last executing test programs: 3m51.29243848s ago: executing program 1 (id=77): unshare(0x20400) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffca9, &(0x7f0000000840)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m50.941603205s ago: executing program 1 (id=80): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/17, 0x11}, 0x7}], 0x1, 0x40000022, 0x0) 3m50.669640598s ago: executing program 1 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002c80)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) read(r0, &(0x7f0000000440)=""/70, 0x46) 3m50.434734011s ago: executing program 1 (id=85): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) 3m50.103582095s ago: executing program 1 (id=87): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0xfe, {0x2, 0x1f, 0x16, 0x16, 0x0, 0x8000}}) 3m49.553257812s ago: executing program 1 (id=90): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x8c, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}, {"2bee0534d8e76f58f368e106bd9bdc2ae151ad58035d207c0290d64dfae7ecbc90415e397b998b78a37248f458d580a18e0e47726dca34b615935690f0bd0da68a4d8d168556e6b0490ee2c627fd830da3264813febf"}}}}}}, 0x0) 3m49.078616818s ago: executing program 32 (id=90): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x8c, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}, {"2bee0534d8e76f58f368e106bd9bdc2ae151ad58035d207c0290d64dfae7ecbc90415e397b998b78a37248f458d580a18e0e47726dca34b615935690f0bd0da68a4d8d168556e6b0490ee2c627fd830da3264813febf"}}}}}}, 0x0) 3m7.029637684s ago: executing program 5 (id=439): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) 3m6.723222628s ago: executing program 5 (id=444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000605000300000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 3m6.462569632s ago: executing program 5 (id=448): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m6.191786105s ago: executing program 5 (id=451): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x189, &(0x7f00000027c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) 3m5.871892629s ago: executing program 5 (id=456): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) 3m5.325538016s ago: executing program 5 (id=462): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x400000, 0x6, "3eccd8f9d200000001000010000000040900"}) 3m4.927117861s ago: executing program 33 (id=462): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x400000, 0x6, "3eccd8f9d200000001000010000000040900"}) 2m41.389403911s ago: executing program 3 (id=675): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x10, 0x2, 0x0, 0x0, 0x0}) 2m41.110987155s ago: executing program 3 (id=680): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000018009b064e81f782db4cb904021d0800fe027c05", 0x18}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020"], 0xfe33) 2m40.920255087s ago: executing program 3 (id=683): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2m40.66805909s ago: executing program 3 (id=686): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@debug}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304c24, &(0x7f0000000140)='usrjquota=') 2m40.122031167s ago: executing program 3 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="47000e001c0000000802110000000802110000015050"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2m39.657825893s ago: executing program 3 (id=692): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5, 0x12, r0, 0x4c057000) capset(&(0x7f0000000000)={0x20080522}, 0x0) 2m39.436173866s ago: executing program 34 (id=692): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5, 0x12, r0, 0x4c057000) capset(&(0x7f0000000000)={0x20080522}, 0x0) 1m57.038072587s ago: executing program 2 (id=1136): r0 = syz_open_dev$media(&(0x7f0000000280), 0x6, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x541b, 0x0) 1m56.81168022s ago: executing program 2 (id=1138): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x28000600) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000001c80)=0x2a1, 0x4) 1m56.599161013s ago: executing program 2 (id=1141): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{0x0, 0x803e}], 0x1}, 0x0) 1m56.319350116s ago: executing program 2 (id=1144): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="a9", 0x1}], 0x1) 1m56.06019611s ago: executing program 2 (id=1147): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m55.046881593s ago: executing program 2 (id=1156): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000180)) 1m39.91651441s ago: executing program 35 (id=1156): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='sessionid\x00') ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000180)) 7.447485002s ago: executing program 7 (id=2121): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f0000000140)={[{@force}, {}, {@nls={'nls', 0x3d, 'iso8859-1'}}, {@uid}, {}, {@part={'part', 0x3d, 0x4}}]}, 0x20, 0x6f5, &(0x7f00000079c0)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 7.109494377s ago: executing program 7 (id=2125): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="150000"], 0x15) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 6.86604559s ago: executing program 7 (id=2131): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x36, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x40, 0x23, 0x4, {0x4, 0x10, "fdb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.989545807s ago: executing program 8 (id=2164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 3.706285551s ago: executing program 8 (id=2166): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000004540)="f257", 0x2}], 0x1}}], 0x1, 0x20000000) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 3.586305703s ago: executing program 7 (id=2168): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="001ce3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.411919265s ago: executing program 8 (id=2170): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000700)=""/147) 2.905421042s ago: executing program 8 (id=2175): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x10, 0x9, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x1, 0xf28c, 0x3, 0x1, 0xfffffffd, 0x0, 0x10]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 2.672815975s ago: executing program 8 (id=2180): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) getdents64(r0, &(0x7f00000000c0)=""/49, 0x31) 2.217965601s ago: executing program 4 (id=2185): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x71) 2.188908531s ago: executing program 0 (id=2186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x1, 0x7, 0xd03, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xa053}, 0x20800) 2.105289062s ago: executing program 0 (id=2187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r1, 0x65aebf9dafbebb59, 0x0, 0x0, {{}, {@val={0x8, 0x12b, 0xffffffff}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 2.004672093s ago: executing program 4 (id=2188): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000004200010a00000000000000000e07"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 1.941933514s ago: executing program 0 (id=2189): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r1, 0x2}, 0x8) 1.844497685s ago: executing program 4 (id=2190): add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x5}, 0x0) 1.751957767s ago: executing program 0 (id=2191): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x33}, 0x8) sendmmsg$inet6(r0, &(0x7f0000002e80)=[{{&(0x7f0000000a40)={0xa, 0x4e20, 0x3, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x40000) 1.665433758s ago: executing program 6 (id=2192): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1.664511638s ago: executing program 4 (id=2193): capset(&(0x7f00000027c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffffffc, 0x40000000, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4000000) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 1.569958359s ago: executing program 0 (id=2194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r0}, 0x38) 1.262806603s ago: executing program 6 (id=2195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) 1.255214583s ago: executing program 4 (id=2196): unshare(0x400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 1.127709465s ago: executing program 6 (id=2197): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x14, r1, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 1.032067556s ago: executing program 8 (id=2198): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x800, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a7ddf8a69ea917ded5ba193b3e7772fd29f35239d2", "530bf65043114b2e53000006000000000010e200", [0x1000000000]}}) 1.025631276s ago: executing program 4 (id=2199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000010280)='./mnt\x00', 0x4805, &(0x7f00000003c0)=ANY=[], 0x1, 0x10222, &(0x7f0000000040)="$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") 923.816118ms ago: executing program 6 (id=2200): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@getlink={0x34, 0x12, 0x2fa9ccd93d5c0297, 0x0, 0xffffffff, {0x7}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_hsr\x00'}]}, 0x34}}, 0x0) 821.589879ms ago: executing program 6 (id=2201): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./file1\x00', 0x8680, &(0x7f0000020b00)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8], 0xfd, 0x2a1, &(0x7f0000000100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x82042, 0x1) 672.740891ms ago: executing program 0 (id=2202): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=remount-ro,noquota,nodiscard,iocharset=macturkish,errors=continue,errors=continue,nointegrity\x00iocharset=macgreek,quota,usrquota,usrquota,errors=remount-rocard,noquota,noquota,\x00\x00\x00\x00\x00'], 0x1, 0x611f, &(0x7f00000154c0)="$eJzs3b2PHGcdB/Dfvt6LiXNKEQULoYsTXkKIX4MxBEhSQEGTArlFti6XyMIBZBvkRBa+6BoKKv4CEBIlQpSIgj8gBS0dFRWWbCRQKgbN3fP4Zje73nPOt7O+5/ORzrO/eWZ2n7nvzu2uZ2afAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+9/7wdlORFz+eZqxFvGZ6EV0I1bqej0iVtbX8vL9iHgudprj2YgYLEXU6+/883TEqxHx0fGIe/dvb9Szz+2zH9/9499/98Njb/3tD4PT//3Tzd5r05a7detX//nznYNtMwAAAJSmqqqqkz7mn0if77ttdwoAmIv8+l8lef6Rr3/9z7f+skj9UavVarV6DnVTNdmdZhERW8116vcMDscDwBNmKz5uuwu0SP5F60fEsbY7ASy0Ttsd4FDcu397o5Py7TRfD9Z32/O5ICP5b3UeXN8xbTrL+Dkm83p+bUcvnpnSn5U59WGR5Py74/lf3m0fpuUOO/95mZb/cPfSp+Lk/Hvj+Y85Ovl3J+Zfqpx//5Hy78kfAAAAAAAWWP7//7WWj/8uHXxT9uVhx3/X59QHAAAAAAAAAHjcDjr+3wPG/wMAAICFVX9Wr/3m+N68ad/FVs+/1Il4amx5oDDpYpnVtvsBAAAAAAAAAAAAACXp757De6kTMYiIp1ZXq6qqf5rG60d10PWfdKVvP5Ss7T/yAACw66PjY9fydyKWI+JS+q6/werqalUtr6xWq9XKUn4/O1xarlYan2vztJ63NNzHG+L+sKrvbLmxXtOsz8uz2sfvr36sYdXbR8cek0H6bU5pbilsAEh2X43ueUU6Yqrq6WlvPmCE/f/osf+zH20/TwEAAIDDV1VV1Ulf530iHfPvtt0pAGAu8uv/+HGBQ6kjDvf+F71e2vu9L0R/1Gq1Wl1c3VRNdqdZRMRWc536PYPh+AHgCbMVH7fdBVok/6L1I+K5tjsBLLRO2x3gUNy7f3ujk/LtNF8P0vju+VyQkfy3Ojvr5fUnTWcZP8dkXs+v7ejFM1P68+yc+rBIcv7d8fwv77YP03KHnf+8TMu/3s61FvrTtpx/bzz/MUcn/+7E/EuV8+8/Uv49+QMAAAAAwALL//+/5vhv3mQAAAAAAAAAeOLcu397I1/3mo//f27Ccq7/PJpy/h35Fynn3x3L/8tjy/Uat+++uZf/v+/f3vj9zX99Nk/3m/9SvstOemZ10jOikx6p00/TA27gmO1Bb1g/0qDT7fXTOT/V4J24GtdiM86MLNtNv4+99rMj7XVPByPt50ba+59oPz/SPkjfO1Ct5PZTsRE/iWvx9k573bY0Y/uXZ7RXM9pz/j37f5Fy/v3GT53/amrvjE1rdz/sfmK/b04nPc4bVz//yzOHvzkzbUfvwbY11dt3soX+7PxOjg3jZzc2r5+6deXmzetnI01G5p6LNHnMcv6DnZ+lvb//L+y257/7zf317ofDR85/UWxHf2r+LzRu19v70pz71oac/zD95PzfTu2T9/8nOf/p+//LLfQHAAAAAAAAAAAAAAAAHqaqqp1LRN+IiAvp+p+2rs0EAObjeJrm1/8qye1qtVqtVquPXt1UTfZ6s4iIvzbXqd8z/GLSnQEAi+x/EfGPtjtBa+RfsPx9f/X0xbY7A8zVjfc/+NGVa9c2r99ouycAAAAAAAAAwKeVx/9cb4z//GJErI0tNzL+65uxftDxP/v5xoMBRh/zQN9TbHeHvW5juPHnY2d87lPTxv8+GQ8f/7s/4/EGM9qHM9qXZrQvT5y7l9bECz0acv7PN8Y7r/M/MTb8egnjv46PeV+CnP/JxvO5zv9LY8s1869+u3D5b+13we3ojuR/+uZ7Pz194/0PXrn63pV3N9/d/PH5s2fPnL9w4eLFi6ffuXpt88zuv4fT6wWQ889jXzsPtCw5/5y5/MuS8/9CquVflpz/F1Mt/7Lk/PP7PfmXJeefP/vIvyw5/5dSLf+y5Py/kmr5lyXn/3Kq5V+WnP9XUy3/suT8X0m1/MuS8z+VavmXJed/OtX7yN/Xwx8hOf98hMv+X5acfz6zQf5lyfmfS7X8y5LzP59q+Zcl5/9qquVflpz/11It/7Lk/C+kWv5lyfl/PdXyL0vO/2Kq5V+WnP83Ui3/suT8v5lq+Zcl5/9aquVflpz/t1It/7Lk/L+davmXJef/nVTLvyw5/9dTLf+y7H3/vxtuuOFGvtH2XyYAAAAAAAAAAAAAYNw8TiduexsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs3V2MXGd9P/Az+2KvHUIMhODkb2CTmBCSJbu2E7/wr4sJEGiAUiCh0Bds17s2C37Da5dAkWxqKJEwKqqoml7QAkJt1KrCqrigFaW5qPpyVdoLelNRVUJqVAUUkJDairLVzHmexzOzs3PW3vF69jyfjxT/vDtn5pw588zsftf57gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7s43zn2mURRF87/WH1uK4gXNv2+a3NL63Otu9BECAAAAq/W/rT+fvyV94sAKrtS2zd+94h+/vri4uFi8b/R3x7+wuJgumCyK8Y1F0bosuvzv72+0bxNcLCYaI20fj1TsfrTi8rGKy8crLt9QcfnGissnKi5fcgKW2FT+PKZ1Y9tbf91SntLi1mK8ddn2Hte62Ng4MhJ/ltPSaF1ncfxoMV8cL+aKmY7ty20bre2/eWdzX28t4r5G2va1rblCfviJI/EYGuEcb+/Y15XbjL7/hmLyRz/8xJE/Ovvc7b1m5WnouL3yOO+9q3mcnwqfKY+1UWxM5yQe50jbcW7r8ZiMdhxno3W95t+7j/P5FR7n6JXDXFPdj/lEMdL6+7db52ms/cd66TxtC5/7r7uLorhw5bC7t1myr2Kk2NzxmZErj89EuSKbt9FcSi8uxq5qnd65gnXanLPbO9dp93MiPv53huuNLXMM7Q/T9z+5YcnjfrXrNGre6+WeK91rcNDPlWFZg3FdfLt1p5/suQa3h/v/iXuWX4M9106PNZjud9savKtqDY5sGG0dc3oQGq3rXFmDOzq2H23tqdGaz97Tfw1Onz1xenrhYx9/7fyJw8fmjs2d3LVjx8yu3bv37t07fXT++NxM+ec1nu3ht7kYSc+Bu8K5i8+BV3dt275UF788uOfhRJ/n4ZaubQf9PBzrvnONtXlCLl3T5XPjseZJn7g0UizzHGs9Pvet/nmY7nfb83Cs7XnY82tKj+fh2Aqeh81tTt+3su9Zxtr+63UM1+trwZa2Ndj9/Uj3Ghz09yPDsgYnwrr41/uW/1qwLRzvk1NX+/3I6JI1mO5ueO1pfiZ9vz+xtzV6rcs7mhfctKE4tzB35oEnDp89e2ZHEcaaeEnbWuler5vb7lOxZL2OXPV6PTD/iifv6PH5LeFcTby2+cfEso9Vc5sHH+j/WLW+uvU+nx2f3VmEMWBrfT57fTVvns+UJfucz+Y2n5pe/ffiKZe2vf6OL/P6G3P/T8v9pZu6ODo+Vj5/R9PZGe94Pe58qMZar12N1r6fn17Z6/F4+G+tX49v7fN6vLVr20G/Ho9337n4etyo+mnH6nQ/nhNhnRyf6f963Nxm686rXZNjfV+P7w6zEc7/a0JSSLmobe0st27TvsbGxsP9Got76Fynuzq2Hw/ZrLmvp3de2zq99+7ytkbTvbtirdbpZNe2g16n6fVquXXaqPrp27Xpfjwnwrq4dVf/ddrc5pkHV//auSn+te21c0PVGhwf3dA85vG0CMvX+8VNcQ0+UBwpThXHi9nWpRta66nR2tfUQytbgxvCf2v9Wrm1zxq8t2vbQa/B9HVsubXXGFt65weg+/GcCOviqYf6r8HmNm/aM9jvXe8Nn0nbtH3v2v3zteV+5nVH12m6nj/zah7n3+zp/7PZ5jbH915tzux/nu4Pn7mpx3nqfv4u95yaLdbmPG0Nx/nc3uXPU/N4mtt8Yd8K19OBoijOf+Th1s97w7+v/Pm573y9499dev2bzvmPPPyDm4/+7dUcPwDr30/Lsbn8Wtf2L1Mr+fd/AAAAYF2IuX8kzET+BwAAgNqIuT/+X+GJ/A8AAAC1EXP/WJhJJvl/65uem//p+SI18xeDeHk6DY+W28WO60z4eHLxiubnH/7q3I//8vzK9j1SFMVPHv2NnttvfTQeV2kyHOflN3d+fukVz69o/4cev7Jde3/9S+H24/1Z6TLoVcGdKYrim7d8rrWfyfdfas1nHj3Umu++8OTF5jbP7ys/jtd/9iXl9l8M5d8DRw93XP/ZcB6+F+bM23qfj3i9r116zbY9772yv3i9xl0vbN3tpz5Q3m78PTmfv1huH8/zcsf/V599+mvN7Z94Ve/jPz/S+/ifDrf71TD/++Xl9u2PQfPjeL1Ph+OP+4vXe+Ar3+p5/Jc/U25/+pFyu0Nhxv3fGz7e/shz8+3n64nG4Y77Vbyl3C7uf+Y7v926PN5evP3u4584eKnjfHSvj2f+ubyd6a7t4+fjfqK/6Np/83ba12fc/9O/dajjPFft//K7n31583a7939/13ajXdfv/o1Nf/Dpz/XcXzyeA392uuP+HHhXeB6H/T/1gbAew+X/c/lzHfuNDr2r8/Unbv+lLec77k/01h+V+7/8+mOt+R+TP/79m15w8wsvvLJ57ori2+8pb69q/8f+8FTH8X/5tvtaj0e8PHb0u/e/nLj/Mx+dOnlq4dz8bNtZbf3unLeXx7NxYtPm5vHeEl5buz8+eOrsB+fOTM5MzhTFZH1/hd41+0qYPyjHhau9/n2Ph8fzjt/75uZ7/umz8fP/8lj5+UtvK79uvTps9/nw+S3l47fYWOX+n7rzttbzu/FM+XFHj30Atm3/z70r2jDc/+7vC+J6P/3SD7bOQ/Oy1teN+Lxe5fF/d7a8nW+E87oYfjPzXbdd2V/79vF3I1x6T/l8X/X5Cy9z8XH94/B4v+N75e3H44r397vh+5hvbe18vYvr4xvnR7pvv/VbPC6E15PiQnl53Cqe70vP39bz8OLvISku3N76+HfS7dx+VXdzOQsfW5g+Pn/y3BPTZ+cWzk4vfOzjB0+cOnfy7MHW7/I8+KGq6195fdrcen2andv9YDGzqSiKU8XMGrxgXZ/jb/5tZcd/+vEjs3tm7pmdO3r43NGzj5+eO3PsyMLCkbnZhXsOHz0699Gq68/P7t+xc9+uPTunjs3P7t+7b9+ufVPzJ081D6M8qAq7Zz48dfLMwdZVFvY/uG/HQw89ODN14tTs3P49MzNT56qu3/raNNW89q9PnZk7fvjs/Im5qYX5j8/t37Fv9+6dlb8N8MTpowuT02fOnZw+tzB3Zrq8L5NnW59ufu2ruj71tPBv5fez3RrlL+Ir3nn/7vT7WZu++sllb6rcpOsXiD4XfhfNP7zo9N6VfBxz/3iYSSb5HwAAAHIQc/+GMBP5HwAAAGoj5v6NYSbyPwAAANRGzP0TYSaZ5H/9f/3/lfX/y8v1//Pq/5/+SNkrXe/9/9if1//Pww3u/696//r/+v/16/+vvD+/3o9f/1//n6WGrf8fc/+mosgy/wMAAEAOYu7fHGYi/wMAAEBtxNx/U5iJ/A8AAAC1EXP/C8JMMsn/+v8r6v/vrCpc1b//7/3/9f+L9dn/jw+O/n82rrp//97HOj7U/w/0//X/9f/1//X/WbXxZS+5Uf3/mPtvDjPJJP8DAABADmLuf2GYifwPAAAAtRFz/y1hJvI/AAAA1EbM/VvCTDLJ//r/3v9f/1//fx31/zuKtGvy/v9tB6P/vz54///+9P8rXHP/f0L/fz32/8cHe/zD3f+vPHz9f66LYXv//5j7XxRmkkn+BwAAgBzE3P/iMBP5HwAAAGoj5v6XhJnI/wAAAFAbMfffGmaSSf7X/9f/X2H//0v6//r/Q9D/77g/a9L/7/v+/+Xf9P+Hi/5/f/r/Fbz/f179/wEf/3D3/wf9/v/jb+6+vv4/vQxb/z/m/peGmWSS/wEAACAHMfffFmYi/wMAAEBtxNz/sjAT+R8AAABqI+b+rWEmmeR//X/9f+//r/+v/997/9X9/5L+/3DR/+9P/7+C/r/+v/7/yvr/Pb751f+nl2Hr/8fcf3uYSSb5HwAAAHIQc/8dYSbyPwAAANRGzP3/L8xE/gcAAIDaiLl/W5hJJvlf/1//X/8/r/7//Rv0//X/603/vz/9/wr6//r/+v8rfP//pa6m/7+x6saojWHr/8fc//Iwk0zyPwAAAOQg5v5XhJnI/wAAAFAbMfe/MsxE/gcAAIDaiLl/Mswkk/yv/1+v/v+f/vVTryz0//X/K/Zf0/5/XAb6/5nT/+9P/7+C/r/+v/7/mvT/ycew9f9j7r8zzCST/A8AAAA5iLn/rjAT+R8AAABqI+b+u8NM5H8AAACojZj7t4eZZJL/9f/r1f+P9P/XsP//xUfS7ej/l7z/f2/6/2tD/7+Htiep/n8F/X/9/+z7//G7X/1/BmPY+v8x978qzCST/A8AAAA5iLn/njAT+R8AAABqI+b+V4eZyP8AAABQGzH33xtmkkn+1//X/9f/9/7/+v+996//vz7p//en/19B/1//P/v+v/f/Z7CGrf8fc/9rwkwyyf8AAACQg5j77wszkf8BAACgNuL/v1n+f6/yPwAAANRRzP1TYSaZ5H/9f/3/nPr/Df1//X/9/9rT/+9P/7+C/r/+v/6//j8DNWz9/5j7Xxtmkkn+BwAAgBzE3P9AmIn8DwAAALURc/90mIn8DwAAALURc/9MmEkm+V//X/8/p/6/9//X/18P/f+G/v+q6P/3p/9fQf9f/79u/f+i0P/nhhq2/n/M/TvCTDLJ/wAAAJCDmPt3hpnI/wAAAFAbMffvCjOR/wEAAKA2Yu5/MMwkk/yv/6//r/+v/6//33v/3v9/fdL/70//v4L+v/5/3fr/3v+fG2zY+v8x9z8UZpJJ/gcAAIAcxNy/O8xE/gcAAIDaiLl/T5iJ/A8AAAC1EXP/3jCTTPK//n9N+v+/+fcd+9b/1//vt//B9P836f+Hqf8/XGra/+9+Wlwz/f8K+v/6//r/+v8M1LD1/2Pu3xdmkkn+BwAAgBzE3P+6MJOO/H/xT9b4sAAAAIABirn//4eZ+Pd/AAAAqI2Y+38mzCST/K//X5P+fxf9f/3/fvv3/v/6/3VW0/7/wOj/V8i1/x9e0G50f361bvTx6//r/7PU9e//x7+trP8fc//+MJNM8j8AAADkIOb+nw0zkf8BAACgNmLuf32YifwPAAAAtRFz/4Ewk0zyv/6//r/+v/7/9en/v77oNoz9/+bi0f+vF/3//vT/K+Ta/w9udH9+vR+//r/+P0sN2/v/x9z/hjCTTPI/AAAA5CDm/ofDTOR/AAAAqI2Y+98YZiL/AwAAQG3E3P+mMJNM8r/+v/6//r/+v/f/771//f/1Sf+/P/3/Cvr/+v/6//r/DNSw9f9j7n9zmEkm+R8AAAByEHP/I2Em8j8AAADURsz9bwkzkf8BAACgNmLuf2uYSSb5X/9f/1//X/9f/7/3/vX/1yf9//70/yvo/+v/dx9/68Ve/1//n2s1bP3/mPt/Lswkk/wPAAAAOYi5/9EwE/kfAAAAaiPm/reFmcj/AAAAUBsx9789zCST/K//r/+v/6//r//fe//6/+uT/n9/+v8V9P/1/73/v/4/AzVs/f+Y+98RZpJJ/gcAAIAcxNz/82Em8j8AAADURsz97wwzkf8BAACgNmLu/4Uwk0zyv/6//r/+v/5/Fv3/5pX0/7Og/9+f/n+FHv3/jfr/+v/6//r/XLNh6//H3P+uMJNM8j8AAADkIOb+d4eZyP8AAABQGzH3vyfMRP4HAACA2oi5/7Ewk0zyv/5/lv3/dJf1/0v6/xn0/73/fzb0//vT/6/g/f/1//X/9f8ZqGHr/8fc/3iYSSb5HwAAAHIQc/97w0zkfwAAAKiNmPt/McxE/gcAAIDaiLn/fWEmmeR//f8s+//e/3/N+v9jHesjp/7/RNvjmdal/r/+/xrQ/+9P/7+C/r/+/zD3/8Nq3rTM9fX/GUbD1v+Puf/9YSaZ5H8AAADIQcz9vxRmIv8DAABAbcTc/8thJvI/AAAA1EbM/b8SZpJJ/tf/1//X//f+/97/v/f+9f/XJ/3//vT/K+j/6/8Pc/+/gv4/w2jY+v8x9/9qmEkm+R8AAAByEHP/B8JM5H8AAACojZj7D4aZyP8AAABQGzH3HwozyST/6/939//jO6rq/+v/6//r/+v/r0eD6/+/7Oai0P/X/9f/1//X/9f/ZzWGrf8fc//hMJNM8j8AAADkIOb+Xwszkf8BAACgNmLuPxJmIv8DAABAbcTcPxtmkkn+1//3/v+D6v//RP9f/z/Q/+9N/39teP///vT/K+j/6//r/+v/M1DD1v+PuX8uzCST/A8AAAA1ln4cHHP/0TAT+R8AAABqI+b+Y2Em8j8AAADURsz9HwwzyST/6//r/3v//xvR/x/r2F7/v6T/r/8/CPr//en/V9D/1//X/9f/Z6CGrf8fc/98mEkm+R8AAAByEHP/h8JM5H8AAACojZj7PxxmIv8DAABAbcTcfzzMJJP8r/+v/597/79RFBe8/7/+f6/96/+vT/r//en/V9D/1//X/9f/Z6CGrf8fc/+JMJNM8j8AAADkIOb+k2Em8j8AAADURsz9p8JM5H8AAPg/9u6j2a6zyuPwwdiWNIKPQBUzRgxhxFdgyowqJkyoIpgcjMnBBJOTCSbnnJPJOedsco4mGqpE+WqtpXCP9lY4unfvdz3PoFdLjXyu7Nvq+rfrVy/AMHL33zduabL/9f/6/+79/+ZQ3v8//T+v/z9B/6//34V9/f3l5/frz9r/3/kuV91T/6//1/9P0v/r//X/nGlp/X/u/vvFLU32PwAAAHSQu//+cYv9DwAAAMPI3f+AuMX+BwAAgGHk7r8qbmmy//X/+n/9v/7/tP7/Rv3/Ofb/d8yf1/8vi/f/p+n/Z+ym/7/tRv+v/9f/6//Zs7T+P3f/A+OWJvsfAAAAOsjd/6C4xf4HAACAYeTuf3DcYv8DAADAMHL3PyRuabL/9f/6f/2//t/7/9s/3/v/66T/n6b/n+H9f/2//l//z04trf/P3f/QuKXJ/gcAAIAOcvc/LG6x/wEAAGAYufsfHrfY/wAAADCM3P2PiFua7H/9v/5f/6//1/9v/3z9/zrdsDn5Z4L+fz/9/4yZ/n+z0f9POed+fvtvbz1f/1no//X/7Le0/j93/yPjlib7HwAAADrI3f+ouMX+BwAAgGHk7r86brH/AQAAYBi5+x8dtzTZ//p//b/+X/+v/9/++fr/dfL+/7SL7//vdPv73Ktv/+/9/2ne/9f/6/8509L6/9z918QtTfY/AAAAdJC7/zFxi/0PAAAAw8jd/9i4xf4HAACAYeTuf1zc0mT/6//b9P97tYv+X/+v/9f/j07/P837/zP2/pg7Vj/U/+v/9f/6fy7O0vr/3P2Pj1ua7H8AAADoIHf/E+IW+x8AAACGkbv/iXGL/Q8AAADDyN3/pLilyf7X/7fp/73/r//X/+v/W9D/T9P/zxjl/f8L/K457H7+Yh3216//1/+z39L6/9z9T45bmux/AAAA6CB3/1PiFvsfAAAAhpG7/6lxi/0PAAAAw8jdf23c0mT/6/931P9fsf/n9P+77P/zE/T/+n/9v/5/mv5/mv5/xij9/wU67H5+7V+//l//z35L6/9z9z8tbmmy/wEAAKCD3P1Pj1vsfwAAABhG7v5nxC32PwAAAAwjd/8z45Ym+1//7/3/C+n/7+39f/2//l//v1D6/2n6/xn6f/2//l//z04trf/P3X9d3NJk/wMAAEAHufufFbfY/wAAADCM3P3PjlvsfwAAABhG7v7nxC1N9r/+X/+/jvf/9f/6f/2//v/c6P+n6f9n6P/1//p//T87taD+/5RfdXTz3Lilyf4HAACADnL3Py9usf8BAABgGLn7nx+32P8AAAAwjNz9L4hbmux//f9i+v+9nG+s/v/YZrPR/2+a9v/HTvnnWd+X+n/9/wHQ/0/T/8/Q/+v/9f/6f3ZqQf3/3o9z978wbmmy/wEAAKCD3P0vilvsfwAAABhG7v4Xxy32PwAAAAwjd/9L4pah9v+Rs/5P9P+L6f/3jNX/e///zO+PTv2/9//30/8fDP3/NP3/DP2//l//r/9np5bW/+fuv/7WP0OvPfnXufKKC/89AgAAAMty/d5/Pbp5adwy1L//BwAAgN5y978sbrH/AQAAYKWu2/czuftfHrc02f/6/932/1ee8nP6f/3/md8f+n/9v/7/0tP/T9P/z9D/6//1//p/dmpp/X/u/lfELU32PwAAAHSQu/+GuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbmmy//X/3v/X/+v/9f/bP1//v076/2n6/xn6f/3/4fb/R07+t/p/xnAe/f/x48evvuT9f+7+V8ctTfY/AAAAdJC7/zVxi/0PAAAAw8jd/9q4xf4HAACAYeTuf13c0mT/6/+b9v/5ra7/36P/1/9v+3z9/zrp/6fp/2fo//X/3v/X/7NTS3v/P3f/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/9f9N+3/v/+v/9f8H3f/fstH/H4hV9P/Hzv75S+//r9H/6/8ntOv/737X036o/9f/s9/S+v/c/W+OW5rsfwAAAOggd/9b4hb7HwAAAIaRu/+tcYv9DwAAAMPI3f+2uOnyJvtf/6//1//r//X/2z//gN//v3Kz2ej/d2AV/f+Epff/3v/X/09p1/+fQf+v/2e/pfX/ufvfHrc02f8AAADQQe7+d8Qt9j8AAAAMI3f/O+MW+x8AAACGkbv/XXFLk/2v/9f/6//1/8P3/9esov/3/v+O6P+n6f9n6P/1//p//T8H4rD6/9z9745bmux/AAAA6CB3/3viFvsfAAAAhpG7/71xi/0PAAAAw8jd/764pcn+1//r//X/+v8ji+v/j57212vy/r/+f0f0/9OW2P+f+meI/l//v+avf5D+/zr9P7u0tPf/c/e/P25psv8BAACgg9z9H4hb/69b+x8AAACGkbv/g3GL/Q8AAADDyN3/obilyf7X/+v/9f/6/+Hf/9f/t6L/n7bE/v9U+n/9/5q//kH6f+//s1NL6/9z9384bmmy/wEAAKCD3P0fiVvsfwAAABhG7v6Pxi32PwAAAAwjd/+NcUuT/a//1//r//X/+v8T/wz1/2PQ/087mP7/mP5f/1/9/G3ifwv0//r/uV/PmJbW/+fu/1jc0mT/AwAAQAe5+z8et9j/AAAAMIzc/Z+IW+x/AAAAWKXLt/xc7v5Pxi1N9r/+X/+v/9f/6/+3f77+f530/9O8/z9D/3+e/fwdTvvR2t7/P/P/fun/9f/s3tL6/9z9n4pbmux/AAAA6CB3/6fjFvsfAAAAhpG7/zNxi/0PAAAAw8jd/9m4pcn+1//r//X/+n/9//bP1/+vk/5/mv5/hv7/UN/PX/vXr//X/7Pf0vr/3P2fi1ua7H8AAADoIHf/5+MW+x8AAACGkbv/C3GL/Q8AAADD2Nv9GZc13P/6f/2//l//r//f/vn6/3XS/0/T/8/Q/+v/9f/6f3Zqaf3/F/d+1dHNl+KWJvsfAAAAOsjd/+W4xf4HAACAYeTu/0rcYv8DAADAMHL3fzVuabL/9f/6/3X0/8ePH79a/6//P/33c7L/v0n/T9H/T9P/z9D/6//1//p/dmpp/X/u/q/FLU32PwAAAHSQu//rcYv9DwAAAMPI3f+NuMX+BwAAgGHk7v9m3NJk/+v/F9D/H9X/e/9f/7/x/r/+f0f0/9P0/zNG7P+Pnvtv/7D7+Yt12F+//l//z35L6/9z938rbmmy/wEAAKCD3P3fjlvsfwAAABhG7v7vxC32PwAAAAwjd/9345Ym+1//f3D9/61/77q8/39ss/3r1//r//X/+v9LTf8/Tf8/Y8T+/zwcdj+/9q9f/6//Z7+l9f+5+78XtzTZ/wAAANBB7v7vxy32PwAAAAwjd/8P4hb7HwAAAIaRu/+HcUuT/a//X8D7/wP2/97/3/79of9fdP9/mf5/DPr/afr/Gfp//b/+f0f9f3436/+7W1r/n7v/R3FLk/0PAAAAHeTu/3HcYv8DAADAMHL3/yRusf8BAABgGLn7b4pbTtn/29ruUej/9f/6f/2//n/75+v/10n/P+1c+/8jm4vr/5P+X/+v/+/a/3v/nxOW1v/n7v9p3OLf/wMAAMDqXHGWn8/d/7O4xf4HAACAYeTu/3ncYv8DAADAMHL3/yJuufmyw/qSDpT+X/+v/9f/6/+3f77+f530/9O8/z9D/7+Lfv5u+v8x+v/NRv/PxVta/5+7/5dxi3//DwAAAMPI3f+ruMX+BwAAgGHk7v913GL/AwAAwDBy9/8mbmmy//X/+v+L7P/30kz9/wn6/xP0/9vp/w+G/n+a/n+G/t/7//p/7/+zU0vr/3P3/zZuabL/AQAAoIPc/b+LW+x/AAAAGEbu/t/HLfY/AAAADCN3/x/ilib7/9D6//hbrf9fff/v/X/9v/5f/78o+v9p+v8Z+n/9v/5f/89OLa3/z93/x7ilyf4HAACADnL3/ylusf8BAABgGLn7/xy32P8AAAAwjNz9f4lbmux/7//r//X/+n/9//bP1/+vk/5/mv5/u/oHpf/X/+v/9f/s1NL6/9z9f41bmux/AAAA6CB3/9/iFvsfAAAAhpG7/+a4xf4HAACAYeTu/3vc0mT/6//1//p//b/+f/vn6//XSf8/7TD7/3vcbv5jvf9/6P1/fgn6f/2//p+dWFr/n7v/H3FLk/0PAAAAHeTu/2fcYv8DAADAMHL3/ytusf8BAABgGLn7/x23NNn/M/3/kfoP6v8n6f9P//r1/9u/P/T/+n/9/6Wn/5/m/f8Z+n/v/+v/9f/s1NL6/9z9/4lbmux/AAAA6CB3/y1xi/0PAAAAw8jd/9+4xf4HAACAYeTu/1/c0mT/e/9f/6//1//r/7d/vv5/nfT/0/T/M/T/+n/9v/6fnVpa/5+7//8BAAD//wkoXwM=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 306.285825ms ago: executing program 7 (id=2203): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000003c0)) 256.613966ms ago: executing program 6 (id=2204): unshare(0x26020480) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/sync_on_suspend', 0x381083, 0x0) shutdown(r0, 0x1) 0s ago: executing program 7 (id=2205): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) kernel console output (not intermixed with test programs): p6' '/dev/disk/by-diskseq/426.tmp-b7:6' failed: Read-only file system [ 218.522962][ T7667] loop6: detected capacity change from 0 to 2048 [ 218.535693][ T7613] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 218.548540][ T7613] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 218.601937][ T7667] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 218.624812][ T7613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.655467][ T7613] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 218.700973][ T7613] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 218.787058][ C1] sched: RT throttling activated [ 218.811838][ T7668] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.849739][ T7661] loop7: detected capacity change from 0 to 131072 [ 218.875774][ T7661] F2FS-fs (loop7): invalid crc value [ 218.881654][ T7661] F2FS-fs (loop7): invalid crc value [ 218.887003][ T7661] F2FS-fs (loop7): Failed to get valid F2FS checkpoint [ 219.124573][ T7673] loop4: detected capacity change from 0 to 512 [ 219.147405][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 219.209326][ T7673] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 219.252249][ T7673] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 219.295948][ T7673] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.427146][ T7673] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.1251: corrupted xattr block 19 [ 219.485953][ T7681] EXT4-fs error (device loop4): ext4_xattr_block_list:719: inode #15: comm syz.4.1251: corrupted xattr block 19 [ 219.706136][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 220.624056][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 220.645806][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.656502][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.666850][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.674040][ T4265] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.691934][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.699864][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.729704][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.816282][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.953355][ T7688] loop6: detected capacity change from 0 to 32768 [ 221.017847][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.022492][ T7688] JBD2: Ignoring recovery information on journal [ 221.143054][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.213230][ T7688] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 221.255858][ T7714] loop0: detected capacity change from 0 to 1024 [ 221.268827][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.477562][ T5685] (syz-executor,5685,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22 [ 221.534153][ T5685] ocfs2: Unmounting device (7,6) on (node local) [ 221.576212][ T33] hfsplus: b-tree write err: -5, ino 4 [ 221.854621][ T11] tipc: Left network mode [ 221.934126][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/439.tmp-b7:0' failed: Read-only file system [ 221.951341][ T7701] chnl_net:caif_netlink_parms(): no params data found [ 222.043847][ T4243] udevd[4243]: symlink '../../loop4' '/dev/disk/by-diskseq/435.tmp-b7:4' failed: Read-only file system [ 222.044269][ T4398] udevd[4398]: symlink '../../loop6' '/dev/disk/by-diskseq/440.tmp-b7:6' failed: Read-only file system [ 222.150463][ T4398] udevd[4398]: symlink '../../loop0' '/dev/disk/by-diskseq/439.tmp-b7:0' failed: Read-only file system [ 222.161677][ T7729] mkiss: ax0: crc mode is auto. [ 222.245517][ T4243] udevd[4243]: symlink '../../loop4' '/dev/disk/by-diskseq/435.tmp-b7:4' failed: Read-only file system [ 222.293773][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 222.367804][ T4243] udevd[4243]: symlink '../../loop4' '/dev/disk/by-diskseq/435.tmp-b7:4' failed: Read-only file system [ 222.423850][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.434562][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.449141][ T7701] device bridge_slave_0 entered promiscuous mode [ 222.478555][ T7739] loop4: detected capacity change from 0 to 512 [ 222.480101][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/440.tmp-b7:6' failed: Read-only file system [ 222.584687][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.596838][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.604649][ T7739] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.631256][ T7701] device bridge_slave_1 entered promiscuous mode [ 222.639966][ T4398] udevd[4398]: symlink '../../loop4' '/dev/disk/by-diskseq/441.tmp-b7:4' failed: Read-only file system [ 222.654406][ T7739] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.674521][ T4398] udevd[4398]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 222.744762][ T7732] loop0: detected capacity change from 0 to 32768 [ 222.751500][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 222.751590][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 222.834364][ T4243] udevd[4243]: symlink '../../loop4' '/dev/disk/by-diskseq/441.tmp-b7:4' failed: Read-only file system [ 222.866691][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 222.878751][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.926755][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.139342][ T7701] team0: Port device team_slave_0 added [ 223.178650][ T7701] team0: Port device team_slave_1 added [ 223.200435][ T7751] random: crng reseeded on system resumption [ 223.380505][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.399869][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.466203][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.695078][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.733534][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.807297][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.130216][ T7749] loop0: detected capacity change from 0 to 40427 [ 224.164891][ T7749] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 224.180055][ T11] device hsr_slave_0 left promiscuous mode [ 224.190358][ T11] device hsr_slave_1 left promiscuous mode [ 224.196295][ T7749] F2FS-fs (loop0): invalid crc value [ 224.204123][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.220240][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.236103][ T7749] F2FS-fs (loop0): Found nat_bits in checkpoint [ 224.259037][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.296850][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.305599][ T11] device bridge_slave_1 left promiscuous mode [ 224.312177][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.321451][ T11] device bridge_slave_0 left promiscuous mode [ 224.329728][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.367439][ T7749] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 224.390454][ T11] device veth1_macvtap left promiscuous mode [ 224.396553][ T11] device veth0_macvtap left promiscuous mode [ 224.417910][ T11] device veth1_vlan left promiscuous mode [ 224.433374][ T11] device veth0_vlan left promiscuous mode [ 224.440095][ T27] audit: type=1800 audit(1749081050.242:16): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1281" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 224.502000][ T7749] F2FS-fs (loop0) : inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9ca/0x1980 [ 224.539596][ T7749] syz.0.1281: attempt to access beyond end of device [ 224.539596][ T7749] loop0: rw=2049, sector=77824, nr_sectors = 816 limit=40427 [ 224.620774][ T7758] loop7: detected capacity change from 0 to 32768 [ 224.628952][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1289'. [ 224.670934][ T7758] [ 224.670934][ T7758] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 224.670934][ T7758] [ 224.719286][ T4261] syz-executor: attempt to access beyond end of device [ 224.719286][ T4261] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.784820][ T7758] ERROR: (device loop7): diWrite: ixpxd invalid [ 224.784820][ T7758] [ 224.827201][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 224.827245][ T4262] Bluetooth: hci3: command 0x0411 tx timeout [ 224.922786][ T7771] loop4: detected capacity change from 0 to 512 [ 224.934504][ T7758] ERROR: (device loop7): txCommit: [ 224.934504][ T7758] [ 225.025673][ T7771] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1291: iget: bad extended attribute block 1 [ 225.050570][ T7771] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1291: couldn't read orphan inode 15 (err -117) [ 225.089430][ T6280] [ 225.089430][ T6280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.089430][ T6280] [ 225.150039][ T7771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 225.170632][ T6280] [ 225.170632][ T6280] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 225.170632][ T6280] [ 225.260662][ T11] bond1 (unregistering): Released all slaves [ 225.356703][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 225.604876][ T7778] loop6: detected capacity change from 0 to 8192 [ 225.657256][ T7778] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 225.687168][ T7778] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 225.721695][ T7778] REISERFS (device loop6): using writeback data mode [ 225.763185][ T7778] reiserfs: using flush barriers [ 225.811768][ T7778] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 225.897549][ T7778] REISERFS (device loop6): checking transaction log (loop6) [ 225.916383][ T7778] REISERFS (device loop6): Using r5 hash to sort names [ 226.421203][ T7780] loop4: detected capacity change from 0 to 32768 [ 226.521236][ T27] audit: type=1800 audit(1749081052.322:17): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1295" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 226.523974][ T7780] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 226.523974][ T7780] [ 226.645486][ T7780] ERROR: (device loop4): remounting filesystem as read-only [ 226.668838][ T7780] ERROR: (device loop4): diWrite: ixpxd invalid [ 226.668838][ T7780] [ 226.677924][ T7780] ERROR: (device loop4): txCommit: [ 226.677924][ T7780] [ 226.784458][ T7789] Falling back ldisc for pty34. [ 226.907133][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 226.951130][ T4243] udevd[4243]: symlink '../../loop7' '/dev/disk/by-diskseq/449.tmp-b7:7' failed: Read-only file system [ 227.022055][ T7796] loop6: detected capacity change from 0 to 32768 [ 227.027491][ T11] team0 (unregistering): Port device team_slave_1 removed [ 227.062813][ T7800] loop7: detected capacity change from 0 to 256 [ 227.074869][ T7796] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1300 (7796) [ 227.085808][ T7800] exfat: Deprecated parameter 'namecase' [ 227.123315][ T7800] exfat: Deprecated parameter 'namecase' [ 227.132300][ T7796] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.174106][ T7800] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 227.178424][ T7796] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 227.220629][ T4398] udevd[4398]: symlink '../../loop7' '/dev/disk/by-diskseq/456.tmp-b7:7' failed: Read-only file system [ 227.248543][ T4258] udevd[4258]: symlink '../../loop4' '/dev/disk/by-diskseq/454.tmp-b7:4' failed: Read-only file system [ 227.283370][ T7796] BTRFS info (device loop6): disabling tree log [ 227.285070][ T4398] udevd[4398]: symlink '../../loop7' '/dev/disk/by-uuid/1234-1234.tmp-b7:7' failed: Read-only file system [ 227.308338][ T11] team0 (unregistering): Port device team_slave_0 removed [ 227.315652][ T7796] BTRFS info (device loop6): using free space tree [ 227.394056][ T4398] udevd[4398]: symlink '../../loop7' '/dev/disk/by-diskseq/456.tmp-b7:7' failed: Read-only file system [ 227.414646][ T4398] udevd[4398]: symlink '../../loop7' '/dev/disk/by-diskseq/456.tmp-b7:7' failed: Read-only file system [ 227.464837][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/455.tmp-b7:6' failed: Read-only file system [ 227.500477][ T7796] BTRFS info (device loop6): enabling ssd optimizations [ 227.524101][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.535506][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:6' failed: Read-only file system [ 227.671462][ T7821] loop7: detected capacity change from 0 to 4096 [ 227.687242][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.804461][ T5685] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.839539][ T7821] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 227.886897][ T7821] ntfs3: loop7: ino=1b, "file0" directory corrupted [ 228.115397][ T4398] udevd[4398]: symlink '../../loop7' '/dev/disk/by-diskseq/458.tmp-b7:7' failed: Read-only file system [ 228.149122][ T4398] udevd[4398]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 228.167242][ T6280] ntfs3: loop7: ntfs_sync_fs r=9 failed, -22. [ 228.184659][ T6280] ntfs3: loop7: ntfs_evict_inode r=9 failed, -22. [ 228.494829][ T7803] loop4: detected capacity change from 0 to 32768 [ 228.566884][ T7803] [ 228.566884][ T7803] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.566884][ T7803] [ 228.636054][ T27] audit: type=1800 audit(1749081054.432:18): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1301" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 228.685554][ T7803] [ 228.685554][ T7803] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.685554][ T7803] [ 228.719726][ T7803] [ 228.719726][ T7803] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.719726][ T7803] [ 228.782214][ T7803] [ 228.782214][ T7803] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.782214][ T7803] [ 228.804097][ T7803] [ 228.804097][ T7803] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.804097][ T7803] [ 228.987203][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 229.012542][ T4255] [ 229.012542][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.012542][ T4255] [ 229.024271][ T11] team0 (unregistering): Port device dummy0 removed [ 229.038719][ T4255] [ 229.038719][ T4255] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 229.038719][ T4255] [ 229.271709][ T7842] [U] [Œæîç°ÿƒ Ö£íH>ï¡W)’B¸Y9N“!^÷ÇÁT%b²sÒî¬à1ÜïÝáçg:—ñK"­ÿÆGÝyÝ>2­mv·8hö;¨5)-ã [ 229.282522][ T7842] [U] oi?òW§x¶Ú4M³÷kï1‡²ªÆK›BJ¹ä ÂÂò&ƒ¥Ô[,㩉I­j?3 32çðÍt¾ [ 229.290703][ T7842] [U] œ†o&ÚÝŒñøL3N±°7SE8(¡ý«í!`¨&ñE°Þ»qNÛÇÆ·¯ [ 229.297600][ T7842] [U] ·¨¬hõ½A‚Ù=' Sj [ 229.301512][ T7842] [U] ™ „þ<_¹Ý™Ñß@’–c Õª×éß9^Ãý³€ŽA²‰É&w8¶vîš:vW VPñÉ^;¾§œ%’ãϲþÛ}ŠýÖˆÐ~4ýxiìShj«q7Ï [ 229.312911][ T7842] [U] Þÿ•÷³ž÷Üó©9œ·˜XÔ‘#´Y9úvXÝû1Ù;j}mJÕ/3¡Uhd«ÈR?BñZåÖž¸ÞSÿ9_pPø´C¢iG¡Ö)„Ü‚´ØÔ]!aŸ¦@ðXÎCRf›ÌÀn%(ŠŠ¼ÜŽ<ùV¸%íäټ©!FöHkxÒ˜Jþ öqû¨’qÖšëªVbzzpX [ 229.328741][ T7842] [U] w#qÂØâ±­'öžN%»î­^ˆÈd£zäƒb¾ãû•ߟÑMô5aÒ”y3áã¢HñÒ‰×EÖÕý­Ý½LZÇ$O”ZcBƒîÒ‚ [ 229.338142][ T7842] [U] ¼v‡‚‰nëÔ´}¨²&…Wãk!t¹å~“ÁÏH,ñzœ‰}ƒo,§šÑÄ0l °å\¦»wZ6±éM|/ŦOñ”„[¼…Q¬ ±(Ûjïô¤N@Ç(ïßN„³’iS:̆ƒO;ç¨u! UYÉžÙŠÐÅŸ8"k8á×BeÏ$~áùK­N ⢠[ 229.353186][ T7842] [U] ÏJµC2Dg]*ÿ±¢.H&Œñ\a¤ 9v¾Wøÿó…²5Tç@ˆÛ]zC¸Q“1eÞЗ]@tÊœ/2£ÒoON…¹’ [ 229.362304][ T7842] [U] Ö›È/^¾5sÅN§£íÁömyD¾ài%Ú ‡ÉZjÆ©ÁRµôÛ@LïdŒ_=ä-Fà€ P;M4±skv²Hi赎n~¼„â©…$IæÀâ˜ãµ c|Òý3jˆ6ùìX· [ 229.374461][ T7842] [U] µŽì~ܼAJ͘‚…[ºKã^ j¸¬<“=ÑvqŠXÛIËJˆõjdæýYšw?gYÙÀ׊° ½4C" [ 229.382530][ T7842] [U] ÛQÒhˆeÑMq[¸D(Ÿ¡he·yqYoºÜò1Nîrþä‡N‡¨˜"¨‹ [ 229.422688][ T7841] [U] ëÖ¬¹Õ›¡÷¾:MÖ1ÄðîŒÐQެà¿, Ýã0Óeœîð.VüÏñ¤ñhÑ(ÀŸh±äÌË'^êšwhtöYÏ8 gߌö,r𑘒QU¹G;6Ý*o€•Õ‚¡BŠ+Äìªèì]±‘A;8Ý8­dH>à‚þƒÇ»OßKQ– [ 229.564124][ T7836] loop6: detected capacity change from 0 to 32768 [ 229.589151][ T7845] ptrace attach of "./syz-executor exec"[6280] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 229.596740][ T7836] XFS: ikeep mount option is deprecated. [ 229.794003][ T7836] XFS (loop6): Mounting V5 Filesystem [ 229.869937][ T7836] XFS (loop6): Ending clean mount [ 229.905116][ T7836] XFS (loop6): Quotacheck needed: Please wait. [ 229.981618][ T7836] XFS (loop6): Quotacheck: Done. [ 230.151260][ T5685] XFS (loop6): Unmounting Filesystem [ 230.227712][ T7861] loop7: detected capacity change from 0 to 1024 [ 230.255387][ T7861] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 230.358602][ T11] bond0 (unregistering): Released all slaves [ 230.568287][ T7701] device hsr_slave_0 entered promiscuous mode [ 230.591712][ T7701] device hsr_slave_1 entered promiscuous mode [ 230.603077][ T7701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.613455][ T7701] Cannot create hsr debugfs directory [ 230.852751][ T27] audit: type=1326 audit(1749081056.652:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecb8e929 code=0x7ffc0000 [ 230.902439][ T27] audit: type=1326 audit(1749081056.652:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecb8e929 code=0x7ffc0000 [ 231.054014][ T27] audit: type=1326 audit(1749081056.712:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58ecb8e929 code=0x7ffc0000 [ 231.144146][ T27] audit: type=1326 audit(1749081056.712:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecb8e929 code=0x7ffc0000 [ 231.215585][ T27] audit: type=1326 audit(1749081056.712:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecb8e929 code=0x7ffc0000 [ 231.294810][ T7701] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 231.323846][ T27] audit: type=1326 audit(1749081056.722:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f58ecb8e929 code=0x7ffc0000 [ 231.370741][ T7883] loop6: detected capacity change from 0 to 256 [ 231.377310][ T27] audit: type=1326 audit(1749081056.722:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecb8e929 code=0x7ffc0000 [ 231.407964][ T7701] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 231.426529][ T7883] exfat: Deprecated parameter 'utf8' [ 231.436202][ T7701] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 231.448311][ T7883] exfat: Deprecated parameter 'utf8' [ 231.454239][ T7883] exfat: Deprecated parameter 'utf8' [ 231.495565][ T7883] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 231.510213][ T7701] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 231.532514][ T27] audit: type=1326 audit(1749081056.722:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ecb8e929 code=0x7ffc0000 [ 231.677972][ T27] audit: type=1326 audit(1749081056.942:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.7.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827d58e929 code=0x7ffc0000 [ 231.804530][ T27] audit: type=1326 audit(1749081056.962:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.7.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f827d58e929 code=0x7ffc0000 [ 231.863182][ T7701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.904755][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.931464][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.983164][ T7892] sp0: Synchronizing with TNC [ 231.986312][ T7701] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.994429][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/467.tmp-b7:6' failed: Read-only file system [ 232.016730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.030003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.040376][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.047548][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.085739][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/467.tmp-b7:6' failed: Read-only file system [ 232.132751][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/467.tmp-b7:6' failed: Read-only file system [ 232.144163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.154351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.173751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.197500][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.204702][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.238143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.253851][ T4243] udevd[4243]: symlink '../../loop4' '/dev/disk/by-diskseq/462.tmp-b7:4' failed: Read-only file system [ 232.271584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.292160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.326786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.345221][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/468.tmp-b7:6' failed: Read-only file system [ 232.366325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.392240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.427883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.458267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.487326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.496955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.513259][ T7901] loop4: detected capacity change from 0 to 8192 [ 232.537991][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.541283][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/468.tmp-b7:6' failed: Read-only file system [ 232.568042][ T7901] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 232.604094][ T7701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.609946][ T7901] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 232.632048][ T7901] REISERFS (device loop4): using ordered data mode [ 232.649930][ T7901] reiserfs: using flush barriers [ 232.690447][ T7901] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 232.767614][ T7901] REISERFS (device loop4): checking transaction log (loop4) [ 232.792653][ T7901] REISERFS (device loop4): Using rupasov hash to sort names [ 232.818013][ T7901] REISERFS (device loop4): using 3.5.x disk format [ 232.851852][ T7901] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 232.859806][ T4398] udevd[4398]: symlink '../../loop6' '/dev/disk/by-diskseq/468.tmp-b7:6' failed: Read-only file system [ 232.915410][ T7901] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 232.957408][ T7901] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 232.987382][ T7901] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 233.026148][ T4398] udevd[4398]: symlink '../../loop0' '/dev/disk/by-diskseq/448.tmp-b7:0' failed: Read-only file system [ 233.065306][ T4243] udevd[4243]: symlink '../../loop4' '/dev/disk/by-diskseq/469.tmp-b7:4' failed: Read-only file system [ 233.099089][ T4243] udevd[4243]: symlink '../../loop4' '/dev/disk/by-label/\x05yzk.tmp-b7:4' failed: Read-only file system [ 233.344919][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1344'. [ 233.556478][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.572453][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.603319][ T7701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.751789][ T7931] loop0: detected capacity change from 0 to 1024 [ 233.782965][ T7933] loop4: detected capacity change from 0 to 512 [ 233.800332][ T7931] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.864863][ T7931] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.866357][ T7933] EXT4-fs (loop4): Test dummy encryption mode enabled [ 233.893205][ T7931] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2748: inode #2: comm syz.0.1349: corrupted in-inode xattr [ 233.934540][ T7933] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1350: invalid indirect mapped block 2185560079 (level 0) [ 233.977857][ T7931] EXT4-fs (loop0): Remounting filesystem read-only [ 234.036513][ T7933] EXT4-fs (loop4): Remounting filesystem read-only [ 234.081620][ T7933] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1350: invalid indirect mapped block 2683928664 (level 1) [ 234.148603][ T7933] EXT4-fs (loop4): Remounting filesystem read-only [ 234.165523][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 234.167640][ T7933] EXT4-fs (loop4): 1 truncate cleaned up [ 234.178049][ T7933] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 234.386466][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 234.706232][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 234.754051][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 234.787276][ T5879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 234.822182][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 234.838665][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.863839][ T7701] device veth0_vlan entered promiscuous mode [ 234.876883][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.898157][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.932136][ T7701] device veth1_vlan entered promiscuous mode [ 234.983273][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 234.991747][ T5879] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 235.016784][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.023742][ T7701] device veth0_macvtap entered promiscuous mode [ 235.046324][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.066244][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.075259][ T5879] usb 5-1: config 0 descriptor?? [ 235.086943][ T5879] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 235.101918][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.129916][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.170670][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.192588][ T7701] device veth1_macvtap entered promiscuous mode [ 235.250885][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.292263][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.332938][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.369706][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.369733][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.369751][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.369767][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.369782][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.371465][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.372531][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.373550][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.539571][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.551722][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.583357][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.611240][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.645269][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.675734][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.698263][ T5878] usb 5-1: USB disconnect, device number 8 [ 235.704704][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.716089][ T7962] loop0: detected capacity change from 0 to 32768 [ 235.734459][ T7701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.756307][ T7962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1359 (7962) [ 235.773553][ T7701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.796938][ T7701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.815910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 235.832976][ T7962] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.836367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.860229][ T7962] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 235.884494][ T7701] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.897477][ T7701] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.916942][ T7962] BTRFS info (device loop0): turning on async discard [ 235.924075][ T7701] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.925210][ T7962] BTRFS info (device loop0): using free space tree [ 235.946262][ T7701] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.127354][ T4593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.135590][ T4593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.178402][ T8003] loop6: detected capacity change from 0 to 512 [ 236.190821][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 236.208972][ T7962] BTRFS info (device loop0): enabling ssd optimizations [ 236.286587][ T8003] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #12: comm syz.6.1369: inline data xattr refers to an external xattr inode [ 236.402668][ T8003] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1369: couldn't read orphan inode 12 (err -117) [ 236.405926][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.428285][ T8003] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 236.472824][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.496982][ T4261] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.508804][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 236.519509][ T8003] EXT4-fs error (device loop6): htree_dirblock_to_tree:1083: inode #2: comm syz.6.1369: Directory hole found for htree leaf block 0 [ 236.829944][ T5685] EXT4-fs (loop6): unmounting filesystem. [ 237.190924][ T4243] udevd[4243]: symlink '../../loop4' '/dev/disk/by-diskseq/474.tmp-b7:4' failed: Read-only file system [ 237.398602][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/475.tmp-b7:0' failed: Read-only file system [ 237.457873][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/475.tmp-b7:0' failed: Read-only file system [ 237.552303][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/478.tmp-b7:0' failed: Read-only file system [ 237.566725][ T4398] udevd[4398]: symlink '../../loop4' '/dev/disk/by-diskseq/474.tmp-b7:4' failed: Read-only file system [ 237.797291][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/478.tmp-b7:0' failed: Read-only file system [ 237.833429][ T4398] udevd[4398]: symlink '../../loop4' '/dev/disk/by-diskseq/474.tmp-b7:4' failed: Read-only file system [ 237.933455][ T8023] loop7: detected capacity change from 0 to 32768 [ 237.965045][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/478.tmp-b7:0' failed: Read-only file system [ 238.063810][ T4398] udevd[4398]: symlink '../../loop4' '/dev/disk/by-diskseq/474.tmp-b7:4' failed: Read-only file system [ 238.121301][ T8023] XFS (loop7): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 238.172448][ T4258] udevd[4258]: symlink '../../loop0' '/dev/disk/by-diskseq/478.tmp-b7:0' failed: Read-only file system [ 238.425501][ T6280] XFS (loop7): Unmounting Filesystem [ 238.455989][ T8024] loop6: detected capacity change from 0 to 40427 [ 238.509515][ T8024] F2FS-fs (loop6): Invalid log blocks per segment (83886089) [ 238.546702][ T8024] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 238.605324][ T8024] F2FS-fs (loop6): invalid crc value [ 238.626372][ T8024] F2FS-fs (loop6): Found nat_bits in checkpoint [ 238.823226][ T8024] F2FS-fs (loop6): Start checkpoint disabled! [ 238.884147][ T8024] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 238.897310][ T8024] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 239.128554][ T8024] ceph: Unexpected value for 'acl' [ 239.140011][ T8076] loop8: detected capacity change from 0 to 1024 [ 239.251582][ T8076] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 239.423524][ T7701] EXT4-fs (loop8): unmounting filesystem. [ 239.430055][ T9] kworker/u4:0: attempt to access beyond end of device [ 239.430055][ T9] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 239.850620][ T8060] loop4: detected capacity change from 0 to 40427 [ 239.892922][ T8060] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 239.933372][ T8060] F2FS-fs (loop4): invalid crc value [ 240.003648][ T8060] F2FS-fs (loop4): Found nat_bits in checkpoint [ 240.157409][ T8098] loop8: detected capacity change from 0 to 8192 [ 240.191549][ T8060] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 240.220148][ T8098] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.322727][ T8098] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 240.333261][ T8098] REISERFS (device loop8): using ordered data mode [ 240.339992][ T8098] reiserfs: using flush barriers [ 240.346487][ T8098] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.366352][ T8098] REISERFS (device loop8): checking transaction log (loop8) [ 240.485685][ T4255] syz-executor: attempt to access beyond end of device [ 240.485685][ T4255] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 240.559495][ T8098] REISERFS (device loop8): Using tea hash to sort names [ 240.580000][ T8098] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 240.720729][ T8114] loop7: detected capacity change from 0 to 64 [ 240.754460][ T8114] hfs: unable to locate alternate MDB [ 240.775888][ T8114] hfs: continuing without an alternate MDB [ 241.191397][ T8096] loop0: detected capacity change from 0 to 32768 [ 241.350484][ T8096] XFS (loop0): Mounting V5 Filesystem [ 241.518268][ T8096] XFS (loop0): Ending clean mount [ 241.665586][ T4261] XFS (loop0): Unmounting Filesystem [ 242.020007][ T8133] loop6: detected capacity change from 0 to 4096 [ 242.064565][ T8133] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 242.273033][ T8116] loop8: detected capacity change from 0 to 32768 [ 242.426808][ T8116] XFS (loop8): Mounting V5 Filesystem [ 242.466984][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/490.tmp-b7:0' failed: Read-only file system [ 242.556831][ T4398] udevd[4398]: symlink '../../loop6' '/dev/disk/by-diskseq/492.tmp-b7:6' failed: Read-only file system [ 242.627893][ T8151] loop0: detected capacity change from 0 to 256 [ 242.629496][ T8116] XFS (loop8): Ending clean mount [ 242.668836][ T4398] udevd[4398]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 242.673518][ T8116] XFS (loop8): Quotacheck needed: Please wait. [ 242.752351][ T4398] udevd[4398]: symlink '../../loop6' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:6' failed: Read-only file system [ 242.786308][ T8116] XFS (loop8): Quotacheck: Done. [ 242.857684][ T8137] loop4: detected capacity change from 0 to 40427 [ 242.893178][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/490.tmp-b7:0' failed: Read-only file system [ 242.913087][ T4398] udevd[4398]: symlink '../../loop6' '/dev/disk/by-diskseq/492.tmp-b7:6' failed: Read-only file system [ 242.957203][ T4258] udevd[4258]: symlink '../../loop8' '/dev/disk/by-diskseq/494.tmp-b7:8' failed: Read-only file system [ 242.990901][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/493.tmp-b7:0' failed: Read-only file system [ 243.010921][ T4398] udevd[4398]: symlink '../../loop6' '/dev/disk/by-diskseq/492.tmp-b7:6' failed: Read-only file system [ 243.018311][ T4258] udevd[4258]: symlink '../../loop8' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:8' failed: Read-only file system [ 243.038771][ T8137] F2FS-fs (loop4): Found nat_bits in checkpoint [ 243.079879][ T7701] XFS (loop8): Unmounting Filesystem [ 243.205160][ T8137] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 243.535329][ T8165] loop8: detected capacity change from 0 to 16 [ 243.564454][ T8165] erofs: (device loop8): mounted with root inode @ nid 36. [ 243.980553][ T8176] loop6: detected capacity change from 0 to 64 [ 244.206657][ T4262] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 244.246753][ T8182] loop4: detected capacity change from 0 to 64 [ 244.905266][ T8196] loop6: detected capacity change from 0 to 2048 [ 245.702939][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1454'. [ 246.142604][ T8244] netlink: 'syz.0.1465': attribute type 18 has an invalid length. [ 246.146526][ T8243] loop8: detected capacity change from 0 to 512 [ 246.240139][ T8243] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 246.304266][ T8243] EXT4-fs (loop8): orphan cleanup on readonly fs [ 246.325956][ T8243] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:511: comm syz.8.1464: Block bitmap for bg 0 marked uninitialized [ 246.462799][ T8243] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 246.480227][ T8243] EXT4-fs (loop8): 1 orphan inode deleted [ 246.493718][ T8243] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 246.598330][ T8243] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 246.674278][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1472'. [ 246.694218][ T8243] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 246.816366][ T7701] EXT4-fs (loop8): unmounting filesystem. [ 246.961152][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 246.990706][ T8272] loop8: detected capacity change from 0 to 128 [ 247.022062][ T8262] loop7: detected capacity change from 0 to 4096 [ 247.065640][ T8262] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 247.480003][ T4243] udevd[4243]: symlink '../../loop8' '/dev/disk/by-diskseq/513.tmp-b7:8' failed: Read-only file system [ 247.564406][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/508.tmp-b7:6' failed: Read-only file system [ 247.586137][ T4258] udevd[4258]: symlink '../../loop4' '/dev/disk/by-diskseq/506.tmp-b7:4' failed: Read-only file system [ 247.618152][ T8288] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1484'. [ 247.653451][ T4398] udevd[4398]: symlink '../../loop7' '/dev/disk/by-diskseq/512.tmp-b7:7' failed: Read-only file system [ 247.676682][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/498.tmp-b7:0' failed: Read-only file system [ 247.718782][ T4398] udevd[4398]: symlink '../../loop7' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:7' failed: Read-only file system [ 247.761628][ T4243] udevd[4243]: symlink '../../loop8' '/dev/disk/by-diskseq/513.tmp-b7:8' failed: Read-only file system [ 247.853697][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/508.tmp-b7:6' failed: Read-only file system [ 247.887569][ T4258] udevd[4258]: symlink '../../loop4' '/dev/disk/by-diskseq/506.tmp-b7:4' failed: Read-only file system [ 247.919200][ T4398] udevd[4398]: symlink '../../loop7' '/dev/disk/by-diskseq/512.tmp-b7:7' failed: Read-only file system [ 247.944108][ T8299] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1492'. [ 247.977977][ T8299] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 248.065861][ T8302] loop0: detected capacity change from 0 to 2048 [ 248.114922][ T8302] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 248.183313][ T8302] syz.0.1493: attempt to access beyond end of device [ 248.183313][ T8302] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 248.198577][ T8308] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.291869][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1497'. [ 249.272843][ T8324] loop6: detected capacity change from 0 to 65536 [ 249.359152][ T8324] XFS (loop6): Mounting V5 Filesystem [ 249.512707][ T8324] XFS (loop6): Internal error !xlog_verify_bno(log, 0, nbblks) at line 81 of file fs/xfs/xfs_log_recover.c. Caller xlog_alloc_buffer+0x118/0x1f0 [ 249.527982][ T8324] CPU: 1 PID: 8324 Comm: syz.6.1502 Not tainted 6.1.141-syzkaller #0 [ 249.536097][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.546231][ T8324] Call Trace: [ 249.549624][ T8324] [ 249.552586][ T8324] dump_stack_lvl+0x168/0x22e [ 249.557325][ T8324] ? show_regs_print_info+0x12/0x12 [ 249.562578][ T8324] ? __mod_lruvec_page_state+0xa1/0x410 [ 249.568184][ T8324] ? __phys_addr+0xb6/0x170 [ 249.572750][ T8324] ? __kasan_kmalloc_large+0x8b/0xd0 [ 249.578087][ T8324] xfs_corruption_error+0x11e/0x170 [ 249.583320][ T8324] ? xlog_alloc_buffer+0x118/0x1f0 [ 249.588474][ T8324] xlog_alloc_buffer+0x155/0x1f0 [ 249.593446][ T8324] ? xlog_alloc_buffer+0x118/0x1f0 [ 249.598605][ T8324] xlog_do_recovery_pass+0x194/0xc50 [ 249.603941][ T8324] ? xlog_do_io+0x350/0x350 [ 249.608487][ T8324] ? xlog_verify_head+0xf3/0x440 [ 249.613442][ T8324] ? __kmem_cache_free+0xb6/0x1f0 [ 249.618486][ T8324] xlog_verify_head+0x137/0x440 [ 249.623553][ T8324] xlog_find_tail+0x6c4/0xa00 [ 249.628256][ T8324] xlog_recover+0x48/0x450 [ 249.632688][ T8324] xfs_log_mount+0x2ba/0x460 [ 249.637289][ T8324] xfs_mountfs+0xc42/0x1d10 [ 249.641803][ T8324] ? lockdep_softirqs_off+0x420/0x420 [ 249.647197][ T8324] ? xfs_default_resblks+0x70/0x70 [ 249.652355][ T8324] ? init_timer_key+0x178/0x320 [ 249.657232][ T8324] ? rcu_is_watching+0x11/0xa0 [ 249.662021][ T8324] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 249.668284][ T8324] xfs_fs_fill_super+0x10f0/0x1350 [ 249.673419][ T8324] get_tree_bdev+0x3f1/0x610 [ 249.678022][ T8324] ? xfs_fs_warn_deprecated+0x190/0x190 [ 249.683584][ T8324] vfs_get_tree+0x88/0x270 [ 249.688013][ T8324] do_new_mount+0x24a/0xa40 [ 249.692535][ T8324] __se_sys_mount+0x2d6/0x3c0 [ 249.697261][ T8324] ? __x64_sys_mount+0xc0/0xc0 [ 249.702053][ T8324] ? lockdep_hardirqs_on+0x94/0x140 [ 249.707267][ T8324] ? __x64_sys_mount+0x1c/0xc0 [ 249.712053][ T8324] do_syscall_64+0x4c/0xa0 [ 249.716485][ T8324] ? clear_bhb_loop+0x60/0xb0 [ 249.721164][ T8324] ? clear_bhb_loop+0x60/0xb0 [ 249.725849][ T8324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.731758][ T8324] RIP: 0033:0x7f44c31900ca [ 249.736190][ T8324] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.755806][ T8324] RSP: 002b:00007f44c2ffee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 249.764230][ T8324] RAX: ffffffffffffffda RBX: 00007f44c2ffeef0 RCX: 00007f44c31900ca [ 249.772212][ T8324] RDX: 0000200000000800 RSI: 0000200000000000 RDI: 00007f44c2ffeeb0 [ 249.780188][ T8324] RBP: 0000200000000800 R08: 00007f44c2ffeef0 R09: 0000000003000010 [ 249.788170][ T8324] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000000 [ 249.796159][ T8324] R13: 00007f44c2ffeeb0 R14: 000000000000b967 R15: 00002000000002c0 [ 249.804149][ T8324] [ 249.808273][ T8324] XFS (loop6): Corruption detected. Unmount and run xfs_repair [ 249.815860][ T8324] XFS (loop6): Invalid block length (0x20040) for buffer [ 249.823698][ T8324] XFS (loop6): failed to locate log tail [ 249.829696][ T8324] XFS (loop6): log mount/recovery failed: error -12 [ 249.846263][ T8346] loop4: detected capacity change from 0 to 512 [ 249.878739][ T8324] XFS (loop6): log mount failed [ 249.975779][ T8346] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 250.072584][ T8346] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.1510: Unimplemented hash flags: 0x0001 [ 250.167668][ T8346] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1510: Corrupt directory, running e2fsck is recommended [ 250.197592][ T8346] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1510: path /299/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 250.236528][ T8329] loop0: detected capacity change from 0 to 32768 [ 250.501815][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 250.805833][ T8333] loop7: detected capacity change from 0 to 32768 [ 250.861229][ T8333] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1507 (8333) [ 250.924331][ T8333] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 250.978251][ T8333] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 251.002002][ T8333] BTRFS info (device loop7): setting nodatacow, compression disabled [ 251.041250][ T8333] BTRFS info (device loop7): setting datacow [ 251.084447][ T8333] BTRFS info (device loop7): doing ref verification [ 251.127291][ T8333] BTRFS info (device loop7): force clearing of disk cache [ 251.135051][ T8333] BTRFS info (device loop7): turning off barriers [ 251.188221][ T8333] BTRFS info (device loop7): enabling ssd optimizations [ 251.195238][ T8333] BTRFS info (device loop7): using spread ssd allocation scheme [ 251.222079][ T8373] CUSE: DEVNAME unspecified [ 251.270494][ T8333] BTRFS info (device loop7): using free space tree [ 251.283459][ T8366] loop8: detected capacity change from 0 to 4096 [ 251.381371][ T8333] BTRFS info (device loop7): rebuilding free space tree [ 251.669234][ T6280] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.950339][ T8399] loop8: detected capacity change from 0 to 4096 [ 252.024648][ T8399] __ntfs_error: 5 callbacks suppressed [ 252.024666][ T8399] ntfs: (device loop8): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 252.024687][ T8399] ntfs: (device loop8): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 252.025032][ T8399] ntfs: (device loop8): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 252.025107][ T8399] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 252.025242][ T8399] ntfs: (device loop8): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 252.026709][ T8399] ntfs: volume version 3.1. [ 252.089235][ T8399] ntfs: (device loop8): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 252.089268][ T8399] ntfs: (device loop8): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 252.089286][ T8399] ntfs: (device loop8): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 252.095342][ T8399] ntfs: (device loop8): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 252.502854][ T4398] udevd[4398]: symlink '../../loop8' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:8' failed: Read-only file system [ 252.543818][ T4258] udevd[4258]: symlink '../../loop4' '/dev/disk/by-diskseq/521.tmp-b7:4' failed: Read-only file system [ 252.585265][ T4243] udevd[4243]: symlink '../../loop7' '/dev/disk/by-diskseq/522.tmp-b7:7' failed: Read-only file system [ 252.624125][ T4398] udevd[4398]: symlink '../../loop6' '/dev/disk/by-diskseq/519.tmp-b7:6' failed: Read-only file system [ 252.636658][ T4243] udevd[4243]: symlink '../../loop7' '/dev/disk/by-diskseq/522.tmp-b7:7' failed: Read-only file system [ 252.667598][ T8399] ntfs: (device loop8): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 252.695633][ T8417] loop4: detected capacity change from 0 to 512 [ 252.695924][ T4398] udevd[4398]: symlink '../../loop0' '/dev/disk/by-diskseq/523.tmp-b7:0' failed: Read-only file system [ 252.721641][ T4243] udevd[4243]: symlink '../../loop7' '/dev/disk/by-diskseq/527.tmp-b7:7' failed: Read-only file system [ 252.791227][ T8417] EXT4-fs: Ignoring removed nobh option [ 252.881731][ T8417] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1534: corrupted in-inode xattr [ 252.919209][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/523.tmp-b7:0' failed: Read-only file system [ 252.945180][ T4494] udevd[4494]: symlink '../../loop4' '/dev/disk/by-diskseq/528.tmp-b7:4' failed: Read-only file system [ 253.002075][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/519.tmp-b7:6' failed: Read-only file system [ 253.027609][ T8417] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1534: couldn't read orphan inode 15 (err -117) [ 253.117799][ T8417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 253.320454][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 254.064432][ T8450] sg_write: process 71 (syz.8.1546) changed security contexts after opening file descriptor, this is not allowed. [ 254.198776][ T8430] loop0: detected capacity change from 0 to 40427 [ 254.252766][ T8430] F2FS-fs (loop0): invalid crc value [ 254.288860][ T8430] F2FS-fs (loop0): Found nat_bits in checkpoint [ 254.366900][ T8446] loop6: detected capacity change from 0 to 32768 [ 254.505716][ T8446] XFS (loop6): Mounting V5 Filesystem [ 254.532138][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1549'. [ 254.536225][ T8430] F2FS-fs (loop0): Start checkpoint disabled! [ 254.552617][ T8462] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1549'. [ 254.594026][ T8445] loop4: detected capacity change from 0 to 32768 [ 254.616159][ T8430] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 254.644113][ T8446] XFS (loop6): Ending clean mount [ 254.731357][ T5685] XFS (loop6): Unmounting Filesystem [ 254.793401][ T8445] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 255.047657][ T8444] kworker/u4:13: attempt to access beyond end of device [ 255.047657][ T8444] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 255.333102][ T4255] ocfs2: Unmounting device (7,4) on (node local) [ 255.641184][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.647714][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.647950][ T8483] loop7: detected capacity change from 0 to 256 [ 255.728754][ T8483] FAT-fs (loop7): Unrecognized mount option "iocharsetÄ]Kfö1\=macgaelic" or missing value [ 255.942669][ T8491] tipc: Started in network mode [ 255.977161][ T8491] tipc: Node identity , cluster identity 4711 [ 255.983300][ T8491] tipc: Failed to obtain node identity [ 256.007451][ T8491] tipc: Enabling of bearer rejected, failed to enable media [ 256.266964][ T8504] loop6: detected capacity change from 0 to 256 [ 256.278392][ T8503] loop4: detected capacity change from 0 to 512 [ 256.323623][ T8503] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.378241][ T8503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.498352][ T8503] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1566: invalid indirect mapped block 4294967295 (level 1) [ 256.514200][ T8503] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1566: invalid indirect mapped block 4294967295 (level 1) [ 256.553201][ T8503] EXT4-fs (loop4): 2 truncates cleaned up [ 256.577146][ T8503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.723976][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 257.196101][ T8533] loop6: detected capacity change from 0 to 512 [ 257.298577][ T8533] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 257.347426][ T8533] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.449270][ T8532] loop7: detected capacity change from 0 to 4096 [ 257.521230][ T4258] udevd[4258]: symlink '../../loop0' '/dev/disk/by-diskseq/536.tmp-b7:0' failed: Read-only file system [ 257.560015][ T4494] udevd[4494]: symlink '../../loop8' '/dev/disk/by-diskseq/529.tmp-b7:8' failed: Read-only file system [ 257.581460][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/543.tmp-b7:6' failed: Read-only file system [ 257.659071][ T5685] EXT4-fs (loop6): unmounting filesystem. [ 257.696291][ T8532] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 257.706606][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 257.837093][ T8532] EXT4-fs error (device loop7): ext4_empty_dir:3154: inode #12: block 80: comm syz.7.1577: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 257.849693][ T4258] udevd[4258]: symlink '../../loop0' '/dev/disk/by-diskseq/536.tmp-b7:0' failed: Read-only file system [ 257.862348][ T8546] loop8: detected capacity change from 0 to 4096 [ 257.884925][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/543.tmp-b7:6' failed: Read-only file system [ 257.930297][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/543.tmp-b7:6' failed: Read-only file system [ 257.945284][ T8546] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 257.986921][ T8522] loop4: detected capacity change from 0 to 40427 [ 258.012613][ T8546] EXT4-fs (loop8): Test dummy encryption mode enabled [ 258.056354][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/545.tmp-b7:6' failed: Read-only file system [ 258.070751][ T8522] F2FS-fs (loop4): Invalid segment count (1) [ 258.076817][ T8522] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 258.098951][ T8532] EXT4-fs (loop7): Remounting filesystem read-only [ 258.126271][ T8546] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 258.160018][ T4398] udevd[4398]: symlink '../../loop7' '/dev/disk/by-diskseq/544.tmp-b7:7' failed: Read-only file system [ 258.164441][ T8553] udevd[8553]: symlink '../../loop0' '/dev/disk/by-diskseq/536.tmp-b7:0' failed: Read-only file system [ 258.186337][ T8532] EXT4-fs warning (device loop7): ext4_empty_dir:3156: inode #12: comm syz.7.1577: directory missing '..' [ 258.217342][ T8522] F2FS-fs (loop4): invalid crc value [ 258.245850][ T8522] F2FS-fs (loop4): Found nat_bits in checkpoint [ 258.323482][ T8522] F2FS-fs (loop4): recover fsync data on readonly fs [ 258.369642][ T8522] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 258.405442][ T8522] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 258.485271][ T6280] EXT4-fs (loop7): unmounting filesystem. [ 258.507734][ T7701] EXT4-fs (loop8): unmounting filesystem. [ 259.461171][ T8579] loop6: detected capacity change from 0 to 24 [ 260.053653][ T8571] loop8: detected capacity change from 0 to 131072 [ 260.120667][ T8571] XFS (loop8): Mounting V5 Filesystem [ 260.237657][ T4329] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 260.309283][ T8568] loop0: detected capacity change from 0 to 40427 [ 260.330887][ T8568] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 260.338821][ T8568] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 260.358123][ T8571] XFS (loop8): Starting recovery (logdev: internal) [ 260.382974][ T8568] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 260.407331][ T8571] XFS (loop8): Ending recovery (logdev: internal) [ 260.457419][ T4329] usb 7-1: Using ep0 maxpacket: 16 [ 260.477547][ T8568] F2FS-fs (loop0): Found nat_bits in checkpoint [ 260.480850][ T4329] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.535711][ T4329] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.560793][ T4329] usb 7-1: config 0 interface 0 has no altsetting 0 [ 260.584599][ T4329] usb 7-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 260.602613][ T4329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.623270][ T4329] usb 7-1: config 0 descriptor?? [ 260.632320][ T7701] XFS (loop8): Unmounting Filesystem [ 260.707908][ T8568] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 260.727168][ T8568] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 261.056236][ T4329] wacom 0003:056A:00ED.000F: hidraw0: USB HID v20.00 Device [HID 056a:00ed] on usb-dummy_hcd.6-1/input0 [ 261.254759][ T4329] usb 7-1: USB disconnect, device number 5 [ 261.510104][ T8613] fido_id[8613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 262.215579][ T8631] loop0: detected capacity change from 0 to 512 [ 262.242963][ T8632] usb usb9: usbfs: process 8632 (syz.6.1616) did not claim interface 0 before use [ 262.276569][ T8631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 262.322598][ T8631] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1607: Unimplemented hash flags: 0x0001 [ 262.426694][ T8631] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1607: Corrupt directory, running e2fsck is recommended [ 262.483766][ T8631] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1607: path /345/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 262.607493][ T8553] udevd[8553]: symlink '../../loop8' '/dev/disk/by-diskseq/553.tmp-b7:8' failed: Read-only file system [ 262.659372][ T4243] udevd[4243]: symlink '../../loop4' '/dev/disk/by-diskseq/550.tmp-b7:4' failed: Read-only file system [ 262.705771][ T8553] udevd[8553]: symlink '../../loop8' '/dev/disk/by-diskseq/553.tmp-b7:8' failed: Read-only file system [ 262.750143][ T4243] udevd[4243]: symlink '../../loop6' '/dev/disk/by-diskseq/552.tmp-b7:6' failed: Read-only file system [ 262.771517][ T8553] udevd[8553]: symlink '../../loop8' '/dev/disk/by-diskseq/555.tmp-b7:8' failed: Read-only file system [ 262.813166][ T8553] udevd[8553]: symlink '../../loop8' '/dev/disk/by-diskseq/555.tmp-b7:8' failed: Read-only file system [ 262.838743][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 262.886372][ T8553] udevd[8553]: symlink '../../loop8' '/dev/disk/by-diskseq/555.tmp-b7:8' failed: Read-only file system [ 262.984226][ T8553] udevd[8553]: symlink '../../loop8' '/dev/disk/by-diskseq/555.tmp-b7:8' failed: Read-only file system [ 263.051007][ T8553] udevd[8553]: symlink '../../loop6' '/dev/disk/by-diskseq/552.tmp-b7:6' failed: Read-only file system [ 263.065433][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 263.096476][ T4243] udevd[4243]: symlink '../../loop0' '/dev/disk/by-diskseq/557.tmp-b7:0' failed: Read-only file system [ 263.443285][ T8661] lo speed is unknown, defaulting to 1000 [ 263.458099][ T8661] lo speed is unknown, defaulting to 1000 [ 263.481018][ T8661] lo speed is unknown, defaulting to 1000 [ 263.516044][ T8661] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 263.599481][ T8661] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 263.606744][ T8660] loop6: detected capacity change from 0 to 4096 [ 263.651517][ T8660] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 263.706629][ T8661] lo speed is unknown, defaulting to 1000 [ 263.730402][ T8660] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 263.738807][ T8661] lo speed is unknown, defaulting to 1000 [ 263.785800][ T8661] lo speed is unknown, defaulting to 1000 [ 263.802196][ T8661] lo speed is unknown, defaulting to 1000 [ 263.859262][ T8661] lo speed is unknown, defaulting to 1000 [ 264.029645][ T5685] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 264.496831][ T8684] loop6: detected capacity change from 0 to 2048 [ 264.598736][ T8684] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 265.052847][ T8701] loop6: detected capacity change from 0 to 512 [ 265.129276][ T8701] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 265.175659][ T8701] EXT4-fs (loop6): orphan cleanup on readonly fs [ 265.272503][ T8701] __quota_error: 5 callbacks suppressed [ 265.272521][ T8701] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 265.343504][ T8701] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 265.354340][ T8696] loop4: detected capacity change from 0 to 32768 [ 265.382608][ T8701] EXT4-fs error (device loop6): ext4_acquire_dquot:6814: comm syz.6.1646: Failed to acquire dquot type 1 [ 265.394350][ T8696] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.1644 (8696) [ 265.446541][ T8701] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1646: bg 0: block 40: padding at end of block bitmap is not set [ 265.484402][ T8701] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 265.507764][ T8701] EXT4-fs (loop6): 1 truncate cleaned up [ 265.514666][ T8696] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 265.516288][ T8701] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 265.590482][ T8696] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 265.637803][ T8696] BTRFS info (device loop4): force zlib compression, level 3 [ 265.645290][ T8696] BTRFS info (device loop4): max_inline at 4096 [ 265.652717][ T8701] EXT4-fs error (device loop6): ext4_get_link:104: inode #16: comm syz.6.1646: bad symlink. [ 265.721330][ T8696] BTRFS info (device loop4): disabling tree log [ 265.744534][ T8696] BTRFS info (device loop4): force clearing of disk cache [ 265.768796][ T8696] BTRFS info (device loop4): using free space tree [ 265.786675][ T5685] EXT4-fs (loop6): unmounting filesystem. [ 266.017804][ T8696] BTRFS info (device loop4): enabling ssd optimizations [ 266.095426][ T8696] BTRFS info (device loop4): rebuilding free space tree [ 266.205493][ T8694] loop0: detected capacity change from 0 to 40427 [ 266.212365][ T8739] loop6: detected capacity change from 0 to 1024 [ 266.266039][ T27] audit: type=1800 audit(1749081092.062:35): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1644" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 266.323522][ T8739] hfsplus: bad catalog entry type [ 266.399589][ T8694] F2FS-fs (loop0): Found nat_bits in checkpoint [ 266.463110][ T4255] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 266.540727][ T8746] tipc: Enabling of bearer rejected, failed to enable media [ 266.550585][ T4313] hfsplus: b-tree write err: -5, ino 4 [ 266.591994][ T8694] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 266.757468][ T8694] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 266.877843][ T8694] F2FS-fs (loop0): Found FS corruption, run fsck to fix. [ 267.440212][ T8765] loop7: detected capacity change from 0 to 1024 [ 267.452831][ T8765] EXT4-fs: Ignoring removed bh option [ 267.503792][ T8765] EXT4-fs: inline encryption not supported [ 267.590430][ T8765] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 267.643298][ T4398] udevd[4398]: symlink '../../loop7' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:7' failed: Read-only file system [ 267.653888][ T8770] loop6: detected capacity change from 0 to 512 [ 267.673715][ T4243] udevd[4243]: symlink '../../loop4' '/dev/disk/by-diskseq/569.tmp-b7:4' failed: Read-only file system [ 267.736953][ T8770] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 267.738515][ T8765] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 2: comm syz.7.1668: lblock 2 mapped to illegal pblock 2 (length 1) [ 267.818473][ T8770] fs-verity: sha256 using implementation "sha256-avx2" [ 267.830938][ T8614] udevd[8614]: symlink '../../loop6' '/dev/disk/by-diskseq/572.tmp-b7:6' failed: Read-only file system [ 267.831863][ T8765] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 267.863377][ T8553] udevd[8553]: symlink '../../loop0' '/dev/disk/by-diskseq/566.tmp-b7:0' failed: Read-only file system [ 267.885881][ T8770] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1670: bg 0: block 193: padding at end of block bitmap is not set [ 267.905583][ T8765] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 48: comm syz.7.1668: lblock 0 mapped to illegal pblock 48 (length 1) [ 267.912583][ T8614] udevd[8614]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 267.940355][ T8553] udevd[8553]: symlink '../../loop0' '/dev/disk/by-diskseq/566.tmp-b7:0' failed: Read-only file system [ 267.957175][ T4868] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 267.991986][ T8765] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 267.995551][ T4243] udevd[4243]: symlink '../../loop7' '/dev/disk/by-diskseq/571.tmp-b7:7' failed: Read-only file system [ 268.046210][ T8765] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.1668: Failed to acquire dquot type 0 [ 268.084122][ T4398] udevd[4398]: symlink '../../loop6' '/dev/disk/by-diskseq/572.tmp-b7:6' failed: Read-only file system [ 268.086402][ T8553] udevd[8553]: symlink '../../loop4' '/dev/disk/by-diskseq/569.tmp-b7:4' failed: Read-only file system [ 268.097064][ T5685] EXT4-fs (loop6): unmounting filesystem. [ 268.124795][ T8765] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 268.163816][ T8776] loop4: detected capacity change from 0 to 64 [ 268.170200][ T4868] usb 9-1: Using ep0 maxpacket: 8 [ 268.185071][ T4398] udevd[4398]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 268.190668][ T4868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 268.209156][ T8765] EXT4-fs error (device loop7): ext4_evict_inode:279: inode #11: comm syz.7.1668: mark_inode_dirty error [ 268.252595][ T8765] EXT4-fs warning (device loop7): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 268.276105][ T4868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.294449][ T8778] x_tables: duplicate underflow at hook 4 [ 268.312825][ T8765] EXT4-fs (loop7): 1 orphan inode deleted [ 268.330209][ T8765] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 268.340285][ T4868] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.351959][ T4868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 268.422345][ T4868] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 268.433951][ T4868] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 268.456581][ T4868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.497974][ T8444] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.523979][ T4868] usb 9-1: config 0 descriptor?? [ 268.577291][ T4269] Bluetooth: hci5: urb ffff888027b8d200 submission failed (90) [ 268.608385][ T8764] loop0: detected capacity change from 0 to 32768 [ 268.627110][ T8444] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 268.635646][ T8444] EXT4-fs error (device loop7): ext4_release_dquot:6850: comm kworker/u4:13: Failed to release dquot type 0 [ 268.686667][ T8765] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 48: comm syz.7.1668: lblock 0 mapped to illegal pblock 48 (length 1) [ 268.712059][ T8765] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=-117 [ 268.754073][ T4868] usb 9-1: USB disconnect, device number 2 [ 268.832998][ T6280] EXT4-fs (loop7): unmounting filesystem. [ 268.921175][ T8764] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 268.978815][ T8764] XFS (loop0): Mounting V5 Filesystem [ 269.112555][ T8802] loop6: detected capacity change from 0 to 1024 [ 269.169850][ T8764] XFS (loop0): Ending clean mount [ 269.203429][ T8764] XFS (loop0): Quotacheck needed: Please wait. [ 269.222334][ T8433] hfsplus: b-tree write err: -5, ino 4 [ 269.367852][ T8764] XFS (loop0): Quotacheck: Done. [ 269.590640][ T4261] XFS (loop0): Unmounting Filesystem [ 269.900807][ T8824] bridge0: port 3(ip6gretap0) entered blocking state [ 269.921214][ T8824] bridge0: port 3(ip6gretap0) entered disabled state [ 269.946603][ T8824] device ip6gretap0 entered promiscuous mode [ 269.971600][ T8824] bridge0: port 3(ip6gretap0) entered blocking state [ 269.978855][ T8824] bridge0: port 3(ip6gretap0) entered forwarding state [ 270.326498][ T8836] loop7: detected capacity change from 0 to 2048 [ 270.496034][ T8836] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.805822][ T8845] loop6: detected capacity change from 0 to 32768 [ 271.836194][ T8845] (syz.6.1700,8845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 271.891716][ T8834] loop4: detected capacity change from 0 to 65536 [ 271.912627][ T8845] (syz.6.1700,8845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 272.014386][ T8845] (syz.6.1700,8845,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 272.149123][ T8834] XFS (loop4): Mounting V5 Filesystem [ 272.161712][ T8845] JBD2: Ignoring recovery information on journal [ 272.351811][ T8834] XFS (loop4): Ending clean mount [ 272.359080][ T8845] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 272.482044][ T8883] loop0: detected capacity change from 0 to 1024 [ 272.592799][ T8887] loop8: detected capacity change from 0 to 1024 [ 272.614770][ T8883] hfsplus: bad catalog entry type [ 272.672318][ T4258] udevd[4258]: symlink '../../loop7' '/dev/disk/by-diskseq/581.tmp-b7:7' failed: Read-only file system [ 272.713174][ T4255] XFS (loop4): Unmounting Filesystem [ 272.789299][ T4398] udevd[4398]: symlink '../../loop0' '/dev/disk/by-diskseq/585.tmp-b7:0' failed: Read-only file system [ 272.838696][ T4313] hfsplus: b-tree write err: -5, ino 4 [ 272.840604][ T4398] udevd[4398]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 272.873418][ T8614] udevd[8614]: symlink '../../loop8' '/dev/disk/by-diskseq/586.tmp-b7:8' failed: Read-only file system [ 272.897537][ T4398] udevd[4398]: symlink '../../loop0' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:0' failed: Read-only file system [ 272.914570][ T5685] ocfs2: Unmounting device (7,6) on (node local) [ 272.926521][ T46] hfsplus: b-tree write err: -5, ino 4 [ 272.962818][ T8553] udevd[8553]: symlink '../../loop6' '/dev/disk/by-diskseq/583.tmp-b7:6' failed: Read-only file system [ 272.980342][ T8614] udevd[8614]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system [ 273.033451][ T8614] udevd[8614]: symlink '../../loop8' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:8' failed: Read-only file system [ 273.049260][ T4258] udevd[4258]: symlink '../../loop7' '/dev/disk/by-diskseq/581.tmp-b7:7' failed: Read-only file system [ 273.062884][ T8553] udevd[8553]: symlink '../../loop6' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:6' failed: Read-only file system [ 273.586934][ T8907] loop8: detected capacity change from 0 to 2048 [ 273.609334][ T8907] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 273.688058][ T8911] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.469035][ T8928] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1732'. [ 274.586278][ T8904] loop6: detected capacity change from 0 to 32768 [ 274.644455][ T8904] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 274.685080][ T8904] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 274.840029][ T8938] loop4: detected capacity change from 0 to 64 [ 274.903559][ T8938] syz.4.1737: attempt to access beyond end of device [ 274.903559][ T8938] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 274.986041][ T8938] Buffer I/O error on dev loop4, logical block 512, async page read [ 275.007339][ T8938] syz.4.1737: attempt to access beyond end of device [ 275.007339][ T8938] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 275.028484][ T5685] ocfs2: Unmounting device (7,6) on (node local) [ 275.078366][ T8938] Buffer I/O error on dev loop4, logical block 56576, async page read [ 275.581520][ T8949] loop6: detected capacity change from 0 to 2048 [ 275.617631][ T8949] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 275.635162][ T8926] loop0: detected capacity change from 0 to 32768 [ 275.654607][ T8953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1744'. [ 275.675591][ T8954] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.702515][ T8926] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 275.752374][ T8926] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 275.938544][ T8926] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 275.961388][ T5867] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 275.977435][ T5867] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 276.056892][ T8962] loop4: detected capacity change from 0 to 256 [ 276.094619][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1748'. [ 276.126997][ T5867] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 149ms [ 276.148595][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1748'. [ 276.170634][ T8962] exfat: Deprecated parameter 'utf8' [ 276.177580][ T5867] gfs2: fsid=syz:syz.0: jid=0: Done [ 276.200574][ T8926] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 276.226059][ T8962] exfat: Deprecated parameter 'namecase' [ 276.247229][ T8962] exfat: Deprecated parameter 'utf8' [ 276.324773][ T8962] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 276.383335][ T8929] loop7: detected capacity change from 0 to 32768 [ 276.436882][ T8929] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 276.486244][ T8929] CPU: 1 PID: 8929 Comm: syz.7.1734 Not tainted 6.1.141-syzkaller #0 [ 276.494394][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.504486][ T8929] Call Trace: [ 276.507787][ T8929] [ 276.510727][ T8929] dump_stack_lvl+0x168/0x22e [ 276.515424][ T8929] ? show_regs_print_info+0x12/0x12 [ 276.520653][ T8929] ? load_image+0x3b0/0x3b0 [ 276.525181][ T8929] sysfs_create_dir_ns+0x252/0x280 [ 276.530313][ T8929] ? sysfs_warn_dup+0xa0/0xa0 [ 276.535004][ T8929] ? kobject_set_name_vargs+0x5d/0x110 [ 276.540484][ T8929] ? do_raw_spin_unlock+0x11d/0x230 [ 276.545706][ T8929] kobject_add_internal+0x6b8/0xc80 [ 276.550916][ T8929] kobject_init_and_add+0x122/0x190 [ 276.556135][ T8929] ? lockdep_softirqs_off+0x420/0x420 [ 276.561524][ T8929] ? kobject_add+0x210/0x210 [ 276.566139][ T8929] ? __init_swait_queue_head+0xa5/0x150 [ 276.571706][ T8929] gfs2_sys_fs_add+0x234/0x480 [ 276.576488][ T8929] ? gfs2_recover_set+0x240/0x240 [ 276.581527][ T8929] ? snprintf+0xd7/0x120 [ 276.585779][ T8929] ? vscnprintf+0x80/0x80 [ 276.590133][ T8929] gfs2_fill_super+0x126f/0x1f80 [ 276.595093][ T8929] ? gfs2_reconfigure+0xcd0/0xcd0 [ 276.600138][ T8929] ? sb_set_blocksize+0xa5/0xe0 [ 276.605002][ T8929] get_tree_bdev+0x3f1/0x610 [ 276.609606][ T8929] ? gfs2_reconfigure+0xcd0/0xcd0 [ 276.614646][ T8929] gfs2_get_tree+0x4d/0x1e0 [ 276.619158][ T8929] vfs_get_tree+0x88/0x270 [ 276.623583][ T8929] do_new_mount+0x24a/0xa40 [ 276.628106][ T8929] __se_sys_mount+0x2d6/0x3c0 [ 276.632800][ T8929] ? __x64_sys_mount+0xc0/0xc0 [ 276.637575][ T8929] ? lockdep_hardirqs_on+0x94/0x140 [ 276.642774][ T8929] ? __x64_sys_mount+0x1c/0xc0 [ 276.647547][ T8929] do_syscall_64+0x4c/0xa0 [ 276.651973][ T8929] ? clear_bhb_loop+0x60/0xb0 [ 276.656661][ T8929] ? clear_bhb_loop+0x60/0xb0 [ 276.661344][ T8929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.667251][ T8929] RIP: 0033:0x7f827d5900ca [ 276.671674][ T8929] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.691375][ T8929] RSP: 002b:00007f827e340e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 276.699795][ T8929] RAX: ffffffffffffffda RBX: 00007f827e340ef0 RCX: 00007f827d5900ca [ 276.707772][ T8929] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f827e340eb0 [ 276.715746][ T8929] RBP: 0000200000000400 R08: 00007f827e340ef0 R09: 0000000000000000 [ 276.723726][ T8929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 276.731705][ T8929] R13: 00007f827e340eb0 R14: 00000000000125bb R15: 0000200000000200 [ 276.739694][ T8929] [ 276.797225][ T8929] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 276.856502][ T8929] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 278.081239][ T9010] loop4: detected capacity change from 0 to 256 [ 278.116578][ T9014] loop6: detected capacity change from 0 to 128 [ 278.142859][ T9016] loop0: detected capacity change from 0 to 512 [ 278.182833][ T9014] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 278.222911][ T9016] EXT4-fs (loop0): Test dummy encryption mode enabled [ 278.245729][ T9014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.365827][ T9016] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 278.478395][ T9023] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1774'. [ 278.605459][ T4261] EXT4-fs (loop0): unmounting filesystem. [ 278.976798][ T9039] loop4: detected capacity change from 0 to 4096 [ 278.988696][ T9039] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 278.996589][ T9039] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 279.005101][ T9039] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 279.013136][ T9039] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 279.021338][ T9039] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 279.029253][ T9039] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 279.037415][ T9039] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 279.045312][ T9039] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 279.053253][ T9039] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 279.061455][ T9039] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 279.218667][ T9043] hugetlbfs: Bad value 't' for mount option 'size' [ 279.218667][ T9043] [ 279.361249][ T9049] netlink: 'syz.0.1788': attribute type 5 has an invalid length. [ 279.442822][ T9045] loop8: detected capacity change from 0 to 4096 [ 279.520433][ T9053] use of bytesused == 0 is deprecated and will be removed in the future, [ 279.543526][ T9053] use the actual size instead. [ 279.922570][ T4269] Bluetooth: hci1: link tx timeout [ 279.928303][ T4269] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 280.439891][ T9084] block nbd8: shutting down sockets [ 280.606911][ T9079] loop6: detected capacity change from 0 to 8192 [ 280.704984][ T9079] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 280.754141][ T9079] FAT-fs (loop6): Filesystem has been set read-only [ 280.781978][ T9079] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1046) [ 280.828158][ T9079] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 1046) [ 281.211134][ T9109] IPv6: syztnl0: Disabled Multicast RS [ 281.282239][ T9111] tipc: Started in network mode [ 281.290591][ T9111] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 281.303820][ T9111] tipc: Enabling of bearer rejected, failed to enable media [ 281.348160][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1819'. [ 281.425612][ T9117] loop0: detected capacity change from 0 to 128 [ 281.493600][ T9117] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 281.538085][ T9117] FAT-fs (loop0): Filesystem has been set read-only [ 281.585363][ T9117] syz.0.1821: attempt to access beyond end of device [ 281.585363][ T9117] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 281.652946][ T9117] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 281.667373][ T9117] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 281.712661][ T9117] syz.0.1821: attempt to access beyond end of device [ 281.712661][ T9117] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 281.777705][ T27] audit: type=1800 audit(1749081107.582:36): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1821" name="file2" dev="loop0" ino=1048666 res=0 errno=0 [ 281.912267][ T9128] loop4: detected capacity change from 0 to 1024 [ 281.936940][ T9101] loop7: detected capacity change from 0 to 32768 [ 281.956144][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 281.956940][ T9128] EXT4-fs: Ignoring removed nobh option [ 281.987281][ T9128] EXT4-fs: Ignoring removed bh option [ 282.011262][ T9128] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.015643][ T9101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1812 (9101) [ 282.134739][ T9101] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 282.143673][ T9128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 282.163905][ T9137] loop8: detected capacity change from 0 to 512 [ 282.199707][ T9101] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 282.225760][ T9101] BTRFS info (device loop7): setting nodatacow, compression disabled [ 282.234600][ T9137] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 282.276259][ T9101] BTRFS info (device loop7): setting datasum, datacow enabled [ 282.318889][ T9137] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 282.374138][ T9101] BTRFS info (device loop7): force clearing of disk cache [ 282.396745][ T9137] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.447403][ T9101] BTRFS info (device loop7): enabling ssd optimizations [ 282.454418][ T9101] BTRFS info (device loop7): using spread ssd allocation scheme [ 282.544148][ T9101] BTRFS info (device loop7): turning on sync discard [ 282.544442][ T9137] EXT4-fs error (device loop8): ext4_rename:3859: inode #16: comm syz.8.1829: target of rename is already freed [ 282.573858][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 282.581249][ T9101] BTRFS info (device loop7): turning off barriers [ 282.619110][ T9101] BTRFS info (device loop7): enabling auto defrag [ 282.677518][ T9101] BTRFS info (device loop7): not using ssd optimizations [ 282.686261][ T9101] BTRFS info (device loop7): not using spread ssd allocation scheme [ 282.718929][ T9101] BTRFS info (device loop7): using free space tree [ 282.824366][ T7701] EXT4-fs (loop8): unmounting filesystem. [ 283.042890][ T9101] BTRFS info (device loop7): rebuilding free space tree [ 283.257415][ T9132] loop0: detected capacity change from 0 to 32768 [ 283.379744][ T6280] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 283.449045][ T9174] loop6: detected capacity change from 0 to 512 [ 283.461738][ T9174] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 283.482953][ T9174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802e01c, mo2=0102] [ 283.492931][ T9174] EXT4-fs (loop6): orphan cleanup on readonly fs [ 283.507488][ T9174] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1837: bg 0: block 361: padding at end of block bitmap is not set [ 283.627500][ T9174] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 283.663179][ T9174] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1837: invalid indirect mapped block 2185560079 (level 1) [ 283.770170][ T9174] EXT4-fs (loop6): 1 truncate cleaned up [ 283.776203][ T9174] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 284.003115][ T5685] EXT4-fs (loop6): unmounting filesystem. [ 284.152783][ T9149] loop4: detected capacity change from 0 to 32768 [ 284.265445][ T9187] program syz.8.1843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.288931][ T9186] loop6: detected capacity change from 0 to 512 [ 284.343371][ T9186] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.412811][ T9186] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 284.486182][ T9186] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 284.506513][ T9186] System zones: 1-12 [ 284.521930][ T9186] EXT4-fs (loop6): 1 truncate cleaned up [ 284.609185][ T9186] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 284.761609][ T4398] udevd[4398]: symlink '../../loop4' '/dev/disk/by-diskseq/628.tmp-b7:4' failed: Read-only file system [ 284.829674][ T4398] udevd[4398]: symlink '../../loop4' '/dev/disk/by-uuid/3550edcd-4d53-4e80-911f-c2d0fbc49ebf.tmp-b7:4' failed: Read-only file system [ 284.848725][ T5685] EXT4-fs (loop6): unmounting filesystem. [ 284.934764][ T8553] udevd[8553]: symlink '../../loop0' '/dev/disk/by-diskseq/630.tmp-b7:0' failed: Read-only file system [ 285.004660][ T9197] loop8: detected capacity change from 0 to 512 [ 285.024674][ T8553] udevd[8553]: symlink '../../loop0' '/dev/disk/by-diskseq/630.tmp-b7:0' failed: Read-only file system [ 285.086308][ T9182] loop7: detected capacity change from 0 to 32768 [ 285.118251][ T9197] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.1847: inode #1: comm syz.8.1847: iget: illegal inode # [ 285.170940][ T4243] udevd[4243]: symlink '../../loop8' '/dev/disk/by-diskseq/633.tmp-b7:8' failed: Read-only file system [ 285.199766][ T9182] jfs_lookup: dtSearch returned -5 [ 285.234689][ T4243] udevd[4243]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 285.251081][ T8553] udevd[8553]: symlink '../../loop0' '/dev/disk/by-diskseq/630.tmp-b7:0' failed: Read-only file system [ 285.277914][ T9197] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.1847: error while reading EA inode 1 err=-117 [ 285.307876][ T4258] udevd[4258]: symlink '../../loop6' '/dev/disk/by-diskseq/631.tmp-b7:6' failed: Read-only file system [ 285.358663][ T9197] EXT4-fs (loop8): 1 orphan inode deleted [ 285.377444][ T9197] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 285.404724][ T8553] udevd[8553]: symlink '../../loop4' '/dev/disk/by-diskseq/628.tmp-b7:4' failed: Read-only file system [ 285.486613][ T9210] tipc: Started in network mode [ 285.498582][ T7701] EXT4-fs (loop8): unmounting filesystem. [ 285.504338][ T9210] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 285.542925][ T8553] udevd[8553]: symlink '../../loop4' '/dev/disk/by-diskseq/628.tmp-b7:4' failed: Read-only file system [ 285.563027][ T9211] loop6: detected capacity change from 0 to 1024 [ 285.572508][ T9210] tipc: Enabled bearer , priority 10 [ 285.983608][ T9223] loop6: detected capacity change from 0 to 64 [ 286.169408][ T9229] loop8: detected capacity change from 0 to 256 [ 286.176679][ T9229] exfat: Deprecated parameter 'namecase' [ 286.310937][ T9229] exfat: Deprecated parameter 'namecase' [ 286.371446][ T9231] loop4: detected capacity change from 0 to 128 [ 286.432579][ T9229] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 286.700287][ T6364] tipc: Node number set to 4269801488 [ 286.845121][ T9249] loop7: detected capacity change from 0 to 256 [ 286.883732][ T9249] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7b943f, utbl_chksum : 0xe619d30d) [ 287.097257][ T4298] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 287.212033][ T9256] devtmpfs: Bad value for 'nr_inodes' [ 287.248620][ T9257] loop4: detected capacity change from 0 to 1024 [ 287.298278][ T4298] usb 9-1: Using ep0 maxpacket: 8 [ 287.319273][ T4298] usb 9-1: config 0 has an invalid interface number: 56 but max is 0 [ 287.332304][ T9257] hfsplus: bad catalog entry type [ 287.369367][ T4298] usb 9-1: config 0 has no interface number 0 [ 287.384930][ T4298] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 287.404626][ T4298] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.453488][ T4298] usb 9-1: Product: syz [ 287.473997][ T4298] usb 9-1: Manufacturer: syz [ 287.478994][ T4298] usb 9-1: SerialNumber: syz [ 287.504674][ T4298] usb 9-1: config 0 descriptor?? [ 287.753688][ T4298] peak_usb 9-1:0.56: PEAK-System PCAN-USB X6 v224 fw v207.0.0 (2 channels) [ 287.892844][ T9251] loop0: detected capacity change from 0 to 40427 [ 287.915622][ T9251] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 287.944614][ T9251] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 287.958719][ T4298] peak_usb 9-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 287.977165][ T4298] peak_usb 9-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 288.025315][ T9251] F2FS-fs (loop0): invalid crc value [ 288.072334][ T9251] F2FS-fs (loop0): Found nat_bits in checkpoint [ 288.089657][ T9279] loop4: detected capacity change from 0 to 64 [ 288.109649][ T4298] peak_usb: probe of 9-1:0.56 failed with error -71 [ 288.147435][ T4298] usb 9-1: USB disconnect, device number 3 [ 288.245312][ T9251] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 288.259480][ T9251] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 288.923841][ T9296] loop0: detected capacity change from 0 to 512 [ 288.948729][ T9296] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.975270][ T9296] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 288.993045][ T9298] loop8: detected capacity change from 0 to 64 [ 289.330484][ T9286] loop6: detected capacity change from 0 to 32768 [ 289.452578][ T9286] XFS (loop6): Mounting V5 Filesystem [ 289.631069][ T9286] XFS (loop6): Ending clean mount [ 289.814508][ T5685] XFS (loop6): Unmounting Filesystem [ 290.325883][ T9318] loop8: detected capacity change from 0 to 32768 [ 290.654657][ T9335] loop6: detected capacity change from 0 to 512 [ 290.711615][ T9322] loop0: detected capacity change from 0 to 32768 [ 290.735911][ T9322] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.1900 (9322) [ 290.755037][ T9322] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 290.765712][ T9322] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 290.774786][ T9322] BTRFS info (device loop0): using free space tree [ 290.786295][ T9335] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 290.811189][ T9335] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.941777][ T5685] EXT4-fs (loop6): unmounting filesystem. [ 291.193290][ T9322] BTRFS info (device loop0): enabling ssd optimizations [ 291.522027][ T9372] loop4: detected capacity change from 0 to 512 [ 291.560509][ T9372] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.638792][ T9372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 291.639835][ T4261] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 291.680067][ T9372] ext4 filesystem being mounted at /384/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.816341][ T9372] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.1914: corrupted xattr block 32 [ 291.894208][ T9372] EXT4-fs (loop4): Remounting filesystem read-only [ 292.096037][ T9372] EXT4-fs error (device loop4): ext4_get_inode_usage:852: inode #15: comm syz.4.1914: corrupted xattr block 32 [ 292.127177][ T6364] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 292.148477][ T9372] EXT4-fs (loop4): Remounting filesystem read-only [ 292.182567][ T9352] loop7: detected capacity change from 0 to 40427 [ 292.198473][ T9352] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 292.209843][ T9352] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 292.224318][ T9352] F2FS-fs (loop7): invalid crc value [ 292.296813][ T9352] F2FS-fs (loop7): Found nat_bits in checkpoint [ 292.316775][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 292.357775][ T6364] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.400039][ T6364] usb 7-1: config 0 has no interface number 0 [ 292.406209][ T6364] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 292.475379][ T6364] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 292.526219][ T6364] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 292.579209][ T9352] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 292.586312][ T9352] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 292.598174][ T6364] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.621513][ T6364] usb 7-1: config 0 descriptor?? [ 292.640609][ T9379] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 292.669967][ T6364] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 292.970154][ T5867] usb 7-1: USB disconnect, device number 6 [ 293.038998][ T9400] loop4: detected capacity change from 0 to 256 [ 293.096456][ T9400] FAT-fs (loop4): Directory bread(block 64) failed [ 293.120562][ T6364] kernel write not supported for file /sysvipc/msg (pid: 6364 comm: kworker/1:17) [ 293.134226][ T9400] FAT-fs (loop4): Directory bread(block 65) failed [ 293.164353][ T9400] FAT-fs (loop4): Directory bread(block 66) failed [ 293.177151][ T9400] FAT-fs (loop4): Directory bread(block 67) failed [ 293.197352][ T9400] FAT-fs (loop4): Directory bread(block 68) failed [ 293.203950][ T9400] FAT-fs (loop4): Directory bread(block 69) failed [ 293.254725][ T9400] FAT-fs (loop4): Directory bread(block 70) failed [ 293.286318][ T9400] FAT-fs (loop4): Directory bread(block 71) failed [ 293.318803][ T9400] FAT-fs (loop4): Directory bread(block 72) failed [ 293.343679][ T9400] FAT-fs (loop4): Directory bread(block 73) failed [ 293.805125][ T9418] loop4: detected capacity change from 0 to 2048 [ 294.023762][ T9418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 294.146990][ T9434] loop0: detected capacity change from 0 to 4096 [ 294.187850][ T9434] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 294.233414][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 294.255157][ T9434] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 294.287529][ T9434] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 294.326732][ T9436] loop6: detected capacity change from 0 to 4096 [ 294.335784][ T9434] ntfs: volume version 3.1. [ 294.368731][ T9436] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 294.470198][ T9436] ntfs: (device loop6): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 294.494350][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 294.513733][ T9436] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 294.533282][ T9436] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 294.590733][ T4261] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 294.617418][ T9436] ntfs: (device loop6): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 294.722824][ T9436] ntfs: volume version 3.1. [ 294.762817][ T9436] ntfs: (device loop6): load_and_init_quota(): Failed to find inode number for $Quota. [ 294.789051][ T9446] loop4: detected capacity change from 0 to 64 [ 294.914709][ T9446] hfs: request for non-existent node 56 in B*Tree [ 294.987576][ T9446] hfs: request for non-existent node 56 in B*Tree [ 295.016188][ T9446] hfs: request for non-existent node 57 in B*Tree [ 295.044610][ T9446] hfs: request for non-existent node 57 in B*Tree [ 295.123258][ T9449] loop8: detected capacity change from 0 to 512 [ 295.189915][ T9423] loop7: detected capacity change from 0 to 32768 [ 295.226817][ T9449] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.1947: invalid block [ 295.347701][ T9449] EXT4-fs (loop8): Remounting filesystem read-only [ 295.385392][ T9449] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.1947: attempt to clear invalid blocks 1024 len 1 [ 295.413879][ T9449] EXT4-fs (loop8): Remounting filesystem read-only [ 295.432613][ T9449] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 295.458978][ T9449] EXT4-fs (loop8): Remounting filesystem read-only [ 295.518282][ T9449] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1947: invalid indirect mapped block 1819239214 (level 0) [ 295.588604][ T9449] EXT4-fs (loop8): Remounting filesystem read-only [ 295.615835][ T9449] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1947: invalid indirect mapped block 33554432 (level 2) [ 295.687507][ T9449] EXT4-fs (loop8): Remounting filesystem read-only [ 295.698879][ T9449] EXT4-fs (loop8): 1 truncate cleaned up [ 295.721980][ T9449] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 295.931402][ T9450] loop0: detected capacity change from 0 to 32768 [ 295.939371][ T7701] EXT4-fs (loop8): unmounting filesystem. [ 296.049425][ T9469] loop7: detected capacity change from 0 to 256 [ 296.136609][ T9450] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 296.254918][ T9469] FAT-fs (loop7): Directory bread(block 64) failed [ 296.277921][ T9469] FAT-fs (loop7): Directory bread(block 65) failed [ 296.297464][ T9469] FAT-fs (loop7): Directory bread(block 66) failed [ 296.304056][ T9469] FAT-fs (loop7): Directory bread(block 67) failed [ 296.370003][ T9469] FAT-fs (loop7): Directory bread(block 68) failed [ 296.376719][ T9469] FAT-fs (loop7): Directory bread(block 69) failed [ 296.384534][ T4261] ocfs2: Unmounting device (7,0) on (node local) [ 296.393593][ T9469] FAT-fs (loop7): Directory bread(block 70) failed [ 296.453807][ T9469] FAT-fs (loop7): Directory bread(block 71) failed [ 296.467953][ T9477] loop8: detected capacity change from 0 to 128 [ 296.489591][ T9469] FAT-fs (loop7): Directory bread(block 72) failed [ 296.496745][ T9469] FAT-fs (loop7): Directory bread(block 73) failed [ 296.525845][ T9477] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 296.623999][ T9477] syz.8.1959: attempt to access beyond end of device [ 296.623999][ T9477] loop8: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 296.713325][ T9477] Buffer I/O error on dev loop8, logical block 8767744, async page read [ 296.777958][ T9477] syz.8.1959: attempt to access beyond end of device [ 296.777958][ T9477] loop8: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 296.795856][ T9479] loop6: detected capacity change from 0 to 4096 [ 296.889750][ T9477] Buffer I/O error on dev loop8, logical block 13269809, async page read [ 296.932408][ T9477] syz.8.1959: attempt to access beyond end of device [ 296.932408][ T9477] loop8: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 297.021773][ T9477] Buffer I/O error on dev loop8, logical block 1157, async page read [ 297.066286][ T9477] syz.8.1959: attempt to access beyond end of device [ 297.066286][ T9477] loop8: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 297.092716][ T9479] ntfs3: loop6: failed to convert "0080" to ascii [ 297.121947][ T9479] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 297.163821][ T9477] Buffer I/O error on dev loop8, logical block 3211264, async page read [ 297.201589][ T9479] ntfs3: loop6: failed to convert name for inode 1e. [ 297.240514][ T9477] syz.8.1959: attempt to access beyond end of device [ 297.240514][ T9477] loop8: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 297.330358][ T9477] Buffer I/O error on dev loop8, logical block 8768635, async page read [ 297.371962][ T9477] syz.8.1959: attempt to access beyond end of device [ 297.371962][ T9477] loop8: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 297.413817][ T9477] Buffer I/O error on dev loop8, logical block 13466417, async page read [ 297.424201][ T9477] syz.8.1959: attempt to access beyond end of device [ 297.424201][ T9477] loop8: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 297.490103][ T9477] Buffer I/O error on dev loop8, logical block 209285, async page read [ 297.560378][ T9477] syz.8.1959: attempt to access beyond end of device [ 297.560378][ T9477] loop8: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 297.560460][ T9477] Buffer I/O error on dev loop8, logical block 8767744, async page read [ 297.560499][ T9477] syz.8.1959: attempt to access beyond end of device [ 297.560499][ T9477] loop8: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 297.560524][ T9477] Buffer I/O error on dev loop8, logical block 13269809, async page read [ 297.560557][ T9477] syz.8.1959: attempt to access beyond end of device [ 297.560557][ T9477] loop8: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 297.560581][ T9477] Buffer I/O error on dev loop8, logical block 1157, async page read [ 297.610284][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1969'. [ 297.645529][ T7701] sysv_free_block: trying to free block not in datazone [ 297.646453][ T7701] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 297.827658][ T9502] loop7: detected capacity change from 0 to 256 [ 297.913385][ T9483] loop4: detected capacity change from 0 to 32768 [ 297.939420][ T9483] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1962 (9483) [ 297.958004][ T9502] FAT-fs (loop7): Directory bread(block 64) failed [ 297.964602][ T9502] FAT-fs (loop7): Directory bread(block 65) failed [ 297.990606][ T9483] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 297.990692][ T9483] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 297.990743][ T9483] BTRFS info (device loop4): using free space tree [ 298.020764][ T9502] FAT-fs (loop7): Directory bread(block 66) failed [ 298.020806][ T9502] FAT-fs (loop7): Directory bread(block 67) failed [ 298.020880][ T9502] FAT-fs (loop7): Directory bread(block 68) failed [ 298.020907][ T9502] FAT-fs (loop7): Directory bread(block 69) failed [ 298.020979][ T9502] FAT-fs (loop7): Directory bread(block 70) failed [ 298.021007][ T9502] FAT-fs (loop7): Directory bread(block 71) failed [ 298.021107][ T9502] FAT-fs (loop7): Directory bread(block 72) failed [ 298.021135][ T9502] FAT-fs (loop7): Directory bread(block 73) failed [ 298.327247][ T9483] BTRFS info (device loop4): enabling ssd optimizations [ 298.403296][ T9528] tipc: Enabling of bearer rejected, failed to enable media [ 298.547996][ T4255] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 298.886786][ T9540] loop8: detected capacity change from 0 to 1024 [ 298.961700][ T9542] loop0: detected capacity change from 0 to 2048 [ 299.057672][ T9542] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 299.110132][ T9542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.273893][ T9547] loop6: detected capacity change from 0 to 256 [ 299.705827][ T9560] loop7: detected capacity change from 0 to 128 [ 299.765491][ T9560] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 299.783079][ T9560] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.808701][ T4298] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 299.898116][ T6280] EXT4-fs (loop7): unmounting filesystem. [ 299.922827][ T9565] loop6: detected capacity change from 0 to 512 [ 299.978121][ T9565] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 300.002365][ T4298] usb 9-1: Using ep0 maxpacket: 32 [ 300.010590][ T4298] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 300.043696][ T4298] usb 9-1: config 0 has no interface number 0 [ 300.072556][ T9565] EXT4-fs (loop6): 1 truncate cleaned up [ 300.083114][ T4298] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 300.136563][ T4298] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.162612][ T9565] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 300.192987][ T4298] usb 9-1: Product: syz [ 300.206841][ T4298] usb 9-1: Manufacturer: syz [ 300.227563][ T4298] usb 9-1: SerialNumber: syz [ 300.273268][ T4298] usb 9-1: config 0 descriptor?? [ 300.306459][ T4298] smsc95xx v2.0.0 [ 300.315287][ T4298] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 300.346437][ T4298] smsc95xx: probe of 9-1:0.67 failed with error -22 [ 300.369103][ T9549] loop4: detected capacity change from 0 to 32768 [ 300.396881][ T5685] EXT4-fs (loop6): unmounting filesystem. [ 300.415431][ T9549] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1987 (9549) [ 300.531967][ T9549] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 300.545562][ T5867] usb 9-1: USB disconnect, device number 4 [ 300.582616][ T9549] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 300.602084][ T9549] BTRFS info (device loop4): using free space tree [ 300.889195][ T9574] loop0: detected capacity change from 0 to 32768 [ 300.986798][ T9549] BTRFS info (device loop4): enabling ssd optimizations [ 301.134591][ T9606] loop6: detected capacity change from 0 to 256 [ 301.226381][ T4255] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 301.273907][ T9606] FAT-fs (loop6): Directory bread(block 64) failed [ 301.316553][ T9606] FAT-fs (loop6): Directory bread(block 65) failed [ 301.325125][ T9606] FAT-fs (loop6): Directory bread(block 66) failed [ 301.332084][ T9606] FAT-fs (loop6): Directory bread(block 67) failed [ 301.346147][ T9606] FAT-fs (loop6): Directory bread(block 68) failed [ 301.353307][ T9606] FAT-fs (loop6): Directory bread(block 69) failed [ 301.360846][ T9606] FAT-fs (loop6): Directory bread(block 70) failed [ 301.367982][ T9606] FAT-fs (loop6): Directory bread(block 71) failed [ 301.375521][ T9606] FAT-fs (loop6): Directory bread(block 72) failed [ 301.383682][ T9606] FAT-fs (loop6): Directory bread(block 73) failed [ 302.282635][ T9628] netlink: 110 bytes leftover after parsing attributes in process `syz.0.2014'. [ 302.293704][ T9630] loop8: detected capacity change from 0 to 512 [ 302.293804][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2014'. [ 302.316286][ T9630] EXT4-fs: Ignoring removed orlov option [ 302.331998][ T9630] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 302.385131][ T9630] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 302.394418][ T9630] System zones: 1-12 [ 302.406332][ T9630] EXT4-fs (loop8): 1 truncate cleaned up [ 302.413453][ T9630] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 302.482373][ T7701] EXT4-fs (loop8): unmounting filesystem. [ 302.590563][ T9618] loop4: detected capacity change from 0 to 32768 [ 302.597617][ T4269] Bluetooth: hci1: command 0x2021 tx timeout [ 302.689329][ T9618] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 302.824323][ T4255] ocfs2: Unmounting device (7,4) on (node local) [ 303.307451][ T4262] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 303.506438][ T9634] loop0: detected capacity change from 0 to 32768 [ 303.574870][ T9651] loop6: detected capacity change from 0 to 32768 [ 303.611294][ T9651] Dev loop6 Sun disklabel: Csum bad, label corrupted [ 303.621658][ T9651] loop6: unable to read partition table [ 303.627873][ T9651] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 303.683807][ T9634] JBD2: Ignoring recovery information on journal [ 303.824768][ T9634] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 303.967376][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 303.967390][ T27] audit: type=1326 audit(1749081129.772:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.6.2028" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44c318e929 code=0x0 [ 304.216896][ T4261] ocfs2: Unmounting device (7,0) on (node local) [ 304.304439][ T9670] loop8: detected capacity change from 0 to 2048 [ 304.364075][ T9670] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.813882][ T9679] loop0: detected capacity change from 0 to 4096 [ 304.828881][ T9679] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 304.984970][ T9663] loop4: detected capacity change from 0 to 32768 [ 305.034796][ T9663] (syz.4.2027,9663,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.108110][ T9663] (syz.4.2027,9663,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.234698][ T9693] [U]  [ 305.259708][ T9663] JBD2: Ignoring recovery information on journal [ 305.496112][ T9663] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 305.776244][ T4255] ocfs2: Unmounting device (7,4) on (node local) [ 306.422427][ T9727] loop4: detected capacity change from 0 to 128 [ 306.475696][ T9727] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 306.495188][ T9727] ext4 filesystem being mounted at /401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 306.633585][ T9727] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 306.782393][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 306.966086][ T9716] loop8: detected capacity change from 0 to 32768 [ 307.051781][ T9743] vim2m vim2m.0: vidioc_s_fmt queue busy [ 307.063859][ T9716] read_mapping_page failed! [ 307.086449][ T9716] ERROR: (device loop8): txCommit: [ 307.086449][ T9716] [ 307.111180][ T9716] ERROR: (device loop8): remounting filesystem as read-only [ 307.401447][ T9749] loop6: detected capacity change from 0 to 512 [ 307.536269][ T9749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 307.571434][ T9749] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.657737][ T9757] loop4: detected capacity change from 0 to 1024 [ 307.681903][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 307.738630][ T9749] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 307.778737][ T9753] loop8: detected capacity change from 0 to 4096 [ 307.787535][ T9749] EXT4-fs: Cannot change journaled quota options when quota turned on [ 308.041782][ T5685] EXT4-fs (loop6): unmounting filesystem. [ 308.235649][ T9765] loop6: detected capacity change from 0 to 64 [ 308.590764][ T9780] loop8: detected capacity change from 0 to 512 [ 308.629475][ T9780] EXT4-fs: Ignoring removed orlov option [ 308.674603][ T9780] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 308.754237][ T9782] loop6: detected capacity change from 0 to 4096 [ 308.775727][ T9780] EXT4-fs (loop8): 1 truncate cleaned up [ 308.828452][ T9780] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 308.860948][ T9787] loop7: detected capacity change from 0 to 2048 [ 308.917327][ T9782] ntfs: volume version 3.1. [ 308.951198][ T9787] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 309.188957][ T7701] EXT4-fs (loop8): unmounting filesystem. [ 309.202514][ T6280] EXT4-fs (loop7): unmounting filesystem. [ 309.404289][ T9796] loop8: detected capacity change from 0 to 1024 [ 309.452387][ T9803] netlink: 'syz.4.2090': attribute type 11 has an invalid length. [ 309.503834][ T9796] hfsplus: bad catalog entry type [ 310.103256][ T9816] loop7: detected capacity change from 0 to 1024 [ 310.234928][ T9822] loop8: detected capacity change from 0 to 1024 [ 310.451686][ T9802] loop6: detected capacity change from 0 to 40427 [ 310.498663][ T9802] F2FS-fs (loop6): build fault injection attr: rate: 693, type: 0x3ffff [ 310.514324][ T4313] hfsplus: b-tree write err: -5, ino 4 [ 310.555207][ T9802] F2FS-fs (loop6): invalid crc value [ 310.693059][ T9802] F2FS-fs (loop6): Found nat_bits in checkpoint [ 310.935348][ T9802] F2FS-fs (loop6): Start checkpoint disabled! [ 310.997627][ T9802] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 311.320532][ T9846] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2108'. [ 311.367184][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2108'. [ 311.870099][ T9856] loop6: detected capacity change from 0 to 4096 [ 311.906103][ T9856] ntfs3: loop6: ino=3, Correct links count -> 2. [ 312.084504][ T9856] ntfs3: loop6: failed to convert "0080" to cp857 [ 312.106732][ T9856] ntfs3: loop6: failed to convert name for inode 1e. [ 312.297578][ T9874] loop7: detected capacity change from 0 to 1024 [ 312.312468][ T9876] device netdevsim0 entered promiscuous mode [ 312.373516][ T9876] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 312.490418][ T4313] hfsplus: b-tree write err: -5, ino 4 [ 312.771662][ T9888] loop4: detected capacity change from 0 to 2048 [ 312.838025][ T9888] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 312.876249][ T9895] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.610728][ T9903] loop6: detected capacity change from 0 to 32768 [ 313.630243][ T9903] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.2135 (9903) [ 313.652775][ T9903] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 313.663583][ T9903] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 313.676335][ T9903] BTRFS info (device loop6): using free space tree [ 313.795884][ T9929] device veth0_to_team entered promiscuous mode [ 313.846020][ T9903] BTRFS info (device loop6): enabling ssd optimizations [ 314.063494][ T5685] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 314.648192][ T9951] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2143'. [ 314.677149][ T9951] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2143'. [ 314.972225][ T9964] loop6: detected capacity change from 0 to 164 [ 315.057907][ T5867] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 315.232549][ T9971] loop6: detected capacity change from 0 to 256 [ 315.259190][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.281208][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.324092][ T5867] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 315.349181][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.388242][ T5867] usb 5-1: config 0 descriptor?? [ 315.594431][ T27] audit: type=1326 audit(1749081141.392:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc957f8e929 code=0x7ffc0000 [ 315.651348][ T27] audit: type=1326 audit(1749081141.392:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc957f8e929 code=0x7ffc0000 [ 315.724833][ T27] audit: type=1326 audit(1749081141.422:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fc957f8e929 code=0x7ffc0000 [ 315.742016][ T9985] loop6: detected capacity change from 0 to 736 [ 315.747004][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.785165][ T27] audit: type=1326 audit(1749081141.582:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc957f8e929 code=0x7ffc0000 [ 315.827601][ T5867] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 315.834945][ T5867] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 315.844019][ T27] audit: type=1326 audit(1749081141.582:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.0.2161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc957f8e929 code=0x7ffc0000 [ 315.845481][ T5867] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 315.927089][ T5867] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 315.934266][ T5867] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 315.997423][ T5867] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 316.013717][ T5867] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 316.026689][ T5867] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 316.052842][ T9985] Symlink component flag not implemented [ 316.069399][ T5867] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 316.076424][ T5867] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 316.085863][ T9985] Symlink component flag not implemented (122) [ 316.103175][ T5867] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 316.140133][ T5867] hid_mf 0003:0079:1846.0010: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 316.182139][ T5867] hid_mf 0003:0079:1846.0010: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 316.251116][ T5867] usb 5-1: USB disconnect, device number 9 [ 316.457434][ T9993] fido_id[9993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 316.528813][ T9996] loop8: detected capacity change from 0 to 8192 [ 316.638903][T10002] netlink: 'syz.6.2173': attribute type 298 has an invalid length. [ 316.908719][T10012] device bridge0 entered promiscuous mode [ 316.915219][T10009] device bridge0 left promiscuous mode [ 317.071584][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.079426][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.314034][ T5867] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.329986][ T5867] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.356979][ T5871] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.567525][ T5871] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.888046][T10015] loop8: detected capacity change from 0 to 32768 [ 317.916088][T10015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.2180 (10015) [ 318.016613][T10015] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 318.046861][T10015] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 318.080049][T10015] BTRFS info (device loop8): using free space tree [ 318.316312][T10015] BTRFS info (device loop8): enabling ssd optimizations [ 318.347693][ T5878] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 318.580589][ T7701] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 318.982949][T10076] loop6: detected capacity change from 0 to 64 [ 319.624036][T10072] loop4: detected capacity change from 0 to 131072 [ 319.646900][T10072] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9) [ 319.656249][T10072] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 319.693918][T10072] F2FS-fs (loop4): invalid crc value [ 319.735253][ T4313] ------------[ cut here ]------------ [ 319.740812][ T4313] kernel BUG at fs/hfs/inode.c:449! [ 319.766790][T10072] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 319.806961][ T4313] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 319.813097][ T4313] CPU: 0 PID: 4313 Comm: kworker/u4:7 Not tainted 6.1.141-syzkaller #0 [ 319.821360][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.831440][ T4313] Workqueue: writeback wb_workfn (flush-7:6) [ 319.837473][ T4313] RIP: 0010:hfs_write_inode+0x964/0x970 [ 319.843047][ T4313] Code: 88 ff e9 13 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e fe ff ff 4c 89 f7 e8 f6 e2 88 ff e9 51 fe ff ff e8 3c 6a 37 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 319.849240][T10072] F2FS-fs (loop4): recover fsync data on readonly fs [ 319.862671][ T4313] RSP: 0018:ffffc900040173a0 EFLAGS: 00010293 [ 319.862697][ T4313] RAX: ffffffff82496c34 RBX: ffff8880522ec918 RCX: ffff88802dd3d940 [ 319.862712][ T4313] RDX: 0000000000000000 RSI: ffffffff8cb24ee0 RDI: 0000000000000000 [ 319.862724][ T4313] RBP: ffffc90004017530 R08: ffff88802dd3d940 R09: 0000000000000003 [ 319.862738][ T4313] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 319.862749][ T4313] R13: 1ffff92000802e78 R14: 0000000000000000 R15: ffff8880522ec8d8 [ 319.862763][ T4313] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 319.862779][ T4313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.862792][ T4313] CR2: 00007f6e1388a000 CR3: 000000005add0000 CR4: 00000000003506f0 [ 319.862809][ T4313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 319.862822][ T4313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 319.862835][ T4313] Call Trace: [ 319.862842][ T4313] [ 319.862851][ T4313] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 319.862881][ T4313] ? __writeback_single_inode+0x4ae/0x1160 [ 319.869649][T10072] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 319.875623][ T4313] ? __rwlock_init+0x140/0x140 [ 319.884379][T10072] F2FS-fs (loop4): Bad quota inode 2:50331648 [ 319.891546][ T4313] ? __lock_acquire+0x7c50/0x7c50 [ 319.891583][ T4313] __writeback_single_inode+0x75b/0x1160 [ 319.900165][T10072] F2FS-fs (loop4): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 319.907514][ T4313] writeback_sb_inodes+0xad8/0x17d0 [ 319.915497][T10072] F2FS-fs (loop4): Cannot turn on quota_ino: -22 [ 319.924425][ T4313] ? queue_io+0x5a0/0x5a0 [ 319.931500][T10072] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 319.938971][ T4313] ? rcu_is_watching+0x11/0xa0 [ 319.947229][T10072] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 319.954920][ T4313] wb_writeback+0x468/0xd00 [ 320.053250][ T4313] ? percpu_ref_tryget+0x250/0x250 [ 320.058414][ T4313] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 320.064436][ T4313] ? _raw_spin_unlock_irq+0x1f/0x40 [ 320.069671][ T4313] wb_workfn+0x435/0xec0 [ 320.073954][ T4313] ? inode_wait_for_writeback+0x200/0x200 [ 320.078572][T10078] loop0: detected capacity change from 0 to 32768 [ 320.079696][ T4313] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 320.092104][ T4313] ? read_lock_is_recursive+0x10/0x10 [ 320.097511][ T4313] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 320.103449][ T4313] ? _raw_spin_unlock+0x40/0x40 [ 320.108336][ T4313] ? _raw_spin_unlock_irq+0x1f/0x40 [ 320.113570][ T4313] ? process_one_work+0x7a1/0x1160 [ 320.118708][ T4313] process_one_work+0x898/0x1160 [ 320.123674][ T4313] ? worker_detach_from_pool+0x240/0x240 [ 320.129368][ T4313] ? _raw_spin_lock_irq+0xab/0xe0 [ 320.134428][ T4313] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 320.139848][ T4313] ? kthread_data+0x4b/0xc0 [ 320.144389][ T4313] worker_thread+0xaa2/0x1250 [ 320.149168][ T4313] ? __kthread_parkme+0x162/0x1c0 [ 320.154230][ T4313] kthread+0x29d/0x330 [ 320.158332][ T4313] ? worker_clr_flags+0x1a0/0x1a0 [ 320.163389][ T4313] ? kthread_blkcg+0xd0/0xd0 [ 320.168018][ T4313] ret_from_fork+0x1f/0x30 [ 320.172480][ T4313] [ 320.175553][ T4313] Modules linked in: [ 320.344267][ T4313] ---[ end trace 0000000000000000 ]--- [ 320.366229][ T4313] RIP: 0010:hfs_write_inode+0x964/0x970 [ 320.379765][ T4313] Code: 88 ff e9 13 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e fe ff ff 4c 89 f7 e8 f6 e2 88 ff e9 51 fe ff ff e8 3c 6a 37 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 320.416007][T10091] Bluetooth: MGMT ver 1.22 [ 320.468947][ T4313] RSP: 0018:ffffc900040173a0 EFLAGS: 00010293 [ 320.475083][ T4313] RAX: ffffffff82496c34 RBX: ffff8880522ec918 RCX: ffff88802dd3d940 [ 320.507080][ T4313] RDX: 0000000000000000 RSI: ffffffff8cb24ee0 RDI: 0000000000000000 [ 320.515123][ T4313] RBP: ffffc90004017530 R08: ffff88802dd3d940 R09: 0000000000000003 [ 320.537103][ T4313] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 320.545140][ T4313] R13: 1ffff92000802e78 R14: 0000000000000000 R15: ffff8880522ec8d8 [ 320.565057][ T4313] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 320.585753][ T4313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.599228][ T4313] CR2: 00007f6e13893000 CR3: 0000000028f3d000 CR4: 00000000003506f0 [ 320.607726][ T4313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.615733][ T4313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.624079][ T4313] Kernel panic - not syncing: Fatal exception [ 320.630490][ T4313] Kernel Offset: disabled [ 320.634818][ T4313] Rebooting in 86400 seconds..