last executing test programs: 2m53.003626584s ago: executing program 0 (id=673): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 2m52.798218757s ago: executing program 0 (id=677): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x8, 0xfffffffffffffff5, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 2m52.62764391s ago: executing program 0 (id=680): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0xc, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x7ffffffffffffffe, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@mark={0xc, 0x15, {0x350753, 0x4}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) 2m52.409958413s ago: executing program 0 (id=685): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 2m51.799372372s ago: executing program 0 (id=692): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) 2m50.932157226s ago: executing program 0 (id=704): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fremovexattr(0xffffffffffffffff, 0x0) 2m50.274067746s ago: executing program 32 (id=704): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fremovexattr(0xffffffffffffffff, 0x0) 2m3.652482131s ago: executing program 4 (id=1097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1f8, 0x940c, 0x3002, 0x1f8, 0x2c0, 0x2e8, 0x3d8, 0x3d8, 0x2e8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xc58, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x2800000, 0xffffff05, 0x1}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 2m3.471736294s ago: executing program 4 (id=1101): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m3.259541948s ago: executing program 4 (id=1105): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000b00)) 2m3.06718649s ago: executing program 4 (id=1110): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x5, 0x6235, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m1.722153201s ago: executing program 4 (id=1126): r0 = syz_io_uring_setup(0x2, &(0x7f0000000380)={0x0, 0xe456, 0x400, 0x0, 0xfffffffd}, &(0x7f0000000000), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000005c0), 0x0) 2m0.376259172s ago: executing program 4 (id=1144): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 1m59.985230039s ago: executing program 33 (id=1144): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 29.780214627s ago: executing program 3 (id=2140): unshare(0x24020400) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 29.59246804s ago: executing program 3 (id=2143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010000180080001"], 0x44}}, 0x0) 29.446648142s ago: executing program 3 (id=2145): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) 29.175360537s ago: executing program 3 (id=2147): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cf, &(0x7f0000002080)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 28.835587032s ago: executing program 3 (id=2150): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) 28.152087732s ago: executing program 3 (id=2153): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 27.496761532s ago: executing program 34 (id=2153): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 2.56093965s ago: executing program 6 (id=2336): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 2.275325945s ago: executing program 1 (id=2339): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 2.192908376s ago: executing program 6 (id=2341): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, r1) 2.077606528s ago: executing program 1 (id=2343): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001500)={&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0x1, @remote, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000340)="82b98eeb", 0x4}], 0x1, &(0x7f0000000440)=[@prinfo={0x14, 0x84, 0x5, {0x10, 0x9}}, @dstaddrv4={0x10, 0x84, 0x7, @private=0xa010101}, @init={0x14, 0x84, 0x0, {0x401, 0x8, 0x7, 0xfff8}}], 0x38, 0x20004890}, 0x1) 1.94794204s ago: executing program 5 (id=2345): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x37) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0xffffffffffffffff, r1}}, 0x18) 1.9444948s ago: executing program 6 (id=2346): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x100000e, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) 1.821329432s ago: executing program 1 (id=2347): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 1.738962103s ago: executing program 2 (id=2348): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 1.694893574s ago: executing program 5 (id=2349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 1.639281245s ago: executing program 6 (id=2350): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) 1.483981677s ago: executing program 1 (id=2351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0xc00, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 1.406274158s ago: executing program 5 (id=2352): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000101030000000000000000000a0000054400028006000340000100000c000280050001003c0000002c000180140003"], 0x58}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000c090) 1.378951479s ago: executing program 6 (id=2353): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1.28092354s ago: executing program 5 (id=2354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.175468732s ago: executing program 1 (id=2355): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e0a, &(0x7f000000c740)="$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") open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) chdir(&(0x7f0000000080)='./file0\x00') 1.143950632s ago: executing program 5 (id=2356): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x0, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x2}, {0xffff, 0x2}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc054) 1.042552414s ago: executing program 6 (id=2357): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") fchown(0xffffffffffffffff, 0x0, 0xee01) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1) 977.848135ms ago: executing program 2 (id=2358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71]}) 883.564627ms ago: executing program 5 (id=2359): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8000000000000005, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/146) 625.516011ms ago: executing program 2 (id=2360): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4004, r0, 0x0, 0x0, 0x4}]) 369.098984ms ago: executing program 2 (id=2361): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) ioperm(0x8d, 0x1, 0x5) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x48) 199.769367ms ago: executing program 1 (id=2362): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) 182.124918ms ago: executing program 2 (id=2363): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x1f8, 0x110, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="58607b1c69cb", @mac=@link_local, @loopback}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@random="492f869a9354"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gre0\x00', 'veth1_virt_wifi\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 0s ago: executing program 2 (id=2364): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x1, 0x2, 0x800000fd97}) kernel console output (not intermixed with test programs): VC 0.00 device syz (046d:08f3) [ 203.050000][ T786] usb 2-1: No valid video chain found. [ 203.159543][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.192921][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.227742][ T8784] bridge_slave_0: entered allmulticast mode [ 203.244035][ T8784] bridge_slave_0: entered promiscuous mode [ 203.304619][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.311828][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.319116][ T8] usb 2-1: USB disconnect, device number 5 [ 203.350777][ T8784] bridge_slave_1: entered allmulticast mode [ 203.384529][ T8784] bridge_slave_1: entered promiscuous mode [ 203.497322][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.506949][ T8887] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1181'. [ 203.575989][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.696301][ T8784] team0: Port device team_slave_0 added [ 203.717425][ T8784] team0: Port device team_slave_1 added [ 203.834746][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.863490][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.938638][ T8900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1185'. [ 203.949180][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.011018][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.067426][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.137642][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.484623][ T5781] Bluetooth: hci3: command tx timeout [ 204.539010][ T8784] hsr_slave_0: entered promiscuous mode [ 204.551105][ T8784] hsr_slave_1: entered promiscuous mode [ 205.217901][ T5155] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 205.271709][ T8784] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.284038][ T8946] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1201'. [ 205.304417][ T8784] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.334783][ T8784] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.391476][ T8784] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.434573][ T5155] usb 4-1: Using ep0 maxpacket: 16 [ 205.447447][ T5155] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 205.462954][ T5155] usb 4-1: config 1 has no interface number 0 [ 205.479105][ T5155] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 205.505532][ T5155] usb 4-1: config 1 interface 105 has no altsetting 0 [ 205.536769][ T5155] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 205.550253][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.582780][ T5155] usb 4-1: Product: syz [ 205.588336][ T5155] usb 4-1: Manufacturer: syz [ 205.609301][ T5155] usb 4-1: SerialNumber: syz [ 205.629727][ T8935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.743876][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.822000][ T8784] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.876491][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.883767][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.893507][ T5155] aqc111: probe of 4-1:1.105 failed with error -22 [ 205.981565][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.988865][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.997544][ T8960] loop2: detected capacity change from 0 to 2048 [ 206.014185][ T8960] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.131762][ T8960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.162240][ T23] usb 4-1: USB disconnect, device number 4 [ 206.258648][ T8951] loop1: detected capacity change from 0 to 32768 [ 206.398113][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.562498][ T5783] Bluetooth: hci3: command tx timeout [ 206.685054][ T8973] loop1: detected capacity change from 0 to 512 [ 206.730766][ T8973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.808369][ T5783] Bluetooth: hci0: command 0x0401 tx timeout [ 206.815341][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 206.844235][ T8973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.910135][ T8973] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.039869][ T8973] __quota_error: 1 callbacks suppressed [ 207.039888][ T8973] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 207.074767][ T8973] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 207.092583][ T8973] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1206: Failed to acquire dquot type 1 [ 207.156506][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.377836][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.587519][ T28] audit: type=1326 audit(1750189431.342:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 207.689542][ T28] audit: type=1326 audit(1750189431.342:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 207.775934][ T28] audit: type=1326 audit(1750189431.372:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 207.862515][ T28] audit: type=1326 audit(1750189431.372:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 207.967326][ T28] audit: type=1326 audit(1750189431.372:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 208.269625][ T9022] loop2: detected capacity change from 0 to 512 [ 208.354092][ T9022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.368331][ T8784] veth0_vlan: entered promiscuous mode [ 208.394289][ T9022] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.434127][ T8784] veth1_vlan: entered promiscuous mode [ 208.468192][ T9023] loop3: detected capacity change from 0 to 4096 [ 208.581651][ T8784] veth0_macvtap: entered promiscuous mode [ 208.584866][ T9022] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.1220: corrupted inode contents [ 208.652661][ T9022] EXT4-fs error (device loop2): ext4_dirty_inode:6100: inode #2: comm syz.2.1220: mark_inode_dirty error [ 208.658407][ T8784] veth1_macvtap: entered promiscuous mode [ 208.713707][ T9022] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #2: comm syz.2.1220: corrupted inode contents [ 208.755372][ T9022] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1220: mark_inode_dirty error [ 208.786281][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.822617][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.854200][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.869413][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.912037][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.961462][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.992974][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.012658][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.032989][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.056908][ T9036] tmpfs: Bad value for 'size' [ 209.064456][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.071042][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.124736][ T8784] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.173678][ T8784] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.215112][ T8784] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.253730][ T8784] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.360579][ T9044] loop2: detected capacity change from 0 to 40427 [ 210.394127][ T9044] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 210.435323][ T9044] F2FS-fs (loop2): invalid crc value [ 210.452345][ T9044] F2FS-fs (loop2): Found nat_bits in checkpoint [ 210.524589][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.578896][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.708674][ T9044] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 210.756469][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.810554][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.473046][ T9119] loop2: detected capacity change from 0 to 1024 [ 212.580157][ T9119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.711999][ T9119] EXT4-fs error (device loop2): __ext4_remount:6741: comm syz.2.1249: Abort forced by user [ 212.742971][ T9119] EXT4-fs (loop2): Remounting filesystem read-only [ 212.749619][ T9119] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 212.883492][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.897722][ T9122] loop1: detected capacity change from 0 to 8192 [ 213.010419][ T9138] loop3: detected capacity change from 0 to 64 [ 213.107454][ T28] audit: type=1800 audit(1750189436.862:117): pid=9138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1255" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 213.544802][ T9153] loop5: detected capacity change from 0 to 2048 [ 213.606923][ T9153] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 213.692651][ T9153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.352298][ T9172] loop2: detected capacity change from 0 to 1764 [ 214.380892][ T9175] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 214.404582][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1268'. [ 214.499129][ T9177] geneve2: entered promiscuous mode [ 214.893909][ T9159] loop3: detected capacity change from 0 to 32768 [ 214.980862][ T9187] loop1: detected capacity change from 0 to 1024 [ 215.053997][ T9159] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.301466][ T28] audit: type=1326 audit(1750189439.052:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 215.361191][ T28] audit: type=1326 audit(1750189439.082:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 215.383753][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.422507][ T28] audit: type=1326 audit(1750189439.092:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 215.511913][ T28] audit: type=1326 audit(1750189439.092:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 215.534236][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.580476][ T9159] XFS (loop3): Ending clean mount [ 215.638603][ T9159] XFS (loop3): Quotacheck needed: Please wait. [ 215.642763][ T28] audit: type=1326 audit(1750189439.092:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 215.800813][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1282'. [ 215.849879][ T9159] XFS (loop3): Quotacheck: Done. [ 216.123333][ T9223] loop1: detected capacity change from 0 to 4096 [ 216.176050][ T5766] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.270222][ T28] audit: type=1326 audit(1750189440.022:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 216.408410][ T28] audit: type=1326 audit(1750189440.062:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 216.516639][ T28] audit: type=1326 audit(1750189440.072:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 216.622978][ T27] IPVS: starting estimator thread 0... [ 216.635069][ T28] audit: type=1326 audit(1750189440.072:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9232 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 216.723205][ T9239] IPVS: using max 18 ests per chain, 43200 per kthread [ 217.576162][ T9273] loop3: detected capacity change from 0 to 2048 [ 217.648580][ T9279] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.734589][ T9273] syz.3.1306 (9273) used greatest stack depth: 19920 bytes left [ 218.248336][ T9277] loop1: detected capacity change from 0 to 32768 [ 218.325990][ T9277] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.407334][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1314'. [ 218.482959][ T9277] XFS (loop1): Ending clean mount [ 218.807594][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 218.807611][ T28] audit: type=1326 audit(1750189442.562:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 218.824288][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.887686][ T28] audit: type=1326 audit(1750189442.562:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 218.996667][ T28] audit: type=1326 audit(1750189442.602:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 219.018872][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.100151][ T28] audit: type=1326 audit(1750189442.602:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.2.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 219.727860][ T9305] loop3: detected capacity change from 0 to 40427 [ 219.742611][ T9305] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 219.760702][ T9305] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 219.822551][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 219.857089][ T9305] F2FS-fs (loop3): Found nat_bits in checkpoint [ 220.039406][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 220.059487][ T9305] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 220.072674][ T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 220.103837][ T9305] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 220.111554][ T9] usb 2-1: config 1 has no interface number 0 [ 220.123666][ T9] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 220.139978][ T9] usb 2-1: config 1 interface 105 has no altsetting 0 [ 220.169022][ T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 220.178280][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.186505][ T9] usb 2-1: Product: syz [ 220.190762][ T9] usb 2-1: Manufacturer: syz [ 220.203435][ T9] usb 2-1: SerialNumber: syz [ 220.221082][ T9329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.455661][ T9353] usb usb8: usbfs: process 9353 (syz.5.1338) did not claim interface 0 before use [ 220.470758][ T9] aqc111: probe of 2-1:1.105 failed with error -22 [ 220.742204][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1342'. [ 220.749770][ T9] usb 2-1: USB disconnect, device number 6 [ 221.110753][ T9371] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1346'. [ 221.137481][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1346'. [ 221.150589][ T9368] loop5: detected capacity change from 0 to 4096 [ 221.178163][ T9371] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1346'. [ 221.214335][ T9375] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.219020][ T9371] netlink: 'syz.2.1346': attribute type 3 has an invalid length. [ 221.248481][ T9371] netlink: 'syz.2.1346': attribute type 2 has an invalid length. [ 221.304514][ T9371] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1346'. [ 221.507535][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 221.532842][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 221.547785][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 221.624065][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 221.631334][ T9388] delete_channel: no stack [ 221.638924][ T9386] usb usb8: usbfs: process 9386 (syz.2.1349) did not claim interface 0 before use [ 221.664291][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 222.280924][ T9407] loop5: detected capacity change from 0 to 1024 [ 222.516658][ T9412] x_tables: duplicate underflow at hook 2 [ 222.797013][ T9419] loop3: detected capacity change from 0 to 256 [ 223.268786][ T9408] loop2: detected capacity change from 0 to 32768 [ 223.284313][ T9408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1359 (9408) [ 223.321871][ T9403] loop1: detected capacity change from 0 to 40427 [ 223.349143][ T9403] F2FS-fs (loop1): invalid crc value [ 223.367496][ T9408] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.391983][ T9403] F2FS-fs (loop1): Found nat_bits in checkpoint [ 223.419287][ T9408] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 223.444818][ T9408] BTRFS info (device loop2): setting nodatasum [ 223.475744][ T9408] BTRFS info (device loop2): force zlib compression, level 3 [ 223.523987][ T9408] BTRFS info (device loop2): metadata ratio 1 [ 223.552760][ T9408] BTRFS info (device loop2): enabling ssd optimizations [ 223.564189][ T9408] BTRFS info (device loop2): allowing degraded mounts [ 223.592054][ T9408] BTRFS info (device loop2): using free space tree [ 223.602382][ T9403] F2FS-fs (loop1): Start checkpoint disabled! [ 223.650833][ T9403] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 223.934872][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.085530][ T9460] loop3: detected capacity change from 0 to 1024 [ 224.155923][ T3424] kworker/u4:7: attempt to access beyond end of device [ 224.155923][ T3424] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 224.235197][ T3424] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 224.243841][ T3424] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 225.102819][ T9486] netlink: 'syz.5.1386': attribute type 10 has an invalid length. [ 225.140090][ T9486] batman_adv: batadv0: Adding interface: vlan1 [ 225.182631][ T9486] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.246328][ T9486] batman_adv: batadv0: Interface activated: vlan1 [ 225.326535][ T9493] loop3: detected capacity change from 0 to 1024 [ 225.454197][ T9493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.799610][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.074716][ T9522] loop3: detected capacity change from 0 to 256 [ 226.199933][ T9527] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 226.218988][ T9522] FAT-fs (loop3): Directory bread(block 64) failed [ 226.236352][ T9527] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 226.255316][ T9522] FAT-fs (loop3): Directory bread(block 65) failed [ 226.285910][ T9522] FAT-fs (loop3): Directory bread(block 66) failed [ 226.321824][ T9522] FAT-fs (loop3): Directory bread(block 67) failed [ 226.354443][ T9522] FAT-fs (loop3): Directory bread(block 68) failed [ 226.361040][ T9522] FAT-fs (loop3): Directory bread(block 69) failed [ 226.390029][ T9522] FAT-fs (loop3): Directory bread(block 70) failed [ 226.398234][ T9522] FAT-fs (loop3): Directory bread(block 71) failed [ 226.409584][ T9522] FAT-fs (loop3): Directory bread(block 72) failed [ 226.418219][ T9522] FAT-fs (loop3): Directory bread(block 73) failed [ 226.708323][ T28] audit: type=1800 audit(1750189450.462:132): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1397" name="file2" dev="loop3" ino=1048630 res=0 errno=0 [ 227.580731][ T9575] loop1: detected capacity change from 0 to 256 [ 227.998717][ T9585] __nla_validate_parse: 77 callbacks suppressed [ 227.998735][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1422'. [ 228.266592][ T9593] loop3: detected capacity change from 0 to 1024 [ 228.643524][ T9608] xt_bpf: check failed: parse error [ 229.357464][ T9629] openvswitch: netlink: Flow actions attr not present in new flow. [ 229.630716][ T9639] veth1_macvtap: left promiscuous mode [ 229.645265][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1442'. [ 229.666269][ T9639] macsec0: entered promiscuous mode [ 229.681889][ T9639] macsec0: entered allmulticast mode [ 229.807363][ T9612] loop5: detected capacity change from 0 to 32768 [ 229.823717][ T9612] JFS: remount-r is an invalid error handler [ 230.205675][ T9657] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1447'. [ 230.263017][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 230.452539][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 230.459831][ T27] usb 3-1: config 254 has an invalid interface number: 63 but max is 0 [ 230.491153][ T27] usb 3-1: config 254 has no interface number 0 [ 230.518271][ T27] usb 3-1: config 254 interface 63 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 230.552050][ T27] usb 3-1: config 254 interface 63 has no altsetting 0 [ 230.595145][ T27] usb 3-1: New USB device found, idVendor=0408, idProduct=ea04, bcdDevice=96.79 [ 230.611738][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.642773][ T27] usb 3-1: Product: syz [ 230.647495][ T27] usb 3-1: Manufacturer: syz [ 230.672517][ T27] usb 3-1: SerialNumber: syz [ 230.694580][ T9651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.971043][ T27] option 3-1:254.63: GSM modem (1-port) converter detected [ 231.007265][ T27] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 231.046620][ T27] usb 3-1: USB disconnect, device number 3 [ 231.077864][ T27] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 231.154517][ T27] option 3-1:254.63: device disconnected [ 231.413124][ T28] audit: type=1326 audit(1750189455.162:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 231.484267][ T28] audit: type=1326 audit(1750189455.162:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 231.531740][ T28] audit: type=1326 audit(1750189455.202:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 231.548356][ T9694] loop1: detected capacity change from 0 to 1024 [ 231.582627][ T28] audit: type=1326 audit(1750189455.202:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.3.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 232.126150][ T9681] loop5: detected capacity change from 0 to 32768 [ 232.337608][ T9681] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 232.754729][ T8784] ocfs2: Unmounting device (7,5) on (node local) [ 232.789917][ T9722] loop2: detected capacity change from 0 to 8192 [ 233.404712][ T9749] loop5: detected capacity change from 0 to 164 [ 233.648206][ T9754] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 233.778400][ T9757] xt_CT: No such helper "pptp" [ 233.810811][ T9763] @: renamed from bond_slave_0 (while UP) [ 233.960297][ T28] audit: type=1326 audit(1750189457.702:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 234.050789][ T28] audit: type=1326 audit(1750189457.702:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 234.102232][ T9772] [U]  [ 234.105666][ T9772] [U] K{ [ 234.132387][ T9772] [U] t 1ŠFfˊ`GJgo/mC [ 234.134432][ T28] audit: type=1326 audit(1750189457.762:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 234.151717][ T9772] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 234.238215][ T9772] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 234.239106][ T28] audit: type=1326 audit(1750189457.872:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f14e49c11e5 code=0x7ffc0000 [ 234.279615][ T9772] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 234.315311][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.352678][ T28] audit: type=1326 audit(1750189457.872:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 234.441501][ T9772] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 234.449359][ T28] audit: type=1326 audit(1750189457.872:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz.3.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 234.465343][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.521630][ T9783] loop2: detected capacity change from 0 to 764 [ 234.528744][ T9772] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 234.558418][ T9772] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 234.600982][ T9787] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1492'. [ 234.638913][ T9772] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 234.792992][ T9772] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 234.852056][ T9772] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 234.987748][ T9772] [U] 22Ʃx?0;3u [ 235.003955][ T28] audit: type=1326 audit(1750189458.762:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.5.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 235.040851][ T9772] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 235.065916][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.102523][ T9772] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 235.108612][ T28] audit: type=1326 audit(1750189458.782:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.5.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 235.132314][ T9772] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 235.179446][ T9772] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 235.192582][ T9772] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 235.241589][ T28] audit: type=1326 audit(1750189458.832:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.5.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 235.283946][ T9772] [U] ec [ 235.287153][ T9772] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 235.316511][ T9772] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 235.362562][ T9808] SET target dimension over the limit! [ 235.789522][ T9823] batadv1: entered promiscuous mode [ 235.826734][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 236.120686][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 236.406825][ T9844] loop3: detected capacity change from 0 to 1024 [ 236.772826][ T34] hfsplus: b-tree write err: -5, ino 4 [ 236.891949][ T9858] loop2: detected capacity change from 0 to 1024 [ 237.579412][ T9848] loop5: detected capacity change from 0 to 32768 [ 237.620604][ T9848] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1514 (9848) [ 237.714785][ T9848] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 237.754377][ T9848] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 237.790302][ T9848] BTRFS info (device loop5): force zlib compression, level 3 [ 237.815893][ T9887] loop1: detected capacity change from 0 to 2048 [ 237.828526][ T9848] BTRFS info (device loop5): force clearing of disk cache [ 237.852576][ T9848] BTRFS info (device loop5): setting nodatasum [ 237.883976][ T9848] BTRFS info (device loop5): disabling free space tree [ 237.913157][ T9848] BTRFS info (device loop5): enabling disk space caching [ 237.933246][ T9848] BTRFS info (device loop5): disk space caching is enabled [ 237.940614][ T9887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.130517][ T9910] loop2: detected capacity change from 0 to 8 [ 238.212662][ T9848] BTRFS info (device loop5): auto enabling async discard [ 238.241425][ T9848] BTRFS info (device loop5): rebuilding free space tree [ 238.313727][ T9848] BTRFS info (device loop5): disabling free space tree [ 238.343996][ T9848] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 238.381205][ T9848] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 238.676675][ T9848] BTRFS info (device loop5): balance: start -susage=21474836484,drange=18446744073709550593..526336,limit=512..4 [ 238.713842][ T9848] BTRFS info (device loop5): balance: ended with status: 0 [ 239.035697][ T8784] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 239.146153][ T9891] loop3: detected capacity change from 0 to 32768 [ 239.194513][ T9891] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.1529 (9891) [ 239.632258][ T9921] syz.1.1532 (9921): drop_caches: 2 [ 239.651173][ T9891] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 239.682596][ T9891] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 239.691904][ T9891] BTRFS info (device loop3): using free space tree [ 239.858850][ T9891] BTRFS info (device loop3): enabling ssd optimizations [ 239.897201][ T9891] BTRFS info (device loop3): auto enabling async discard [ 239.951414][ T9936] loop5: detected capacity change from 0 to 8192 [ 240.214350][ T5766] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 240.359527][ T9964] loop5: detected capacity change from 0 to 256 [ 240.370398][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 240.370412][ T28] audit: type=1326 audit(1750189464.122:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.1.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 240.472511][ T28] audit: type=1326 audit(1750189464.122:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.1.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 240.524811][ T9964] FAT-fs (loop5): Directory bread(block 64) failed [ 240.531466][ T9964] FAT-fs (loop5): Directory bread(block 65) failed [ 240.610610][ T28] audit: type=1326 audit(1750189464.172:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.1.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 240.621321][ T9964] FAT-fs (loop5): Directory bread(block 66) failed [ 240.673829][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1545'. [ 240.683024][ T9964] FAT-fs (loop5): Directory bread(block 67) failed [ 240.683190][ T9964] FAT-fs (loop5): Directory bread(block 68) failed [ 240.690689][ T28] audit: type=1326 audit(1750189464.172:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.1.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f863698e963 code=0x7ffc0000 [ 240.721601][ T9964] FAT-fs (loop5): Directory bread(block 69) failed [ 240.739086][ T9969] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073072017407) [ 240.762912][ T9969] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 240.770849][ T9964] FAT-fs (loop5): Directory bread(block 70) failed [ 240.779658][ T9964] FAT-fs (loop5): Directory bread(block 71) failed [ 240.786659][ T28] audit: type=1326 audit(1750189464.172:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.1.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 240.847210][ T9964] FAT-fs (loop5): Directory bread(block 72) failed [ 240.893876][ T9964] FAT-fs (loop5): Directory bread(block 73) failed [ 240.903210][ T28] audit: type=1326 audit(1750189464.172:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9965 comm="syz.1.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 241.018566][ T28] audit: type=1326 audit(1750189464.762:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 241.112540][ T28] audit: type=1326 audit(1750189464.762:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 241.234399][ T28] audit: type=1326 audit(1750189464.802:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 241.347795][ T28] audit: type=1326 audit(1750189464.802:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.2.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 241.417772][ T9980] netlink: 'syz.1.1551': attribute type 2 has an invalid length. [ 241.454655][ T9980] netlink: 'syz.1.1551': attribute type 8 has an invalid length. [ 241.509649][ T9980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1551'. [ 242.313766][ T9975] syz.3.1548 (9975): drop_caches: 2 [ 242.509361][ T9999] loop2: detected capacity change from 0 to 512 [ 242.567210][ T9999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.612763][ T9999] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 242.679834][ T9999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 242.710675][ T9999] EXT4-fs (loop2): orphan cleanup on readonly fs [ 242.731750][ T9999] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1561: invalid indirect mapped block 2185560079 (level 1) [ 242.780976][ T9999] EXT4-fs (loop2): Remounting filesystem read-only [ 242.793934][ T9999] EXT4-fs (loop2): 1 truncate cleaned up [ 242.801016][ T9999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 242.903109][ T9999] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1561: dx entry: limit 0 != root limit 125 [ 242.946976][ T9999] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1561: Corrupt directory, running e2fsck is recommended [ 242.984271][T10010] loop1: detected capacity change from 0 to 8192 [ 243.002518][ T786] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 243.040335][T10010] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 243.099935][T10015] loop3: detected capacity change from 0 to 128 [ 243.100600][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 243.108841][T10010] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 243.127636][T10010] REISERFS (device loop1): using ordered data mode [ 243.138717][T10010] reiserfs: using flush barriers [ 243.147655][T10015] FAT-fs (loop3): Directory bread(block 32) failed [ 243.154298][T10015] FAT-fs (loop3): Directory bread(block 33) failed [ 243.161167][T10015] FAT-fs (loop3): Directory bread(block 34) failed [ 243.216695][ T786] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 243.232238][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.242553][T10015] FAT-fs (loop3): Directory bread(block 35) failed [ 243.250555][T10015] FAT-fs (loop3): Directory bread(block 36) failed [ 243.260899][ T786] usb 6-1: Product: syz [ 243.276063][T10010] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 243.281889][ T786] usb 6-1: Manufacturer: syz [ 243.308249][T10015] FAT-fs (loop3): Directory bread(block 37) failed [ 243.320506][ T786] usb 6-1: SerialNumber: syz [ 243.325722][T10015] FAT-fs (loop3): Directory bread(block 38) failed [ 243.343498][T10010] REISERFS (device loop1): checking transaction log (loop1) [ 243.350651][T10015] FAT-fs (loop3): Directory bread(block 39) failed [ 243.371359][T10015] FAT-fs (loop3): Directory bread(block 40) failed [ 243.391364][ T786] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 243.398987][T10010] REISERFS (device loop1): Using r5 hash to sort names [ 243.418376][T10015] FAT-fs (loop3): Directory bread(block 41) failed [ 243.421864][T10010] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 243.488820][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 243.498236][T10010] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 244.002854][ T27] usb 6-1: USB disconnect, device number 2 [ 244.347144][T10034] process 'syz.1.1577' launched './file1' with NULL argv: empty string added [ 244.494799][T10039] binder: 10038:10039 ioctl c00c620f 200000000100 returned -22 [ 244.509148][T10041] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1582'. [ 244.697369][T10048] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 67108897, id = 0 [ 244.889876][T10056] geneve2: entered promiscuous mode [ 244.890260][ T9] usb 6-1: Service connection timeout for: 256 [ 244.922207][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 244.952275][T10058] "syz.5.1589" (10058) uses obsolete ecb(arc4) skcipher [ 244.966691][ T9] ath9k_htc: Failed to initialize the device [ 245.002664][ T27] usb 6-1: ath9k_htc: USB layer deinitialized [ 245.033353][T10060] kernel profiling enabled (shift: 63) [ 245.062734][T10060] profiling shift: 63 too large [ 245.194506][T10064] loop5: detected capacity change from 0 to 256 [ 245.525021][T10074] loop3: detected capacity change from 0 to 1024 [ 245.652986][ T3424] hfsplus: b-tree write err: -5, ino 4 [ 246.246712][T10099] loop5: detected capacity change from 0 to 128 [ 246.970016][T10127] loop2: detected capacity change from 0 to 256 [ 247.011428][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 247.011445][ T28] audit: type=1326 audit(1750189470.762:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.5.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 247.122618][ T28] audit: type=1326 audit(1750189470.802:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.5.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 247.146379][T10121] loop3: detected capacity change from 0 to 4096 [ 247.172609][ T28] audit: type=1326 audit(1750189470.832:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.5.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 247.302638][ T28] audit: type=1326 audit(1750189470.832:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.5.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 247.403537][ T28] audit: type=1326 audit(1750189470.832:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.5.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 247.447823][T10137] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1627'. [ 247.477400][T10137] 0XD: renamed from gretap0 (while UP) [ 247.512827][T10137] 0XD: entered allmulticast mode [ 247.527429][T10137] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 248.097912][T10155] loop2: detected capacity change from 0 to 2048 [ 248.158276][T10160] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.211882][T10155] NILFS (loop2): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 248.961113][T10185] loop5: detected capacity change from 0 to 256 [ 248.974940][T10189] loop1: detected capacity change from 0 to 16 [ 248.991237][T10189] erofs: (device loop1): mounted with root inode @ nid 36. [ 249.052776][T10189] erofs: (device loop1): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 249.502795][T10201] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 249.591891][T10203] loop1: detected capacity change from 0 to 512 [ 249.679891][T10203] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.731633][T10203] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.791995][T10203] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.1659: Invalid block bitmap block 0 in block_group 0 [ 249.825034][T10203] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 249.910995][T10203] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1659: attempt to clear invalid blocks 983261 len 1 [ 250.001227][T10203] EXT4-fs error (device loop1): __ext4_get_inode_loc:4478: comm syz.1.1659: Invalid inode table block 0 in block_group 0 [ 250.054526][T10203] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5896: Corrupt filesystem [ 250.085071][T10203] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 250.110848][T10203] EXT4-fs error (device loop1): __ext4_get_inode_loc:4478: comm syz.1.1659: Invalid inode table block 0 in block_group 0 [ 250.146514][T10203] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5896: Corrupt filesystem [ 250.184499][T10203] EXT4-fs error (device loop1): ext4_truncate:4283: inode #11: comm syz.1.1659: mark_inode_dirty error [ 250.226536][T10203] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 250.259477][T10209] loop3: detected capacity change from 0 to 32768 [ 250.275779][ T28] audit: type=1326 audit(1750189474.032:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10220 comm="syz.2.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 250.276153][T10203] EXT4-fs error (device loop1): __ext4_get_inode_loc:4478: comm syz.1.1659: Invalid inode table block 0 in block_group 0 [ 250.312577][ T28] audit: type=1326 audit(1750189474.062:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10220 comm="syz.2.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 250.321829][T10203] EXT4-fs (loop1): 1 truncate cleaned up [ 250.343170][T10203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.383356][ T28] audit: type=1326 audit(1750189474.062:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10220 comm="syz.2.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 250.408689][ T28] audit: type=1326 audit(1750189474.062:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10220 comm="syz.2.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 250.484346][ T28] audit: type=1326 audit(1750189474.062:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10220 comm="syz.2.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 250.590451][T10203] EXT4-fs error (device loop1): __ext4_get_inode_loc:4478: comm syz.1.1659: Invalid inode table block 0 in block_group 0 [ 250.723600][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.838306][T10230] loop2: detected capacity change from 0 to 256 [ 250.873552][T10231] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1673'. [ 250.902315][T10231] 0XD: renamed from gretap0 (while UP) [ 250.929896][T10230] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 250.935457][T10231] 0XD: entered allmulticast mode [ 250.983580][T10231] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 251.124453][T10233] loop1: detected capacity change from 0 to 8192 [ 252.302372][T10276] loop1: detected capacity change from 0 to 1024 [ 252.331005][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1692'. [ 252.627500][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'. [ 253.121968][T10274] syz.5.1689 (10274): drop_caches: 2 [ 253.130978][T10276] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 253.163895][T10276] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 253.373370][ T23] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 253.486460][T10310] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 253.564861][ T23] usb 4-1: config 7 interface 0 has no altsetting 0 [ 253.619284][ T23] usb 4-1: string descriptor 0 read error: -22 [ 253.625751][ T23] usb 4-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 253.648982][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.684408][ T23] usb 4-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 253.703682][ T23] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 253.743021][ T23] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 253.752215][ T23] usb 4-1: media controller created [ 253.827632][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.389556][ T23] usb 4-1: USB disconnect, device number 5 [ 254.909381][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 254.909395][ T28] audit: type=1326 audit(1750189478.662:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.1.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 255.002582][ T28] audit: type=1326 audit(1750189478.702:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.1.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 255.052593][ T28] audit: type=1326 audit(1750189478.722:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.1.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 255.128849][ T28] audit: type=1326 audit(1750189478.722:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.1.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 255.206904][ T28] audit: type=1326 audit(1750189478.722:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.1.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 255.328638][T10355] loop5: detected capacity change from 0 to 4096 [ 255.373055][T10355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.477613][ T8784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.560901][T10371] loop3: detected capacity change from 0 to 256 [ 255.928372][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.936053][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.970319][T10381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1739'. [ 256.401505][ T786] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 256.499621][T10401] loop3: detected capacity change from 0 to 512 [ 256.535617][T10401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.592677][T10401] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.594666][ T786] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.619773][ T786] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.629466][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.637718][ T786] usb 6-1: Product: syz [ 256.641929][ T786] usb 6-1: Manufacturer: syz [ 256.646762][ T786] usb 6-1: SerialNumber: syz [ 256.895728][ T786] cdc_ncm 6-1:1.0: bind() failure [ 256.934780][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.944474][ T786] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 256.959010][ T786] cdc_ncm 6-1:1.1: bind() failure [ 256.988668][ T786] usb 6-1: USB disconnect, device number 3 [ 257.123872][ T28] audit: type=1326 audit(1750189480.882:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.1.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 257.192540][ T28] audit: type=1326 audit(1750189480.882:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.1.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 257.262635][ T28] audit: type=1326 audit(1750189480.912:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.1.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 257.332913][ T28] audit: type=1326 audit(1750189480.912:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.1.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863698e929 code=0x7ffc0000 [ 257.895507][ T28] audit: type=1326 audit(1750189481.652:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10443 comm="syz.5.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 258.936981][T10488] x_tables: unsorted entry at hook 3 [ 259.091000][T10493] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1792'. [ 259.625062][T10512] loop5: detected capacity change from 0 to 512 [ 259.657811][T10516] loop3: detected capacity change from 0 to 256 [ 259.692501][T10516] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.698048][T10512] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 259.719100][T10512] EXT4-fs (loop5): orphan cleanup on readonly fs [ 259.727059][T10516] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 259.746974][T10516] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa4cc65da, utbl_chksum : 0xe619d30d) [ 259.769461][T10512] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1803: Failed to acquire dquot type 1 [ 259.831133][T10512] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1803: bg 0: block 40: padding at end of block bitmap is not set [ 259.854033][T10516] overlay: Unknown parameter '\' [ 259.864629][T10512] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 259.875252][T10512] EXT4-fs (loop5): 1 truncate cleaned up [ 259.882791][T10512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.079117][T10526] loop1: detected capacity change from 0 to 256 [ 260.084909][ T8784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.113734][T10526] exfat: Deprecated parameter 'utf8' [ 260.149609][T10526] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 261.362716][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 261.552681][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 261.576278][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 261.594094][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.614439][ T9] usb 4-1: Product: syz [ 261.622064][ T9] usb 4-1: Manufacturer: syz [ 261.629240][ T9] usb 4-1: SerialNumber: syz [ 261.653904][ T9] usb 4-1: config 0 descriptor?? [ 261.834846][T10575] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 261.906715][ T9] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 261.935304][ T9] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 261.983023][ T9] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 261.989543][ T9] dvb_usb_af9035: probe of 4-1:0.0 failed with error -22 [ 262.022704][ T9] usb 4-1: USB disconnect, device number 6 [ 262.341288][T10591] netlink: 'syz.5.1839': attribute type 1 has an invalid length. [ 262.349465][T10591] netlink: 154788 bytes leftover after parsing attributes in process `syz.5.1839'. [ 262.875501][T10611] loop1: detected capacity change from 0 to 256 [ 262.959507][T10611] FAT-fs (loop1): Directory bread(block 64) failed [ 262.993855][T10611] FAT-fs (loop1): Directory bread(block 65) failed [ 263.000561][T10611] FAT-fs (loop1): Directory bread(block 66) failed [ 263.025367][T10614] loop3: detected capacity change from 0 to 64 [ 263.048306][T10611] FAT-fs (loop1): Directory bread(block 67) failed [ 263.075643][T10611] FAT-fs (loop1): Directory bread(block 68) failed [ 263.082334][T10611] FAT-fs (loop1): Directory bread(block 69) failed [ 263.107155][T10611] FAT-fs (loop1): Directory bread(block 70) failed [ 263.147835][T10611] FAT-fs (loop1): Directory bread(block 71) failed [ 263.207580][T10611] FAT-fs (loop1): Directory bread(block 72) failed [ 263.214340][T10611] FAT-fs (loop1): Directory bread(block 73) failed [ 263.682888][ T5815] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 263.772128][T10605] loop2: detected capacity change from 0 to 32768 [ 263.816742][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 263.816765][ T28] audit: type=1326 audit(1750189487.572:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 263.886662][ T28] audit: type=1326 audit(1750189487.612:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 263.894843][ T5815] usb 6-1: Using ep0 maxpacket: 8 [ 263.916876][ T28] audit: type=1326 audit(1750189487.642:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 263.950195][ T28] audit: type=1326 audit(1750189487.642:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 263.966387][ T5815] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 263.997438][ T28] audit: type=1326 audit(1750189487.642:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10628 comm="syz.3.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e498e929 code=0x7ffc0000 [ 264.027386][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.077118][ T5815] usb 6-1: Product: syz [ 264.081356][ T5815] usb 6-1: Manufacturer: syz [ 264.116950][ T5815] usb 6-1: SerialNumber: syz [ 264.141462][ T5815] usb 6-1: config 0 descriptor?? [ 264.367416][ T5815] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 264.380931][ T5815] dvb_usb_af9015: probe of 6-1:0.0 failed with error -22 [ 264.417466][ T5815] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 264.431765][ T5815] dvb_usb_af9035: probe of 6-1:0.0 failed with error -22 [ 264.458270][ T5815] usb 6-1: USB disconnect, device number 4 [ 264.662120][ T28] audit: type=1326 audit(1750189488.412:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 264.724128][ T28] audit: type=1326 audit(1750189488.412:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 264.776954][ T28] audit: type=1326 audit(1750189488.432:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 264.852644][ T28] audit: type=1326 audit(1750189488.432:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 264.894763][ T28] audit: type=1326 audit(1750189488.432:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.2.1866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c38e929 code=0x7ffc0000 [ 265.079560][T10653] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1870'. [ 265.253418][T10635] loop3: detected capacity change from 0 to 32768 [ 265.424360][ T5815] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 265.634855][ T5815] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.652176][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.676229][ T5815] usb 2-1: config 0 descriptor?? [ 265.693932][ T5815] cp210x 2-1:0.0: cp210x converter detected [ 266.161078][ T5815] usb 2-1: cp210x converter now attached to ttyUSB0 [ 266.195668][ T5815] usb 2-1: USB disconnect, device number 7 [ 266.240630][ T5815] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.284198][ T5815] cp210x 2-1:0.0: device disconnected [ 266.624588][T10689] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 267.020051][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1894'. [ 267.436240][ T5815] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 267.503003][ T5815] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 267.706775][T10724] loop5: detected capacity change from 0 to 1024 [ 267.790909][T10720] fido_id[10720]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 267.826464][T10728] Zero length message leads to an empty skb [ 268.163450][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 268.210329][T10742] syz.1.1914 uses obsolete (PF_INET,SOCK_PACKET) [ 268.475812][T10752] loop3: detected capacity change from 0 to 256 [ 268.501121][T10752] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 268.682768][ T786] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 268.893084][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 268.904487][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.927739][ T786] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 268.947326][ T786] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 268.961743][ T786] usb 2-1: Product: syz [ 268.966424][ T786] usb 2-1: Manufacturer: syz [ 268.971420][ T786] usb 2-1: SerialNumber: syz [ 268.985228][ T786] usb 2-1: config 0 descriptor?? [ 269.005128][ T786] hub 2-1:0.0: bad descriptor, ignoring hub [ 269.021406][ T786] hub: probe of 2-1:0.0 failed with error -5 [ 269.243031][T10772] dvmrp1: entered allmulticast mode [ 269.372876][ T9] usb 2-1: USB disconnect, device number 8 [ 269.690052][T10784] loop3: detected capacity change from 0 to 64 [ 269.775550][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1934'. [ 270.182708][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 270.189517][ T27] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 270.213473][ T27] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 270.225779][ T27] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 270.246360][ T27] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 270.298620][T10805] netlink: 'syz.3.1942': attribute type 10 has an invalid length. [ 270.344101][T10805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1942'. [ 270.424644][T10805] batman_adv: batadv0: Adding interface: virt_wifi0 [ 270.444228][T10805] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.507102][T10806] fido_id[10806]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 270.512354][T10805] batman_adv: batadv0: Interface activated: virt_wifi0 [ 270.639715][T10817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1947'. [ 270.672622][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 270.734763][T10817] ip6gretap1: entered allmulticast mode [ 271.998223][T10863] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1970'. [ 272.066552][T10863] 0XD: entered promiscuous mode [ 272.071757][T10863] 0XD: left allmulticast mode [ 272.434870][T10877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1977'. [ 272.480334][T10877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.487691][T10877] IPv6: NLM_F_CREATE should be set when creating new route [ 272.595927][T10879] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1978'. [ 272.951348][T10891] loop3: detected capacity change from 0 to 256 [ 273.040820][T10891] FAT-fs (loop3): Directory bread(block 64) failed [ 273.063407][T10891] FAT-fs (loop3): Directory bread(block 65) failed [ 273.070382][T10891] FAT-fs (loop3): Directory bread(block 66) failed [ 273.098904][T10891] FAT-fs (loop3): Directory bread(block 67) failed [ 273.116066][T10891] FAT-fs (loop3): Directory bread(block 68) failed [ 273.136183][T10891] FAT-fs (loop3): Directory bread(block 69) failed [ 273.159178][T10891] FAT-fs (loop3): Directory bread(block 70) failed [ 273.182622][T10891] FAT-fs (loop3): Directory bread(block 71) failed [ 273.194906][T10891] FAT-fs (loop3): Directory bread(block 72) failed [ 273.212795][T10891] FAT-fs (loop3): Directory bread(block 73) failed [ 273.222982][T10892] loop2: detected capacity change from 0 to 8192 [ 273.504517][T10904] capability: warning: `syz.2.1990' uses 32-bit capabilities (legacy support in use) [ 273.709126][T10910] xt_bpf: check failed: parse error [ 274.001138][T10920] x_tables: duplicate underflow at hook 1 [ 274.095294][T10918] loop2: detected capacity change from 0 to 4096 [ 274.120027][T10922] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1999'. [ 274.183172][T10922] gretap0: entered promiscuous mode [ 274.366317][T10926] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2001'. [ 274.500519][T10930] loop3: detected capacity change from 0 to 1024 [ 274.783090][ T34] hfsplus: b-tree write err: -5, ino 4 [ 275.003965][T10946] loop2: detected capacity change from 0 to 256 [ 275.026891][T10947] tipc: Can't bind to reserved service type 0 [ 275.121315][T10946] FAT-fs (loop2): Directory bread(block 64) failed [ 275.164279][T10946] FAT-fs (loop2): Directory bread(block 65) failed [ 275.198866][T10946] FAT-fs (loop2): Directory bread(block 66) failed [ 275.226235][T10946] FAT-fs (loop2): Directory bread(block 67) failed [ 275.251486][T10946] FAT-fs (loop2): Directory bread(block 68) failed [ 275.270920][T10946] FAT-fs (loop2): Directory bread(block 69) failed [ 275.297309][T10946] FAT-fs (loop2): Directory bread(block 70) failed [ 275.312851][T10946] FAT-fs (loop2): Directory bread(block 71) failed [ 275.343096][T10946] FAT-fs (loop2): Directory bread(block 72) failed [ 275.370403][T10946] FAT-fs (loop2): Directory bread(block 73) failed [ 275.590159][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 275.590175][ T28] audit: type=1800 audit(1750189499.342:222): pid=10946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2010" name="file1" dev="loop2" ino=1048647 res=0 errno=0 [ 276.184236][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2028'. [ 276.388781][T10989] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2031'. [ 277.340901][T10988] syz.5.2032: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 277.349546][T10988] CPU: 1 PID: 10988 Comm: syz.5.2032 Not tainted 6.6.93-syzkaller #0 [ 277.349570][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.349588][T10988] Call Trace: [ 277.349598][T10988] [ 277.349612][T10988] dump_stack_lvl+0x16c/0x230 [ 277.349655][T10988] ? show_regs_print_info+0x20/0x20 [ 277.349688][T10988] ? load_image+0x3b0/0x3b0 [ 277.349716][T10988] ? __rcu_read_unlock+0x7c/0xd0 [ 277.349747][T10988] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 277.349775][T10988] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 277.349803][T10988] warn_alloc+0x210/0x300 [ 277.349832][T10988] ? zone_watermark_ok_safe+0x230/0x230 [ 277.395894][T11012] loop3: detected capacity change from 0 to 512 [ 277.399240][T10988] ? _raw_spin_unlock+0x28/0x40 [ 277.448380][T10988] __vmalloc_node_range+0x662/0x1320 [ 277.448444][T10988] ? __alloc_pages+0xa1/0x460 [ 277.458445][T10988] ? free_vm_area+0x50/0x50 [ 277.463031][T10988] ? packet_set_ring+0x715/0x23c0 [ 277.468287][T10988] vzalloc+0x79/0x90 [ 277.472226][T10988] ? packet_set_ring+0x715/0x23c0 [ 277.477282][T10988] packet_set_ring+0x715/0x23c0 [ 277.482181][T10988] ? packet_mmap+0x4e0/0x4e0 [ 277.486798][T10988] ? __lock_acquire+0x7c80/0x7c80 [ 277.491845][T10988] ? __local_bh_enable_ip+0x12e/0x1c0 [ 277.497247][T10988] ? lockdep_hardirqs_on+0x98/0x150 [ 277.502489][T10988] ? __might_fault+0xaa/0x120 [ 277.507201][T10988] ? __might_fault+0xc6/0x120 [ 277.511901][T10988] ? __might_fault+0xaa/0x120 [ 277.516614][T10988] ? _copy_from_user+0xa5/0xe0 [ 277.521421][T10988] packet_setsockopt+0xc58/0x12a0 [ 277.526484][T10988] ? packet_ioctl+0x340/0x340 [ 277.531202][T10988] ? aa_sk_perm+0x7fc/0x930 [ 277.535731][T10988] ? aa_af_perm+0x2b0/0x2b0 [ 277.540285][T10988] ? aa_sock_opt_perm+0x74/0x100 [ 277.545680][T10988] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 277.551254][T10988] ? security_socket_setsockopt+0x7e/0xa0 [ 277.557004][T10988] ? packet_ioctl+0x340/0x340 [ 277.561713][T10988] do_sock_setsockopt+0x254/0x3e0 [ 277.566779][T10988] ? __ia32_sys_recv+0xb0/0xb0 [ 277.571578][T10988] ? __fdget+0x180/0x210 [ 277.575856][T10988] __x64_sys_setsockopt+0x1be/0x250 [ 277.581089][T10988] do_syscall_64+0x55/0xb0 [ 277.585526][T10988] ? clear_bhb_loop+0x40/0x90 [ 277.590218][T10988] ? clear_bhb_loop+0x40/0x90 [ 277.594914][T10988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.600846][T10988] RIP: 0033:0x7fef4458e929 [ 277.605334][T10988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.625058][T10988] RSP: 002b:00007fef454e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 277.633933][T10988] RAX: ffffffffffffffda RBX: 00007fef447b5fa0 RCX: 00007fef4458e929 [ 277.644542][T10988] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 277.652795][T10988] RBP: 00007fef44610b39 R08: 000000000000001c R09: 0000000000000000 [ 277.660999][T10988] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 277.671425][T10988] R13: 0000000000000000 R14: 00007fef447b5fa0 R15: 00007ffc84c5f678 [ 277.679433][T10988] [ 277.721005][T10988] Mem-Info: [ 277.721022][T10988] active_anon:6505 inactive_anon:0 isolated_anon:0 [ 277.721022][T10988] active_file:13333 inactive_file:40039 isolated_file:0 [ 277.721022][T10988] unevictable:768 dirty:356 writeback:0 [ 277.721022][T10988] slab_reclaimable:8044 slab_unreclaimable:97421 [ 277.721022][T10988] mapped:24766 shmem:1434 pagetables:753 [ 277.721022][T10988] sec_pagetables:0 bounce:0 [ 277.721022][T10988] kernel_misc_reclaimable:0 [ 277.721022][T10988] free:1338698 free_pcp:8877 free_cma:0 [ 277.721085][T10988] Node 0 active_anon:26020kB inactive_anon:0kB active_file:53332kB inactive_file:159952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99064kB dirty:1424kB writeback:0kB shmem:4200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11188kB pagetables:3012kB sec_pagetables:0kB all_unreclaimable? no [ 277.721150][T10988] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 277.721209][T10988] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.721273][T10988] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 277.721324][T10988] Node 0 DMA32 free:1438832kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:25972kB inactive_anon:0kB active_file:53332kB inactive_file:158620kB unevictable:1536kB writepending:1424kB present:3129332kB managed:2589668kB mlocked:0kB bounce:0kB free_pcp:14904kB local_pcp:12668kB free_cma:0kB [ 277.721388][T10988] lowmem_reserve[]: 0 0 1 1 1 [ 277.721436][T10988] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.721496][T10988] lowmem_reserve[]: 0 0 0 0 0 [ 277.721543][T10988] Node 1 Normal free:3900596kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20604kB local_pcp:10848kB free_cma:0kB [ 277.721605][T10988] lowmem_reserve[]: 0 0 0 0 0 [ 277.721654][T10988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 277.726324][T10988] Node 0 DMA32: 650*4kB (ME) 973*8kB (UME) 610*16kB (UME) 388*32kB (UME) 207*64kB (ME) 71*128kB (ME) 48*256kB (UME) 23*512kB (UME) 10*1024kB (UME) 1*2048kB (U) 329*4096kB (UM) = 1438832kB [ 277.726540][T10988] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 277.726675][T10988] Node 1 Normal: 165*4kB (UME) 60*8kB (UME) 32*16kB (UME) 96*32kB (UME) 31*64kB (UME) 3*128kB (UM) 1*256kB (M) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3900596kB [ 277.726883][T10988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.726902][T10988] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 277.726919][T10988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.726937][T10988] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 277.726954][T10988] 54711 total pagecache pages [ 277.726977][T10988] 0 pages in swap cache [ 277.727078][T10988] Free swap = 124984kB [ 277.727088][T10988] Total swap = 124996kB [ 277.727106][T10988] 2097051 pages RAM [ 277.727114][T10988] 0 pages HighMem/MovableOnly [ 277.727122][T10988] 416120 pages reserved [ 277.727131][T10988] 0 pages cma reserved [ 277.870149][T11012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 277.870277][T11012] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.038473][T11012] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 278.038776][T11012] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 278.038852][T11012] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2043: Failed to acquire dquot type 0 [ 278.143026][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 278.813156][T11033] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2052'. [ 278.872111][T11035] netlink: 'syz.3.2053': attribute type 10 has an invalid length. [ 278.961378][T11040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.036347][T11035] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 279.057340][T11042] loop1: detected capacity change from 0 to 256 [ 279.069822][T11042] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.084413][T11035] $H: (slave wlan1): Enslaving as an active interface with an up link [ 279.149013][T11044] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2057'. [ 279.158638][T11044] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2057'. [ 279.170698][T11044] tipc: Invalid UDP bearer configuration [ 279.170809][T11044] tipc: Enabling of bearer rejected, failed to enable media [ 279.378542][T11046] loop3: detected capacity change from 0 to 2048 [ 279.427837][T11046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.881673][T11056] loop5: detected capacity change from 0 to 4096 [ 279.931689][T11056] NILFS (loop5): invalid segment: Checksum error in segment payload [ 279.963363][T11056] NILFS (loop5): trying rollback from an earlier position [ 279.995070][T11061] loop1: detected capacity change from 0 to 4096 [ 280.047555][T11061] NILFS (loop1): invalid segment: Checksum error in segment payload [ 280.057177][T11056] NILFS (loop5): recovery complete [ 280.068486][T11061] NILFS (loop1): trying rollback from an earlier position [ 280.119717][T11061] NILFS (loop1): recovery complete [ 280.262551][ T786] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 280.342842][ T5814] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 280.356292][T11068] loop1: detected capacity change from 0 to 512 [ 280.370125][T11068] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 280.385582][T11068] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 280.425863][T11068] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 280.455734][T11068] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 280.474574][ T786] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 280.483050][T11068] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0080] [ 280.493743][ T786] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 280.507760][ T786] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 280.512179][T11068] EXT4-fs error (device loop1): ext4_init_orphan_info:586: comm syz.1.2069: inode #0: comm syz.1.2069: iget: illegal inode # [ 280.518965][ T786] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 280.520728][ T786] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 280.560832][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 280.569693][ T786] usb 4-1: SerialNumber: syz [ 280.573701][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 280.588343][ T5814] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 280.593347][T11064] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.597201][T11068] EXT4-fs (loop1): get orphan inode failed [ 280.604307][T11064] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.609543][ T5814] usb 3-1: config 0 has no interface number 0 [ 280.624576][ T786] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 280.633111][T11073] loop5: detected capacity change from 0 to 256 [ 280.649037][T11068] EXT4-fs (loop1): mount failed [ 280.665952][ T5814] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 280.694548][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.699610][T11073] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 280.713391][ T5814] usb 3-1: Product: syz [ 280.722474][ T5814] usb 3-1: Manufacturer: syz [ 280.732188][ T5814] usb 3-1: SerialNumber: syz [ 280.739949][ T5814] usb 3-1: config 0 descriptor?? [ 280.874855][ T786] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 280.938986][ T786] usb 4-1: USB disconnect, device number 7 [ 281.009373][ T5814] peak_usb 3-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 281.086112][T11077] loop1: detected capacity change from 0 to 8 [ 281.111803][T11077] SQUASHFS error: Unable to read inode 0x127 [ 281.208245][ T5814] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 281.226297][ T5814] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 281.254398][ T5814] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 281.374193][ T5814] peak_usb: probe of 3-1:0.56 failed with error -22 [ 281.541086][ T5814] usb 3-1: USB disconnect, device number 4 [ 281.737232][T11093] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2081'. [ 281.748545][T11093] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2081'. [ 281.790322][T11095] (unnamed net_device) (uninitialized): (slave batadv_slave_1): Device is not bonding slave [ 281.806753][T11095] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_1) [ 281.916122][T11097] bridge0: port 3(syz_tun) entered blocking state [ 281.945709][T11097] bridge0: port 3(syz_tun) entered disabled state [ 281.964600][T11097] syz_tun: entered allmulticast mode [ 281.986019][T11097] syz_tun: entered promiscuous mode [ 282.005400][T11097] bridge0: port 3(syz_tun) entered blocking state [ 282.012469][T11097] bridge0: port 3(syz_tun) entered forwarding state [ 282.542553][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 282.724789][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 282.741090][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 282.781856][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 282.796555][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 282.818942][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 282.832593][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 282.857960][ T9] usb 2-1: SerialNumber: syz [ 282.871704][T11109] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.891271][T11109] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.922761][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 283.153021][ T9] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 283.174819][ T9] usb 2-1: USB disconnect, device number 9 [ 283.216153][T11135] tipc: Started in network mode [ 283.235374][T11135] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 283.274876][T11135] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 283.302715][T11135] tipc: Enabled bearer , priority 10 [ 283.756469][T11137] loop2: detected capacity change from 0 to 32768 [ 283.795047][T11130] loop3: detected capacity change from 0 to 32768 [ 283.854366][T11130] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2099 (11130) [ 283.962786][T11130] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 284.015953][T11130] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 284.047616][T11130] BTRFS info (device loop3): force clearing of disk cache [ 284.095828][T11130] BTRFS info (device loop3): turning on flush-on-commit [ 284.132653][T11130] BTRFS info (device loop3): enabling ssd optimizations [ 284.152040][T11130] BTRFS info (device loop3): using spread ssd allocation scheme [ 284.191323][T11130] BTRFS info (device loop3): using free space tree [ 284.396622][T11167] loop5: detected capacity change from 0 to 1024 [ 284.412829][T11130] BTRFS info (device loop3): auto enabling async discard [ 284.425330][ T5814] tipc: Node number set to 1 [ 284.440586][T11130] BTRFS info (device loop3): rebuilding free space tree [ 284.443643][T11167] EXT4-fs: Ignoring removed orlov option [ 284.489696][T11167] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.597290][T11167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.898123][ T8784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.005277][ T5766] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.133409][T11183] Bluetooth: MGMT ver 1.22 [ 285.429063][T11193] Dead loop on virtual device ip6_vti0, fix it urgently! [ 285.479801][ T5815] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 285.661985][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.692878][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 285.736292][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 285.767708][ T5815] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 285.829519][ T5815] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 285.849099][T11203] IPVS: length: 24 != 984 [ 285.856740][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 285.858574][T11201] loop1: detected capacity change from 0 to 2048 [ 285.882190][ T5815] usb 3-1: SerialNumber: syz [ 285.911886][T11187] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.920309][T11187] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.934313][T11201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.028880][ T5815] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 286.104373][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.139394][T11208] loop5: detected capacity change from 0 to 1024 [ 286.181355][T11208] EXT4-fs: Ignoring removed nobh option [ 286.217120][T11208] EXT4-fs: Ignoring removed bh option [ 286.234340][T11208] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 286.254106][ T5815] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 286.284824][ T5815] usb 3-1: USB disconnect, device number 5 [ 286.314594][T11208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.560894][ T8784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.842360][ T28] audit: type=1326 audit(1750189510.592:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11221 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 286.921023][ T28] audit: type=1326 audit(1750189510.592:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11221 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 286.992525][ T28] audit: type=1326 audit(1750189510.632:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11221 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 286.996100][T11229] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 286.996100][T11229] program syz.2.2133 not setting count and/or reply_len properly [ 287.052661][ T28] audit: type=1326 audit(1750189510.632:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11221 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 287.126953][T11231] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 287.152736][ T28] audit: type=1326 audit(1750189510.632:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11221 comm="syz.5.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 287.194026][T11235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2136'. [ 287.204991][ T5770] Bluetooth: hci0: command 0x0401 tx timeout [ 287.213474][ T5781] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 287.743613][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 287.825667][T11252] loop1: detected capacity change from 0 to 128 [ 287.887432][T11252] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.939889][T11260] loop2: detected capacity change from 0 to 128 [ 287.962205][T11260] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 288.000844][T11252] ext4 filesystem being mounted at /544/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.138609][T11260] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.157697][T11262] loop3: detected capacity change from 0 to 256 [ 288.236453][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.387227][ T5766] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 288.477579][ T5766] FAT-fs (loop3): Filesystem has been set read-only [ 288.498105][ T5766] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 288.520253][T11246] loop5: detected capacity change from 0 to 32768 [ 288.546679][T11246] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2141 (11246) [ 288.620422][T11246] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 288.671051][T11246] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 288.695395][T11246] BTRFS info (device loop5): turning on sync discard [ 288.702247][T11246] BTRFS info (device loop5): doing ref verification [ 288.723121][T11246] BTRFS info (device loop5): disabling tree log [ 288.743694][T11226] bridge0: port 3(syz_tun) entered disabled state [ 288.772642][T11246] BTRFS info (device loop5): enabling ssd optimizations [ 288.779667][T11246] BTRFS info (device loop5): using spread ssd allocation scheme [ 288.793850][T11246] BTRFS info (device loop5): not using ssd optimizations [ 288.801396][T11246] BTRFS info (device loop5): not using spread ssd allocation scheme [ 288.826485][T11246] BTRFS info (device loop5): using free space tree [ 288.871002][T11226] syz_tun (unregistering): left allmulticast mode [ 288.897969][T11226] syz_tun (unregistering): left promiscuous mode [ 288.920233][T11226] bridge0: port 3(syz_tun) entered disabled state [ 289.189729][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.439698][ T8784] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 289.479072][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.775130][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.999046][ T59] $H: (slave netdevsim0): Releasing backup interface [ 290.026193][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 290.060993][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.709238][T11308] loop2: detected capacity change from 0 to 512 [ 290.798109][T11308] EXT4-fs: Ignoring removed nobh option [ 290.820220][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.831033][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.843658][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.871533][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.879960][T11308] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2161: invalid indirect mapped block 256 (level 2) [ 290.897907][ T5770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 290.913369][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.956300][T11308] EXT4-fs (loop2): 2 truncates cleaned up [ 290.964829][T11308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.046896][ T28] audit: type=1800 audit(1750189514.802:228): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2161" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 291.055301][T11308] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.2161: bg 0: block 5: invalid block bitmap [ 291.096603][T11308] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 291.117706][T11308] EXT4-fs (loop2): This should not happen!! Data will be lost [ 291.117706][T11308] [ 291.140295][T11308] EXT4-fs (loop2): Total free blocks count 0 [ 291.169200][T11308] EXT4-fs (loop2): Free/Dirty block details [ 291.242231][T11308] EXT4-fs (loop2): free_blocks=0 [ 291.259287][T11308] EXT4-fs (loop2): dirty_blocks=2 [ 291.281292][T11308] EXT4-fs (loop2): Block reservation details [ 291.291225][T11308] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 291.489142][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.608793][T11324] loop5: detected capacity change from 0 to 4096 [ 291.868411][T11334] loop1: detected capacity change from 0 to 164 [ 292.001602][T11334] rock: directory entry would overflow storage [ 292.032574][T11334] rock: sig=0x66, size=4, remaining=3 [ 292.085967][T11334] rock: directory entry would overflow storage [ 292.123466][T11334] rock: sig=0x66, size=4, remaining=3 [ 292.649896][ T59] $H: (slave wlan1): Releasing backup interface [ 292.666241][ T59] mac80211_hwsim hwsim8 wlan1 (unregistering): left promiscuous mode [ 292.710288][T11312] chnl_net:caif_netlink_parms(): no params data found [ 292.835078][T11355] loop1: detected capacity change from 0 to 64 [ 292.962803][ T5781] Bluetooth: hci0: command tx timeout [ 293.221644][ T59] hsr_slave_0: left promiscuous mode [ 293.272852][ T59] hsr_slave_1: left promiscuous mode [ 293.294495][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.314903][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.353008][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.360629][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.407882][ T59] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 293.445702][ T59] batman_adv: batadv0: Removing interface: virt_wifi0 [ 293.475551][ T59] bridge_slave_1: left allmulticast mode [ 293.481282][ T59] bridge_slave_1: left promiscuous mode [ 293.489080][T11381] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.513680][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.555420][ T59] bridge_slave_0: left allmulticast mode [ 293.561184][ T59] bridge_slave_0: left promiscuous mode [ 293.581795][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.665530][ T59] veth0_macvtap: left promiscuous mode [ 293.672102][ T59] veth0_vlan: left promiscuous mode [ 294.051214][T11396] loop1: detected capacity change from 0 to 128 [ 294.106372][T11396] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.184352][T11396] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.213462][ T59] bond0 (unregistering): Released all slaves [ 294.435911][T11405] loop2: detected capacity change from 0 to 512 [ 294.471217][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.539201][T11405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.573139][T11405] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.799737][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.043082][ T5781] Bluetooth: hci0: command tx timeout [ 295.256627][T11411] loop1: detected capacity change from 0 to 32768 [ 295.281139][T11411] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.2189 (11411) [ 295.304995][T11417] loop2: detected capacity change from 0 to 4096 [ 295.325145][T11411] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 295.366556][T11411] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 295.400642][T11411] BTRFS info (device loop1): using free space tree [ 295.643321][T11411] BTRFS info (device loop1): enabling ssd optimizations [ 295.650391][T11411] BTRFS info (device loop1): auto enabling async discard [ 295.871109][ T5768] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 296.836043][ T59] team0 (unregistering): Port device team_slave_1 removed [ 296.983533][ T59] team0 (unregistering): Port device team_slave_0 removed [ 297.117943][ T59] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.132276][ T5781] Bluetooth: hci0: command tx timeout [ 297.159617][T11448] Falling back ldisc for ttyS3. [ 297.177133][ T59] bond_slave_1 (unregistering): left promiscuous mode [ 297.398575][T11459] loop5: detected capacity change from 0 to 32768 [ 297.405766][ T59] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.415984][T11459] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2204 (11459) [ 297.472039][ T59] bond_slave_0 (unregistering): left promiscuous mode [ 297.483754][T11459] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 297.521623][T11459] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 297.547205][T11459] BTRFS info (device loop5): use zlib compression, level 3 [ 297.554746][T11459] BTRFS info (device loop5): turning on sync discard [ 297.561529][T11459] BTRFS info (device loop5): doing ref verification [ 297.568888][T11459] BTRFS info (device loop5): disabling tree log [ 297.577529][T11459] BTRFS info (device loop5): enabling tree log [ 297.584837][T11459] BTRFS info (device loop5): enabling ssd optimizations [ 297.591869][T11459] BTRFS info (device loop5): using spread ssd allocation scheme [ 297.600234][T11459] BTRFS info (device loop5): not using ssd optimizations [ 297.630494][T11459] BTRFS info (device loop5): not using spread ssd allocation scheme [ 297.638953][ T5815] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 297.666699][T11459] BTRFS info (device loop5): using free space tree [ 297.832756][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 297.840289][ T5815] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.862466][ T5815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 297.879579][ T5815] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 297.913892][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.966988][ T5815] usb 2-1: config 0 descriptor?? [ 297.981307][ T28] audit: type=1800 audit(1750189521.732:229): pid=11459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2204" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 298.161270][ T8784] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 298.499123][ T5815] uclogic 0003:5543:0042.0003: unbalanced delimiter at end of report description [ 298.520837][ T5815] uclogic 0003:5543:0042.0003: parse failed [ 298.529548][ T5815] uclogic: probe of 0003:5543:0042.0003 failed with error -22 [ 298.627767][ T5815] usb 2-1: USB disconnect, device number 10 [ 298.778551][T11497] loop2: detected capacity change from 0 to 1024 [ 299.033723][T11497] EXT4-fs: Ignoring removed orlov option [ 299.050903][T11497] EXT4-fs (loop2): Test dummy encryption mode enabled [ 299.058327][T11497] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 299.072681][T11497] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 299.203754][ T5781] Bluetooth: hci0: command tx timeout [ 299.361489][T11505] loop2: detected capacity change from 0 to 4096 [ 299.370051][T11505] EXT4-fs: inline encryption not supported [ 299.389099][T11505] EXT4-fs: Ignoring removed oldalloc option [ 299.425782][T11505] EXT4-fs (loop2): Test dummy encryption mode enabled [ 299.508964][T11505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.614016][T11505] Quota error (device loop2): do_check_range: Getting block 134217730 out of range 1-5 [ 299.644160][T11505] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 299.657398][T11505] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2218: Failed to acquire dquot type 1 [ 299.744462][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.757829][ T59] $H (unregistering): Released all slaves [ 300.013443][T11515] loop5: detected capacity change from 0 to 8192 [ 300.032164][T11515] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 300.046670][T11515] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 300.092891][T11515] REISERFS (device loop5): using ordered data mode [ 300.099717][T11515] reiserfs: using flush barriers [ 300.127964][T11515] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 300.153090][T11515] REISERFS (device loop5): checking transaction log (loop5) [ 300.316378][T11312] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.351809][T11312] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.358705][T11522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2223'. [ 300.385830][T11312] bridge_slave_0: entered allmulticast mode [ 300.422045][T11312] bridge_slave_0: entered promiscuous mode [ 300.464254][T11312] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.473948][T11515] REISERFS (device loop5): Using tea hash to sort names [ 300.493788][T11515] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 300.510204][T11312] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.527934][T11312] bridge_slave_1: entered allmulticast mode [ 300.560474][T11312] bridge_slave_1: entered promiscuous mode [ 300.685151][T11528] loop1: detected capacity change from 0 to 1024 [ 300.796481][T11312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.830670][ T28] audit: type=1800 audit(1750189524.582:230): pid=11528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2226" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 300.875825][T11312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.089785][T11312] team0: Port device team_slave_0 added [ 301.213350][T11312] team0: Port device team_slave_1 added [ 301.283433][T11538] rtc_cmos 00:00: Alarms can be up to one day in the future [ 301.324181][T11537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.331536][T11537] IPv6: NLM_F_CREATE should be set when creating new route [ 301.381796][T11312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.405336][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.441540][T11312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.499424][T11312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.520846][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.572547][T11312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.768683][T11312] hsr_slave_0: entered promiscuous mode [ 301.813233][T11312] hsr_slave_1: entered promiscuous mode [ 301.831849][T11312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.864621][T11312] Cannot create hsr debugfs directory [ 302.168872][ T23] rtc_cmos 00:00: Alarms can be up to one day in the future [ 302.181098][ T23] rtc_cmos 00:00: Alarms can be up to one day in the future [ 302.214382][ T23] rtc_cmos 00:00: Alarms can be up to one day in the future [ 302.241419][ T23] rtc_cmos 00:00: Alarms can be up to one day in the future [ 302.260157][ T23] rtc rtc0: __rtc_set_alarm: err=-22 [ 302.323854][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 302.354560][T11574] loop1: detected capacity change from 0 to 256 [ 302.413448][T11574] exfat: Deprecated parameter 'namecase' [ 302.419365][T11574] exfat: Deprecated parameter 'namecase' [ 302.512469][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 302.527165][ T27] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 302.537179][ T27] usb 3-1: config 0 has no interface number 0 [ 302.543534][ T27] usb 3-1: config 0 interface 184 has no altsetting 0 [ 302.562813][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 302.582451][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.602495][ T27] usb 3-1: Product: syz [ 302.606738][ T27] usb 3-1: Manufacturer: syz [ 302.622463][ T27] usb 3-1: SerialNumber: syz [ 302.652921][ T27] usb 3-1: config 0 descriptor?? [ 302.717811][ T27] smsc75xx v1.0.0 [ 302.904931][T11574] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 303.160167][T11312] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.201007][T11312] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.230823][T11312] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.263917][T11312] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.427853][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 303.469398][T11615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.476330][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 303.476724][T11615] IPv6: NLM_F_CREATE should be set when creating new route [ 303.510592][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 303.532321][ T27] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 303.557292][ T27] usb 3-1: USB disconnect, device number 6 [ 303.630117][T11619] loop1: detected capacity change from 0 to 2048 [ 303.630188][T11312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.683815][T11619] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 303.696578][T11312] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.742832][T11619] NILFS (loop1): mounting unchecked fs [ 303.744334][T11595] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.755580][T11595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.776959][ T6413] udevd[6413]: incorrect nilfs2 checksum on /dev/loop1 [ 303.827108][T11619] NILFS (loop1): recovery complete [ 303.840162][T11595] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.847399][T11595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.865435][T11623] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.936695][ T28] audit: type=1800 audit(1750189527.692:231): pid=11619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2241" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 304.717429][T11312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.977519][T11657] netlink: 'syz.1.2251': attribute type 8 has an invalid length. [ 305.270304][T11667] loop1: detected capacity change from 0 to 128 [ 305.496022][T11674] loop2: detected capacity change from 0 to 512 [ 305.545493][T11674] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 305.584673][T11674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 305.592861][T11674] System zones: 1-12 [ 305.604681][T11674] EXT4-fs (loop2): 1 truncate cleaned up [ 305.616117][T11674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.739267][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.901838][T11312] veth0_vlan: entered promiscuous mode [ 305.963995][T11312] veth1_vlan: entered promiscuous mode [ 306.111110][T11312] veth0_macvtap: entered promiscuous mode [ 306.153789][T11312] veth1_macvtap: entered promiscuous mode [ 306.248910][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.269180][T11695] loop1: detected capacity change from 0 to 2048 [ 306.284881][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.311178][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.334077][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.394489][T11312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.428921][T11695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.435864][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.546186][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.604478][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.630712][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.688277][ T3521] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 306.713757][T11312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.732286][T11701] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2261'. [ 306.763532][T11701] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 306.765721][ T3521] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 306.780987][T11312] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.807717][ T3521] EXT4-fs (loop1): This should not happen!! Data will be lost [ 306.807717][ T3521] [ 306.816956][T11312] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.822439][ T3521] EXT4-fs (loop1): Total free blocks count 0 [ 306.842472][ T3521] EXT4-fs (loop1): Free/Dirty block details [ 306.846587][T11312] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.848457][ T3521] EXT4-fs (loop1): free_blocks=2415919504 [ 306.903599][T11312] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.915743][ T3521] EXT4-fs (loop1): dirty_blocks=32 [ 306.925182][ T3521] EXT4-fs (loop1): Block reservation details [ 306.931218][ T3521] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 306.978538][ T3521] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 307.164846][T11600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.193785][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.201788][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.219311][T11600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.521439][T11723] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2154'. [ 307.989064][T11709] loop2: detected capacity change from 0 to 40427 [ 308.080637][T11733] loop5: detected capacity change from 0 to 512 [ 308.099447][T11709] F2FS-fs (loop2): Found nat_bits in checkpoint [ 308.132817][T11733] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.237417][T11733] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.2268: bg 0: block 5: invalid block bitmap [ 308.328362][T11709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 308.372600][T11733] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 308.390583][T11733] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2268: invalid indirect mapped block 3 (level 2) [ 308.420781][T11746] loop6: detected capacity change from 0 to 8 [ 308.443259][T11733] EXT4-fs (loop5): 2 truncates cleaned up [ 308.489530][T11733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.650762][ T5772] syz-executor: attempt to access beyond end of device [ 308.650762][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 308.704439][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 308.714827][ T8784] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.476677][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2281'. [ 309.924257][T11778] loop2: detected capacity change from 0 to 4096 [ 310.042532][T11785] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.596032][T11801] loop5: detected capacity change from 0 to 128 [ 310.608636][T11799] loop2: detected capacity change from 0 to 164 [ 310.654716][T11799] ISOFS: unable to read i-node block [ 310.670430][T11799] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 310.692241][T11801] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.706640][T11801] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.882912][T11801] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.2291: No space for directory leaf checksum. Please run e2fsck -D. [ 310.979538][T11801] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #2: comm syz.5.2291: Directory block failed checksum [ 311.194434][ T8784] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.242214][T11818] loop6: detected capacity change from 0 to 1024 [ 311.285594][T11822] loop1: detected capacity change from 0 to 128 [ 311.539242][T11595] hfsplus: b-tree write err: -5, ino 4 [ 311.589602][T11832] loop1: detected capacity change from 0 to 512 [ 311.775039][T11832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.816745][T11832] ext4 filesystem being mounted at /591/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.176502][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.952915][T11876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2316'. [ 313.019102][ T28] audit: type=1326 audit(1750189536.772:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.5.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 313.070622][ T28] audit: type=1326 audit(1750189536.812:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.5.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 313.126596][T11881] sd 0:0:1:0: device reset [ 313.172499][ T28] audit: type=1326 audit(1750189536.882:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.5.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef4458d290 code=0x7ffc0000 [ 313.232603][ T28] audit: type=1326 audit(1750189536.882:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.5.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 313.334590][ T28] audit: type=1326 audit(1750189536.882:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.5.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 313.384227][T11887] loop2: detected capacity change from 0 to 512 [ 313.424056][T11887] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 313.432804][ T28] audit: type=1326 audit(1750189536.882:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.5.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 313.432858][ T28] audit: type=1326 audit(1750189536.902:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.5.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4458e929 code=0x7ffc0000 [ 313.455103][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.828150][T11887] EXT4-fs (loop2): failed to open journal device unknown-block(11,127) -6 [ 314.100221][T11909] loop6: detected capacity change from 0 to 1024 [ 314.131447][T11909] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 314.161858][T11909] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 314.192612][T11909] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 314.262556][T11909] EXT4-fs error (device loop6): ext4_get_journal_inode:5805: inode #5: comm syz.6.2327: unexpected bad inode w/o EXT4_IGET_BAD [ 314.297709][T11919] loop1: detected capacity change from 0 to 256 [ 314.300489][T11909] EXT4-fs (loop6): no journal found [ 314.309816][T11909] EXT4-fs (loop6): can't get journal size [ 314.325331][T11909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.463164][T11312] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.481841][T11919] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 314.826072][T11931] loop5: detected capacity change from 0 to 512 [ 314.874568][T11931] ext4: Unknown parameter 'euid' [ 315.675235][T11963] loop2: detected capacity change from 0 to 512 [ 315.703800][T11963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.750082][T11963] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 315.888908][T11963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.918711][T11977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2352'. [ 315.975047][T11963] ext4 filesystem being mounted at /615/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.112242][ T28] audit: type=1800 audit(1750189539.862:239): pid=11963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2348" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 316.305935][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.724065][ T5814] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 316.825307][T11986] loop1: detected capacity change from 0 to 32768 [ 316.872284][ T28] audit: type=1800 audit(1750189540.622:240): pid=11986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2355" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 316.943321][ T5814] usb 6-1: Using ep0 maxpacket: 16 [ 316.970069][ T5814] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 316.979623][T11990] loop6: detected capacity change from 0 to 32768 [ 316.993251][ T5814] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 317.011250][ T5814] usb 6-1: Product: syz [ 317.022232][ T5814] usb 6-1: Manufacturer: syz [ 317.056405][ T5814] usb 6-1: SerialNumber: syz [ 317.070951][T11990] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 317.106906][ T5814] usb 6-1: config 0 descriptor?? [ 317.215703][T11990] [ 317.218094][T11990] ====================================================== [ 317.225751][T11990] WARNING: possible circular locking dependency detected [ 317.232934][T11990] 6.6.93-syzkaller #0 Not tainted [ 317.238004][T11990] ------------------------------------------------------ [ 317.245667][T11990] syz.6.2357/11990 is trying to acquire lock: [ 317.252105][T11990] ffff88805bc41818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 317.266528][T11990] [ 317.266528][T11990] but task is already holding lock: [ 317.274273][T11990] ffff88805bc43120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x651/0x4760 [ 317.285050][T11990] [ 317.285050][T11990] which lock already depends on the new lock. [ 317.285050][T11990] [ 317.295846][T11990] [ 317.295846][T11990] the existing dependency chain (in reverse order) is: [ 317.304989][T11990] [ 317.304989][T11990] -> #6 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 317.313831][T11990] down_write+0x97/0x1f0 [ 317.318650][T11990] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 317.325389][T11990] ocfs2_xattr_set+0x596/0x11f0 [ 317.330813][T11990] ocfs2_set_acl+0x4e1/0x590 [ 317.335968][T11990] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 317.341554][T11990] vfs_set_acl+0x803/0xa60 [ 317.346534][T11990] path_setxattr+0x39f/0x550 [ 317.351694][T11990] __x64_sys_setxattr+0xbb/0xd0 [ 317.357211][T11990] do_syscall_64+0x55/0xb0 [ 317.362204][T11990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.368669][T11990] [ 317.368669][T11990] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 317.376552][T11990] down_read+0x46/0x2e0 [ 317.381277][T11990] ocfs2_init_acl+0x2fa/0x720 [ 317.386511][T11990] ocfs2_mknod+0x12e5/0x20f0 [ 317.391672][T11990] ocfs2_mkdir+0x196/0x410 [ 317.396648][T11990] vfs_mkdir+0x296/0x440 [ 317.401428][T11990] do_mkdirat+0x1d4/0x440 [ 317.406565][T11990] __x64_sys_mkdirat+0x89/0xa0 [ 317.411870][T11990] do_syscall_64+0x55/0xb0 [ 317.416821][T11990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.423691][T11990] [ 317.423691][T11990] -> #4 (jbd2_handle){++++}-{0:0}: [ 317.431019][T11990] start_this_handle+0x1e9d/0x20c0 [ 317.437283][T11990] jbd2__journal_start+0x2bb/0x5b0 [ 317.443027][T11990] jbd2_journal_start+0x2a/0x40 [ 317.448439][T11990] ocfs2_start_trans+0x376/0x6c0 [ 317.453914][T11990] ocfs2_mknod+0xe47/0x20f0 [ 317.459046][T11990] ocfs2_create+0x196/0x410 [ 317.464106][T11990] path_openat+0x1277/0x3190 [ 317.470060][T11990] do_filp_open+0x1c5/0x3d0 [ 317.475880][T11990] do_sys_openat2+0x12c/0x1c0 [ 317.481093][T11990] __x64_sys_openat+0x139/0x160 [ 317.486567][T11990] do_syscall_64+0x55/0xb0 [ 317.492409][T11990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.498877][T11990] [ 317.498877][T11990] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 317.507410][T11990] down_read+0x46/0x2e0 [ 317.512099][T11990] ocfs2_start_trans+0x36a/0x6c0 [ 317.517648][T11990] ocfs2_mknod+0xe47/0x20f0 [ 317.522688][T11990] ocfs2_create+0x196/0x410 [ 317.527733][T11990] path_openat+0x1277/0x3190 [ 317.532935][T11990] do_filp_open+0x1c5/0x3d0 [ 317.538136][T11990] do_sys_openat2+0x12c/0x1c0 [ 317.543342][T11990] __x64_sys_openat+0x139/0x160 [ 317.548844][T11990] do_syscall_64+0x55/0xb0 [ 317.553890][T11990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.560583][T11990] [ 317.560583][T11990] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 317.568504][T11990] ocfs2_start_trans+0x26b/0x6c0 [ 317.574238][T11990] ocfs2_mknod+0xe47/0x20f0 [ 317.579700][T11990] ocfs2_create+0x196/0x410 [ 317.584744][T11990] path_openat+0x1277/0x3190 [ 317.590656][T11990] do_filp_open+0x1c5/0x3d0 [ 317.595788][T11990] do_sys_openat2+0x12c/0x1c0 [ 317.600999][T11990] __x64_sys_openat+0x139/0x160 [ 317.606388][T11990] do_syscall_64+0x55/0xb0 [ 317.611346][T11990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.617778][T11990] [ 317.617778][T11990] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 317.628317][T11990] down_write+0x97/0x1f0 [ 317.633121][T11990] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 317.639809][T11990] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 317.647103][T11990] ocfs2_mknod+0xdee/0x20f0 [ 317.652136][T11990] ocfs2_create+0x196/0x410 [ 317.657168][T11990] path_openat+0x1277/0x3190 [ 317.662285][T11990] do_filp_open+0x1c5/0x3d0 [ 317.667315][T11990] do_sys_openat2+0x12c/0x1c0 [ 317.672616][T11990] __x64_sys_openat+0x139/0x160 [ 317.678003][T11990] do_syscall_64+0x55/0xb0 [ 317.682964][T11990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.689408][T11990] [ 317.689408][T11990] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 317.700111][T11990] __lock_acquire+0x2ddb/0x7c80 [ 317.705504][T11990] lock_acquire+0x197/0x410 [ 317.710535][T11990] down_write+0x97/0x1f0 [ 317.715311][T11990] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 317.721737][T11990] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 317.728592][T11990] ocfs2_extend_dir+0xc60/0x4760 [ 317.734073][T11990] ocfs2_prepare_dir_for_insert+0x2fc7/0x5480 [ 317.740669][T11990] ocfs2_mknod+0x818/0x20f0 [ 317.745697][T11990] ocfs2_create+0x196/0x410 [ 317.750724][T11990] vfs_create+0x1f4/0x360 [ 317.755579][T11990] do_mknodat+0x3c8/0x4f0 [ 317.760441][T11990] __x64_sys_mknod+0x8e/0xa0 [ 317.765551][T11990] do_syscall_64+0x55/0xb0 [ 317.770499][T11990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.776929][T11990] [ 317.776929][T11990] other info that might help us debug this: [ 317.776929][T11990] [ 317.787261][T11990] Chain exists of: [ 317.787261][T11990] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key [ 317.787261][T11990] [ 317.804492][T11990] Possible unsafe locking scenario: [ 317.804492][T11990] [ 317.811955][T11990] CPU0 CPU1 [ 317.817331][T11990] ---- ---- [ 317.822700][T11990] lock(&ocfs2_file_ip_alloc_sem_key); [ 317.828262][T11990] lock(&oi->ip_xattr_sem); [ 317.835381][T11990] lock(&ocfs2_file_ip_alloc_sem_key); [ 317.843486][T11990] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 317.850806][T11990] [ 317.850806][T11990] *** DEADLOCK *** [ 317.850806][T11990] [ 317.858981][T11990] 3 locks held by syz.6.2357/11990: [ 317.864186][T11990] #0: ffff88807f42c418 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 317.873441][T11990] #1: ffff88805bc43498 (&type->i_mutex_dir_key#21/1){+.+.}-{3:3}, at: filename_create+0x1f6/0x460 [ 317.884184][T11990] #2: ffff88805bc43120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x651/0x4760 [ 317.895162][T11990] [ 317.895162][T11990] stack backtrace: [ 317.901147][T11990] CPU: 1 PID: 11990 Comm: syz.6.2357 Not tainted 6.6.93-syzkaller #0 [ 317.909241][T11990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.919754][T11990] Call Trace: [ 317.923041][T11990] [ 317.925995][T11990] dump_stack_lvl+0x16c/0x230 [ 317.930691][T11990] ? load_image+0x3b0/0x3b0 [ 317.935290][T11990] ? show_regs_print_info+0x20/0x20 [ 317.940611][T11990] ? print_circular_bug+0x12b/0x1a0 [ 317.945838][T11990] check_noncircular+0x2bd/0x3c0 [ 317.950797][T11990] ? look_up_lock_class+0x75/0x140 [ 317.955930][T11990] ? print_deadlock_bug+0x5d0/0x5d0 [ 317.961138][T11990] ? lockdep_lock+0xe0/0x220 [ 317.965744][T11990] ? _find_first_zero_bit+0xd3/0x100 [ 317.971049][T11990] __lock_acquire+0x2ddb/0x7c80 [ 317.975927][T11990] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 317.981932][T11990] ? __lock_acquire+0x7c80/0x7c80 [ 317.987747][T11990] ? verify_lock_unused+0x140/0x140 [ 317.992991][T11990] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 317.998683][T11990] ? do_raw_spin_lock+0x121/0x2c0 [ 318.003744][T11990] ? mutex_unlock+0x10/0x10 [ 318.008373][T11990] lock_acquire+0x197/0x410 [ 318.012891][T11990] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 318.018988][T11990] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 318.025011][T11990] ? __might_sleep+0xe0/0xe0 [ 318.029712][T11990] ? read_lock_is_recursive+0x20/0x20 [ 318.035104][T11990] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 318.041302][T11990] ? verify_lock_unused+0x140/0x140 [ 318.046515][T11990] ? check_noncircular+0x175/0x3c0 [ 318.051643][T11990] down_write+0x97/0x1f0 [ 318.055898][T11990] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 318.062064][T11990] ? down_read_killable+0x340/0x340 [ 318.067287][T11990] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 318.073203][T11990] ? mark_lock+0x94/0x320 [ 318.077546][T11990] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 318.083552][T11990] ? lock_chain_count+0x20/0x20 [ 318.088442][T11990] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 318.094359][T11990] ? ocfs2_block_group_search+0x470/0x470 [ 318.100085][T11990] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 318.106004][T11990] ? _raw_spin_unlock+0x40/0x40 [ 318.110871][T11990] ? stack_trace_save+0x9c/0xe0 [ 318.115742][T11990] ? stack_trace_snprint+0xf0/0xf0 [ 318.120870][T11990] ? __stack_depot_save+0x560/0x630 [ 318.126103][T11990] ? kasan_set_track+0x5f/0x70 [ 318.130889][T11990] ? kasan_set_track+0x4e/0x70 [ 318.135665][T11990] ? __kasan_kmalloc+0x8f/0xa0 [ 318.140439][T11990] ? ocfs2_reserve_new_metadata_blocks+0x114/0x940 [ 318.146949][T11990] ? ocfs2_extend_dir+0xc60/0x4760 [ 318.152065][T11990] ? ocfs2_prepare_dir_for_insert+0x2fc7/0x5480 [ 318.158408][T11990] ? ocfs2_mknod+0x818/0x20f0 [ 318.163102][T11990] ? ocfs2_create+0x196/0x410 [ 318.167790][T11990] ? vfs_create+0x1f4/0x360 [ 318.172299][T11990] ? do_mknodat+0x3c8/0x4f0 [ 318.176815][T11990] ? __x64_sys_mknod+0x8e/0xa0 [ 318.181580][T11990] ? do_syscall_64+0x55/0xb0 [ 318.186183][T11990] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.192278][T11990] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 318.198614][T11990] ? ocfs2_init_steal_slots+0x160/0x160 [ 318.204165][T11990] ? mark_lock+0x94/0x320 [ 318.208496][T11990] ? down_write+0x162/0x1f0 [ 318.213026][T11990] ? down_read_killable+0x340/0x340 [ 318.218261][T11990] ocfs2_extend_dir+0xc60/0x4760 [ 318.223231][T11990] ? ocfs2_dx_dir_name_hash+0xae0/0xae0 [ 318.228839][T11990] ? ocfs2_initialize_journal_triggers+0x540/0x540 [ 318.235349][T11990] ? verify_lock_unused+0x140/0x140 [ 318.240552][T11990] ? mark_lock+0x94/0x320 [ 318.244892][T11990] ? verify_lock_unused+0x140/0x140 [ 318.250100][T11990] ? ocfs2_buffer_cached+0x370/0x860 [ 318.255409][T11990] ? __lock_acquire+0x7c80/0x7c80 [ 318.260457][T11990] ? do_raw_spin_lock+0x121/0x2c0 [ 318.265503][T11990] ? ocfs2_dx_dir_name_hash+0x22a/0xae0 [ 318.271154][T11990] ? __asan_memcpy+0x40/0x70 [ 318.275753][T11990] ? ocfs2_dx_dir_name_hash+0x9a5/0xae0 [ 318.281306][T11990] ? ocfs2_prepare_dir_for_insert+0x5480/0x5480 [ 318.287555][T11990] ? rcu_is_watching+0x15/0xb0 [ 318.292326][T11990] ? ocfs2_buffer_cached+0x3f8/0x860 [ 318.297630][T11990] ocfs2_prepare_dir_for_insert+0x2fc7/0x5480 [ 318.303722][T11990] ? ocfs2_read_blocks_sync+0xb40/0xb40 [ 318.309705][T11990] ? ocfs2_fill_new_dir_el+0xe20/0xe20 [ 318.315168][T11990] ? rcu_is_watching+0x15/0xb0 [ 318.319937][T11990] ? ocfs2_search_dirblock+0x383/0x830 [ 318.325422][T11990] ? ocfs2_read_dir_block_direct+0x480/0x480 [ 318.331428][T11990] ? rcu_is_watching+0x15/0xb0 [ 318.336199][T11990] ? ocfs2_buffer_cached+0x3f8/0x860 [ 318.341490][T11990] ? __brelse+0x59/0x90 [ 318.345649][T11990] ? ocfs2_find_entry+0xd90/0x1fa0 [ 318.350763][T11990] ? __wait_on_bit+0xe7/0x2d0 [ 318.355454][T11990] ? ocfs2_refresh_inode+0x8f0/0x8f0 [ 318.360752][T11990] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 318.366822][T11990] ? ocfs2_read_blocks_sync+0xb40/0xb40 [ 318.372377][T11990] ? ocfs2_inode_lock_full_nested+0x154/0x1af0 [ 318.378557][T11990] ? ocfs2_read_inode_block+0x11e/0x180 [ 318.384104][T11990] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 318.390096][T11990] ? do_raw_spin_unlock+0x121/0x230 [ 318.395304][T11990] ? ocfs2_inode_lock_full_nested+0xcb7/0x1af0 [ 318.401494][T11990] ? ocfs2_downconvert_lock+0x4b0/0x4b0 [ 318.407059][T11990] ? ocfs2_check_dir_for_entry+0x22a/0x3c0 [ 318.412870][T11990] ? ocfs2_lookup_ino_from_name+0xf0/0xf0 [ 318.418595][T11990] ? __lock_acquire+0x1334/0x7c80 [ 318.423625][T11990] ocfs2_mknod+0x818/0x20f0 [ 318.428150][T11990] ? ocfs2_mkdir+0x410/0x410 [ 318.432775][T11990] ? verify_lock_unused+0x140/0x140 [ 318.438015][T11990] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 318.443742][T11990] ? __lock_acquire+0x7c80/0x7c80 [ 318.448771][T11990] ? do_raw_spin_lock+0x121/0x2c0 [ 318.453799][T11990] ? tomoyo_path_number_perm+0x1ba/0x590 [ 318.459440][T11990] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 318.465339][T11990] ? __lock_acquire+0x7c80/0x7c80 [ 318.470369][T11990] ? __rwlock_init+0x150/0x150 [ 318.475138][T11990] ? do_raw_spin_unlock+0x121/0x230 [ 318.480344][T11990] ? put_pid+0xde/0x120 [ 318.484510][T11990] ocfs2_create+0x196/0x410 [ 318.489041][T11990] ? make_kgid+0x640/0x640 [ 318.493557][T11990] ? apparmor_path_mknod+0x1b1/0x230 [ 318.498861][T11990] ? ocfs2_lookup+0x940/0x940 [ 318.503552][T11990] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 318.508525][T11990] ? ocfs2_getattr+0x380/0x380 [ 318.513328][T11990] ? inode_permission+0xf3/0x480 [ 318.518282][T11990] ? bpf_lsm_inode_create+0x9/0x10 [ 318.523841][T11990] ? security_inode_create+0xb7/0x100 [ 318.529238][T11990] vfs_create+0x1f4/0x360 [ 318.533587][T11990] do_mknodat+0x3c8/0x4f0 [ 318.537931][T11990] ? do_o_path+0x1f0/0x1f0 [ 318.542361][T11990] __x64_sys_mknod+0x8e/0xa0 [ 318.546979][T11990] do_syscall_64+0x55/0xb0 [ 318.551409][T11990] ? clear_bhb_loop+0x40/0x90 [ 318.556089][T11990] ? clear_bhb_loop+0x40/0x90 [ 318.560767][T11990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.566672][T11990] RIP: 0033:0x7fca00d8e929 [ 318.571087][T11990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.590697][T11990] RSP: 002b:00007fca01b50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 318.599114][T11990] RAX: ffffffffffffffda RBX: 00007fca00fb5fa0 RCX: 00007fca00d8e929 [ 318.607096][T11990] RDX: 000000000000070d RSI: 0000000000000408 RDI: 0000200000000000 [ 318.615066][T11990] RBP: 00007fca00e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 318.623040][T11990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.631009][T11990] R13: 0000000000000000 R14: 00007fca00fb5fa0 R15: 00007ffe14cc16b8 [ 318.639006][T11990] [ 318.702954][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.710289][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.832761][T11990] syz.6.2357 (11990) used greatest stack depth: 19536 bytes left [ 318.859877][T11312] ocfs2: Unmounting device (7,6) on (node local) [ 318.899505][T11714] usb 6-1: USB disconnect, device number 5 [ 324.562508][ T5770] Bluetooth: hci3: command 0x0406 tx timeout