last executing test programs: 8.364327618s ago: executing program 1 (id=585): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0x80, 0x20, 0x0, 0xfc, 0xfc, 0x0, 0x0, 0x8}}, 0x1c}}, 0x4000800) 8.075174436s ago: executing program 1 (id=590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000280)={0x0, 0x57, &(0x7f0000000040)={&(0x7f00000001c0)={0x68, r1, 0x101, 0x70bd2d, 0x25dfdbfc, {{}, {0x0, 0x4108}, {0xf, 0x18, {0xfffffff7, @link='broadcast-link\x00'}}}}, 0xfe}, 0x1, 0x0, 0x0, 0x24000005}, 0x880) 7.832397148s ago: executing program 1 (id=593): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x4, 0xfffffffffffff000) 7.607815913s ago: executing program 1 (id=597): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f00000003c0)=ANY=[], 0x6, 0x2c4, &(0x7f00000000c0)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLknd6bttNDTj18d7z/PYu/ky1+j202iMYhBnCbRj0ZMfR0LBt8GAPBfdloU8UcxsU5eEhHdzZUFAGzQ9b7/t2bDn+6kLABgg569/8G7W9vbT97Lsm48HX9zNCx/si/fT45v7cWnMYrdeBi9OIuoHhTaUT0tlMOnRVHkrazUjzfG+dGwzBx/9HN9/q3f618WlPrV2/OnjSr/ne0nj7KJufy8rOPFev1Buf7j6MXL58kL+Y+X5McwjTdfn6v/QfTil0/isxjF86qIWf5Xj7Ls7eK7P7/4sCyvzE/yo2Gnipspmnd4WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KD9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUb5Im5pW64avHCp5nrww4/rnrB7dUx7+VqHx82bXq/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5+CrSaleXprfrwVz6hXtjybVIL33KRHeSfvlrRaJbBwAAAAAAAAAAAAAAAAAAbNTs74GXHDxZmdooOhsrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADu1Oz//68xyCOiXZ/giuA0Dg7/5ZcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfB3AAAA//8ojVLu") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x158) 7.312029878s ago: executing program 1 (id=601): syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1, 0x12588, &(0x7f0000024ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 5.287493863s ago: executing program 1 (id=622): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) 2.354821547s ago: executing program 3 (id=652): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 2.192218128s ago: executing program 3 (id=653): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000001d0000000c000600010000000100000014002f801000038004000380050002000100000030002f80080001"], 0x64}}, 0x0) 2.151035416s ago: executing program 3 (id=654): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f0b53743ff6249000070900be0083"], 0x0}, 0x0) 1.976688933s ago: executing program 4 (id=658): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000500)=""/45, 0x2d) getdents64(r0, 0x0, 0x18) 1.931283064s ago: executing program 4 (id=660): openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.865045814s ago: executing program 4 (id=661): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 1.764636869s ago: executing program 4 (id=663): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xb, &(0x7f00000024c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020732500000000002020207b1aedff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb703000004200000850000000600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xb3, &(0x7f0000000100)=""/179, 0x0, 0xa}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.722720177s ago: executing program 4 (id=665): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0xa8) ioctl$FITRIM(r0, 0x40046f01, 0x0) 1.065446006s ago: executing program 2 (id=674): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) 1.01117631s ago: executing program 4 (id=675): syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x16, &(0x7f00000054c0)={[{@discard_sync}, {@nossd_spread}, {@nodatasum}, {@notreelog}, {@max_inline={'max_inline', 0x3d, [0x6b, 0x6b, 0x67, 0x3d, 0x30]}}, {@skip_balance}]}, 0x9, 0x50f6, &(0x7f0000000340)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75pcNWjiAAAAQF/x/90Xv1qIeT375iDN6089evBc1Xil/N8cLv+P3dJXBQAAANyMI19sf7iqXsr/reHy//htnTUAAACwFO98OPFBVb2U/2dvnP/rSf5fnS/zKx+yTj/Fv0I4NBnCxMLKXFb4ObSf7hYAAACAWyTm9D8/3flD1X6l/D9Xff//eKeDeP1/z/3/Ctf/hzDVW8ju+vdkXgAAAIB7Svl6/nh7/OzJBf2evz/s9f8P/O/gq1XHL+X//cPl/3pxeSuf/wcAAADL8F97/t/20jjVBt3//76P3v2lqn8p/7eHy/9xuab48k7E9+e9yRDWL6zkdxP8Jh5uV1KYHysUOlpJj22xR16YHy8UOuaSHpsnQ3hwYWV/Uvh/LLSTwpW1eeFIUjgdC/n50C0cSwon4pn2+dp8umnh+1jIL7CYj1dQrOleEpH0uNqvx0Lhhj3Odg8OAABwT4nhOc+yY73NkEbZ+dqgHVYP2mFk0A71QTuMJjukO/bbHmZ7C3F7+8zGpT3//8hw+T++Fflz/vpd/x/i9f/5cw271//PxkIjKczHQiu9Y0ArHiMLux/HYzRaeY8r67sFAAAAuKvF7wXqKzwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Ie9e42Rq7oPAH72Od6H1wtJFUKjZJPUOG7i9doGErVUWVOqRqQ064aCqohiY6/J4gU7tikxCpGxiWiEoLRBSj4UYRRFNR+gViAiKSBcpDhC5RFRFQUQKLSGKIiUkkSkCVKoZu89s3fO3Xn4scZLfz/JO2fmf553Hp5z751zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/x8OfuWav20Wf/S35z37wsXjV+xZe/Gr15136pMhTMw83pGFO/pvvH3853efe8+eB1bfcd/h8z/am5fL42Gg+qczv3NDrPXw4hDu7wihOw2sGMwCPfn9wVjf+wZDOCXMBmolJvuzEmnD4ft9IewLs4FaVd/rC2GwELjwqUcevrmauK0vhKUhhEraxvOVrI2+NHBGbxboTwNbu7PAr97K1ALf7cwCcMzim6H2oj8wUZ9heO5yDV5/PcetY2+vdHhdMTHcON/P1s5zpwp60wcmjulpK1XHvCi9PQ56ty2Ad1tpO9/qaSt+kcq/obw1G6qEzk2TmzdcPb0zPtIZRke7GtU0T8/zM69/aeORpBfM6zB2YPi4vA5veWLp3V3LL3j8vhVLX97/sb2vHGs3f1TYpMX0fKuE/DW3YJ7HaNznyQJ4+5W+JY340hVC2Pz53/tMs3hp/j/cfP4fX87xtrMud6z1zaFsbh4fGYyJ14ayuTkAAAAsGAthr+nW0Yc+0ay+0vx/pL3j//GQfz6Zz0Z7MITxmcTeJSGcNvN4FrgrNnfZkhA+OJOaqA+sTQIHQ3jvTGJ5raqkxKJYYiQJ/GQoD4wngUMxMJEEvhUDtyaBG2LgQBLYGAMHk8C5MRCm6sfx+0P5ONoO9MXA+mwjHohnIfxiKLaWbKvnalUBAAAcJ/nssKf+buFch2PNEKeXB/paZYhnYDfMUElqSGewtWlVwxq6W9XQ2aqG2rh3Nx9+qeaOVjWXTsPoqM9w+y//5rOhidL8f6z5/L8yR0c6Ssf/Q1g38zfm7swj07X4+om6DAAAAMAxGPjfF7/ZLF6a/4+3d/5/3CfSVcgcHou7IbYsCWGsPpBV+4flQHbUeyAPAAAAwEJQOx5fOxY+ld9mp2in8+ly/okjzB8P/I/Pmb/34IPrm/W3NP+faO/8//7626wTh2IvvrYkhEWFwA9iL6uBGSMx8ONP1gfy8R+KG+CmWFV+YkKtqptiifUxMJYE9jUq8cNaidPqA/mTVWt8b20cU3mJQgAAAABOuLg7IB6Xj+f/f+g3q69pVq40/19/ZOf/z8yDS6f3Tw+EsLI7hK70hwGP9WcLA8bAYEeeeKg/q6srrer6/hDOqQ4srerFfP3/7nSNwaf6sqpi4LQP7X/9jGrim30hrCwGnv7cnWdVEzuTQK3xv+wL4QPV0aaNf2dR1nhP2vjXF4Xw/kKgVtVli0KoNtabVvVIJb+OQVrVP1dCeFchUKvq7EoIuwIAC1T8r3RT8cEdu67dsmF6enL7PCbiPvy+sHlqenJ049bpTZUGfdqU9LluGaPry2Nq98o3z+VLFF1077rBdtK13wmOFdvK9+OXThzM78fvQj0z41zdU3d3TTrkj3y43EQofJNqNOTOeR5yf7GS2SexVH/M3xsGwqKrd0xuH/3ihp07t6/K/rabfXX2Nx5myrbVqnRb9c/VtzZeHg1Xy0oc7bZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3xZDXTZX1clQ37qzzXEdx6Ge3l2o5ER8akhISCy0xNaBZU3/Ty7N/7c1n//HT534yZ+vz9Do+P9wPMyfPT57mH99DOxr9/j/cKOj+bUTA0aSwO4Y2O0wPwAAAO8McZIf92bGvdI/Xf6dl5uVK83/d7f3+//jtP5/ben68xst8788lhhrtP5/usx/bf3/3Y3W/0+X+a+t/7/vbVj//+paINkkv7D+PwAA8E5w4tb/b7m8f3qBgFKGlsv7pxcIKGVouYx/uxcIOOL1/5//z7/679BEaf5/a3vzfwv3AwAAwMnjy392ze80i5fm//vam/+f+PX/QqPz/0caBSYaLQxo/T8AAAAWqEbr/w3f2H9ps3Kl+f+B9ub/8bSLzrrcsdY3h7I17UK6pt1rQ7WfDAAAAMDC0BlGR3vazFu3Murao2/zmXwp0Gbpohf/5PCRnf9/sL35f93vMm55YundXcsvePzN+1YsfXn/x/a+Mnv8HwAAAJg/7e6XAAAAAAAAAAAAAAAA3n4v/seeNc3ipd//h3Uzjzf6/X+87l/8fcG763LHWluv/5ffv/DT9+yaWbLwsaEQPlwMbNmz5ZSQX5t/WTHw8CXL31NN7ElLPPjCuS9VE5emgU+tOPWNauKcJLA+LpL43jQQr6r4xuIkEJdX/Pc0ELfHgTTQmwe+ujgbR0e6rX46mG2rjnRbPTsYwpJCoLat7h/M2uhIB3hbEqgN8AtpIA7wz/NAZ9qrewayXsXAYCx6x0DWKwAATlrxW2BP2Dw1PTkWv8LH29O762+juiXLri9X29Fm88/lS5NddO+6wXbSXel30dlrjfeESnUIq0pfV4tZOmZGeXxqabHp3t1gyK1We+tsUC51pJuut/GI+rIRjW7cOr2pp+XA17TOsrq7ZZZVpclOMUvnzCZto5Y2+tLGiNrcNm10Od7vDKOjXUmuP4jB4VCn1Sui3d/rF9f5a/QqKOa56vDeXzWrrzT/H25v/l8pjuuN/GIAu+OV9f5uiWX+AQAAYH59de2vvxH/ffbGR59ulrc0/x9pb/4f92Dlh4KzvR0H4/X/9y4JYebS+sNZ4K7Y3GVLQvjgTGoilsguqH9+LDGWBe6KO0yWxxLrJ+qrWhQDB5LAT4bywMEkcCgG8r0U+0O+K+fvh0I4aya1rr7EtlhiOAl8JgZGksBoDIwlgcUxMJ4EXl2cByaSwL/FQJiq31b3Ls63FQAAwJHI51k99XdDOs870N0qQ0erDP2tMnS2ylBplaHRKOL9b8cMPcnJKx2FTD1prX1JLaUM8WL4R9yvUobww/qcacFS0/H8g9r5Bh31GR74RHclNFGa/4+1N//vr7/NWj8U5/+z1//LAj+I3ftaPHV8JAZ+/Mn6QL5j4FCc7N5Uq2oiL5FP2m+KJcZjYCQJbIuB8SSwfl0e2Pee+kA+0641vrfW+FReohAAAACAEy7uIIi7aeL8/44dXxloVi6f/4/U5v/j7c3/Y3sDxcZuiLUeXhzC/R2zvakFVgxmgbgfYzD+PP59gyGcUtjBUSsx2Z+V6E0aDt/vy36h3ptW9b2+7McH8f6FTz3y8M3VxG19ISwt7H2ptfF8JWujLw2c0ZsF+tPA1u4sEPf81ALf7cwCcMxqewXjCyo/1aVmeO5yDV5/75RrgqbDK+0DnSPfXL+5mi+lHa75PtWaI3vamu6/5bgpvT0OerctxHfbsHdb8YtU/g3lrdlQJXRumty84erpnfGR4i9ZS+bpeS7+SrWd9HF4He4++t62Vkk7MJZ8fIzNXW7u12FHrO6WJ5be3bX8gsfvW7H05f0f2/tK291oIP5Q+JHr/nXwR4XNO98qIX/NLbjPkwmfJwvxv4ERT1sIYd2rX7+pWbx0/H+ivfl/d3I749dxY+5YEsJHChv3sbj5/3hJ9jlYCGSfku8qB7JD7v811PCTEwAAAI632u6O2v6Cqfw2OyE8nSeX808cYf64v2J8zvzt9rv/ry9Z2ixemv+vbz7/X5R00/F/x/+ZJ47/z+lk3xW9KH1g9zHtii5Vx7xw/H9OJ/u7zfH/OTn+7/j/XBz/b8Hx/zmd7E9b6VvSNl+6Qggv/9FDzzaLl+b/29qb/1v/b+5F+2rr/61vtP7ftkbr/+22/h8AADCvGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvi9f9eOv3534QmSvP/3e3N/+PLYaDY+kJZ/29kXYOqbo2BbRYGBAAA4GTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb68H/uF/NjWLP/rb85594eLxK/asvfjV68479ckQpmYe78jCHf033j7+87vPvWfPA6vvuO/w+R+t5OV68tvfrcsda31zKIR9hUcGY+K1oeqd2cCFn75nV3c18dhQCB8uBrbs2XJKNfGtoRCWFQMPX7L8PdXEnrTEgy+c+1I1cWka+NSKU9+oJs7JAx1pd/9xcdbdjrS7Ny8OYUkhUOvuFYvrq6q18ad5oDNt458GszZiYDAW/cZg1kYMTMcSU4tCWNkdQlda1aOVrKqutKp/qWRVdaVVfbkSwjkhhO60qhd6s6q605E/2ZtVFQOnfWj/62dUE/t6Q1hZDDz9uTvPqia+kARqjf9FbwgfqL5k0sa/3ZM13pM2fltPCO8PIfSmJX7ZnZXoTUu82B3CuwqBWuOf7w5hV+AdIX741H2i7dh17ZYN09OT2+cx0Zu31Rc2T01Pjm7cOr2pkvSpkY5C+q3rj37sz73+pY3V24vuXTfYTro7L9cz0+XVPXV315zsvY/96i9WMvt8lOqP+XvDQFh09Y7J7aNf3LBz5/ZV2d92s6/O/nbl0WxbrVoo22pZsZKVO6/ctnLHrmtXTF254fLJyyevWnX26rEzx9aMffzMldVRjWV/j8dQ7zzxQz29u1DJifgAkJCQWGiJzrpPt7GT/YO89EV/tqM9oTLzAV2aVhSzdMyM8ngMeu1Rjvhovqe0HNGq0sShlGV16yxrSpOJ2Sx9WZaZ73WlyWGxps6ZTRrvd4bR0a5G22G4/m5x8/7sGDbvM/mmazcNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FIAAAD//wqqIhQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000180)={0x7ffffffe, 0x1, 0x1, 0x4f4, 0x3, [0x338a, 0x8, 0x100, 0xfffff001]}) 799.129609ms ago: executing program 2 (id=677): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303031303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a475f304e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 671.666889ms ago: executing program 0 (id=678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 580.984199ms ago: executing program 2 (id=679): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4001, 0x0, 0x0, 0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 547.227488ms ago: executing program 0 (id=680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a09040000000000ec00000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140200000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) 432.872285ms ago: executing program 2 (id=681): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) 432.138878ms ago: executing program 0 (id=682): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r1, 0x0], 0x2}) 331.544535ms ago: executing program 3 (id=683): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) 284.151311ms ago: executing program 2 (id=684): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) 272.515448ms ago: executing program 0 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 179.522818ms ago: executing program 3 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 138.529345ms ago: executing program 0 (id=687): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x2, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000220001060000000000000000050000000000e5"], 0x1c}], 0x1}, 0x0) 80.187325ms ago: executing program 2 (id=688): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 26.911862ms ago: executing program 3 (id=689): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002c000480050003000100000004000300010000000500030001000000050003000500000005000300020000000800020002"], 0x50}}, 0x0) 0s ago: executing program 0 (id=690): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000700)=0x38f, 0x4) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d4", 0x5e0}], 0x1}}], 0x1, 0x24044015) kernel console output (not intermixed with test programs): adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.963920][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.996542][ T5828] team0: Port device team_slave_0 added [ 75.005210][ T5828] team0: Port device team_slave_1 added [ 75.024736][ T5841] Bluetooth: hci4: command tx timeout [ 75.024741][ T52] Bluetooth: hci0: command tx timeout [ 75.044425][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.051391][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.077556][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.103759][ T52] Bluetooth: hci1: command tx timeout [ 75.103896][ T5841] Bluetooth: hci3: command tx timeout [ 75.109469][ T52] Bluetooth: hci2: command tx timeout [ 75.136894][ T5824] team0: Port device team_slave_0 added [ 75.145174][ T5822] team0: Port device team_slave_0 added [ 75.154000][ T5822] team0: Port device team_slave_1 added [ 75.194543][ T5824] team0: Port device team_slave_1 added [ 75.229454][ T5821] hsr_slave_0: entered promiscuous mode [ 75.236193][ T5821] hsr_slave_1: entered promiscuous mode [ 75.243290][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.250348][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.276867][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.315793][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.322790][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.348840][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.376171][ T5823] hsr_slave_0: entered promiscuous mode [ 75.382526][ T5823] hsr_slave_1: entered promiscuous mode [ 75.389068][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 75.394950][ T5823] Cannot create hsr debugfs directory [ 75.405482][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.412447][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.438480][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.461108][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.468506][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.495025][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.545896][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.552861][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.579425][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.631754][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.638792][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.664734][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.791457][ T5822] hsr_slave_0: entered promiscuous mode [ 75.797879][ T5822] hsr_slave_1: entered promiscuous mode [ 75.804198][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 75.809925][ T5822] Cannot create hsr debugfs directory [ 75.837955][ T5828] hsr_slave_0: entered promiscuous mode [ 75.844466][ T5828] hsr_slave_1: entered promiscuous mode [ 75.850548][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 75.856630][ T5828] Cannot create hsr debugfs directory [ 75.927677][ T5824] hsr_slave_0: entered promiscuous mode [ 75.934187][ T5824] hsr_slave_1: entered promiscuous mode [ 75.940254][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 75.946682][ T5824] Cannot create hsr debugfs directory [ 76.361152][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.373341][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.389524][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.399549][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.468756][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.482363][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.493275][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.523479][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.596445][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.612002][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.638741][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.649669][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.753020][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.764541][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.777619][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.789418][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.810489][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.911180][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.929718][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.941687][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.978484][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.990592][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.006395][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.016878][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.024174][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.055453][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.062667][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.103894][ T52] Bluetooth: hci0: command tx timeout [ 77.103900][ T5841] Bluetooth: hci4: command tx timeout [ 77.133115][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.152873][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.179550][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.183866][ T5841] Bluetooth: hci2: command tx timeout [ 77.186736][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.199642][ T52] Bluetooth: hci1: command tx timeout [ 77.206126][ T5841] Bluetooth: hci3: command tx timeout [ 77.231135][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.238274][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.288765][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.338697][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.360659][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.367893][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.418656][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.425792][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.489552][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.552427][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.579166][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.586383][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.617645][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.624880][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.722995][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.782917][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.799388][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.806660][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.820152][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.827464][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.878745][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.112393][ T5821] veth0_vlan: entered promiscuous mode [ 78.157158][ T5821] veth1_vlan: entered promiscuous mode [ 78.174934][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.282416][ T5821] veth0_macvtap: entered promiscuous mode [ 78.341982][ T5821] veth1_macvtap: entered promiscuous mode [ 78.422622][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.434958][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.460183][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.487816][ T5828] veth0_vlan: entered promiscuous mode [ 78.508252][ T1086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.518528][ T1086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.545290][ T1086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.564729][ T1086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.577757][ T5828] veth1_vlan: entered promiscuous mode [ 78.590231][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.626382][ T5822] veth0_vlan: entered promiscuous mode [ 78.666065][ T5822] veth1_vlan: entered promiscuous mode [ 78.747229][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.762132][ T5823] veth0_vlan: entered promiscuous mode [ 78.764798][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.818509][ T5823] veth1_vlan: entered promiscuous mode [ 78.832022][ T5828] veth0_macvtap: entered promiscuous mode [ 78.840885][ T5822] veth0_macvtap: entered promiscuous mode [ 78.877880][ T5822] veth1_macvtap: entered promiscuous mode [ 78.884087][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.892671][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.901861][ T5824] veth0_vlan: entered promiscuous mode [ 78.908718][ T5828] veth1_macvtap: entered promiscuous mode [ 78.948455][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.960286][ T5823] veth0_macvtap: entered promiscuous mode [ 78.972774][ T5824] veth1_vlan: entered promiscuous mode [ 78.990369][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.010100][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.018317][ T5823] veth1_macvtap: entered promiscuous mode [ 79.035579][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.064811][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.088990][ T2993] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.102536][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.116935][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.147031][ T2993] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.165826][ T2993] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.186474][ T5841] Bluetooth: hci0: command tx timeout [ 79.187692][ T52] Bluetooth: hci4: command tx timeout [ 79.212999][ T2993] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.240095][ T2993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.265130][ T52] Bluetooth: hci1: command tx timeout [ 79.265978][ T5841] Bluetooth: hci2: command tx timeout [ 79.270553][ T52] Bluetooth: hci3: command tx timeout [ 79.310225][ T2993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.331888][ T5824] veth0_macvtap: entered promiscuous mode [ 79.356369][ T2993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.380165][ T2993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.395175][ T72] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.405000][ T2993] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.415125][ T5824] veth1_macvtap: entered promiscuous mode [ 79.426503][ T2993] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.466524][ T2993] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.485995][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.495876][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.517549][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.552667][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.576307][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.591583][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.594367][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.612067][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.621251][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.638696][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.647958][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.657733][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.668530][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.721912][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.736306][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.756715][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.772917][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.781271][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.794922][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.806549][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 79.843608][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 79.851737][ T24] usb 4-1: SerialNumber: syz [ 79.922732][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.937949][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.970437][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.993195][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.098659][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.136928][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.153274][ T24] usb 4-1: 0:2 : does not exist [ 80.300272][ T24] usb 4-1: USB disconnect, device number 2 [ 80.833692][ T5945] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.028533][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 81.047283][ T5945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.070677][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.112032][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.130823][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 81.141351][ T5945] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.163293][ T5945] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 81.176353][ T5945] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 81.228972][ T5945] usb 5-1: Manufacturer: syz [ 81.265666][ T52] Bluetooth: hci4: command tx timeout [ 81.266479][ T5841] Bluetooth: hci0: command tx timeout [ 81.280443][ T5945] usb 5-1: config 0 descriptor?? [ 81.344229][ T5841] Bluetooth: hci3: command tx timeout [ 81.344272][ T52] Bluetooth: hci2: command tx timeout [ 81.349785][ T5827] Bluetooth: hci1: command tx timeout [ 81.684932][ T5945] rc_core: IR keymap rc-hauppauge not found [ 81.707783][ T5945] Registered IR keymap rc-empty [ 81.726875][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 81.777966][ T5995] loop3: detected capacity change from 0 to 16 [ 81.804075][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 81.804835][ T5995] ======================================================= [ 81.804835][ T5995] WARNING: The mand mount option has been deprecated and [ 81.804835][ T5995] and is ignored by this kernel. Remove the mand [ 81.804835][ T5995] option from the mount to silence this warning. [ 81.804835][ T5995] ======================================================= [ 81.869717][ T5995] erofs (device loop3): mounted with root inode @ nid 36. [ 81.885593][ T5945] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 81.939647][ T5945] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 82.019607][ T30] audit: type=1800 audit(1761104483.968:2): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.23" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 82.079293][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.114362][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.135595][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.163712][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.224162][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.253796][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.279777][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.331895][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.373769][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.432878][ T5945] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 82.486095][ T5945] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 82.504187][ T5945] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 82.553857][ T5945] usb 5-1: USB disconnect, device number 2 [ 82.562780][ T6013] loop0: detected capacity change from 0 to 4096 [ 82.586680][ T6013] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 82.738624][ T6015] loop3: detected capacity change from 0 to 4096 [ 82.778397][ T6013] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 82.824968][ T6015] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 82.885825][ T6013] ntfs3(loop0): ino=1e, mi_enum_attr [ 82.978444][ T6015] ntfs3(loop3): $Secure::$SDH is corrupted. [ 83.013776][ T6015] ntfs3(loop3): Failed to initialize $Secure (-22). [ 83.210044][ T6025] loop0: detected capacity change from 0 to 16 [ 83.251903][ T6025] erofs (device loop0): mounted with root inode @ nid 36. [ 83.287973][ T6027] loop3: detected capacity change from 0 to 128 [ 83.323862][ T6027] EXT4-fs (loop3): Test dummy encryption mode enabled [ 83.378200][ T6027] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.536864][ T6027] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.619614][ T6017] loop1: detected capacity change from 0 to 32768 [ 83.619689][ T6027] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 83.675873][ T6017] (syz.1.33,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.691045][ T6037] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 83.740297][ T6017] (syz.1.33,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.807097][ T5821] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.866380][ T6017] JBD2: Ignoring recovery information on journal [ 83.889536][ T6044] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.081087][ T6017] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 84.107762][ T6049] loop3: detected capacity change from 0 to 512 [ 84.134844][ T6049] EXT4-fs: Ignoring removed nobh option [ 84.146532][ T6049] EXT4-fs (loop3): Test dummy encryption mode enabled [ 84.160884][ T6017] (syz.1.33,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 84.200361][ T6049] EXT4-fs error (device loop3): __ext4_iget:5443: inode #11: block 1: comm syz.3.43: invalid block [ 84.239948][ T6049] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.43: couldn't read orphan inode 11 (err -117) [ 84.336874][ T5824] ocfs2: Unmounting device (7,1) on (node local) [ 84.379034][ T6049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.550166][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.825328][ T6045] loop0: detected capacity change from 0 to 40427 [ 84.857438][ T6045] F2FS-fs (loop0): Image doesn't support compression [ 84.866022][ T6045] F2FS-fs (loop0): build fault injection rate: 690 [ 84.898820][ T6045] F2FS-fs (loop0): invalid crc value [ 84.984225][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.107531][ T6045] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 85.137303][ T6045] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.173632][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 85.222328][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.259051][ T10] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 85.298890][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.317079][ T10] usb 4-1: config 0 descriptor?? [ 85.396456][ T6079] loop2: detected capacity change from 0 to 256 [ 85.396457][ T6058] loop4: detected capacity change from 0 to 32768 [ 85.717077][ T6083] (syz.1.61,6083,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 85.749023][ T10] elo 0003:04E7:0009.0001: unknown main item tag 0x1 [ 85.764287][ T5945] IPVS: starting estimator thread 0... [ 85.768802][ T10] elo 0003:04E7:0009.0001: item fetching failed at offset 4/5 [ 85.778713][ T6083] (syz.1.61,6083,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 85.799673][ T10] elo 0003:04E7:0009.0001: parse failed [ 85.809148][ T10] elo 0003:04E7:0009.0001: probe with driver elo failed with error -22 [ 85.884279][ T6086] IPVS: using max 27 ests per chain, 64800 per kthread [ 85.988657][ T10] usb 4-1: USB disconnect, device number 3 [ 86.366270][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.60'. [ 86.425384][ T6101] loop4: detected capacity change from 0 to 512 [ 86.454503][ T6101] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.507731][ T6101] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 86.615379][ T6101] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.68: attempt to clear invalid blocks 2 len 1 [ 86.709882][ T796] cfg80211: failed to load regulatory.db [ 86.722166][ T6101] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 86.754151][ T6101] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.68: invalid indirect mapped block 1819239214 (level 0) [ 86.775079][ T6101] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.68: invalid indirect mapped block 1819239214 (level 1) [ 86.797664][ T6101] EXT4-fs (loop4): 1 truncate cleaned up [ 86.805198][ T6101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.806014][ T6113] loop3: detected capacity change from 0 to 256 [ 86.918021][ T6101] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 86.929433][ T6117] usb usb8: usbfs: process 6117 (syz.0.75) did not claim interface 0 before use [ 86.979263][ T6113] FAT-fs (loop3): Directory bread(block 64) failed [ 86.993620][ T6113] FAT-fs (loop3): Directory bread(block 65) failed [ 87.000270][ T6113] FAT-fs (loop3): Directory bread(block 66) failed [ 87.053613][ T6113] FAT-fs (loop3): Directory bread(block 67) failed [ 87.077664][ T6113] FAT-fs (loop3): Directory bread(block 68) failed [ 87.083375][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.097702][ T6113] FAT-fs (loop3): Directory bread(block 69) failed [ 87.114169][ T6113] FAT-fs (loop3): Directory bread(block 70) failed [ 87.142845][ T6113] FAT-fs (loop3): Directory bread(block 71) failed [ 87.145227][ T6119] loop0: detected capacity change from 0 to 1024 [ 87.149919][ T6113] FAT-fs (loop3): Directory bread(block 72) failed [ 87.191627][ T6113] FAT-fs (loop3): Directory bread(block 73) failed [ 87.636903][ T6111] loop2: detected capacity change from 0 to 32768 [ 87.693895][ T6111] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 87.714388][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.756839][ T6115] loop1: detected capacity change from 0 to 40427 [ 87.784709][ T6115] F2FS-fs: heap/no_heap options were deprecated [ 87.818023][ T6115] F2FS-fs (loop1): build fault injection rate: 19 [ 87.828239][ T6115] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 87.845657][ T5828] (syz-executor,5828,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72 [ 87.857757][ T6115] F2FS-fs (loop1): invalid crc value [ 87.873655][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 87.881979][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.886559][ T5828] ocfs2: Unmounting device (7,2) on (node local) [ 87.894977][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 87.907654][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.920377][ T6115] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 87.942275][ T10] usb 1-1: Product: syz [ 87.946833][ T10] usb 1-1: Manufacturer: syz [ 87.958707][ T10] usb 1-1: SerialNumber: syz [ 87.982308][ T10] usb 1-1: config 0 descriptor?? [ 88.010745][ T6121] loop4: detected capacity change from 0 to 32768 [ 88.059829][ T6133] netlink: 'syz.2.80': attribute type 4 has an invalid length. [ 88.087958][ T6133] netlink: 17 bytes leftover after parsing attributes in process `syz.2.80'. [ 88.102729][ T6115] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 88.124582][ T6115] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 88.132978][ T6121] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.146407][ T6115] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 88.215413][ T6115] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 88.260363][ T6121] XFS (loop4): Ending clean mount [ 88.287657][ T6121] XFS (loop4): Quotacheck needed: Please wait. [ 88.333048][ T5824] syz-executor: attempt to access beyond end of device [ 88.333048][ T5824] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.383264][ T6121] XFS (loop4): Quotacheck: Done. [ 88.387974][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 88.388001][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.388019][ T5824] Call Trace: [ 88.388027][ T5824] [ 88.388035][ T5824] dump_stack_lvl+0x189/0x250 [ 88.388069][ T5824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.388094][ T5824] ? __pfx_queue_work_on+0x10/0x10 [ 88.388117][ T5824] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 88.388137][ T5824] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.388168][ T5824] f2fs_handle_critical_error+0x37c/0x540 [ 88.388201][ T5824] f2fs_write_end_io+0x886/0xb60 [ 88.388235][ T5824] __submit_merged_bio+0x27a/0x6a0 [ 88.388264][ T5824] __submit_merged_write_cond+0x255/0x530 [ 88.388293][ T5824] f2fs_write_data_pages+0x261d/0x3000 [ 88.388353][ T5824] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 88.388449][ T5824] ? __lock_acquire+0xab9/0xd20 [ 88.388480][ T5824] ? do_raw_spin_lock+0x121/0x290 [ 88.388519][ T5824] ? do_raw_spin_unlock+0x122/0x240 [ 88.388544][ T5824] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 88.388573][ T5824] do_writepages+0x32e/0x550 [ 88.388613][ T5824] ? do_raw_spin_unlock+0x122/0x240 [ 88.388644][ T5824] filemap_fdatawrite+0x199/0x240 [ 88.388672][ T5824] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 88.388755][ T5824] ? do_raw_spin_unlock+0x122/0x240 [ 88.388786][ T5824] f2fs_sync_dirty_inodes+0x31f/0x830 [ 88.388821][ T5824] f2fs_write_checkpoint+0x93e/0x2440 [ 88.388839][ T5824] ? __lock_acquire+0xab9/0xd20 [ 88.388889][ T5824] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 88.388946][ T5824] ? kill_f2fs_super+0x299/0x6d0 [ 88.388964][ T5824] ? kasan_check_range+0x9f/0x2c0 [ 88.388994][ T5824] kill_f2fs_super+0x2cc/0x6d0 [ 88.389018][ T5824] ? __pfx_kill_f2fs_super+0x10/0x10 [ 88.389053][ T5824] ? shrinker_free+0x2ce/0x3e0 [ 88.389081][ T5824] deactivate_locked_super+0xbc/0x130 [ 88.389103][ T5824] cleanup_mnt+0x425/0x4c0 [ 88.389123][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.389148][ T5824] task_work_run+0x1d4/0x260 [ 88.389169][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 88.389184][ T5824] ? __x64_sys_umount+0x122/0x160 [ 88.389211][ T5824] ? exit_to_user_mode_loop+0x40/0x130 [ 88.389234][ T5824] exit_to_user_mode_loop+0xe9/0x130 [ 88.389255][ T5824] do_syscall_64+0x2bd/0xfa0 [ 88.389276][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.389295][ T5824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.389314][ T5824] ? clear_bhb_loop+0x60/0xb0 [ 88.389337][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.389355][ T5824] RIP: 0033:0x7f7f1c1902f7 [ 88.389378][ T5824] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 88.389394][ T5824] RSP: 002b:00007ffeafa8d8d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 88.389414][ T5824] RAX: 0000000000000000 RBX: 00007f7f1c211d7d RCX: 00007f7f1c1902f7 [ 88.389427][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeafa8d990 [ 88.389439][ T5824] RBP: 00007ffeafa8d990 R08: 0000000000000000 R09: 0000000000000000 [ 88.389450][ T5824] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeafa8ea20 [ 88.389462][ T5824] R13: 00007f7f1c211d7d R14: 000000000001588b R15: 00007ffeafa8ea60 [ 88.389493][ T5824] [ 88.390728][ T5824] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 88.537724][ T6145] loop2: detected capacity change from 0 to 164 [ 88.635470][ T6145] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 88.643773][ T10] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 88.785431][ T10] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 88.795903][ T10] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 88.831975][ T5822] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.856552][ T10] usb 1-1: USB disconnect, device number 2 [ 89.588916][ T6165] loop0: detected capacity change from 0 to 256 [ 89.632334][ T6165] FAT-fs (loop0): Directory bread(block 64) failed [ 89.648690][ T6165] FAT-fs (loop0): Directory bread(block 65) failed [ 89.667539][ T6165] FAT-fs (loop0): Directory bread(block 66) failed [ 89.675784][ T6165] FAT-fs (loop0): Directory bread(block 67) failed [ 89.701287][ T6165] FAT-fs (loop0): Directory bread(block 68) failed [ 89.717845][ T6165] FAT-fs (loop0): Directory bread(block 69) failed [ 89.733406][ T6165] FAT-fs (loop0): Directory bread(block 70) failed [ 89.753690][ T6165] FAT-fs (loop0): Directory bread(block 71) failed [ 89.760355][ T6165] FAT-fs (loop0): Directory bread(block 72) failed [ 89.774683][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.793241][ T6149] loop3: detected capacity change from 0 to 32768 [ 89.799913][ T6165] FAT-fs (loop0): Directory bread(block 73) failed [ 89.847452][ T6149] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.85 (6149) [ 89.934764][ T6149] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 89.956420][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 89.969735][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.979597][ T6149] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 90.004666][ T10] usb 2-1: config 0 descriptor?? [ 90.112800][ T6156] loop2: detected capacity change from 0 to 40427 [ 90.129643][ T6156] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 90.140642][ T6156] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 90.237869][ T6149] BTRFS info (device loop3): enabling ssd optimizations [ 90.240333][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 90.255265][ T6149] BTRFS info (device loop3): turning on async discard [ 90.285843][ T6149] BTRFS info (device loop3): enabling free space tree [ 90.292664][ T6149] BTRFS info (device loop3): enabling auto defrag [ 90.306766][ T6156] F2FS-fs (loop2): invalid crc value [ 90.441619][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 90.475423][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 90.482264][ T10] [drm] Initialized udl on minor 2 [ 90.491292][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 90.566068][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 90.585865][ T797] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 90.614733][ T10] usb 2-1: USB disconnect, device number 2 [ 90.621421][ T797] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 90.643398][ T797] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 90.678058][ T6156] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 90.679727][ T5821] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.716477][ T6156] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 90.725718][ T6156] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.703289][ T6197] loop4: detected capacity change from 0 to 32768 [ 91.740951][ T6197] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.99 (6197) [ 91.800188][ T6197] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.820839][ T6197] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 92.014892][ T6197] BTRFS info (device loop4): enabling ssd optimizations [ 92.033735][ T6197] BTRFS info (device loop4): turning on async discard [ 92.070940][ T6197] BTRFS info (device loop4): enabling free space tree [ 92.126236][ T6236] loop2: detected capacity change from 0 to 512 [ 92.148622][ T6236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 92.173780][ T6236] System zones: 1-12 [ 92.182827][ T6236] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.109: Directory hole found for htree index block 0 [ 92.220256][ T6236] EXT4-fs (loop2): Remounting filesystem read-only [ 92.271255][ T6236] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 92.325277][ T6236] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 92.345890][ T5822] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.365526][ T6236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.453144][ T6219] loop3: detected capacity change from 0 to 32768 [ 92.506355][ T6219] btrfs: Deprecated parameter 'usebackuproot' [ 92.558123][ T6219] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 92.584009][ T6219] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.107 (6219) [ 92.636505][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.686721][ T6219] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.737277][ T6219] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 92.756639][ T6212] loop1: detected capacity change from 0 to 32768 [ 92.805186][ T6247] loop2: detected capacity change from 0 to 128 [ 92.841689][ T6212] BTRFS info: device /dev/loop1 (7:1) using temp-fsid eb301384-fc24-4076-a5a0-10230e57aae3 [ 92.912177][ T6247] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 92.949451][ T6212] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.105 (6212) [ 92.972517][ T6247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.077905][ T6212] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.099427][ T6239] loop0: detected capacity change from 0 to 32768 [ 93.111770][ T6212] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 93.144290][ T6219] BTRFS info (device loop3): rebuilding free space tree [ 93.245314][ T6219] BTRFS info (device loop3): allowing degraded mounts [ 93.283419][ T6239] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.314497][ T6219] BTRFS info (device loop3): enabling ssd optimizations [ 93.403621][ T6219] BTRFS info (device loop3): turning on async discard [ 93.410477][ T6219] BTRFS info (device loop3): enabling free space tree [ 93.422087][ T6212] BTRFS info (device loop1): rebuilding free space tree [ 93.475580][ T6212] BTRFS info (device loop1): checking UUID tree [ 93.522406][ T6219] BTRFS info (device loop3): force clearing of disk cache [ 93.522988][ T6212] BTRFS info (device loop1): allowing degraded mounts [ 93.553473][ T6239] XFS (loop0): Ending clean mount [ 93.573656][ T6212] BTRFS info (device loop1): enabling ssd optimizations [ 93.580667][ T6212] BTRFS info (device loop1): enabling free space tree [ 93.590141][ T6239] XFS (loop0): Quotacheck needed: Please wait. [ 93.598048][ T6219] BTRFS info (device loop3): trying to use backup root at mount time [ 93.599279][ T6212] BTRFS info (device loop1): force clearing of disk cache [ 93.619066][ T6212] BTRFS info (device loop1): force zlib compression, level 3 [ 93.695975][ T6239] XFS (loop0): Quotacheck: Done. [ 93.838731][ T5823] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.922428][ T5821] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.933669][ T5945] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.126607][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 94.157390][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.188742][ T5945] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 94.199632][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.214720][ T5945] usb 3-1: config 0 descriptor?? [ 94.266910][ T5824] BTRFS info (device loop1): last unmount of filesystem eb301384-fc24-4076-a5a0-10230e57aae3 [ 94.652769][ T6308] loop0: detected capacity change from 0 to 2048 [ 94.670253][ T5945] creative-sb0540 0003:041E:3100.0002: unknown main item tag 0x0 [ 94.726133][ T5945] creative-sb0540 0003:041E:3100.0002: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 94.899112][ T10] usb 3-1: USB disconnect, device number 2 [ 94.928132][ T6308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.092275][ T6314] fido_id[6314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 95.163370][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.327387][ T6326] loop0: detected capacity change from 0 to 64 [ 95.345620][ T6304] loop4: detected capacity change from 0 to 32768 [ 95.370281][ T6304] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.120 (6304) [ 95.454908][ T6304] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.499527][ T6304] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 95.691651][ T6304] BTRFS info (device loop4): enabling ssd optimizations [ 95.732228][ T6304] BTRFS info (device loop4): turning on async discard [ 95.772767][ T6304] BTRFS info (device loop4): enabling free space tree [ 95.842407][ T6350] loop1: detected capacity change from 0 to 256 [ 95.998591][ T6350] FAT-fs (loop1): Directory bread(block 64) failed [ 96.035266][ T6350] FAT-fs (loop1): Directory bread(block 65) failed [ 96.041955][ T6350] FAT-fs (loop1): Directory bread(block 66) failed [ 96.077733][ T5822] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.093734][ T6350] FAT-fs (loop1): Directory bread(block 67) failed [ 96.114235][ T6350] FAT-fs (loop1): Directory bread(block 68) failed [ 96.120787][ T6350] FAT-fs (loop1): Directory bread(block 69) failed [ 96.154006][ T6350] FAT-fs (loop1): Directory bread(block 70) failed [ 96.191963][ T6350] FAT-fs (loop1): Directory bread(block 71) failed [ 96.236575][ T6350] FAT-fs (loop1): Directory bread(block 72) failed [ 96.243145][ T6350] FAT-fs (loop1): Directory bread(block 73) failed [ 96.498248][ T6323] loop3: detected capacity change from 0 to 40427 [ 96.541823][ T6323] F2FS-fs: inline encryption not supported [ 96.573681][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.622188][ T6323] F2FS-fs (loop3): invalid crc value [ 96.773926][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.774666][ T6368] loop1: detected capacity change from 0 to 4096 [ 96.809691][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 96.875730][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.937498][ T9] usb 5-1: config 0 descriptor?? [ 96.973850][ T6323] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 97.014214][ T6323] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.048671][ T6368] ntfs3(loop1): ino=21, "file1" fiemap is not supported for compressed file (cp -r) [ 97.118620][ T6323] syz.3.126: attempt to access beyond end of device [ 97.118620][ T6323] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.215017][ T6323] CPU: 0 UID: 0 PID: 6323 Comm: syz.3.126 Not tainted syzkaller #0 PREEMPT(full) [ 97.215044][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.215057][ T6323] Call Trace: [ 97.215065][ T6323] [ 97.215074][ T6323] dump_stack_lvl+0x189/0x250 [ 97.215111][ T6323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.215140][ T6323] ? __pfx_queue_work_on+0x10/0x10 [ 97.215162][ T6323] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 97.215185][ T6323] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.215224][ T6323] f2fs_handle_critical_error+0x37c/0x540 [ 97.215258][ T6323] f2fs_write_end_io+0x886/0xb60 [ 97.215303][ T6323] __submit_merged_bio+0x27a/0x6a0 [ 97.215338][ T6323] __submit_merged_write_cond+0x255/0x530 [ 97.215373][ T6323] f2fs_write_data_pages+0x261d/0x3000 [ 97.215400][ T6323] ? check_noncircular+0xe0/0x160 [ 97.215462][ T6323] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 97.215573][ T6323] ? __lock_acquire+0xab9/0xd20 [ 97.215604][ T6323] ? do_raw_spin_lock+0x121/0x290 [ 97.215646][ T6323] ? do_raw_spin_unlock+0x122/0x240 [ 97.215675][ T6323] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 97.215705][ T6323] do_writepages+0x32e/0x550 [ 97.215747][ T6323] ? do_raw_spin_unlock+0x122/0x240 [ 97.215780][ T6323] filemap_fdatawrite+0x199/0x240 [ 97.215810][ T6323] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 97.215892][ T6323] ? do_raw_spin_unlock+0x122/0x240 [ 97.215926][ T6323] f2fs_sync_dirty_inodes+0x31f/0x830 [ 97.215963][ T6323] f2fs_write_checkpoint+0x93e/0x2440 [ 97.215981][ T6323] ? check_noncircular+0xe0/0x160 [ 97.216039][ T6323] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 97.216101][ T6323] ? down_write+0x162/0x1f0 [ 97.216127][ T6323] ? __pfx_down_write+0x10/0x10 [ 97.216166][ T6323] f2fs_issue_checkpoint+0x3b8/0x610 [ 97.216190][ T6323] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 97.216230][ T6323] ? __lock_acquire+0xab9/0xd20 [ 97.216298][ T6323] ? f2fs_sync_fs+0x200/0x3d0 [ 97.216328][ T6323] f2fs_mkdir+0x46b/0x570 [ 97.216367][ T6323] vfs_mkdir+0x306/0x510 [ 97.216399][ T6323] do_mkdirat+0x247/0x590 [ 97.216427][ T6323] ? __pfx_do_mkdirat+0x10/0x10 [ 97.216451][ T6323] ? getname_flags+0x1e5/0x540 [ 97.216486][ T6323] __x64_sys_mkdirat+0x87/0xa0 [ 97.216512][ T6323] do_syscall_64+0xfa/0xfa0 [ 97.216533][ T6323] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.216555][ T6323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.216576][ T6323] ? clear_bhb_loop+0x60/0xb0 [ 97.216600][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.216620][ T6323] RIP: 0033:0x7f6c9698efc9 [ 97.216637][ T6323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.216654][ T6323] RSP: 002b:00007f6c9790b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 97.216676][ T6323] RAX: ffffffffffffffda RBX: 00007f6c96be5fa0 RCX: 00007f6c9698efc9 [ 97.216691][ T6323] RDX: 0000000000000000 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 97.216705][ T6323] RBP: 00007f6c96a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.216717][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.216729][ T6323] R13: 00007f6c96be6038 R14: 00007f6c96be5fa0 R15: 00007ffcc953f328 [ 97.216765][ T6323] [ 97.216798][ T6323] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 97.561536][ T9] lua 0003:1E7D:2C2E.0003: unbalanced collection at end of report description [ 97.572497][ T9] lua 0003:1E7D:2C2E.0003: parse failed [ 97.581117][ T9] lua 0003:1E7D:2C2E.0003: probe with driver lua failed with error -22 [ 97.718380][ T6391] loop1: detected capacity change from 0 to 1024 [ 97.770091][ T9] usb 5-1: USB disconnect, device number 3 [ 97.789170][ T6391] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c018, mo2=0002] [ 97.800748][ T6391] System zones: 0-1, 3-36 [ 97.818988][ T6391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.884470][ T6391] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c018, mo2=0002] [ 97.895017][ T6391] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.147: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 97.916168][ T6391] EXT4-fs error (device loop1): ext4_quota_enable:7139: comm syz.1.147: Bad quota inode: 3, type: 0 [ 97.985429][ T6391] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 98.126319][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.127958][ T6402] loop2: detected capacity change from 0 to 512 [ 98.212122][ T6402] EXT4-fs (loop2): 1 truncate cleaned up [ 98.257187][ T6402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.343765][ T797] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.374314][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.395814][ T6408] loop3: detected capacity change from 0 to 64 [ 98.525044][ T797] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 98.552780][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 98.561818][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.607557][ T797] usb 1-1: config 0 descriptor?? [ 98.867080][ T797] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 98.900493][ T6424] loop4: detected capacity change from 0 to 128 [ 98.973920][ T6424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 99.031980][ T5945] IPVS: starting estimator thread 0... [ 99.034620][ T6424] System zones: 1-3, 19-19, 35-36 [ 99.085238][ T797] [drm:udl_init] *ERROR* Selecting channel failed [ 99.143722][ T6432] IPVS: using max 27 ests per chain, 64800 per kthread [ 99.151281][ T6424] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.200791][ T797] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 99.220082][ T797] [drm] Initialized udl on minor 2 [ 99.223485][ T6424] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.241891][ T797] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 99.260657][ T797] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 99.314876][ T797] usb 1-1: USB disconnect, device number 3 [ 99.321032][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 99.328854][ T6424] EXT4-fs warning (device loop4): ext4_group_extend:1862: can't shrink FS - resize aborted [ 99.350241][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 99.427836][ T6416] loop1: detected capacity change from 0 to 32768 [ 99.468466][ T5822] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.499099][ T30] audit: type=1800 audit(1761104501.468:3): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.158" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 99.885312][ T6447] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 99.912913][ T6447] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 99.920505][ T6447] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 99.929123][ T6447] comedi comedi3: 8255: I/O port conflict (0xf0000,4) [ 99.973992][ T6447] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 99.980655][ T6447] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 99.987778][ T6447] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 100.007131][ T6447] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 100.014921][ T6447] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 100.021631][ T6447] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 100.027540][ T6454] loop0: detected capacity change from 0 to 128 [ 100.029468][ T6447] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 100.043372][ T6447] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 100.050839][ T6447] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 100.074936][ T6454] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 100.086145][ T6452] loop4: detected capacity change from 0 to 4096 [ 100.113757][ T6447] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 100.122260][ T6452] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 100.154438][ T6447] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 100.160918][ T6447] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 100.169754][ T6454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.258295][ T6452] ntfs3(loop4): ino=19, mi_enum_attr [ 100.273692][ T6447] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 100.276998][ T6452] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 100.280185][ T6447] comedi comedi3: 8255: I/O port conflict (0x402,4) [ 100.403162][ T6452] ntfs3(loop4): failed to convert name for inode 20. [ 100.674481][ T6460] loop1: detected capacity change from 0 to 2048 [ 100.721490][ T6460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.998596][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.100091][ T6476] loop4: detected capacity change from 0 to 736 [ 101.480835][ T6487] loop1: detected capacity change from 0 to 1024 [ 101.489998][ T6489] loop2: detected capacity change from 0 to 64 [ 101.640859][ T6487] hfsplus: bad catalog entry type [ 101.804538][ T1344] hfsplus: b-tree write err: -5, ino 4 [ 102.010332][ T6503] netlink: 'syz.0.199': attribute type 298 has an invalid length. [ 102.465195][ T6518] loop0: detected capacity change from 0 to 256 [ 102.568207][ T30] audit: type=1800 audit(1761104504.538:4): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.205" name="file2" dev="loop0" ino=1048648 res=0 errno=0 [ 102.612780][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 103.021780][ T6481] loop3: detected capacity change from 0 to 65536 [ 103.059416][ T6481] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 103.106849][ T6481] XFS (loop3): Ending clean mount [ 103.164225][ T6481] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 [ 103.228108][ T6481] XFS (loop3): Unmount and run xfs_repair [ 103.253306][ T6481] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 103.282861][ T6481] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 103.316854][ T6481] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 103.326379][ T6542] loop1: detected capacity change from 0 to 4096 [ 103.355070][ T6481] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 103.370404][ T6542] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 103.386172][ T6481] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 103.405017][ T6481] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 103.430202][ T6481] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 103.453925][ T6542] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 103.479131][ T6481] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.526603][ T6481] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.560562][ T6481] XFS (loop3): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74 [ 103.587072][ T6481] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 103.622729][ T6481] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 103.695375][ T5821] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 103.814189][ T6550] loop1: detected capacity change from 0 to 2048 [ 103.852056][ T6550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.946034][ T6552] loop4: detected capacity change from 0 to 64 [ 103.961973][ T6506] loop2: detected capacity change from 0 to 32768 [ 104.103748][ T6506] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.197 (6506) [ 104.155416][ T6506] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.223402][ T6506] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 104.453095][ T6548] loop0: detected capacity change from 0 to 32768 [ 104.510919][ T6506] BTRFS info (device loop2): enabling ssd optimizations [ 104.533419][ T6575] warning: `syz.1.222' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.572886][ T6548] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.630635][ T6506] BTRFS info (device loop2): turning on async discard [ 104.637712][ T6506] BTRFS info (device loop2): enabling free space tree [ 104.701558][ T6506] BTRFS info (device loop2): use zlib compression, level 3 [ 104.750661][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 104.815076][ T6548] XFS (loop0): Ending clean mount [ 104.914797][ T6548] XFS (loop0): Quotacheck needed: Please wait. [ 105.023954][ T6548] XFS (loop0): Quotacheck: Done. [ 105.237246][ T5823] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.330251][ T5828] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.340947][ T5825] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.544283][ T5825] usb 2-1: Using ep0 maxpacket: 8 [ 105.551364][ T5825] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 105.613383][ T5825] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 105.644223][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.650968][ T5825] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 105.666883][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.706763][ T5825] usb 2-1: config 0 descriptor?? [ 106.190990][ T5825] gt683r_led 0003:1770:FF00.0004: unknown main item tag 0x2 [ 106.222712][ T5825] gt683r_led 0003:1770:FF00.0004: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 106.303692][ T5946] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.378446][ T5910] usb 2-1: USB disconnect, device number 3 [ 106.404771][ T5896] gt683r_led 0003:1770:FF00.0004: failed to send set report request: -19 [ 106.426460][ T5896] gt683r_led 0003:1770:FF00.0004: failed to send set report request: -19 [ 106.443883][ T6597] loop3: detected capacity change from 0 to 32768 [ 106.447183][ T5896] gt683r_led 0003:1770:FF00.0004: failed to send set report request: -19 [ 106.485368][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 106.502651][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.538123][ T6597] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 106.576137][ T5946] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 106.582083][ T6609] mkiss: ax0: crc mode is auto. [ 106.592969][ T6616] IPVS: Error connecting to the multicast addr [ 106.603508][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.634602][ T5946] usb 1-1: config 0 descriptor?? [ 106.728885][ T6597] XFS (loop3): Starting recovery (logdev: internal) [ 106.792379][ T6597] XFS (loop3): Ending recovery (logdev: internal) [ 107.009901][ T5821] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 107.060884][ T5946] konepure 0003:1E7D:2DBE.0005: collection stack underflow [ 107.079340][ T5946] konepure 0003:1E7D:2DBE.0005: item 0 0 0 12 parsing failed [ 107.094790][ T5946] konepure 0003:1E7D:2DBE.0005: parse failed [ 107.111100][ T5946] konepure 0003:1E7D:2DBE.0005: probe with driver konepure failed with error -22 [ 107.314554][ T5946] usb 1-1: USB disconnect, device number 4 [ 107.385756][ T6622] loop4: detected capacity change from 0 to 40427 [ 107.419813][ T6622] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 107.433896][ T6622] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 107.462088][ T6622] F2FS-fs (loop4): invalid crc value [ 107.501837][ T6629] loop2: detected capacity change from 0 to 8192 [ 107.733930][ T6622] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 107.750904][ T6627] loop1: detected capacity change from 0 to 32768 [ 107.776000][ T6622] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 107.791457][ T6622] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.870771][ T6627] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 107.896794][ T6639] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.924848][ T6643] tipc: Started in network mode [ 107.930118][ T6643] tipc: Node identity e0000001, cluster identity 4711 [ 107.941219][ T6643] tipc: Enabling of bearer rejected, failed to enable media [ 108.170760][ T5824] ocfs2: Unmounting device (7,1) on (node local) [ 109.167994][ T6657] loop1: detected capacity change from 0 to 32768 [ 109.235683][ T6657] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.247 (6657) [ 109.256041][ T6662] loop3: detected capacity change from 0 to 32768 [ 109.290345][ T6680] loop4: detected capacity change from 0 to 64 [ 109.315144][ T6657] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.348831][ T6657] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 109.382476][ T6662] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.519036][ T6692] loop0: detected capacity change from 0 to 4096 [ 109.645876][ T6657] BTRFS info (device loop1): enabling ssd optimizations [ 109.649085][ T6662] XFS (loop3): Ending clean mount [ 109.654271][ T6657] BTRFS info (device loop1): turning on async discard [ 109.674346][ T6657] BTRFS info (device loop1): enabling free space tree [ 109.708071][ T6662] XFS (loop3): Quotacheck needed: Please wait. [ 109.732246][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 109.792775][ T6662] XFS (loop3): Quotacheck: Done. [ 109.919379][ T30] audit: type=1800 audit(1761104511.888:5): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.257" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 109.971564][ T5824] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.047512][ T5821] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.108263][ T6713] loop2: detected capacity change from 0 to 512 [ 110.221213][ T6713] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.263: missing EA_INODE flag [ 110.323243][ T6717] netlink: 188 bytes leftover after parsing attributes in process `syz.0.261'. [ 110.341875][ T6713] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.263: error while reading EA inode 11 err=-117 [ 110.444374][ T6713] EXT4-fs (loop2): 1 orphan inode deleted [ 110.455170][ T6722] dvmrp5: entered allmulticast mode [ 110.488295][ T6713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.639777][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 110.681671][ T6727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.265'. [ 110.736261][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.927651][ T6740] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.245471][ T6754] netlink: 104 bytes leftover after parsing attributes in process `syz.4.275'. [ 111.428563][ T6760] loop0: detected capacity change from 0 to 1024 [ 111.688851][ T6770] capability: warning: `syz.0.282' uses deprecated v2 capabilities in a way that may be insecure [ 111.730759][ T6772] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 111.932599][ T6778] loop3: detected capacity change from 0 to 8 [ 112.003506][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.287'. [ 112.147309][ T6784] loop2: detected capacity change from 0 to 16 [ 112.177572][ T6784] erofs (device loop2): mounted with root inode @ nid 36. [ 112.221670][ T6784] erofs (device loop2): invalid de[0].nameoff 0 @ nid 36 [ 112.320545][ T6758] loop1: detected capacity change from 0 to 32768 [ 112.405894][ T6758] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 112.439177][ T6795] loop2: detected capacity change from 0 to 256 [ 112.448393][ T6758] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.489647][ T6766] loop4: detected capacity change from 0 to 32768 [ 112.513736][ T6766] (syz.4.281,6766,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.555101][ T6766] (syz.4.281,6766,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.569948][ T6795] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 112.597111][ T6758] XFS (loop1): Ending clean mount [ 112.637679][ T6758] XFS (loop1): Quotacheck needed: Please wait. [ 112.647584][ T6766] JBD2: Ignoring recovery information on journal [ 112.734957][ T13] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 [ 112.796217][ T6766] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 112.797034][ T13] XFS (loop1): Unmount and run xfs_repair [ 112.811668][ T13] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 112.821808][ T13] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 112.831481][ T13] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 112.852465][ T13] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 112.852487][ T13] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 112.860733][ T13] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 112.860753][ T13] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 112.860768][ T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.860783][ T13] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 112.860802][ T13] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x10 len 8 error 74 [ 112.865636][ T6758] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 112.944128][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.949889][ T5824] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.951639][ T5824] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 113.139026][ T5822] ocfs2: Unmounting device (7,4) on (node local) [ 113.552595][ T6800] loop0: detected capacity change from 0 to 40427 [ 113.648536][ T6808] loop3: detected capacity change from 0 to 32768 [ 113.721959][ T6800] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 113.722916][ T6808] read_mapping_page failed! [ 113.756471][ T6800] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.793994][ T6808] ERROR: (device loop3): txCommit: [ 113.793994][ T6808] [ 113.845033][ T6808] read_mapping_page failed! [ 113.859354][ T6808] ERROR: (device loop3): txCommit: [ 113.859354][ T6808] [ 113.877750][ T30] audit: type=1800 audit(1761104515.838:6): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.295" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 113.909488][ T6808] read_mapping_page failed! [ 113.947211][ T6808] ERROR: (device loop3): txCommit: [ 113.947211][ T6808] [ 114.006583][ T5823] syz-executor: attempt to access beyond end of device [ 114.006583][ T5823] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.067931][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 114.067974][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.067994][ T5823] Call Trace: [ 114.068009][ T5823] [ 114.068025][ T5823] dump_stack_lvl+0x189/0x250 [ 114.068082][ T5823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.068109][ T5823] ? __pfx_queue_work_on+0x10/0x10 [ 114.068131][ T5823] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 114.068153][ T5823] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 114.068188][ T5823] f2fs_handle_critical_error+0x37c/0x540 [ 114.068223][ T5823] f2fs_write_end_io+0x886/0xb60 [ 114.068264][ T5823] __submit_merged_bio+0x27a/0x6a0 [ 114.068300][ T5823] __submit_merged_write_cond+0x255/0x530 [ 114.068335][ T5823] f2fs_write_data_pages+0x261d/0x3000 [ 114.068405][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 114.068486][ T5823] ? __mod_zone_page_state+0xd7/0x140 [ 114.068518][ T5823] ? folios_put_refs+0x58b/0x670 [ 114.068558][ T5823] ? __lock_acquire+0xab9/0xd20 [ 114.068591][ T5823] ? do_raw_spin_lock+0x121/0x290 [ 114.068633][ T5823] ? do_raw_spin_unlock+0x122/0x240 [ 114.068661][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 114.068692][ T5823] do_writepages+0x32e/0x550 [ 114.068735][ T5823] ? do_raw_spin_unlock+0x122/0x240 [ 114.068769][ T5823] filemap_fdatawrite+0x199/0x240 [ 114.068798][ T5823] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 114.068879][ T5823] ? do_raw_spin_unlock+0x122/0x240 [ 114.068912][ T5823] f2fs_sync_dirty_inodes+0x31f/0x830 [ 114.068948][ T5823] f2fs_write_checkpoint+0x93e/0x2440 [ 114.068967][ T5823] ? __lock_acquire+0xab9/0xd20 [ 114.069023][ T5823] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 114.069116][ T5823] kill_f2fs_super+0x2cc/0x6d0 [ 114.069143][ T5823] ? __pfx_kill_f2fs_super+0x10/0x10 [ 114.069184][ T5823] ? shrinker_free+0x2ce/0x3e0 [ 114.069214][ T5823] deactivate_locked_super+0xbc/0x130 [ 114.069238][ T5823] cleanup_mnt+0x425/0x4c0 [ 114.069258][ T5823] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.069284][ T5823] task_work_run+0x1d4/0x260 [ 114.069306][ T5823] ? __pfx_task_work_run+0x10/0x10 [ 114.069321][ T5823] ? __x64_sys_umount+0x122/0x160 [ 114.069351][ T5823] ? exit_to_user_mode_loop+0x40/0x130 [ 114.069377][ T5823] exit_to_user_mode_loop+0xe9/0x130 [ 114.069398][ T5823] do_syscall_64+0x2bd/0xfa0 [ 114.069418][ T5823] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.069440][ T5823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.069460][ T5823] ? clear_bhb_loop+0x60/0xb0 [ 114.069484][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.069503][ T5823] RIP: 0033:0x7f916b7902f7 [ 114.069520][ T5823] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 114.069537][ T5823] RSP: 002b:00007ffcdae8d678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 114.069558][ T5823] RAX: 0000000000000000 RBX: 00007f916b811d7d RCX: 00007f916b7902f7 [ 114.069572][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdae8d730 [ 114.069583][ T5823] RBP: 00007ffcdae8d730 R08: 0000000000000000 R09: 0000000000000000 [ 114.069595][ T5823] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcdae8e7c0 [ 114.069608][ T5823] R13: 00007f916b811d7d R14: 000000000001bcf1 R15: 00007ffcdae8e800 [ 114.069646][ T5823] [ 114.069655][ T5823] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 114.174874][ T6829] loop4: detected capacity change from 0 to 64 [ 114.890742][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 114.917151][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 114.932371][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 115.111520][ T6850] No buffer was provided with the request [ 115.260192][ T6836] loop3: detected capacity change from 0 to 32768 [ 115.302152][ T6836] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 115.414381][ T6836] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 115.565463][ T30] audit: type=1800 audit(1761104517.528:7): pid=6836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.309" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 115.635694][ T6874] syz.3.309 (6874) used greatest stack depth: 18536 bytes left [ 115.769704][ T5821] ocfs2: Unmounting device (7,3) on (node local) [ 115.908342][ T6883] loop1: detected capacity change from 0 to 512 [ 115.945062][ T6883] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.034418][ T6883] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.100978][ T6892] comedi comedi3: bad chanlist[0]=0x80000000 chan=0 range length=4 [ 116.102539][ T6883] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.130019][ T6883] EXT4-fs (loop1): 1 truncate cleaned up [ 116.145158][ T6883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.255750][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.356766][ T6899] loop3: detected capacity change from 0 to 256 [ 116.444099][ T6899] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d) [ 116.508315][ T6903] capability: warning: `syz.2.339' uses 32-bit capabilities (legacy support in use) [ 116.617814][ T6870] loop4: detected capacity change from 0 to 40427 [ 116.655034][ T6870] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 116.655688][ T6905] loop0: detected capacity change from 0 to 4096 [ 116.683671][ T6870] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.707600][ T6905] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 116.714277][ T6870] F2FS-fs (loop4): invalid crc value [ 116.994558][ T6918] loop1: detected capacity change from 0 to 512 [ 116.998089][ T6870] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 117.078623][ T6870] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 117.092835][ T72] ntfs3(loop0): ino=1e, ni_find_attr [ 117.106829][ T6918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.122875][ T6870] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.166488][ T6918] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.310223][ T5822] syz-executor: attempt to access beyond end of device [ 117.310223][ T5822] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.353689][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 117.353713][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.353724][ T5822] Call Trace: [ 117.353732][ T5822] [ 117.353740][ T5822] dump_stack_lvl+0x189/0x250 [ 117.353777][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.353805][ T5822] ? __pfx_queue_work_on+0x10/0x10 [ 117.353835][ T5822] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 117.353857][ T5822] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 117.353893][ T5822] f2fs_handle_critical_error+0x37c/0x540 [ 117.353929][ T5822] f2fs_write_end_io+0x886/0xb60 [ 117.353969][ T5822] __submit_merged_bio+0x27a/0x6a0 [ 117.354002][ T5822] __submit_merged_write_cond+0x255/0x530 [ 117.354036][ T5822] f2fs_write_data_pages+0x261d/0x3000 [ 117.354099][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 117.354180][ T5822] ? __page_cache_release+0x8a6/0xbb0 [ 117.354217][ T5822] ? folios_put_refs+0x584/0x670 [ 117.354253][ T5822] ? __pfx_folios_put_refs+0x10/0x10 [ 117.354275][ T5822] ? rcu_is_watching+0x15/0xb0 [ 117.354306][ T5822] ? __lock_acquire+0xab9/0xd20 [ 117.354346][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 117.354374][ T5822] do_writepages+0x32e/0x550 [ 117.354414][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 117.354445][ T5822] filemap_fdatawrite+0x199/0x240 [ 117.354473][ T5822] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 117.354557][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 117.354590][ T5822] f2fs_sync_dirty_inodes+0x31f/0x830 [ 117.354628][ T5822] f2fs_write_checkpoint+0x93e/0x2440 [ 117.354647][ T5822] ? __lock_acquire+0xab9/0xd20 [ 117.354701][ T5822] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 117.354786][ T5822] kill_f2fs_super+0x2cc/0x6d0 [ 117.354810][ T5822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 117.354856][ T5822] ? shrinker_free+0x2ce/0x3e0 [ 117.354886][ T5822] deactivate_locked_super+0xbc/0x130 [ 117.354913][ T5822] cleanup_mnt+0x425/0x4c0 [ 117.354933][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.354958][ T5822] task_work_run+0x1d4/0x260 [ 117.354980][ T5822] ? __pfx_task_work_run+0x10/0x10 [ 117.354993][ T5822] ? __x64_sys_umount+0x122/0x160 [ 117.355023][ T5822] ? exit_to_user_mode_loop+0x40/0x130 [ 117.355047][ T5822] exit_to_user_mode_loop+0xe9/0x130 [ 117.355068][ T5822] do_syscall_64+0x2bd/0xfa0 [ 117.355088][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.355109][ T5822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.355129][ T5822] ? clear_bhb_loop+0x60/0xb0 [ 117.355154][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.355172][ T5822] RIP: 0033:0x7f13a63902f7 [ 117.355189][ T5822] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 117.355205][ T5822] RSP: 002b:00007ffe0881c998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 117.355225][ T5822] RAX: 0000000000000000 RBX: 00007f13a6411d7d RCX: 00007f13a63902f7 [ 117.355238][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0881ca50 [ 117.355249][ T5822] RBP: 00007ffe0881ca50 R08: 0000000000000000 R09: 0000000000000000 [ 117.355261][ T5822] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0881dae0 [ 117.355274][ T5822] R13: 00007f13a6411d7d R14: 000000000001c9ae R15: 00007ffe0881db20 [ 117.355312][ T5822] [ 117.355320][ T5822] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 117.700516][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.987247][ T6947] loop2: detected capacity change from 0 to 256 [ 118.057045][ T6947] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 118.746846][ T6964] loop3: detected capacity change from 0 to 4096 [ 118.770603][ T6956] loop2: detected capacity change from 0 to 32768 [ 118.789773][ T6956] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.360 (6956) [ 118.791281][ T6964] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 118.817895][ T6964] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 118.827049][ T6956] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.845169][ T6956] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 119.004192][ T6956] BTRFS info (device loop2): enabling ssd optimizations [ 119.012323][ T6960] loop4: detected capacity change from 0 to 32768 [ 119.034114][ T6956] BTRFS info (device loop2): turning on async discard [ 119.063707][ T6956] BTRFS info (device loop2): enabling free space tree [ 119.295170][ T6964] ntfs3: Cannot use different iocharset when remounting! [ 119.329797][ T5828] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.391758][ T12] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 119.414399][ T5821] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 119.420956][ T5821] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 119.445993][ T5821] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 119.463743][ T12] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 119.508072][ T6987] loop1: detected capacity change from 0 to 256 [ 119.556816][ T6987] exfat: Deprecated parameter 'utf8' [ 119.562147][ T6987] exfat: Deprecated parameter 'utf8' [ 119.600091][ T6987] exfat: Deprecated parameter 'utf8' [ 119.722501][ T6987] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 119.831598][ T6989] loop4: detected capacity change from 0 to 8192 [ 119.883465][ T5830] loop4: p1 p3 p4 [ 119.895091][ T5830] loop4: partition table partially beyond EOD, truncated [ 119.913945][ T5830] loop4: p1 start 393217 is beyond EOD, truncated [ 119.913981][ T5830] loop4: p3 size 395700 extends beyond EOD, truncated [ 119.918305][ T5830] loop4: p4 start 117571584 is beyond EOD, truncated [ 119.928010][ T6989] loop4: p1 p3 p4 [ 119.928045][ T6989] loop4: partition table partially beyond EOD, truncated [ 119.928266][ T6989] loop4: p1 start 393217 is beyond EOD, truncated [ 119.928285][ T6989] loop4: p3 size 395700 extends beyond EOD, truncated [ 119.944905][ T6989] loop4: p4 start 117571584 is beyond EOD, truncated [ 120.064417][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 120.228331][ T7000] loop2: detected capacity change from 0 to 4096 [ 120.270634][ T7003] loop3: detected capacity change from 0 to 64 [ 120.322343][ T7000] ntfs3(loop2): ino=b, Correct links count -> 1. [ 120.356955][ T7000] ntfs3(loop2): ino=18, mi_enum_attr [ 120.382373][ T7000] ntfs3(loop2): ino=5, "/" indx_read [ 120.390758][ T7000] ntfs3(loop2): ino=5, "/" ntfs_readdir [ 120.691720][ T7010] loop2: detected capacity change from 0 to 512 [ 120.779231][ T7010] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.802114][ T5830] udevd[5830]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 120.847138][ T7010] EXT4-fs (loop2): 1 truncate cleaned up [ 120.882458][ T7010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.987130][ T30] audit: type=1800 audit(1761104522.958:8): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.376" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 121.269168][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.421498][ T7037] loop3: detected capacity change from 0 to 512 [ 121.446089][ T7037] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.503796][ T7037] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.564606][ T7037] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 121.572536][ T7037] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a000e018, mo2=0002] [ 121.604770][ T7037] System zones: 0-1, 15-15, 18-18, 34-34 [ 121.610726][ T7037] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.623741][ T7037] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #4: comm syz.3.390: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 121.696253][ T7027] loop1: detected capacity change from 0 to 32768 [ 121.717713][ T7037] EXT4-fs error (device loop3): ext4_quota_enable:7139: comm syz.3.390: Bad quota inode: 4, type: 1 [ 121.752306][ T7027] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.754243][ T7037] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.809023][ T7027] XFS (loop1): Ending clean mount [ 121.814627][ T7037] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 121.838050][ T7037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.919402][ T5824] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.975700][ T7037] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.390: bad symlink. [ 122.006170][ T7037] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.390: bad symlink. [ 122.130863][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.522732][ T7066] loop2: detected capacity change from 0 to 4096 [ 122.752097][ T7035] loop4: detected capacity change from 0 to 32768 [ 122.806471][ T7035] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 122.832022][ T30] audit: type=1800 audit(1761104524.798:9): pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.399" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 122.859235][ T7078] loop3: detected capacity change from 0 to 4096 [ 122.871695][ T7035] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 122.999195][ T7035] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 123.045390][ T7087] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.192889][ T7035] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 123.830093][ T7103] [U] ²§ [ 123.932778][ T7104] loop4: detected capacity change from 0 to 4096 [ 124.059515][ T7104] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 124.097588][ T7111] loop3: detected capacity change from 0 to 512 [ 124.140281][ T7104] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB [ 124.170451][ T7111] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 124.203867][ T7111] UDF-fs: Scanning with blocksize 512 failed [ 124.210334][ T7089] loop2: detected capacity change from 0 to 40427 [ 124.225841][ T7111] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 124.242854][ T7095] loop0: detected capacity change from 0 to 32768 [ 124.247884][ T7089] F2FS-fs (loop2): Invalid log blocks per segment (327689) [ 124.256771][ T7111] UDF-fs: Scanning with blocksize 1024 failed [ 124.266402][ T7089] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 124.282776][ T7111] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 124.296745][ T7089] F2FS-fs (loop2): invalid crc value [ 124.311214][ T7095] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.413 (7095) [ 124.324613][ T7111] UDF-fs: Scanning with blocksize 2048 failed [ 124.375464][ T7111] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 124.421566][ T7111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.466297][ T7095] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 124.515549][ T7116] loop1: detected capacity change from 0 to 2048 [ 124.579653][ T7095] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 124.636072][ T7095] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 124.659884][ T7089] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 124.686221][ T7116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.711318][ T7089] F2FS-fs (loop2): Start checkpoint disabled! [ 124.778300][ T7089] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 124.778903][ T7116] EXT4-fs error (device loop1): ext4_read_inline_dir:1476: inode #12: block 9: comm syz.1.421: path /82/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 124.816611][ T7089] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 124.836008][ T7089] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 124.891621][ T7116] EXT4-fs (loop1): Remounting filesystem read-only [ 124.971415][ T7095] BTRFS info (device loop0): allowing degraded mounts [ 124.980269][ T7095] BTRFS info (device loop0): turning on async discard [ 124.989271][ T7095] BTRFS info (device loop0): enabling disk space caching [ 124.996446][ T7095] BTRFS info (device loop0): force clearing of disk cache [ 125.003810][ T7095] BTRFS info (device loop0): force zstd compression, level 3 [ 125.108071][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.125293][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 125.311625][ T5823] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 125.430424][ T5946] IPVS: starting estimator thread 0... [ 125.494979][ T7158] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 125.536447][ T7157] IPVS: using max 27 ests per chain, 64800 per kthread [ 125.567892][ T7161] loop1: detected capacity change from 0 to 16 [ 125.591449][ T7158] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 125.650093][ T7161] erofs (device loop1): mounted with root inode @ nid 36. [ 125.869255][ T7167] loop0: detected capacity change from 0 to 256 [ 125.950895][ T7167] exfat: Deprecated parameter 'utf8' [ 125.979640][ T7167] exfat: Deprecated parameter 'namecase' [ 126.009613][ T7167] exfat: Deprecated parameter 'namecase' [ 126.053746][ T7167] exfat: Deprecated parameter 'utf8' [ 126.067225][ T7175] loop3: detected capacity change from 0 to 1024 [ 126.094522][ T7175] EXT4-fs: Ignoring removed bh option [ 126.125708][ T7175] EXT4-fs: inline encryption not supported [ 126.144881][ T7177] binder: 7176:7177 ioctl 4018620d 0 returned -22 [ 126.177904][ T7167] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 126.219922][ T7175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.272722][ T7167] exFAT-fs (loop0): start_clu is invalid cluster(0x400) [ 126.389459][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.544731][ T7188] devtmpfs: Too few inodes for current use [ 126.701200][ T7191] loop3: detected capacity change from 0 to 4096 [ 126.726031][ T7191] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 126.910938][ T7191] ntfs3(loop3): ino=19, mi_enum_attr [ 126.918737][ T7171] loop1: detected capacity change from 0 to 32768 [ 126.958300][ T7191] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 127.070319][ T7204] loop4: detected capacity change from 0 to 512 [ 127.145560][ T7204] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 127.189654][ T7204] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 127.200665][ T7206] loop0: detected capacity change from 0 to 512 [ 127.242788][ T7204] System zones: 1-12 [ 127.274422][ T7204] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.281402][ T7204] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.453: invalid indirect mapped block 12 (level 1) [ 127.338494][ T7206] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 127.363029][ T7204] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.453: invalid indirect mapped block 2 (level 2) [ 127.417224][ T7204] EXT4-fs (loop4): 1 truncate cleaned up [ 127.439964][ T7204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 127.657340][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 127.789975][ T7200] loop2: detected capacity change from 0 to 32768 [ 127.855666][ T7200] JBD2: Ignoring recovery information on journal [ 128.025926][ T7200] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.171118][ T5828] ocfs2: Unmounting device (7,2) on (node local) [ 128.615184][ T7243] loop3: detected capacity change from 0 to 256 [ 128.710797][ T7243] FAT-fs (loop3): Directory bread(block 64) failed [ 128.723048][ T7236] loop0: detected capacity change from 0 to 32768 [ 128.746444][ T7243] FAT-fs (loop3): Directory bread(block 65) failed [ 128.803160][ T7243] FAT-fs (loop3): Directory bread(block 66) failed [ 128.833692][ T7243] FAT-fs (loop3): Directory bread(block 67) failed [ 128.840324][ T7243] FAT-fs (loop3): Directory bread(block 68) failed [ 128.903208][ T7243] FAT-fs (loop3): Directory bread(block 69) failed [ 128.925110][ T7236] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 128.925110][ T7236] [ 128.938023][ T7238] loop4: detected capacity change from 0 to 32768 [ 128.946192][ T7243] FAT-fs (loop3): Directory bread(block 70) failed [ 128.947252][ T7236] ERROR: (device loop0): remounting filesystem as read-only [ 128.966206][ T7243] FAT-fs (loop3): Directory bread(block 71) failed [ 129.001585][ T7243] FAT-fs (loop3): Directory bread(block 72) failed [ 129.001894][ T7238] jfs_lookup: iget failed on inum 4 [ 129.034458][ T7243] FAT-fs (loop3): Directory bread(block 73) failed [ 129.039533][ T7236] ialloc: diAlloc returned -5! [ 129.064117][ T7238] jfs_lookup: iget failed on inum 4 [ 129.519662][ T7261] netlink: 'syz.4.480': attribute type 28 has an invalid length. [ 129.820652][ T7251] loop2: detected capacity change from 0 to 32768 [ 129.866852][ T7251] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.474 (7251) [ 129.936747][ T7251] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 129.983904][ T7251] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 130.030005][ T7275] netlink: 'syz.3.485': attribute type 2 has an invalid length. [ 130.055945][ T7275] netlink: 'syz.3.485': attribute type 8 has an invalid length. [ 130.067409][ T7275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.485'. [ 130.123456][ T7251] BTRFS info (device loop2): enabling ssd optimizations [ 130.161588][ T7251] BTRFS info (device loop2): turning on async discard [ 130.188934][ T7251] BTRFS info (device loop2): enabling free space tree [ 130.224660][ T7251] BTRFS info (device loop2): use zstd compression, level 3 [ 130.325784][ T7259] loop1: detected capacity change from 0 to 32768 [ 130.387057][ T7259] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 130.530249][ T5828] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 130.744425][ T5824] ocfs2: Unmounting device (7,1) on (node local) [ 130.823198][ T7296] loop4: detected capacity change from 0 to 32768 [ 131.371772][ T7323] loop3: detected capacity change from 0 to 256 [ 131.477595][ T7323] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 131.684648][ T7329] loop3: detected capacity change from 0 to 256 [ 131.751636][ T7329] FAT-fs (loop3): Directory bread(block 64) failed [ 131.765120][ T7329] FAT-fs (loop3): Directory bread(block 65) failed [ 131.778214][ T7329] FAT-fs (loop3): Directory bread(block 66) failed [ 131.791261][ T7329] FAT-fs (loop3): Directory bread(block 67) failed [ 131.801493][ T7329] FAT-fs (loop3): Directory bread(block 68) failed [ 131.812408][ T7329] FAT-fs (loop3): Directory bread(block 69) failed [ 131.827621][ T7329] FAT-fs (loop3): Directory bread(block 70) failed [ 131.846759][ T7329] FAT-fs (loop3): Directory bread(block 71) failed [ 131.860697][ T7329] FAT-fs (loop3): Directory bread(block 72) failed [ 131.869696][ T7313] loop4: detected capacity change from 0 to 32768 [ 131.876544][ T7329] FAT-fs (loop3): Directory bread(block 73) failed [ 131.899993][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 131.927716][ T7313] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.018639][ T7313] XFS (loop4): Ending clean mount [ 132.070073][ T7313] XFS (loop4): syz.4.496 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 132.248784][ T5822] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.314853][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.510'. [ 132.381573][ T7353] loop1: detected capacity change from 0 to 64 [ 132.399626][ T30] audit: type=1326 audit(1761104534.368:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7354 comm="syz.2.512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f208438efc9 code=0x0 [ 132.575004][ T7353] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 132.585405][ T7353] block device autoloading is deprecated and will be removed. [ 132.793751][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.800094][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.003709][ T796] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 133.173958][ T796] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.196365][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.203020][ T796] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 133.258697][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.290440][ T796] usb 2-1: config 0 descriptor?? [ 133.627315][ T7376] loop3: detected capacity change from 0 to 32768 [ 133.673941][ T9] kernel write not supported for file /input/mouse0 (pid: 9 comm: kworker/0:0) [ 133.737379][ T796] hid-rmi 0003:1532:011D.0006: invalid report_size 1330454127 [ 133.763696][ T796] hid-rmi 0003:1532:011D.0006: item 0 4 1 7 parsing failed [ 133.774266][ T796] hid-rmi 0003:1532:011D.0006: parse failed [ 133.783052][ T796] hid-rmi 0003:1532:011D.0006: probe with driver hid-rmi failed with error -22 [ 133.798844][ T7398] loop0: detected capacity change from 0 to 512 [ 133.864448][ T7398] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.924736][ T7398] EXT4-fs (loop0): 1 truncate cleaned up [ 133.945301][ T7398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.945879][ T796] usb 2-1: USB disconnect, device number 4 [ 134.102105][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.298675][ T7419] lo speed is unknown, defaulting to 1000 [ 134.312504][ T7419] lo speed is unknown, defaulting to 1000 [ 134.322101][ T7419] lo speed is unknown, defaulting to 1000 [ 134.347205][ T7419] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 134.406312][ T7419] lo speed is unknown, defaulting to 1000 [ 134.426552][ T7419] lo speed is unknown, defaulting to 1000 [ 134.437438][ T7419] lo speed is unknown, defaulting to 1000 [ 134.449125][ T7419] lo speed is unknown, defaulting to 1000 [ 134.457795][ T7419] lo speed is unknown, defaulting to 1000 [ 134.558661][ T7424] loop3: detected capacity change from 0 to 512 [ 134.620364][ T7426] process 'syz.2.544' launched '/dev/fd/3' with NULL argv: empty string added [ 134.631173][ T7424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.678044][ T7424] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.755271][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.982765][ T7436] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 135.179854][ T7442] loop3: detected capacity change from 0 to 256 [ 135.221877][ T7442] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 135.404657][ T7430] loop1: detected capacity change from 0 to 40427 [ 135.428429][ T7430] F2FS-fs: heap/no_heap options were deprecated [ 135.450308][ T7430] F2FS-fs (loop1): Invalid segment count (1) [ 135.464494][ T7430] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 135.489918][ T7430] F2FS-fs (loop1): invalid crc value [ 135.636018][ T7430] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 135.640861][ T7438] loop4: detected capacity change from 0 to 32768 [ 135.654253][ T7430] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 135.669451][ T7430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.714642][ T7438] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 135.722710][ T7430] F2FS-fs (loop1): Corrupted max_depth of 3: 131073 [ 135.919447][ T5822] ocfs2: Unmounting device (7,4) on (node local) [ 136.400446][ T7460] loop3: detected capacity change from 0 to 512 [ 136.469058][ T7460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.517622][ T7460] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.587189][ T7465] loop2: detected capacity change from 0 to 1024 [ 136.604331][ T7465] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.637809][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.651780][ T7465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.673817][ T7465] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.727244][ T7472] loop4: detected capacity change from 0 to 1024 [ 136.738628][ T7465] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.561: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 136.761567][ T7465] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.561: couldn't read orphan inode 11 (err -117) [ 136.775858][ T7465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.881498][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.983618][ T796] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.053926][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.567'. [ 137.145903][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 137.161656][ T796] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 137.185000][ T7485] program syz.2.569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.193262][ T796] usb 2-1: config 0 has no interface number 0 [ 137.226231][ T796] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 137.244103][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.272424][ T796] usb 2-1: Product: syz [ 137.280676][ T796] usb 2-1: Manufacturer: syz [ 137.293908][ T796] usb 2-1: SerialNumber: syz [ 137.314546][ T796] usb 2-1: config 0 descriptor?? [ 137.326167][ T796] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 137.334767][ T796] pctv452e: pctv452e_power_ctrl: 1 [ 137.334767][ T796] [ 137.342092][ T796] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 137.342092][ T796] [ 137.355754][ T796] dvb-usb: bulk message failed: -22 (5/0) [ 137.384564][ T7492] loop2: detected capacity change from 0 to 512 [ 137.397049][ T796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.419039][ T796] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 137.458343][ T796] usb 2-1: media controller created [ 137.472904][ T7492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.479493][ T796] dvb-usb: bulk message failed: -22 (8/0) [ 137.486485][ T7492] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.508036][ T7497] loop3: detected capacity change from 0 to 2048 [ 137.516839][ T7499] loop0: detected capacity change from 0 to 256 [ 137.551409][ T6295] udevd[6295]: incorrect nilfs2 checksum on /dev/loop3 [ 137.578282][ T796] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 137.591248][ T7497] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 137.634802][ T7499] FAT-fs (loop0): Directory bread(block 64) failed [ 137.634995][ T796] dvb-usb: MAC address reading failed. [ 137.641344][ T7499] FAT-fs (loop0): Directory bread(block 65) failed [ 137.641430][ T7499] FAT-fs (loop0): Directory bread(block 66) failed [ 137.711462][ T7502] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.725954][ T7499] FAT-fs (loop0): Directory bread(block 67) failed [ 137.732575][ T7499] FAT-fs (loop0): Directory bread(block 68) failed [ 137.742008][ T7499] FAT-fs (loop0): Directory bread(block 69) failed [ 137.748758][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.758296][ T7497] NILFS error (device loop3): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 137.758411][ T7499] FAT-fs (loop0): Directory bread(block 70) failed [ 137.771310][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.778252][ T7499] FAT-fs (loop0): Directory bread(block 71) failed [ 137.801512][ T7499] FAT-fs (loop0): Directory bread(block 72) failed [ 137.815196][ T7499] FAT-fs (loop0): Directory bread(block 73) failed [ 137.824414][ T7497] Remounting filesystem read-only [ 137.993282][ T7499] syz.0.575: attempt to access beyond end of device [ 137.993282][ T7499] loop0: rw=524288, sector=1256, nr_sectors = 4 limit=256 [ 138.040600][ T796] DVB: Unable to find symbol stb0899_attach() [ 138.066396][ T796] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 138.066862][ T7499] syz.0.575: attempt to access beyond end of device [ 138.066862][ T7499] loop0: rw=0, sector=1256, nr_sectors = 4 limit=256 [ 138.175577][ T30] audit: type=1800 audit(1761104540.138:11): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.575" name="cpu.stat" dev="loop0" ino=1048683 res=0 errno=0 [ 138.197521][ T7499] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 138.275077][ T796] rc_core: IR keymap rc-tt-1500 not found [ 138.280909][ T796] Registered IR keymap rc-empty [ 138.302434][ T796] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 138.334354][ T796] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 138.392417][ T796] dvb-usb: schedule remote query interval to 100 msecs. [ 138.395381][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.403621][ T796] pctv452e: pctv452e_power_ctrl: 0 [ 138.403621][ T796] [ 138.451293][ T796] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 138.462270][ T7523] trusted_key: encrypted_key: key trusted:syz not found [ 138.506043][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 138.535657][ T796] usb 2-1: USB disconnect, device number 5 [ 138.551765][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 138.596025][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 138.615522][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.663434][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.707931][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.741462][ T7529] loop0: detected capacity change from 0 to 4096 [ 138.756194][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.769899][ T7529] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 138.784638][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.789465][ T796] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 138.826909][ T7529] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 138.846759][ T9] usb 3-1: config 0 descriptor?? [ 138.868925][ T7529] ntfs3(loop0): Failed to load $Extend (-22). [ 138.882080][ T7529] ntfs3(loop0): Failed to initialize $Extend. [ 139.041101][ T7543] loop4: detected capacity change from 0 to 128 [ 139.111475][ T7543] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 139.156864][ T7545] loop1: detected capacity change from 0 to 256 [ 139.187115][ T7543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.267169][ T9] microsoft 0003:045E:07DA.0007: report is too long [ 139.306230][ T9] microsoft 0003:045E:07DA.0007: item 0 4 0 8 parsing failed [ 139.346942][ T9] microsoft 0003:045E:07DA.0007: parse failed [ 139.353149][ T9] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22 [ 139.462994][ T7553] loop3: detected capacity change from 0 to 512 [ 139.469239][ T5945] usb 3-1: USB disconnect, device number 3 [ 139.495190][ T7553] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.556245][ T7553] EXT4-fs (loop3): 1 truncate cleaned up [ 139.572848][ T7553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.801897][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.098613][ T7574] loop2: detected capacity change from 0 to 65 [ 140.149369][ T7574] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 140.299241][ T7555] loop1: detected capacity change from 0 to 32768 [ 140.328692][ T7555] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 140.364085][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.387892][ T7555] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 140.414808][ T7555] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 140.441948][ T796] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 140.449502][ T796] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 140.527907][ T796] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 78ms [ 140.540105][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 140.560950][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.562254][ T796] gfs2: fsid=syz:syz.0: jid=0: Done [ 140.591357][ T9] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 140.593176][ T7555] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 140.614117][ T7570] loop4: detected capacity change from 0 to 32768 [ 140.614651][ T5896] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 140.628449][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.682698][ T9] usb 4-1: config 0 descriptor?? [ 140.829714][ T7555] gfs2: fsid=syz:syz.0: found 1 quota changes [ 140.838305][ T5896] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 140.853605][ T5896] usb 3-1: config 1 has no interface number 0 [ 140.865203][ T5896] usb 3-1: config 1 interface 105 has no altsetting 0 [ 140.887577][ T5896] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 140.888406][ T7591] netlink: 72 bytes leftover after parsing attributes in process `syz.0.616'. [ 140.903626][ T5896] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 140.932748][ T7591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.616'. [ 140.943741][ T5896] usb 3-1: Product: syz [ 140.947959][ T5896] usb 3-1: Manufacturer: syz [ 140.974041][ T5896] usb 3-1: SerialNumber: syz [ 140.978864][ T7591] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 141.047272][ T7555] syz.1.601: attempt to access beyond end of device [ 141.047272][ T7555] loop1: rw=2049, sector=68719479088, nr_sectors = 136 limit=32768 [ 141.108223][ T7555] loop1: writeback error on inode 8589934885, offset 0, sector 68719479088 [ 141.134140][ T7555] syz.1.601: attempt to access beyond end of device [ 141.134140][ T7555] loop1: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 141.139529][ T9] greenasia 0003:0E8F:0012.0008: item fetching failed at offset 2/5 [ 141.173739][ T7555] Buffer I/O error on dev loop1, logical block 8589934885, lost async page write [ 141.183243][ T7555] syz.1.601: attempt to access beyond end of device [ 141.183243][ T7555] loop1: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 141.243501][ T7599] loop4: detected capacity change from 0 to 128 [ 141.244968][ T9] greenasia 0003:0E8F:0012.0008: parse failed [ 141.267454][ T7599] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 141.283801][ T9] greenasia 0003:0E8F:0012.0008: probe with driver greenasia failed with error -22 [ 141.286576][ T7599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.395403][ T796] usb 4-1: USB disconnect, device number 4 [ 141.408110][ T5824] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 141.422657][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 141.422681][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.422692][ T5824] Call Trace: [ 141.422699][ T5824] [ 141.422707][ T5824] dump_stack_lvl+0x189/0x250 [ 141.422741][ T5824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.422774][ T5824] ? do_raw_spin_lock+0x121/0x290 [ 141.422805][ T5824] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 141.422845][ T5824] gfs2_withdraw+0xc8/0x160 [ 141.422871][ T5824] gfs2_ail1_empty+0x2ba/0x7c0 [ 141.422917][ T5824] gfs2_flush_revokes+0x5c/0x80 [ 141.422943][ T5824] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 141.422973][ T5824] revoke_lo_before_commit+0x2f/0xe60 [ 141.423015][ T5824] ? do_raw_spin_unlock+0x122/0x240 [ 141.423042][ T5824] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 141.423074][ T5824] gfs2_log_flush+0xa48/0x24c0 [ 141.423117][ T5824] ? __pfx_gfs2_log_flush+0x10/0x10 [ 141.423150][ T5824] ? __pfx_call_rcu+0x10/0x10 [ 141.423172][ T5824] ? radix_tree_delete_item+0x2b6/0x400 [ 141.423199][ T5824] gfs2_kill_sb+0x5d/0x340 [ 141.423221][ T5824] ? shrinker_free+0x2ce/0x3e0 [ 141.423250][ T5824] deactivate_locked_super+0xbc/0x130 [ 141.423275][ T5824] cleanup_mnt+0x425/0x4c0 [ 141.423296][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.423321][ T5824] task_work_run+0x1d4/0x260 [ 141.423343][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 141.423359][ T5824] ? __x64_sys_umount+0x122/0x160 [ 141.423388][ T5824] ? exit_to_user_mode_loop+0x40/0x130 [ 141.423413][ T5824] exit_to_user_mode_loop+0xe9/0x130 [ 141.423434][ T5824] do_syscall_64+0x2bd/0xfa0 [ 141.423456][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.423477][ T5824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.423496][ T5824] ? clear_bhb_loop+0x60/0xb0 [ 141.423521][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.423538][ T5824] RIP: 0033:0x7f7f1c1902f7 [ 141.423554][ T5824] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 141.423570][ T5824] RSP: 002b:00007ffeafa8d8d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 141.423589][ T5824] RAX: 0000000000000000 RBX: 00007f7f1c211d7d RCX: 00007f7f1c1902f7 [ 141.423601][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeafa8d990 [ 141.423613][ T5824] RBP: 00007ffeafa8d990 R08: 0000000000000000 R09: 0000000000000000 [ 141.423625][ T5824] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeafa8ea20 [ 141.423637][ T5824] R13: 00007f7f1c211d7d R14: 00000000000227d4 R15: 00007ffeafa8ea60 [ 141.423669][ T5824] [ 141.678905][ T5824] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 141.889965][ T5896] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 141.904126][ T5896] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 141.920150][ T5896] usb 3-1: USB disconnect, device number 4 [ 142.015212][ T7610] loop4: detected capacity change from 0 to 512 [ 142.066507][ T7610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.119054][ T7610] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.240451][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.409449][ T7628] loop4: detected capacity change from 0 to 2048 [ 142.434297][ T7628] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 142.454020][ T7628] NILFS (loop4): mounting unchecked fs [ 142.457651][ T7624] loop3: detected capacity change from 0 to 4096 [ 142.491232][ T7624] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 142.499807][ T7628] NILFS (loop4): recovery complete [ 142.522893][ T7629] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.644959][ T30] audit: type=1326 audit(1761104544.618:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a638efc9 code=0x7ffc0000 [ 142.692513][ T7624] ntfs3(loop3): ino=1a, mi_enum_attr [ 142.697937][ T7624] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 142.714403][ T7624] ntfs3(loop3): ino=1a, mi_enum_attr [ 142.719719][ T7624] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 142.732172][ T30] audit: type=1326 audit(1761104544.648:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13a638efc9 code=0x7ffc0000 [ 142.758790][ T30] audit: type=1326 audit(1761104544.648:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a638efc9 code=0x7ffc0000 [ 142.783954][ T30] audit: type=1326 audit(1761104544.648:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a638efc9 code=0x7ffc0000 [ 142.809642][ T30] audit: type=1326 audit(1761104544.648:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f13a638efc9 code=0x7ffc0000 [ 142.873656][ T30] audit: type=1326 audit(1761104544.648:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a638efc9 code=0x7ffc0000 [ 142.927089][ T30] audit: type=1326 audit(1761104544.648:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a638efc9 code=0x7ffc0000 [ 142.951919][ T7637] loop4: detected capacity change from 0 to 4096 [ 143.009356][ T7637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.065246][ T30] audit: type=1800 audit(1761104545.028:19): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.638" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 143.188286][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.243749][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.362807][ T7648] tipc: Started in network mode [ 143.372752][ T7648] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 143.390031][ T7648] tipc: Enabled bearer , priority 10 [ 143.415627][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.444137][ T24] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 143.473639][ T24] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 143.481748][ T24] usb 3-1: Manufacturer: syz [ 143.511741][ T24] usb 3-1: config 0 descriptor?? [ 143.607057][ T7654] bridge0: port 3(vlan2) entered blocking state [ 143.633888][ T7654] bridge0: port 3(vlan2) entered disabled state [ 143.640502][ T7654] vlan2: entered allmulticast mode [ 143.668632][ T7654] bridge0: entered allmulticast mode [ 143.680553][ T7654] vlan2: left allmulticast mode [ 143.696581][ T7654] bridge0: left allmulticast mode [ 143.768419][ T7652] loop4: detected capacity change from 0 to 32768 [ 143.784038][ T7652] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.645 (7652) [ 143.822517][ T7652] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 143.865056][ T7652] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 143.966029][ T24] hid_mf 0003:0079:1846.0009: nested delimiters [ 143.986500][ T24] hid_mf 0003:0079:1846.0009: item 0 1 2 10 parsing failed [ 143.997197][ T7652] BTRFS info (device loop4): rebuilding free space tree [ 144.004247][ T24] hid_mf 0003:0079:1846.0009: HID parse failed. [ 144.004319][ T24] hid_mf 0003:0079:1846.0009: probe with driver hid_mf failed with error -22 [ 144.102782][ T7652] BTRFS info (device loop4): setting nodatasum [ 144.110397][ T7652] BTRFS info (device loop4): setting nodatacow [ 144.119713][ T7652] BTRFS info (device loop4): turning off barriers [ 144.132058][ T7652] BTRFS info (device loop4): enabling free space tree [ 144.139263][ T7652] BTRFS info (device loop4): force clearing of disk cache [ 144.183977][ T5825] usb 3-1: USB disconnect, device number 5 [ 144.239339][ T5822] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 144.491107][ T7683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.653'. [ 144.506341][ T24] tipc: Node number set to 10136234 [ 144.556697][ T5896] kernel write not supported for file /286/net/snmp (pid: 5896 comm: kworker/0:3) [ 144.608364][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 144.617423][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 144.774513][ T24] kernel write not supported for file /snd/seq (pid: 24 comm: kworker/1:0) [ 144.804020][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.964033][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 144.981133][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.003833][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.013839][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.026863][ T5896] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.036025][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.055043][ T5896] usb 4-1: config 0 descriptor?? [ 145.376101][ T7709] loop4: detected capacity change from 0 to 32768 [ 145.476924][ T7709] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 145.500801][ T5896] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 145.559821][ T7725] mmap: syz.0.672 (7725) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.569062][ T5896] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 145.633010][ T5896] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 145.663749][ T5896] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 145.686578][ T5896] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 145.704861][ T5896] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 145.704883][ T5822] ocfs2: Unmounting device (7,4) on (node local) [ 145.712117][ T5896] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 145.712146][ T5896] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 145.754372][ T5896] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 145.766302][ T5896] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 145.788945][ T5896] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 145.843980][ T5896] microsoft 0003:045E:07DA.000A: no inputs found [ 145.850350][ T5896] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 145.924042][ T5896] usb 4-1: USB disconnect, device number 5 [ 145.982276][ T7734] loop2: detected capacity change from 0 to 128 [ 146.677922][ T7738] loop4: detected capacity change from 0 to 32768 [ 146.699475][ T7738] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.675 (7738) [ 146.701535][ T7759] loop2: detected capacity change from 0 to 512 [ 146.718158][ T9] gfs2: fsid=syz:syz.0: file system withdrawn [ 146.731340][ T7761] netlink: 'syz.3.689': attribute type 3 has an invalid length. [ 146.761421][ T5824] ------------[ cut here ]------------ [ 146.767881][ T5824] kernel BUG at fs/gfs2/super.c:76! [ 146.776879][ T5824] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 146.783134][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 146.792584][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 146.802632][ T5824] RIP: 0010:gfs2_jindex_free+0x43e/0x440 [ 146.808262][ T5824] Code: cc cc cc cc cc 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ea fd ff ff e8 d2 e9 21 fe e9 e0 fd ff ff e8 58 57 44 07 e8 33 ea bb fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 [ 146.827857][ T5824] RSP: 0018:ffffc900042cfbe0 EFLAGS: 00010293 [ 146.833910][ T5824] RAX: ffffffff8404498d RBX: dead000000000122 RCX: ffff888075149e40 [ 146.841869][ T5824] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000ffffffff [ 146.849824][ T5824] RBP: ffffc900042cfca0 R08: ffff888074d60e37 R09: 1ffff1100e9ac1c6 [ 146.857786][ T5824] R10: dffffc0000000000 R11: ffffed100e9ac1c7 R12: ffff888074d60908 [ 146.865747][ T5824] R13: dffffc0000000000 R14: ffff8880282e9c00 R15: ffff8880282e9c78 [ 146.873705][ T5824] FS: 0000555579b4d500(0000) GS:ffff88812602c000(0000) knlGS:0000000000000000 [ 146.882620][ T5824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.889193][ T5824] CR2: 0000001b30d1dff8 CR3: 00000000735b4000 CR4: 00000000003526f0 [ 146.897160][ T5824] Call Trace: [ 146.900425][ T5824] [ 146.903344][ T5824] ? __pfx_gfs2_jindex_free+0x10/0x10 [ 146.908716][ T5824] ? gfs2_clear_rgrpd+0x662/0x690 [ 146.913732][ T5824] gfs2_put_super+0x7d9/0x860 [ 146.918400][ T5824] ? __pfx_gfs2_put_super+0x10/0x10 [ 146.923586][ T5824] generic_shutdown_super+0x135/0x2c0 [ 146.928945][ T5824] kill_block_super+0x44/0x90 [ 146.933612][ T5824] deactivate_locked_super+0xbc/0x130 [ 146.938970][ T5824] cleanup_mnt+0x425/0x4c0 [ 146.943374][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.948557][ T5824] task_work_run+0x1d4/0x260 [ 146.953134][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 146.958227][ T5824] ? __x64_sys_umount+0x122/0x160 [ 146.963240][ T5824] ? exit_to_user_mode_loop+0x40/0x130 [ 146.968683][ T5824] exit_to_user_mode_loop+0xe9/0x130 [ 146.973951][ T5824] do_syscall_64+0x2bd/0xfa0 [ 146.978616][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.983883][ T5824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.989937][ T5824] ? clear_bhb_loop+0x60/0xb0 [ 146.994610][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.000490][ T5824] RIP: 0033:0x7f7f1c1902f7 [ 147.004891][ T5824] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 147.024482][ T5824] RSP: 002b:00007ffeafa8d8d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 147.032885][ T5824] RAX: 0000000000000000 RBX: 00007f7f1c211d7d RCX: 00007f7f1c1902f7 [ 147.040840][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeafa8d990 [ 147.048794][ T5824] RBP: 00007ffeafa8d990 R08: 0000000000000000 R09: 0000000000000000 [ 147.056751][ T5824] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeafa8ea20 [ 147.064705][ T5824] R13: 00007f7f1c211d7d R14: 00000000000227d4 R15: 00007ffeafa8ea60 [ 147.072669][ T5824] [ 147.075670][ T5824] Modules linked in: [ 147.081893][ T5824] ---[ end trace 0000000000000000 ]--- [ 147.127684][ T5824] RIP: 0010:gfs2_jindex_free+0x43e/0x440 [ 147.136009][ T7738] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.140140][ T7759] EXT4-fs (loop2): orphan cleanup on readonly fs [ 147.146310][ T7738] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 147.154897][ T7759] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 147.164142][ T5824] Code: cc cc cc cc cc 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ea fd ff ff e8 d2 e9 21 fe e9 e0 fd ff ff e8 58 57 44 07 e8 33 ea bb fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 [ 147.171762][ T7759] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 147.188948][ T5824] RSP: 0018:ffffc900042cfbe0 EFLAGS: 00010293 [ 147.210269][ T5824] RAX: ffffffff8404498d RBX: dead000000000122 RCX: ffff888075149e40 [ 147.218605][ T5824] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000ffffffff [ 147.226639][ T5824] RBP: ffffc900042cfca0 R08: ffff888074d60e37 R09: 1ffff1100e9ac1c6 [ 147.234659][ T5824] R10: dffffc0000000000 R11: ffffed100e9ac1c7 R12: ffff888074d60908 [ 147.242637][ T5824] R13: dffffc0000000000 R14: ffff8880282e9c00 R15: ffff8880282e9c78 [ 147.251177][ T7759] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.688: attempt to clear invalid blocks 2 len 1 [ 147.268326][ T5824] FS: 0000555579b4d500(0000) GS:ffff888125f2c000(0000) knlGS:0000000000000000 [ 147.279081][ T5824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.279874][ T7759] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.688: invalid indirect mapped block 1819239214 (level 0) [ 147.285775][ T5824] CR2: 00007f8f17b212c0 CR3: 00000000735b4000 CR4: 00000000003526f0 [ 147.285799][ T5824] Kernel panic - not syncing: Fatal exception [ 147.286041][ T5824] Kernel Offset: disabled