423 [ 1264.152538][T29782] EXT4-fs (loop6): Remounting filesystem read-only [ 1264.239458][T29782] ext4_test_bit(bit=14, block=18) = 1 [ 1264.268016][T29782] is_bad_inode(inode)=0 [ 1264.285381][T29782] NEXT_ORPHAN(inode)=1023 [ 1264.307393][T29782] max_ino=32 [ 1264.335639][T29782] i_nlink=0 [ 1264.383154][T29782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1264.495928][T29796] comedi comedi3: comedi_config --init_data is deprecated [ 1264.631449][T29800] loop2: detected capacity change from 0 to 256 [ 1264.667083][T29800] exfat: Deprecated parameter 'utf8' [ 1264.722039][T20664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.787945][T29800] exFAT-fs (loop2): error, data size is invalid(34359738378) [ 1264.812279][T29800] exFAT-fs (loop2): Filesystem has been set read-only [ 1265.668959][T29827] loop4: detected capacity change from 0 to 16 [ 1265.713460][T29827] erofs (device loop4): mounted with root inode @ nid 36. [ 1265.832588][T29827] erofs (device loop4): readahead error at folio 0 @ nid 89 [ 1265.864146][T29798] loop1: detected capacity change from 0 to 32768 [ 1265.875046][T29827] erofs (device loop4): read error -117 @ 0 of nid 89 [ 1265.887017][T29834] loop2: detected capacity change from 0 to 128 [ 1265.904242][T29798] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10149 (29798) [ 1265.927544][ T30] audit: type=1800 audit(1234.950:201): pid=29827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10164" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1265.986954][T29798] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1265.991187][T29840] loop0: detected capacity change from 0 to 256 [ 1266.025163][T29798] BTRFS info (device loop1): using sha256 checksum algorithm [ 1266.036570][T29839] loop6: detected capacity change from 0 to 2048 [ 1266.090419][T29839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1266.174414][T29839] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 100 [ 1266.215095][T29798] BTRFS info (device loop1): enabling ssd optimizations [ 1266.235086][T15054] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1266.249652][T29858] loop4: detected capacity change from 0 to 512 [ 1266.252821][T29798] BTRFS info (device loop1): turning on async discard [ 1266.252884][T29798] BTRFS info (device loop1): enabling free space tree [ 1266.292490][T29858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1266.420079][T15054] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1266.429548][T15054] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1266.442093][T15054] usb 6-1: Product: syz [ 1266.446527][T15054] usb 6-1: SerialNumber: syz [ 1266.452177][ T5851] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1266.477509][T15054] usb 6-1: config 0 descriptor?? [ 1266.709954][T15054] hso 6-1:0.0: Can't find BULK endpoints [ 1266.791305][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.954778][T15054] usb 6-1: USB disconnect, device number 68 [ 1267.334640][ T5985] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1267.538373][ T5985] usb 3-1: Using ep0 maxpacket: 16 [ 1267.559621][ T5985] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1267.590137][ T5985] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1267.625704][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 1267.669275][ T5985] usb 3-1: Product: syz [ 1267.683778][ T5985] usb 3-1: Manufacturer: syz [ 1267.714634][ T5985] usb 3-1: SerialNumber: syz [ 1267.763936][ T5985] usb 3-1: config 0 descriptor?? [ 1267.787547][ T5985] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1267.819852][T29889] loop0: detected capacity change from 0 to 2048 [ 1267.876133][T29889] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1268.097482][ T5985] usb 3-1: USB disconnect, device number 64 [ 1268.156407][T29889] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 100 [ 1268.198719][T29900] netlink: 'syz.1.10191': attribute type 10 has an invalid length. [ 1268.348385][T29896] xfrm0: left promiscuous mode [ 1268.369906][T29896] xfrm0: left allmulticast mode [ 1268.583273][T29896] sit1: left promiscuous mode [ 1268.618729][T29896] vxcan3: left promiscuous mode [ 1268.634584][T29896] vxcan3: left allmulticast mode [ 1268.652278][T29896] bridge1: left promiscuous mode [ 1268.654621][T29907] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1268.667613][T29896] vti0: left promiscuous mode [ 1268.693009][T29896] vti0: left allmulticast mode [ 1268.721229][T29906] NILFS error (device loop6): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 1268.761292][T29900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.798271][T29900] team0: Port device bond0 added [ 1268.804171][T29906] Remounting filesystem read-only [ 1268.942796][T29909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10194'. [ 1268.976702][T29909] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10194'. [ 1268.992776][T29909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10194'. [ 1269.004860][T20664] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 1269.131649][T29911] x_tables: duplicate entry at hook 2 [ 1269.228811][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1269.474195][T29898] set_capacity_and_notify: 1 callbacks suppressed [ 1269.474223][T29898] loop5: detected capacity change from 0 to 32768 [ 1269.494630][T22401] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1269.548985][T11883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1269.568646][T22401] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1269.570631][T29919] loop2: detected capacity change from 0 to 2048 [ 1269.628318][T29898] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1269.686622][T11883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1269.715472][T29919] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1269.798863][T29937] loop1: detected capacity change from 0 to 16 [ 1269.845034][T29937] erofs (device loop1): mounted with root inode @ nid 36. [ 1269.945680][T11883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1270.140835][T29898] XFS (loop5): Starting recovery (logdev: internal) [ 1270.151574][T29939] loop4: detected capacity change from 0 to 4096 [ 1270.183622][T29939] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1270.358270][T29898] XFS (loop5): Ending recovery (logdev: internal) [ 1270.390204][T29939] ntfs3(loop4): ino=19, mi_enum_attr [ 1270.427645][T29939] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1270.827344][T29898] XFS (loop5): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1270.840047][T29953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1270.848829][T29949] loop2: detected capacity change from 0 to 4096 [ 1270.886230][T29898] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 [ 1270.917598][T29953] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1270.947883][T29953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1270.957098][T29898] XFS (loop5): Unmount and run xfs_repair [ 1270.981215][T29954] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1271.006576][T29917] loop6: detected capacity change from 0 to 32768 [ 1271.022009][T29898] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1271.056816][T29898] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 1271.073214][T29949] NILFS error (device loop2): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 1271.082136][T29898] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 1271.092724][T29898] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 1271.103596][T29898] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 1271.114049][T29898] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 1271.135723][T29898] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1271.146833][T29917] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1271.155608][T29898] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1271.166664][T29898] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1271.178297][T29898] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x4 len 4 error 74 [ 1271.192595][T29949] Remounting filesystem read-only [ 1271.249212][T29917] XFS (loop6): Ending clean mount [ 1271.319593][T29898] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1271.400477][T29898] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 1271.479687][ T5849] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1271.540916][T20664] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1271.680976][ T5866] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1271.892338][T29945] loop1: detected capacity change from 0 to 32768 [ 1271.943246][T29945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10209 (29945) [ 1272.036408][T29945] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1272.100691][T29945] BTRFS info (device loop1): using sha256 checksum algorithm [ 1272.351969][T29997] loop0: detected capacity change from 0 to 512 [ 1272.483950][T29945] BTRFS info (device loop1): rebuilding free space tree [ 1272.584007][T29997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.821662][T29945] BTRFS info (device loop1): enabling ssd optimizations [ 1272.889606][T29945] BTRFS info (device loop1): using spread ssd allocation scheme [ 1272.931657][T30005] loop6: detected capacity change from 0 to 4096 [ 1272.938828][T29945] BTRFS info (device loop1): enabling free space tree [ 1272.967050][T29945] BTRFS info (device loop1): force clearing of disk cache [ 1272.976053][T30005] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1272.995160][T29945] BTRFS info (device loop1): enabling auto defrag [ 1273.101124][T30014] loop2: detected capacity change from 0 to 64 [ 1273.224528][T30014] Trying to free block not in datazone [ 1273.285966][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.338835][T30017] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10230'. [ 1273.511544][ T5851] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1273.928143][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1274.259359][T15054] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1274.461125][T15054] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1274.490012][T15054] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.516608][T30044] new mount options do not match the existing superblock, will be ignored [ 1274.535151][T15054] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1274.552624][T30047] xt_policy: output policy not valid in PREROUTING and INPUT [ 1274.594193][T15054] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1274.631300][T15054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.681395][T15054] usb 7-1: Product: syz [ 1274.716821][T15054] usb 7-1: Manufacturer: syz [ 1274.737782][T15054] usb 7-1: SerialNumber: syz [ 1274.867744][T30046] loop5: detected capacity change from 0 to 4096 [ 1275.071130][T30057] netlink: 'syz.1.10249': attribute type 10 has an invalid length. [ 1275.324576][T15054] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1275.460103][T15054] usb 7-1: USB disconnect, device number 23 [ 1275.511367][T22402] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.683315][T30072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10257'. [ 1275.683657][ T5646] udevd[5646]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1275.722236][T30069] loop0: detected capacity change from 0 to 2048 [ 1275.837449][T30074] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1276.364343][T30088] loop0: detected capacity change from 0 to 16 [ 1276.412021][T30088] erofs (device loop0): DAX unsupported by block device. Turning off DAX. [ 1276.794695][T30102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10269'. [ 1277.015026][T30107] netlink: 'syz.2.10273': attribute type 10 has an invalid length. [ 1277.077198][T30107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1277.113823][T30110] netlink: 'syz.4.10275': attribute type 2 has an invalid length. [ 1277.135722][T30107] team0: Port device bond0 added [ 1277.142880][T30110] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10275'. [ 1277.172165][T30088] erofs (device loop0): mounted with root inode @ nid 36. [ 1277.269331][T30077] loop5: detected capacity change from 0 to 32768 [ 1277.291501][T15632] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1277.300061][T30077] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.10258 (30077) [ 1277.320276][T30088] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 1277.339182][T30088] erofs (device loop0): read error -117 @ 0 of nid 89 [ 1277.372631][ T30] audit: type=1800 audit(1245.655:202): pid=30088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10262" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1277.416173][T30077] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1277.452442][T30077] BTRFS info (device loop5): using sha256 checksum algorithm [ 1277.761284][T30077] BTRFS info (device loop5): enabling ssd optimizations [ 1277.796560][T30077] BTRFS info (device loop5): turning on async discard [ 1277.815898][T30077] BTRFS info (device loop5): enabling free space tree [ 1278.075836][ T5866] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1278.704972][T15054] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1278.740518][T30149] sit0: left promiscuous mode [ 1278.898384][T15054] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1278.929452][T15054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.956183][T15054] usb 1-1: Product: syz [ 1278.976436][T15054] usb 1-1: Manufacturer: syz [ 1278.992029][T30149] bridge0: port 4(netdevsim1) entered blocking state [ 1278.999073][T30149] bridge0: port 4(netdevsim1) entered forwarding state [ 1279.006466][T30149] bridge0: port 3(dummy0) entered blocking state [ 1279.013022][T30149] bridge0: port 3(dummy0) entered forwarding state [ 1279.019952][T30149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.027229][T30149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.034766][T30149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.042092][T30149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.052459][T30122] loop2: detected capacity change from 0 to 32768 [ 1279.057821][T15054] usb 1-1: SerialNumber: syz [ 1279.079506][T30149] bridge0: left allmulticast mode [ 1279.109276][T30122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10278 (30122) [ 1279.200243][T15054] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1279.205263][T30122] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1279.262400][ T5985] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1279.307477][T30122] BTRFS info (device loop2): using sha256 checksum algorithm [ 1279.679825][T30122] BTRFS info (device loop2): enabling ssd optimizations [ 1279.724009][T30122] BTRFS info (device loop2): turning on async discard [ 1279.761260][T30122] BTRFS info (device loop2): enabling free space tree [ 1279.794290][T11883] usb 1-1: USB disconnect, device number 56 [ 1280.078802][ T5849] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1280.160262][T30175] netlink: 'syz.4.10291': attribute type 10 has an invalid length. [ 1280.254559][T30179] loop5: detected capacity change from 0 to 16 [ 1280.277595][T30179] erofs (device loop5): DAX unsupported by block device. Turning off DAX. [ 1280.283205][T30175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.327692][T30175] team0: Port device bond0 added [ 1280.470082][T30153] loop1: detected capacity change from 0 to 32768 [ 1280.530988][T30153] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10288 (30153) [ 1280.537018][ T5985] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1280.604426][ T5985] ath9k_htc: Failed to initialize the device [ 1280.647060][T11883] usb 1-1: ath9k_htc: USB layer deinitialized [ 1280.742360][T30183] loop6: detected capacity change from 0 to 2048 [ 1280.798337][T30183] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1280.871103][T30153] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1280.927609][T30153] BTRFS info (device loop1): using sha256 checksum algorithm [ 1281.152060][T30153] BTRFS info (device loop1): enabling ssd optimizations [ 1281.160566][T30153] BTRFS info (device loop1): turning on async discard [ 1281.170514][T30153] BTRFS info (device loop1): enabling free space tree [ 1281.581552][ T5851] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1281.593555][T30179] erofs (device loop5): mounted with root inode @ nid 36. [ 1281.612027][T30214] loop0: detected capacity change from 0 to 64 [ 1282.001814][T15632] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 1282.029057][T30179] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 1282.167242][T30179] erofs (device loop5): read error -117 @ 0 of nid 89 [ 1282.211278][ T30] audit: type=1800 audit(1250.175:203): pid=30179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10293" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1282.332414][T30222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10306'. [ 1282.442494][T30224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10308'. [ 1282.455350][T30218] loop2: detected capacity change from 0 to 4096 [ 1282.485829][T30218] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1282.634867][T30226] loop1: detected capacity change from 0 to 512 [ 1282.711489][T30218] ntfs3(loop2): ino=19, mi_enum_attr [ 1282.733009][T30218] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1282.774059][T30228] loop0: detected capacity change from 0 to 128 [ 1282.788767][T30226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1282.899060][T30228] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1282.905285][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1282.938453][T30226] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.10309: bg 0: block 384: padding at end of block bitmap is not set [ 1283.053898][T30226] loop1: lost filesystem error report for type 5 error -117 [ 1283.054948][T30226] EXT4-fs (loop1): Remounting filesystem read-only [ 1283.068945][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1283.068986][ C0] EXT4-fs (loop1): initial error at time 1250: ext4_validate_block_bitmap:440 [ 1283.069033][ C0] EXT4-fs (loop1): last error at time 1250: ext4_validate_block_bitmap:440 [ 1283.177954][T30208] loop6: detected capacity change from 0 to 32768 [ 1283.214929][T30226] EXT4-fs (loop1): 1 truncate cleaned up [ 1283.238567][T30226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1283.292280][T30208] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1283.295235][T30242] netlink: 'syz.2.10313': attribute type 2 has an invalid length. [ 1283.321385][T30242] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10313'. [ 1283.460011][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.475192][ T5850] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1283.803683][T30208] XFS (loop6): Starting recovery (logdev: internal) [ 1283.884896][T30208] XFS (loop6): Ending recovery (logdev: internal) [ 1284.101613][T30208] XFS (loop6): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1284.151809][T30208] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 [ 1284.173886][T30208] XFS (loop6): Unmount and run xfs_repair [ 1284.189850][T30208] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 1284.206645][T30208] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 1284.226192][T30208] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 1284.236069][T30208] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 1284.246032][T30208] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 1284.275585][T30208] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 1284.285017][T30208] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1284.294615][T30208] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1284.303616][T30208] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1284.313561][T30208] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x4 len 4 error 74 [ 1284.372288][T30208] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1284.393110][T30208] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 1284.457767][T20664] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1284.631356][ T30] audit: type=1326 audit(1252.440:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30266 comm="syz.1.10324" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9679ce59 code=0x7ffc0000 [ 1284.692696][T30269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1284.779565][ T30] audit: type=1326 audit(1252.449:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30266 comm="syz.1.10324" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9679ce59 code=0x7ffc0000 [ 1284.905714][ T30] audit: type=1326 audit(1252.496:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30266 comm="syz.1.10324" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9679ce59 code=0x7ffc0000 [ 1284.960402][T30273] netlink: 'syz.2.10328': attribute type 4 has an invalid length. [ 1285.000811][ T30] audit: type=1326 audit(1252.515:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30266 comm="syz.1.10324" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f7c9679ce59 code=0x7ffc0000 [ 1285.108876][ T30] audit: type=1326 audit(1252.515:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30266 comm="syz.1.10324" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9679ce59 code=0x7ffc0000 [ 1285.256308][ T30] audit: type=1326 audit(1252.515:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30266 comm="syz.1.10324" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9679ce59 code=0x7ffc0000 [ 1285.324349][T30283] netlink: 'syz.6.10323': attribute type 10 has an invalid length. [ 1285.355844][ T30] audit: type=1326 audit(1252.515:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30266 comm="syz.1.10324" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c9679ce59 code=0x7ffc0000 [ 1285.404360][T30283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.445909][T30283] team0: Port device bond0 added [ 1285.453736][ T30] audit: type=1326 audit(1252.515:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30266 comm="syz.1.10324" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7c9679ce59 code=0x7ffc0000 [ 1285.553980][ T30] audit: type=1326 audit(1252.515:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30266 comm="syz.1.10324" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7c9679ce59 code=0x7ffc0000 [ 1285.852167][ T30] audit: type=1326 audit(1253.591:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30297 comm="syz.0.10342" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8a39ce59 code=0x7ffc0000 [ 1286.349096][T30313] usb usb8: usbfs: process 30313 (syz.0.10348) did not claim interface 0 before use [ 1286.430140][T30277] loop1: detected capacity change from 0 to 32768 [ 1286.470844][T30277] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10329 (30277) [ 1286.530063][T30277] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1286.574987][T30277] BTRFS info (device loop1): using crc32c checksum algorithm [ 1286.852105][T30277] BTRFS info (device loop1): enabling ssd optimizations [ 1286.900491][T30277] BTRFS info (device loop1): turning on flush-on-commit [ 1286.943689][T30277] BTRFS info (device loop1): enabling free space tree [ 1286.980912][T30277] BTRFS info (device loop1): force zlib compression, level 3 [ 1287.008472][T30277] BTRFS info (device loop1): max_inline set to 4096 [ 1287.226499][ T5851] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1287.227805][T30298] loop6: detected capacity change from 0 to 32768 [ 1287.231734][T30298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10340 (30298) [ 1287.240058][T30298] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1287.240114][T30298] BTRFS info (device loop6): using sha256 checksum algorithm [ 1287.428694][T30298] BTRFS info (device loop6): enabling ssd optimizations [ 1287.475471][T30298] BTRFS info (device loop6): turning on async discard [ 1287.510539][T30298] BTRFS info (device loop6): enabling free space tree [ 1287.870774][T20664] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1287.994798][T30376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10364'. [ 1288.802440][T30397] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1289.816960][T30390] loop2: detected capacity change from 0 to 32768 [ 1289.850941][T30390] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10370 (30390) [ 1289.886484][T30390] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1289.897120][T30390] BTRFS info (device loop2): using crc32c checksum algorithm [ 1289.983006][T30408] loop5: detected capacity change from 0 to 32768 [ 1290.004676][T30390] BTRFS info (device loop2): enabling ssd optimizations [ 1290.006180][T30408] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.10378 (30408) [ 1290.022751][T30390] BTRFS info (device loop2): turning on flush-on-commit [ 1290.043170][T30390] BTRFS info (device loop2): enabling free space tree [ 1290.053534][T30390] BTRFS info (device loop2): force zlib compression, level 3 [ 1290.063297][T30390] BTRFS info (device loop2): max_inline set to 4096 [ 1290.107746][T30408] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1290.143054][T30408] BTRFS info (device loop5): using sha256 checksum algorithm [ 1290.269599][T30408] BTRFS info (device loop5): enabling ssd optimizations [ 1290.289909][T30408] BTRFS info (device loop5): turning on async discard [ 1290.304535][T30408] BTRFS info (device loop5): enabling free space tree [ 1290.317647][ T5849] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1290.498233][ T5866] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1290.909034][ T5985] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1291.011886][T30455] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1291.130470][ T5985] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1291.146556][ T5985] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1291.175694][ T5985] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.201343][ T5985] usb 1-1: config 220 has no interface number 2 [ 1291.215876][ T5985] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1291.274078][ T5985] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1291.281196][T30459] netlink: 'syz.5.10381': attribute type 10 has an invalid length. [ 1291.311654][ T5985] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1291.332363][ T5985] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1291.340446][T30461] netlink: 'syz.4.10387': attribute type 2 has an invalid length. [ 1291.351092][T30459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.377565][T30459] team0: Port device bond0 added [ 1291.383236][ T5985] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1291.400434][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.419510][ T5985] usb 1-1: Product: syz [ 1291.427811][ T5985] usb 1-1: Manufacturer: syz [ 1291.438594][ T5985] usb 1-1: SerialNumber: syz [ 1291.712903][ T5985] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1291.747831][ T5985] uvcvideo 1-1:220.0: No valid video chain found. [ 1291.782428][ T5985] usb 1-1: selecting invalid altsetting 0 [ 1291.836477][T30451] loop6: detected capacity change from 0 to 32768 [ 1291.871924][T30451] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10383 (30451) [ 1291.908851][ T5985] usb 1-1: selecting invalid altsetting 0 [ 1291.945564][ T5985] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1291.999036][ T5985] usb 1-1: USB disconnect, device number 57 [ 1292.019791][T30451] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1292.065206][T30451] BTRFS info (device loop6): using sha256 checksum algorithm [ 1292.325033][T30451] BTRFS info (device loop6): enabling ssd optimizations [ 1292.332166][T30451] BTRFS info (device loop6): turning on async discard [ 1292.340079][T30451] BTRFS info (device loop6): enabling free space tree [ 1292.876295][T20664] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1293.076462][T30477] loop4: detected capacity change from 0 to 32768 [ 1293.122904][T30477] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 9aec7173-bdde-4c4e-90bf-69b61702174c [ 1293.142579][T30477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.10396 (30477) [ 1293.210914][T30477] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1293.251445][T30477] BTRFS info (device loop4): using sha256 checksum algorithm [ 1293.428921][T30523] netlink: 'syz.6.10405': attribute type 2 has an invalid length. [ 1293.613481][T30477] BTRFS info (device loop4): enabling ssd optimizations [ 1293.654868][T30477] BTRFS info (device loop4): turning on async discard [ 1293.677377][T30477] BTRFS info (device loop4): enabling free space tree [ 1294.015169][ T5861] BTRFS info (device loop4): last unmount of filesystem 9aec7173-bdde-4c4e-90bf-69b61702174c [ 1294.243248][T30545] loop0: detected capacity change from 0 to 1024 [ 1294.348129][T30545] hfsplus: extend alloc file! (16384,256,150995124) [ 1294.493229][T30545] hfsplus: failed to extend attributes file [ 1294.785508][T30508] loop2: detected capacity change from 0 to 32768 [ 1294.838943][T30508] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10404 (30508) [ 1294.945408][T30508] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1294.995379][T30508] BTRFS info (device loop2): using sha256 checksum algorithm [ 1295.240698][T30508] BTRFS info (device loop2): rebuilding free space tree [ 1295.412168][T30508] BTRFS info (device loop2): enabling ssd optimizations [ 1295.417209][T30579] loop5: detected capacity change from 0 to 2048 [ 1295.441175][T30508] BTRFS info (device loop2): using spread ssd allocation scheme [ 1295.497726][T30508] BTRFS info (device loop2): enabling free space tree [ 1295.528201][T30508] BTRFS info (device loop2): force clearing of disk cache [ 1295.554037][T30508] BTRFS info (device loop2): enabling auto defrag [ 1295.558287][T30583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1295.586009][T30585] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1295.920097][ T5849] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1296.368820][T30551] loop4: detected capacity change from 0 to 32768 [ 1296.418431][T30551] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.10418 (30551) [ 1296.580812][T30551] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1296.641983][T30551] BTRFS info (device loop4): using sha256 checksum algorithm [ 1296.751304][T30566] loop6: detected capacity change from 0 to 32768 [ 1296.774471][T30566] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10425 (30566) [ 1296.855560][T30566] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1296.953302][T30551] BTRFS info (device loop4): enabling ssd optimizations [ 1296.985686][T30566] BTRFS info (device loop6): using crc32c checksum algorithm [ 1297.026951][T30551] BTRFS info (device loop4): turning on async discard [ 1297.037966][T30551] BTRFS info (device loop4): enabling free space tree [ 1297.421025][T30566] BTRFS info (device loop6): enabling ssd optimizations [ 1297.464867][T30566] BTRFS info (device loop6): turning on flush-on-commit [ 1297.527576][T30566] BTRFS info (device loop6): enabling free space tree [ 1297.571895][T30566] BTRFS info (device loop6): force zlib compression, level 3 [ 1297.579791][ T5861] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1297.638476][T30566] BTRFS info (device loop6): max_inline set to 4096 [ 1297.891768][T30649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10447'. [ 1298.021462][T20664] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1298.298708][T30660] netlink: 'syz.0.10452': attribute type 7 has an invalid length. [ 1298.333844][T30660] netlink: 'syz.0.10452': attribute type 8 has an invalid length. [ 1299.084321][T11883] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1299.277036][T11883] usb 1-1: Using ep0 maxpacket: 32 [ 1299.308673][T11883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1299.354099][T11883] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.413298][T11883] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1299.483939][T11883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.518062][T11883] usb 1-1: Product: syz [ 1299.545086][T11883] usb 1-1: Manufacturer: syz [ 1299.562661][T30694] loop6: detected capacity change from 0 to 512 [ 1299.569646][T11883] usb 1-1: SerialNumber: syz [ 1299.611994][T30694] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1299.741731][T30694] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.10468: corrupted xattr entries [ 1299.751403][T30698] loop5: detected capacity change from 0 to 512 [ 1299.761751][T30694] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1299.762510][T30694] EXT4-fs (loop6): Remounting filesystem read-only [ 1299.788629][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1299.795219][ C0] EXT4-fs (loop6): initial error at time 1266: xattr_find_entry:337: inode 15 [ 1299.804205][ C0] EXT4-fs (loop6): last error at time 1266: xattr_find_entry:337: inode 15 [ 1299.844474][T30694] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1299.865832][T30698] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1299.923743][T30705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10472'. [ 1299.933373][T30698] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 1299.950088][T30694] EXT4-fs (loop6): 1 truncate cleaned up [ 1299.958012][T30694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.972695][T30698] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1300.008250][T30698] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #13: comm syz.5.10470: iget: bad i_size value: 12154761577498 [ 1300.073958][T30698] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1300.078019][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1300.093762][ C1] EXT4-fs (loop5): initial error at time 1266: ext4_orphan_get:1397: inode 13 [ 1300.102715][ C1] EXT4-fs (loop5): last error at time 1266: ext4_orphan_get:1397: inode 13 [ 1300.118903][T30698] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.10470: couldn't read orphan inode 13 (err -117) [ 1300.201368][T30698] loop5: lost filesystem error report for type 5 error -117 [ 1300.240543][T30698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1300.264134][T11883] usb 1-1: Not enough endpoints found in device, aborting! [ 1300.345426][T20664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.361235][T11883] usb 1-1: USB disconnect, device number 58 [ 1300.444956][T30698] EXT4-fs warning (device loop5): dx_probe:859: inode #2: comm syz.5.10470: dx entry: limit 65535 != root limit 120 [ 1300.492989][T30698] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.10470: Corrupt directory, running e2fsck is recommended [ 1300.749261][ T5866] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.176891][T30731] SET target dimension over the limit! [ 1302.063038][T11883] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1302.234663][T30723] loop2: detected capacity change from 0 to 32768 [ 1302.286273][T30723] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1302.301793][T30765] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1302.302366][T11883] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.321478][T11883] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1302.326615][T30766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10500'. [ 1302.332759][T11883] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1302.357643][T11883] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1302.374726][T11883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1302.384708][T11883] usb 7-1: SerialNumber: syz [ 1302.416254][T11883] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1302.497659][T11883] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 1302.545246][T11883] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 1302.667185][T30723] XFS (loop2): Starting recovery (logdev: internal) [ 1302.696658][T30777] loop5: detected capacity change from 0 to 64 [ 1302.773171][T30777] syz.5.10504: attempt to access beyond end of device [ 1302.773171][T30777] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1302.791635][T30777] Buffer I/O error on dev loop5, logical block 512, async page read [ 1302.809477][T30723] XFS (loop2): Ending recovery (logdev: internal) [ 1302.810192][T15054] usb 7-1: USB disconnect, device number 24 [ 1302.827500][T30777] syz.5.10504: attempt to access beyond end of device [ 1302.827500][T30777] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1302.898477][T30777] Buffer I/O error on dev loop5, logical block 56576, async page read [ 1303.099973][T30723] XFS (loop2): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1303.157534][T30723] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 [ 1303.203724][T30723] XFS (loop2): Unmount and run xfs_repair [ 1303.240020][T30723] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1303.259963][T30723] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff SUMY............ [ 1303.282459][T30723] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40 .......... ....@ [ 1303.314088][T30782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.322109][T30782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.331064][T30723] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4 ...*;yE..m...5.. [ 1303.354845][T30723] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03 ....%G.......... [ 1303.378120][T30723] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00 .......X........ [ 1303.408967][T30723] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1303.431919][T30723] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1303.456099][T30723] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1303.471332][T30723] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x4 len 4 error 74 [ 1303.550838][T30723] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1303.577686][T30723] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 1303.723919][T30782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.742222][T30782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.846400][ T5849] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1304.326837][T30809] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1304.923167][ T5985] lo speed is unknown, defaulting to 1000 [ 1304.929179][T30786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10508'. [ 1304.943470][ T5985] sz1: Port: 1 Link DOWN [ 1304.965272][T30797] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1304.970774][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.018669][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.063787][ T5985] lo speed is unknown, defaulting to 1000 [ 1305.065804][ T58] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.102133][T11883] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1305.123571][ T58] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.293321][T11883] usb 2-1: Using ep0 maxpacket: 32 [ 1305.307291][T11883] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 1305.337780][T11883] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1305.369538][T11883] usb 2-1: config 0 has no interface number 0 [ 1305.399635][T11883] usb 2-1: New USB device found, idVendor=045e, idProduct=0703, bcdDevice=6e.c0 [ 1305.424422][T11883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.462677][T11883] usb 2-1: Product: syz [ 1305.484311][T11883] usb 2-1: Manufacturer: syz [ 1305.503087][T11883] usb 2-1: SerialNumber: syz [ 1305.520685][T30839] ip6gre1: entered promiscuous mode [ 1305.525188][T11883] usb 2-1: config 0 descriptor?? [ 1305.554703][T30839] ip6gre1: entered allmulticast mode [ 1305.580502][T30840] €Â: renamed from virt_wifi0 (while UP) [ 1305.776959][T30844] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1305.822195][T11883] uvcvideo 2-1:0.68: Found Unit with invalid ID 0 [ 1305.847576][T11883] uvcvideo 2-1:0.68: Found UVC 0.40 device syz (045e:0703) [ 1305.881544][T11883] uvcvideo 2-1:0.68: No valid video chain found. [ 1305.920582][T11883] usb 2-1: USB disconnect, device number 67 [ 1306.092370][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1306.092397][ T30] audit: type=1326 audit(1272.531:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30851 comm="syz.6.10540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1306.217683][ T30] audit: type=1326 audit(1272.531:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30851 comm="syz.6.10540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1306.280300][T30858] loop5: detected capacity change from 0 to 64 [ 1306.294656][ T30] audit: type=1326 audit(1272.587:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30851 comm="syz.6.10540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1306.345362][T30858] hfs: unable to locate alternate MDB [ 1306.374691][T30858] hfs: continuing without an alternate MDB [ 1306.418105][T30862] openvswitch: netlink: Key type 31 is not supported [ 1306.418679][ T30] audit: type=1326 audit(1272.587:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30851 comm="syz.6.10540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1306.543988][T30831] loop4: detected capacity change from 0 to 32768 [ 1306.549157][ T30] audit: type=1326 audit(1272.587:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30851 comm="syz.6.10540" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6e39ce59 code=0x7ffc0000 [ 1306.560949][T30864] loop2: detected capacity change from 0 to 1024 [ 1306.596857][T30831] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.10527 (30831) [ 1306.657388][ T1119] [ 1306.659768][ T1119] ====================================================== [ 1306.666793][ T1119] WARNING: possible circular locking dependency detected [ 1306.673831][ T1119] syzkaller #0 Tainted: G L [ 1306.679825][ T1119] ------------------------------------------------------ [ 1306.686855][ T1119] kworker/u8:8/1119 is trying to acquire lock: [ 1306.693023][ T1119] ffff88807ecddeb0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 1306.703794][ T1119] [ 1306.703794][ T1119] but task is already holding lock: [ 1306.711163][ T1119] ffff88805347a0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1306.720540][ T1119] [ 1306.720540][ T1119] which lock already depends on the new lock. [ 1306.720540][ T1119] [ 1306.730948][ T1119] [ 1306.730948][ T1119] the existing dependency chain (in reverse order) is: [ 1306.739962][ T1119] [ 1306.739962][ T1119] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 1306.747913][ T1119] __mutex_lock+0x1a4/0x1b10 [ 1306.753144][ T1119] hfs_find_init+0x273/0x330 [ 1306.758275][ T1119] hfs_ext_read_extent+0x19d/0x9d0 [ 1306.763936][ T1119] hfs_get_block+0x576/0x830 [ 1306.769077][ T1119] block_read_full_folio+0x36c/0x8e0 [ 1306.774911][ T1119] filemap_read_folio+0xfc/0x3b0 [ 1306.780388][ T1119] do_read_cache_folio+0x2d7/0x6b0 [ 1306.786049][ T1119] read_cache_page+0x5b/0x1b0 [ 1306.791271][ T1119] __hfs_bnode_create+0x718/0x9a0 [ 1306.796836][ T1119] hfs_bnode_find+0x2d5/0xd30 [ 1306.802055][ T1119] hfs_brec_find+0x39d/0x620 [ 1306.807179][ T1119] hfs_brec_read+0x26/0x120 [ 1306.812218][ T1119] hfs_cat_find_brec+0xdc/0x2a0 [ 1306.817614][ T1119] hfs_fill_super+0x58d/0x7e0 [ 1306.822821][ T1119] get_tree_bdev_flags+0x38c/0x620 [ 1306.828485][ T1119] vfs_get_tree+0x92/0x320 [ 1306.833442][ T1119] path_mount+0x7d0/0x23d0 [ 1306.838405][ T1119] __x64_sys_mount+0x293/0x310 [ 1306.843709][ T1119] do_syscall_64+0x115/0x870 [ 1306.848852][ T1119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.855289][ T1119] [ 1306.855289][ T1119] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 1306.864528][ T1119] __lock_acquire+0x14b8/0x2630 [ 1306.869918][ T1119] lock_acquire+0x1b1/0x370 [ 1306.874957][ T1119] __mutex_lock+0x1a4/0x1b10 [ 1306.880092][ T1119] hfs_extend_file+0xa6/0xcf0 [ 1306.885318][ T1119] hfs_bmap_reserve+0x2ab/0x3a0 [ 1306.890714][ T1119] __hfs_ext_write_extent+0x3c4/0x510 [ 1306.896647][ T1119] hfs_ext_write_extent+0x1b7/0x200 [ 1306.902402][ T1119] hfs_write_inode+0xce/0xab0 [ 1306.907615][ T1119] __writeback_single_inode+0xcd4/0x1350 [ 1306.913803][ T1119] writeback_sb_inodes+0x766/0x1c60 [ 1306.919552][ T1119] wb_writeback+0x1bf/0xb90 [ 1306.924611][ T1119] wb_workfn+0x14f/0xc00 [ 1306.929411][ T1119] process_one_work+0xa0e/0x1980 [ 1306.934885][ T1119] worker_thread+0x5ef/0xe50 [ 1306.940004][ T1119] kthread+0x370/0x450 [ 1306.944603][ T1119] ret_from_fork+0x72b/0xd50 [ 1306.949731][ T1119] ret_from_fork_asm+0x1a/0x30 [ 1306.955037][ T1119] [ 1306.955037][ T1119] other info that might help us debug this: [ 1306.955037][ T1119] [ 1306.965264][ T1119] Possible unsafe locking scenario: [ 1306.965264][ T1119] [ 1306.972718][ T1119] CPU0 CPU1 [ 1306.978092][ T1119] ---- ---- [ 1306.983455][ T1119] lock(&tree->tree_lock/1); [ 1306.988156][ T1119] lock(&HFS_I(tree->inode)->extents_lock); [ 1306.996670][ T1119] lock(&tree->tree_lock/1); [ 1307.003904][ T1119] lock(&HFS_I(tree->inode)->extents_lock); [ 1307.009899][ T1119] [ 1307.009899][ T1119] *** DEADLOCK *** [ 1307.009899][ T1119] [ 1307.018042][ T1119] 3 locks held by kworker/u8:8/1119: [ 1307.023331][ T1119] #0: ffff88801eaa6940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1307.034097][ T1119] #1: ffffc90005687d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1307.045982][ T1119] #2: ffff88805347a0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1307.055797][ T1119] [ 1307.055797][ T1119] stack backtrace: [ 1307.061691][ T1119] CPU: 0 UID: 0 PID: 1119 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.061740][ T1119] Tainted: [L]=SOFTLOCKUP [ 1307.061753][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1307.061777][ T1119] Workqueue: writeback wb_workfn (flush-7:5) [ 1307.061840][ T1119] Call Trace: [ 1307.061853][ T1119] [ 1307.061867][ T1119] dump_stack_lvl+0x100/0x190 [ 1307.061901][ T1119] print_circular_bug.cold+0x178/0x1c7 [ 1307.061958][ T1119] check_noncircular+0x146/0x160 [ 1307.061991][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.062040][ T1119] __lock_acquire+0x14b8/0x2630 [ 1307.062081][ T1119] ? __pfx_stack_trace_save+0x10/0x10 [ 1307.062138][ T1119] lock_acquire+0x1b1/0x370 [ 1307.062173][ T1119] ? hfs_extend_file+0xa6/0xcf0 [ 1307.062227][ T1119] ? __pfx___might_resched+0x10/0x10 [ 1307.062270][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.062310][ T1119] ? add_lock_to_list+0x99/0x110 [ 1307.062365][ T1119] __mutex_lock+0x1a4/0x1b10 [ 1307.062422][ T1119] ? hfs_extend_file+0xa6/0xcf0 [ 1307.062472][ T1119] ? hfs_extend_file+0xa6/0xcf0 [ 1307.062526][ T1119] ? hfs_write_inode+0xce/0xab0 [ 1307.062555][ T1119] ? __writeback_single_inode+0xcd4/0x1350 [ 1307.062609][ T1119] ? __pfx___mutex_lock+0x10/0x10 [ 1307.062660][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.062700][ T1119] ? lock_acquire+0x1b1/0x370 [ 1307.062741][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.062781][ T1119] ? trace_contention_end+0x122/0x170 [ 1307.062822][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.062867][ T1119] ? hfs_extend_file+0xa6/0xcf0 [ 1307.062916][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.062956][ T1119] hfs_extend_file+0xa6/0xcf0 [ 1307.063012][ T1119] ? __pfx_hfs_extend_file+0x10/0x10 [ 1307.063062][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.063109][ T1119] hfs_bmap_reserve+0x2ab/0x3a0 [ 1307.063161][ T1119] __hfs_ext_write_extent+0x3c4/0x510 [ 1307.063212][ T1119] ? hfs_find_init+0x273/0x330 [ 1307.063248][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.063292][ T1119] hfs_ext_write_extent+0x1b7/0x200 [ 1307.063345][ T1119] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1307.063401][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.063448][ T1119] ? __mpage_writepages+0x1a8/0x210 [ 1307.063481][ T1119] ? __pfx___mpage_writepages+0x10/0x10 [ 1307.063516][ T1119] hfs_write_inode+0xce/0xab0 [ 1307.063549][ T1119] ? __pfx_hfs_write_inode+0x10/0x10 [ 1307.063580][ T1119] ? __lock_acquire+0x4a5/0x2630 [ 1307.063631][ T1119] ? __writeback_single_inode+0x454/0x1350 [ 1307.063683][ T1119] ? __writeback_single_inode+0x454/0x1350 [ 1307.063734][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.063780][ T1119] __writeback_single_inode+0xcd4/0x1350 [ 1307.063837][ T1119] ? __pfx___writeback_single_inode+0x10/0x10 [ 1307.063889][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.063930][ T1119] ? do_raw_spin_unlock+0x145/0x1e0 [ 1307.063975][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.064018][ T1119] writeback_sb_inodes+0x766/0x1c60 [ 1307.064081][ T1119] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1307.064132][ T1119] ? wakeup_preempt_fair+0x630/0x1050 [ 1307.064210][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.064250][ T1119] ? rcu_is_watching+0x12/0xc0 [ 1307.064295][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.064335][ T1119] ? queue_io+0x287/0x540 [ 1307.064379][ T1119] wb_writeback+0x1bf/0xb90 [ 1307.064440][ T1119] ? __pfx_wb_writeback+0x10/0x10 [ 1307.064497][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.064537][ T1119] ? mark_held_locks+0x40/0x70 [ 1307.064573][ T1119] ? _raw_spin_unlock_irq+0x23/0x50 [ 1307.064619][ T1119] wb_workfn+0x14f/0xc00 [ 1307.064672][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.064712][ T1119] ? try_to_wake_up+0x15f/0x1900 [ 1307.064762][ T1119] ? __pfx_wb_workfn+0x10/0x10 [ 1307.064815][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.064857][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.064899][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.064939][ T1119] ? rcu_is_watching+0x12/0xc0 [ 1307.064984][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.065029][ T1119] process_one_work+0xa0e/0x1980 [ 1307.065077][ T1119] ? __pfx_process_one_work+0x10/0x10 [ 1307.065116][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.065163][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.065207][ T1119] worker_thread+0x5ef/0xe50 [ 1307.065253][ T1119] ? kthread+0x13a/0x450 [ 1307.065285][ T1119] ? __pfx_worker_thread+0x10/0x10 [ 1307.065323][ T1119] kthread+0x370/0x450 [ 1307.065355][ T1119] ? __pfx_kthread+0x10/0x10 [ 1307.065390][ T1119] ret_from_fork+0x72b/0xd50 [ 1307.065450][ T1119] ? __pfx_ret_from_fork+0x10/0x10 [ 1307.065489][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.065529][ T1119] ? __switch_to+0x800/0x1100 [ 1307.065574][ T1119] ? __switch_to_asm+0x39/0x70 [ 1307.065617][ T1119] ? __pfx_kthread+0x10/0x10 [ 1307.065653][ T1119] ret_from_fork_asm+0x1a/0x30 [ 1307.065707][ T1119] [ 1307.108802][ T30] audit: type=1800 audit(1272.887:227): pid=30858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10542" name="file1" dev="loop5" ino=22 res=0 errno=0 [ 1307.271157][ T1119] hfs: new node 0 already hashed? [ 1307.319857][T30831] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1307.445657][ T1119] ------------[ cut here ]------------ [ 1307.456866][T30831] BTRFS info (device loop4): using sha256 checksum algorithm [ 1307.460750][ T1119] 1 [ 1307.460761][ T1119] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#0: kworker/u8:8/1119 [ 1307.486760][ T30] audit: type=1800 audit(1273.794:228): pid=30864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10545" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1307.488147][ T1119] Modules linked in: [ 1307.640524][ T1119] CPU: 0 UID: 0 PID: 1119 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.652045][ T1119] Tainted: [L]=SOFTLOCKUP [ 1307.656852][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1307.667427][ T1119] Workqueue: writeback wb_workfn (flush-7:5) [ 1307.673469][ T1119] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1307.679846][ T1119] Code: a5 b4 63 0a e9 b7 59 d1 01 e8 7b 23 e1 00 4c 89 f7 e8 93 b4 63 0a e8 6e 23 e1 00 89 ee 48 c7 c7 40 ea d1 8b e8 20 e1 fa ff 90 <0f> 0b 90 e9 b9 5c d1 01 e8 52 23 e1 00 e8 9d 4d 4d 00 e9 15 5f d1 [ 1307.699931][ T1119] RSP: 0018:ffffc90005687020 EFLAGS: 00010282 [ 1307.706019][ T1119] RAX: 000000000000001f RBX: ffff8880265a8d00 RCX: 0000000000000000 [ 1307.714418][ T1119] RDX: 000000000000001f RSI: ffffffff81e72ba9 RDI: fffff52000ad0df5 [ 1307.722901][ T1119] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1307.731309][ T1119] R10: 0000000080000000 R11: 0000000073203f20 R12: dffffc0000000000 [ 1307.739771][ T1119] R13: ffff88805347a000 R14: ffff88805347a0d8 R15: 0000000000000000 [ 1307.748851][ T1119] FS: 0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 1307.758231][ T1119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1307.765242][ T1119] CR2: 0000001b3270eff8 CR3: 000000007bffd000 CR4: 0000000000350ef0 [ 1307.774000][ T1119] Call Trace: [ 1307.777288][ T1119] [ 1307.780232][ T1119] ? _raw_spin_unlock+0x28/0x50 [ 1307.785726][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.791393][ T1119] ? hfs_bnode_put+0x208/0x480 [ 1307.796658][ T1119] hfs_bmap_alloc+0x5a7/0x6b0 [ 1307.801699][ T1119] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1307.807382][ T1119] ? __asan_memcpy+0x3c/0x60 [ 1307.811982][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.818035][ T1119] ? hfs_bnode_read.part.0+0x298/0x330 [ 1307.823509][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.829573][ T1119] ? folio_mark_accessed+0xf3/0x1040 [ 1307.835194][ T1119] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1307.841339][ T1119] ? rcu_is_watching+0x12/0xc0 [ 1307.846596][ T1119] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1307.852963][ T1119] ? do_raw_spin_unlock+0x145/0x1e0 [ 1307.858597][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.864619][ T1119] ? _raw_spin_unlock+0x28/0x50 [ 1307.869884][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.875978][ T1119] ? hfs_bnode_put+0x208/0x480 [ 1307.881456][ T1119] hfs_brec_insert+0x8ba/0xc20 [ 1307.886272][ T1119] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1307.892113][ T1119] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1307.897185][ T1119] __hfs_ext_write_extent+0x3ef/0x510 [ 1307.902952][ T1119] ? hfs_find_init+0x273/0x330 [ 1307.907743][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.913834][ T1119] hfs_ext_write_extent+0x1b7/0x200 [ 1307.919084][ T1119] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1307.925249][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.931294][ T1119] ? __mpage_writepages+0x1a8/0x210 [ 1307.936864][T30831] BTRFS info (device loop4): enabling ssd optimizations [ 1307.936913][T30831] BTRFS info (device loop4): turning on async discard [ 1307.944832][ T1119] ? __pfx___mpage_writepages+0x10/0x10 [ 1307.951219][T30831] BTRFS info (device loop4): enabling free space tree [ 1307.956603][ T1119] hfs_write_inode+0xce/0xab0 [ 1307.968263][ T1119] ? __pfx_hfs_write_inode+0x10/0x10 [ 1307.973914][ T1119] ? __lock_acquire+0x4a5/0x2630 [ 1307.979732][ T1119] ? __writeback_single_inode+0x454/0x1350 [ 1307.986167][ T1119] ? __writeback_single_inode+0x454/0x1350 [ 1307.991992][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1307.998254][ T1119] __writeback_single_inode+0xcd4/0x1350 [ 1308.003918][ T1119] ? __pfx___writeback_single_inode+0x10/0x10 [ 1308.010414][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.016052][ T1119] ? do_raw_spin_unlock+0x145/0x1e0 [ 1308.021683][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.028365][ T1119] writeback_sb_inodes+0x766/0x1c60 [ 1308.033596][ T1119] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1308.039673][ T1119] ? wakeup_preempt_fair+0x630/0x1050 [ 1308.047068][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.055283][ T1119] ? rcu_is_watching+0x12/0xc0 [ 1308.060436][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.066096][ T1119] ? queue_io+0x287/0x540 [ 1308.070825][ T1119] wb_writeback+0x1bf/0xb90 [ 1308.075374][ T1119] ? __pfx_wb_writeback+0x10/0x10 [ 1308.080779][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.086868][ T1119] ? mark_held_locks+0x40/0x70 [ 1308.092094][ T1119] ? _raw_spin_unlock_irq+0x23/0x50 [ 1308.098332][ T1119] wb_workfn+0x14f/0xc00 [ 1308.103093][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.108747][ T1119] ? try_to_wake_up+0x15f/0x1900 [ 1308.114133][ T1119] ? __pfx_wb_workfn+0x10/0x10 [ 1308.118934][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.125499][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.131177][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.137942][ T1119] ? rcu_is_watching+0x12/0xc0 [ 1308.142731][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.149321][ T1119] process_one_work+0xa0e/0x1980 [ 1308.154298][ T1119] ? __pfx_process_one_work+0x10/0x10 [ 1308.160179][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.167130][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.172789][ T1119] worker_thread+0x5ef/0xe50 [ 1308.178387][ T1119] ? kthread+0x13a/0x450 [ 1308.182654][ T1119] ? __pfx_worker_thread+0x10/0x10 [ 1308.187997][ T1119] kthread+0x370/0x450 [ 1308.192101][ T1119] ? __pfx_kthread+0x10/0x10 [ 1308.196707][ T1119] ret_from_fork+0x72b/0xd50 [ 1308.201383][ T1119] ? __pfx_ret_from_fork+0x10/0x10 [ 1308.206717][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.213521][ T1119] ? __switch_to+0x800/0x1100 [ 1308.218955][ T1119] ? __switch_to_asm+0x39/0x70 [ 1308.223787][ T1119] ? __pfx_kthread+0x10/0x10 [ 1308.228391][ T1119] ret_from_fork_asm+0x1a/0x30 [ 1308.233242][ T1119] [ 1308.236269][ T1119] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1308.243554][ T1119] CPU: 0 UID: 0 PID: 1119 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1308.254606][ T1119] Tainted: [L]=SOFTLOCKUP [ 1308.258940][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1308.269006][ T1119] Workqueue: writeback wb_workfn (flush-7:5) [ 1308.275066][ T1119] Call Trace: [ 1308.278355][ T1119] [ 1308.281284][ T1119] dump_stack_lvl+0x100/0x190 [ 1308.285978][ T1119] vpanic+0x552/0x970 [ 1308.289977][ T1119] ? __pfx_vpanic+0x10/0x10 [ 1308.294502][ T1119] panic+0xd1/0xe0 [ 1308.298239][ T1119] ? __pfx_panic+0x10/0x10 [ 1308.302685][ T1119] ? check_panic_on_warn+0x1f/0x90 [ 1308.307813][ T1119] check_panic_on_warn.cold+0x19/0x34 [ 1308.313201][ T1119] ? hfs_bnode_create.cold+0x41/0x49 [ 1308.318508][ T1119] __warn.cold+0x191/0x328 [ 1308.322947][ T1119] __report_bug+0x296/0x3d0 [ 1308.327470][ T1119] ? hfs_bnode_create.cold+0x41/0x49 [ 1308.332774][ T1119] ? __pfx___report_bug+0x10/0x10 [ 1308.337818][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.343478][ T1119] ? irq_work_queue+0xce/0x100 [ 1308.348257][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.353908][ T1119] ? __wake_up_klogd+0xe2/0x140 [ 1308.358776][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.364432][ T1119] ? vprintk_emit+0x1c9/0x6b0 [ 1308.369142][ T1119] ? __pfx_vprintk_emit+0x10/0x10 [ 1308.374196][ T1119] ? hfs_bnode_create.cold+0x41/0x49 [ 1308.379503][ T1119] report_bug+0xb2/0x220 [ 1308.383771][ T1119] ? hfs_bnode_create.cold+0x41/0x49 [ 1308.389074][ T1119] handle_bug+0x16a/0x2a0 [ 1308.393413][ T1119] exc_invalid_op+0x17/0x50 [ 1308.397931][ T1119] asm_exc_invalid_op+0x1a/0x20 [ 1308.402792][ T1119] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1308.408703][ T1119] Code: a5 b4 63 0a e9 b7 59 d1 01 e8 7b 23 e1 00 4c 89 f7 e8 93 b4 63 0a e8 6e 23 e1 00 89 ee 48 c7 c7 40 ea d1 8b e8 20 e1 fa ff 90 <0f> 0b 90 e9 b9 5c d1 01 e8 52 23 e1 00 e8 9d 4d 4d 00 e9 15 5f d1 [ 1308.428326][ T1119] RSP: 0018:ffffc90005687020 EFLAGS: 00010282 [ 1308.434409][ T1119] RAX: 000000000000001f RBX: ffff8880265a8d00 RCX: 0000000000000000 [ 1308.442389][ T1119] RDX: 000000000000001f RSI: ffffffff81e72ba9 RDI: fffff52000ad0df5 [ 1308.450559][ T1119] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1308.458551][ T1119] R10: 0000000080000000 R11: 0000000073203f20 R12: dffffc0000000000 [ 1308.466524][ T1119] R13: ffff88805347a000 R14: ffff88805347a0d8 R15: 0000000000000000 [ 1308.474509][ T1119] ? vprintk_emit+0x1c9/0x6b0 [ 1308.479216][ T1119] ? _raw_spin_unlock+0x28/0x50 [ 1308.484084][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.489733][ T1119] ? hfs_bnode_put+0x208/0x480 [ 1308.494517][ T1119] hfs_bmap_alloc+0x5a7/0x6b0 [ 1308.499219][ T1119] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1308.504434][ T1119] ? __asan_memcpy+0x3c/0x60 [ 1308.509037][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.514683][ T1119] ? hfs_bnode_read.part.0+0x298/0x330 [ 1308.520157][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.525800][ T1119] ? folio_mark_accessed+0xf3/0x1040 [ 1308.531108][ T1119] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1308.536847][ T1119] ? rcu_is_watching+0x12/0xc0 [ 1308.541631][ T1119] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1308.547984][ T1119] ? do_raw_spin_unlock+0x145/0x1e0 [ 1308.553204][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.558847][ T1119] ? _raw_spin_unlock+0x28/0x50 [ 1308.563717][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.569362][ T1119] ? hfs_bnode_put+0x208/0x480 [ 1308.574145][ T1119] hfs_brec_insert+0x8ba/0xc20 [ 1308.578937][ T1119] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1308.584237][ T1119] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1308.589284][ T1119] __hfs_ext_write_extent+0x3ef/0x510 [ 1308.594678][ T1119] ? hfs_find_init+0x273/0x330 [ 1308.599458][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.605110][ T1119] hfs_ext_write_extent+0x1b7/0x200 [ 1308.610335][ T1119] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1308.616087][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.621730][ T1119] ? __mpage_writepages+0x1a8/0x210 [ 1308.626934][ T1119] ? __pfx___mpage_writepages+0x10/0x10 [ 1308.632495][ T1119] hfs_write_inode+0xce/0xab0 [ 1308.637178][ T1119] ? __pfx_hfs_write_inode+0x10/0x10 [ 1308.642466][ T1119] ? __lock_acquire+0x4a5/0x2630 [ 1308.647434][ T1119] ? __writeback_single_inode+0x454/0x1350 [ 1308.653275][ T1119] ? __writeback_single_inode+0x454/0x1350 [ 1308.659103][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.664756][ T1119] __writeback_single_inode+0xcd4/0x1350 [ 1308.670416][ T1119] ? __pfx___writeback_single_inode+0x10/0x10 [ 1308.676509][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.682150][ T1119] ? do_raw_spin_unlock+0x145/0x1e0 [ 1308.687363][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.693011][ T1119] writeback_sb_inodes+0x766/0x1c60 [ 1308.698249][ T1119] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1308.703903][ T1119] ? wakeup_preempt_fair+0x630/0x1050 [ 1308.709332][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.714975][ T1119] ? rcu_is_watching+0x12/0xc0 [ 1308.719759][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.725402][ T1119] ? queue_io+0x287/0x540 [ 1308.729750][ T1119] wb_writeback+0x1bf/0xb90 [ 1308.734283][ T1119] ? __pfx_wb_writeback+0x10/0x10 [ 1308.739338][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.744981][ T1119] ? mark_held_locks+0x40/0x70 [ 1308.749750][ T1119] ? _raw_spin_unlock_irq+0x23/0x50 [ 1308.754968][ T1119] wb_workfn+0x14f/0xc00 [ 1308.759238][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.764880][ T1119] ? try_to_wake_up+0x15f/0x1900 [ 1308.769842][ T1119] ? __pfx_wb_workfn+0x10/0x10 [ 1308.774630][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.780278][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.785926][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.791589][ T1119] ? rcu_is_watching+0x12/0xc0 [ 1308.796372][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.802022][ T1119] process_one_work+0xa0e/0x1980 [ 1308.807003][ T1119] ? __pfx_process_one_work+0x10/0x10 [ 1308.812386][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.818042][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.823695][ T1119] worker_thread+0x5ef/0xe50 [ 1308.828307][ T1119] ? kthread+0x13a/0x450 [ 1308.832559][ T1119] ? __pfx_worker_thread+0x10/0x10 [ 1308.837682][ T1119] kthread+0x370/0x450 [ 1308.841757][ T1119] ? __pfx_kthread+0x10/0x10 [ 1308.846355][ T1119] ret_from_fork+0x72b/0xd50 [ 1308.850957][ T1119] ? __pfx_ret_from_fork+0x10/0x10 [ 1308.856077][ T1119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.861721][ T1119] ? __switch_to+0x800/0x1100 [ 1308.866419][ T1119] ? __switch_to_asm+0x39/0x70 [ 1308.871209][ T1119] ? __pfx_kthread+0x10/0x10 [ 1308.875808][ T1119] ret_from_fork_asm+0x1a/0x30 [ 1308.880600][ T1119] [ 1308.883832][ T1119] Kernel Offset: disabled [ 1308.888143][ T1119] Rebooting in 86400 seconds..