last executing test programs: 8m53.164380236s ago: executing program 32 (id=753): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x8, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x53, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x1d, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x3, {[@exp_smc={0xfe, 0x6}]}}, {"c8"}}}}}}}, 0x0) 7m53.403331807s ago: executing program 33 (id=1574): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, 0x0}) 6m49.826352688s ago: executing program 5 (id=2362): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000280)={0x0, 0x8269, @status={[0xfffffffffffffffd, 0x1, 0x3, 0xc269, 0x0, 0x101]}, [0x7, 0x40, 0x6000000, 0x6, 0x3, 0xf8, 0x7, 0x189, 0x1e, 0x2, 0xa55, 0x3, 0x8000, 0xfffffffffffffffb, 0x101, 0x2, 0xf, 0xc, 0x90000000000, 0x0, 0x0, 0x3, 0x0, 0xd, 0x3, 0xff, 0x3, 0x4, 0xfffffffffffffffa, 0xc62a, 0x14da8afa, 0x2, 0x7, 0x2f, 0xfffffffffffffff3, 0x2a, 0xfffffffffffffff8, 0x4, 0x7, 0x7, 0x7, 0x401, 0xfffffffffffffffe, 0x4000000053f, 0x3, 0x7, 0x8, 0x3d, 0x5, 0x7f, 0x8001, 0x95, 0x7fffffffffffffff, 0xb3af, 0x400, 0x9, 0x100, 0x6, 0xffffffffffffffff, 0x4, 0x4, 0x9, 0xfffffffffffffffa, 0x5]}) 6m47.694805823s ago: executing program 5 (id=2387): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000001040)={[{@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@shortname_lower}, {@fat=@nfs_stale_rw}, {@uni_xlate}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$eJzs3bFqU1EYB/AvbaqlIOkgFEXwiotTaCruEVEQCgqSwc1iU5QkFgwE2qHVyZfQV9DRVXAQV19ABKmCi906CJF6Y2NL2kRqcov9/ZZ8JOd/z3cuIYcMObl3rlFbXG4ubW5uxORkLvLlKMdWLqZjLMYj9SQAgP/JVrsd39uprHsBAEbD/g8Ax8+A+//tEbYEAAzZwN//x0bWEgAwZHfutnNplUxGNJ61Kq1K+pg+e3UpHkY9qjEbhfgR0d6R1jduzl+fTbZ9mY5KY72TX29VxnfnS1GI6d75UpLanZ+IqU7+41RUYy4Kcbp3fq5n/kRcuvjH/MUoxIf7sRz1WIztbDe/VkqSa7fm9+RP/hoHAAAAAAAAAAAAAAAAAAAAAADDUEx29Dy/p1jc7/U0n56vk4/+5wPtPZ8nH2fz2a4dAAAAAAAAAAAAAAAAAAAAjormymptoV6vPj6oePT+5dt+YwYscp15D3udwxenLnx+vv+Yp39zf/5t8eZ8lrdlwOLdxoMzl5szV45KPyurtYmD3lrfChFDmv1Vpmv/veq+g2delBder336OuiVM/gwAgAAAAAAAAAAAAAAAACAY677o9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT//394RdZrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwEAAP//Rp2fMw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 6m47.028605217s ago: executing program 5 (id=2393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_delroute={0x50, 0x19, 0x801, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_OIF={0x8}, @RTA_PREF={0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}, @RTA_MULTIPATH={0xc}]}, 0x50}}, 0x0) 6m46.772150569s ago: executing program 5 (id=2400): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$eJzs3c1vHGcdB/Df7JtfSlOrh6pECLlteCmleS0hUKDpAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSAgL11EFjP48znq69dt3dWXs+H8mZ+e0z430m35198czsEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/PAHP75QRMT1X6UbViI+F/2IXsRSVa9GxNLqSl5+EBHPx1ZzPBcRw4WIav2tf56JeC0iPjwV8ejx/bXq5osH7Mf3//yPP/zkqR/9/U/Dc//7y93+63std+/eb//71wdH22YAAADomrIsyyJ9zD+dPt/32u4UADAT+fW/TPLt6rmrN+asP2q1Wq0+hnVdOd6DehERG/V1qvcMDscDwDGzER+13QVaJP9OG0TEU213AphrRdsdYCoePb6/VqR8i/rrwep2ez4XZFf+G8XO9R17TSdpnmMyq8fXZvTj2T36szSjPsyTnH+vmf/17fZRWm7a+c/KXvmPti996pycf7+Zf8PJyb83Nv+uyvkPDpV/X/4AAAAAADDH8t//V1o+/rtw9E05kP2O/67OqA8AAAAAAAAA8Fk76vh/O4z/BwAAAHOr+qxe+d2pJ7ft9V1s1e3XioinG8sDHZMullluux8AAAAAAAAAAAAA0CWD7XN4rxURw4h4enm5LMvqp65ZH9ZR1z/uur790GVtP8kDAMC2D081ruUvIhYj4lr6rr/h8vJyWS4uLZfL5dJCfj87Wlgsl2qfa/O0um1hdIA3xINRWf2yxdp6dZM+L09qb/6+6r5GZf8AHZuNFgMHgIjYfjV65BXphCnLZ6LtdzkcD/b/k8f+z0G0/TgFAAAApq8sy7JIX+d9Oh3z77XdKQBgJvLrf/O4gFqtVqvV6pNX15XjPagXEbFRX6d6z2A4fgA4Zjbio7a7QIvk32mDiHi+7U4Ac61ouwNMxaPH99eKlG9Rfz1I47vnc0F25b9RbK2X1x83naR5jsmsHl+b0Y9n9+jPczPqwzzJ+fea+V/fbh+l5aad/6zslX+1nSst9KdtOf9+M/+Gk5N/b2z+XZXzHxwq/778AQAAAABgjuW//6/M1fHf0afdnIn2O/67OrV7BQAAAAAAAIDpevT4/lq+7jUf///CmOVc/3ky5fwL+XdSzr/XyP+rjeX6tfmHbz7J/9+P76/98e6/Pp+nB81/Ic8U6ZFVpEdEke6pGKTpUbbukzaH/VF1T8Oi1x+kc37K4dtxM27FepzftWwv/X88ab+wq73q6XCrvexvt1/c1T7Yac/rX9rVPkxnOpVLuf1srMXP41a8tdVetS1M2P7FCe3lhPacfz/+s9Nn+3935PwHtZ8q/+XUXjSmlYcf9D6x39en4+7n6s0v/ub89Ddnos3o72xbXbV9L7bQn63/k6dG8cs767fP3rtx9+7tC5Emu269GGnyGcv5D9PPzvP/S9vt+Xm/vr8+/GB06PznxWYM9sz/pdp8tb0vz7hvbcj5j9JPzv+t1D5+/z+W+VcP7333/1dm3ycAAAAAAAAAAAAAAADYV1mWW5eIXo2Iy+n6n7auzQQAZutq+sqNMsm3z6ruz/j+1OpjXhdz1p+Z1h+X89Uftfo41nXleG/Ui4j4W32dyxHx63G/DACYZx9HxD/b7gStkX+H5e/7q6Zn2u4MMFN33nv/pzdu3Vq/faftngAAAAAAAAAAn1Ye/3O1Nv73mbIsHzSW2zX+65uxetTxPwd5ZmeA0T0Gqu4ffpv2s9kb9Xu14cZfiL3G/x7uzO03/vegeQeNL08YTujPaEL7woT2xQntYy/0qMn5v1Ab7/xMRJxuDL9+AsZ/3bLf+K/NMe+7IOf/Yu3xXOX/lcZy9fzL3x/n/Hu78j93991fnLvz3vuv3nz3xjvr76z/7NKFC+cvXb585cqVc2/fvLV+fvvfFns8XTn/PPa180C7JeefM5d/t+T8v5Rq+XdLzv/LqZZ/t+T88/s9+XdLzj9/9pF/t+T8X061/Lsl5/+1VMu/W3L+r6Ra/t2S8/96quXfLTn/V1Mt/27J+Z9Ntfy7Jed/LtUHzH9p2v1iNnL++QiX/b9bcv75zAb5d0vO/2Kq5d8tOf9LqZZ/t+T8X0u1/Lsl5/+NVMu/W3L+l1Mt/27J+X8z1fLvlpz/lVTLv1ty/t9Ktfy7Jef/7VQfKv+V6fWL2cj5v55q+3+35Py/k2r5d0vO/7upln+35Py/l2r5d0vO/41Uy79bnnz/vxkzZszkmbafmQAAAAAAAAAAAACAplmcTtz2NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4tRq67vgP42avXzs1ASJ3UwNoxxjib7PoSX2hdTICQJlyaGyUtje16186Cb/HaJUkj2VGgRMKoUUXb8NAWUNTmpcKq8kCrgPKAWlWqRNoH+oKoUHmIqoASpEptFbLVnPn//zszOzuz6x2vZ875fKT45505M+fMmTNn97vOdwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGpt+PDUl/uyLKv8l/+xNsuurvx99eja/LIPXOktBAAAAJbrl/mfr1+XLti/iBvVLPNP7/7Bi7Ozs7PZZwb+dOhrs7PpitEsG1qVZfl10cWfPNRXu0zwdDbS11/zdX+b1Q+0uX6wzfVDba4fbnP9qjbXjzS5bHXN3+ftgCZL96U725T/dW11l2bXZ0P5dZua3OrpvlX9/fF3Obm+/DazQ0ey6exYNpVN1C1fXbYvX/6lDZV13ZXFdfXXrGt95Qh548nDcRv6wj7eVLeuufuMfvahbPQXbzx5+K/PvHZjs9l2N9TdX3U7t2ysbOcXwyXVbe3LVqV9Erezv2Y71zd5TgbqtrMvv13l743b+foit3NgbjNXVONzPpL1539/Jd9Pg7W/1kv7aX247H9uzrLs/NxmNy4zb11Zf7am7pL+uednpHpEVu6jcii9PRtc0nG6YRHHaWVObqo/ThtfE/H53xBuN7jANtQ+TT97arjmeX9z9lKO06jyqBd6rTQeg51+rXTLMRiPi1fyB/1M02NwU3j8T25e+Bhseuw0OQbT4645Bje2Owb7hwfybU5PQl9+m7ljcFvd8gP5mvry+erm1sfg+Jnjp8ZnHn/i1unjh45OHZ06sWPbtokdu3bt2bNn/Mj0samJ6p+XuLe735qsP70GNoZ9F18D72tYtvZQnf3m8Lzz76W+DkdavA7XNizb6dfhYOOD61uZF+T8Y7r62nigstNHLvRnC7zG8udn6/Jfh+lx17wOB2teh02/pzR5HQ4u4nVYWebU1sX9zDJY81+zbVj4e8HyjsG1Ncdg488jjcdgp38e6ZZjcCQcFz/auvD3gvVhe58ZW+rPIwPzjsH0cMO5p3JJ+nl/ZE8+mh2XN1WuuGo4Ozszdfq2xw6dOXN6WxbGinhHzbHSeLyuqXlM2bzjtX/Jx+v+6Xc/c1OTy9eGfTVya+WPkQWfq8oyO29r/Vzl392a78+6S7dnYXTYSu/PZt/NK/tzOMu+/v2n7vvuk1//8IL7s5I3vzi+/J/FUy6tOf8OLXD+jbn/rer60l09PTA0WH39DqS9M1R3Pq5/qgbzc1dfvu7Xxxd3Ph4K/630+fj6FufjdQ3Ldvp8PNT44OL5uK/dbzuWp/H5HAnHybGJ1ufjyjLrti/1mBxseT6+Ocy+sP/fH5JCykU1x85Cx21a1+DgUHhcg3EN9cfpjrrlh0I2q6zrhe2Xdpxuubl6XwPp0c1ZqeN0tGHZTh+n6XdfCx2nfe1++3ZpGp/PkXBcXL+j9XFaWeblncs/d6bfz9WcO4fbHYNDA8OVbR5KB2F+vs9mV8dj8LbscHYyO5ZN5tcO58dTX76usdsXdwwOh/9W+ly5rsUxuKVh2U4fg+n72ELHXt/g/AffAY3P50g4Lp67vfUxWFnmI7s7+7PrlnBJWqbmZ9fG368t9Duvmxp20+U6VgbDdn5/d+vfzVaWObZnqTmz9X66JVxyVZP91Pj6Xeg1NZmtzH5aF7bztT0L76fK9lSW+dreRR5P+7MsO/foHfnve8O/r/zd2R++WPfvLs3+Tefco3f8/Joj/7iU7Qeg971VHWuq3+tq/mVqMf/+DwAAAPSEmPv7w0zkfwAAACiMmPvj/xWeyP8AAABQGDH3D4aZlCT/r/vIa9NvnctSM382iNen3XB3dbnYcZ0IX4/OzqlcfsfzU//9D+cWt+7+LMvevPsPmy6/7u64XVWjYTsvfrT+8nlevHVR6z744Lm03tr++jfC/cfHs9jDoFkFdyLLspeu+2q+ntGHLuTz5bsP5vO+8888XVnm9b3Vr+PtX31Hdfm/COXf/UcO1d3+1bAffhrmxD3N90e83bcvvH/97k/PrS/erm/jtfnDfu7h6v3G98l59unq8nE/L7T93/3KC9+uLP/Ye5tv/7n+5tv/Qrjf58P833dVl699Dipfx9t9KWx/XF+83W3f+l7T7b/45eryp+6sLncwzLj+LeHrTXe+Nl27vx7rO1T3uLKPVZeL65/44R/n18f7i/ffuP0jBy7U7Y/G4+Plf6vez3jD8vHyuJ7o7xvWX7mf2uMzrv+FPzpYt5/brf/ifa++q3K/jeu/pWG5U49uzdc/d3/179j0l1/6atP1xe3Z/7en6h7P/nvD6zis/7mHw/EYrv+/i9X7a3x3hYP31p9/4vLfWHuu7vFEd/2iuv6LHzyaz1Ujq9dcdfU1155/T2XfZdkrq6r31279R//qZN32f/OG6v6I18eOfuP6FxLXf/oLYydOzpydnkx79cnr8vfO+Xh1e+L2XhfOrY1fHzh55pGp06MToxNZNlrct9C7ZN8K8+fVcb710rPzzqBbHwzP501//tKazf/6lXj5vz9QvfzCPdXvW+8Lyz0bLl8bnr+lrX++5zbckL+++14OWzg7//2Cl2P9pv/as6gFw+Nv/LkgHu+n3vlIvh8q1+XfN+Lrepnb/+PJ6v18J+zX2fDOzBtvmFtf7fLxvREu3F99vS97/4XTXHxe/yY835/4afX+43bFx/vj8HPM99bVn+/i8fGdc/2N95+/i8f5cD7Jzlevj0vF/X3h9Ruabl58H5Ls/I3513+S7ufGJT3Mhcw8PjN+bPrE2cfGz0zNnBmfefyJA8dPnj1x5kD+Xp4HPtfu9nPnpzX5+WlyatfOLD9bnayOy+xKb/+pBw9P7p7YPDl15NDZI2cePDV1+ujhmZnDU5Mzmw8dOTL1hXa3n57ct2373h27t48dnZ7ct2fv3h17x6ZPnKxsRnWj2tg18fmxE6cP5DeZ2bdz77bbb985MXb85OTUvt0TE2Nn290+/940Vrn1H4ydnjp26Mz08amxmeknpvZt27tr1/a27wZ4/NSRmdHx02dPjJ+dmTo9Xn0so2fyiyvf+9rdnmKa+Y/qz7ON+qpvxJd96pZd6f1ZK55/asG7qi7S8Aair4X3ovnnt53as5ivY+4fCjMpSf4HAACAMoi5fzjMRP4HAACAwoi5f1WYifwPAAAAhRFz/0iYSUnyf+H6/+vOLWr9+v/6/7X7S/+/ZP3/+7ut/189X+j/d8Zy+/f6/4H+v/6//r/+v/4/HdBt/f+Y+1dn2dLyf3+b6wEAAICuEXP/mjCTkvz7PwAAAJRBzP1XhZnI/wAAAFAYMfdfHWZSkvyv/6//r/+v/6//33z9+v+9Sf+/Nf3/NvT/x7Ny9f/Pd3L79f/1/5mv2/r/MfdfE2ZSkvwPAAAAZRBz/7VhJvI/AAAAFEbM/deFmcj/AAAA0JtWz78o5v61YSYlyf/6//r/+v/6//r/zdev/9+b9P9b0/9vQ//f5//r/+v/01Hd1v+Puf9tYSYlyf8AAABQBjH3vz3MRP4HAACA7jN4aTeLuf8dYSbz8v8lrgAAAAC44mLuvz5rKIKX5N//9f/1//X/9f/1/5uvf/H9/4FM/7976P+3pv/fhv6//r/+v/4/HdVt/f8892cj2TvDTEqS/wEAAKAMYu6/IcxE/gcAAIDuNrL4RWPu/5XGG8r/AAAAUBgx968LMylJ/tf/1//X/9f/1/9vvn6f/9+b9P9b0/9vo9v6/w1HkP5/d2+//r/+P/N1W/8/5v4bw0xKkv8BAACgDGLuvynMRP4HAACAwoi5/1fDTOR/AAAAKIyY+9eHmZQk/+v/d3n/P/b+9P/1//X/9f/1/xdF/781/f82uq3/30D/v7u3X/9f/5/5uq3/H3P/u8JMSpL/AQAAoAxi7n93mIn8DwAAAIURc/97wkzkfwAAACiMmPtHw0xKkv/1/7u8/+/z//X/9f/1//X/l0T/vzX9/zb0//X/9f/1/+mobuv/x9y/IcykJPkfAAAAyiDm/o1hJvI/AAAAFEbM/TeHmcj/AAAAUBgx928KMylJ/tf/1//X/9f/1/9vvn79/96k/9/aYvr/+TlN/1//X/9f/1//nw7otv5/zP3vDTMpSf4HAACAMoi5f3OYifwPAAAAhRFz//vCTOR/AAAAKIyY+7eEmZQk/+v/6/+Xtf+/qmad+v/6/83Wr//fm/T/W/P5/23o/+v/6//r/9NR3db/j7n//WEmJcn/AAAAUAYx928NM5H/AQAAoDBi7r8lzET+BwAAgMKIuX8szKQk+f/K9P/fyP/U/9f/9/n/+v/6//r/nVaG/v9nl3qnNfT/29D/1//X/9f/p6O6rf8fc/+tYSYlyf8AAABQBjH33xZmIv8DAABAYcTcPx5mIv8DAABAYcTcPxFmUpL87/P/9f/1//X/l9T/f8/c/er/V+n/d5cy9P+XQ/+/Df1//f8r3v8f0v+nULqt/x9z/7Ywk5LkfwAAACiDmPu3h5nI/wAAAFAYMffvCDOR/wEAAKAwYu7fGWZSkvyv/6//r/+v/+/z/5uvX/+/N+n/t9b5/n98iPr/+v/6/z7/X/+f+bqt/x9z/+1hJiXJ/wAAAFAGMffvCjOR/wEAAKAwYu7fHWYi/wMAAEBhxNy/J8ykJPlf/78D/f/B5hfr/+v/R/r/4XjQ/9f/XwH6/635/P829P/1//X/9f/pqG7r/8fcvzfMpCT5HwAAAMog5v4PhJnI/wAAAFAYMff/WpiJ/A8AAACFEXP/r4eZlCT/6//7/H/9f/1//f/m69f/7036/63p/7eh/6//r/+v/09HdVv/P+b+fWEmJcn/AAAAUAYx9/9GmIn8DwAAAIURc/8Hw0zkfwAAACiMmPv3h5mUJP/r/+v/6//r/+v/N1+//n9v0v9vTf+/Df1//X/9f/1/Oqrb+v8x938ozKQk+R8AAADKIOb+O8JM5H8AAAAojJj7PxxmIv8DAABAYcTc/5Ewk5Lkf/1//X/9f/1//f/m69f/7036/63p/7eh/6//r/+v/09HdVv/P+b+j4aZlCT/AwAAQBnE3H9nmIn8DwAAAIURc//HwkzkfwAAACiMmPvvCjMpSf7X/9f/1//X/9f/b75+/f/epP/fmv5/G/r/Bev/j16j/6//z+XSLAHNd2n9/6vfXHCFy+z/x9z/m2EmJcn/AAAAUAYx998dZiL/AwAAQGHE3H9PmIn8DwAAAIURc//Hw0xKkv/1//X/9f/1//X/m69f/7836f+31mP9/19eGy7X/6/S/+/u7e/K/v9PFur/z65qvL3+P5fDpfX/m+pI/z/m/k+EmZQk/wMAAEAZxNz/yTAT+R8AAAAKI+b+T4WZyP8AAABQGDH3/1aYSUnyv/5/ZTvm2sv6//r/+QX6//r/+v89S/+/tR7r//v8/wb6/929/V3Z//f5/1xh3db/j7n/3jCTkuR/AAAAKIOY++8LM5H/AQAAoDBi7r8/zET+BwAAgMKIuf+BMJOS5H/9f5//r/+v/6//33z9+v+9Sf+/Nf3/NvT/9f+7rf//n/r/9LZu6//H3P9gmElJ8j8AAACUQcz9nw4zkf8BAACgMGLu/+0wE/kfAAAACiPm/s+EmZQk/+v/90r/f3RF+v+Z/r/+v/6//n+P0/9vTf+/Df1//f9u6//7/H96XLf1/2PufyjMZPH5f2TRSwIAAABXRMz9vxNmUpJ//wcAAIAyiLn/d8NM5H8AAAAojJj7PxtmUpL8f3n6/83a8PPp//v8f/1//X/9f/3/Tlu5/n888+j/6//r/0f6/4vr/882fqML9P8pom7r/8fc/3thJiXJ/wAAAFAGMfc/HGYi/wMAAEBPWMz/hR5z/4EwE/kfAAAACiPm/oNhJiXJ/z7/X/9f/79L+/9/tvFffvSDTx7cdmX6//nU/9f/70WXtf8fTzbx8/8rL36f/6//r/+f6P/7/H/9fxp1W/8/5v5DYSYlyf8AAABQBjH3/36YifwPAAAAhRFz/+EwE/kfAAAACiPm/skwk5Lkf/1//X/9/y7t//fw5//H/aH/X69j/f940tX/b2rlPv+/+vWz+v+X2P8fbnqp/r/+fy9vv/6//j/zXZb+/+yqdOFS+/8x90+FmZQk/wMAAEAZhNzff6Q6566Q/wEAAKAwYu4/GmYi/wMAAEBhxNz/SJhJSfK//r/+v/6//n+n+/8+/785n/+/MvT/W+ue/n9z+v/6/1dq+4fC1P/X/6ezuu3z/2Punw4zKUn+BwAAgDKIuf9zYSbyPwAAABRGzP2fDzOR/wEAAKAwYu4/FmZSkvyv/6//r/+v/6//33z9+v+9Sf+/Nf3/NvT/S9v/78T26//r/zNft/X/Y+4/HmZSkvwPAAAAZRBz//+zdx/PltdlHsdP9zQ13cUfMIvZUDXL2c+Gxcx65g+YhRs3VlmWBSrmRGOOmHPAnDGAIiZUFAOYUMxizoIBM2q1Jf08T9++99zfud2ee+/vfJ/Xa/PMtNOeo0MBH7rf9b0kbrH/AQAAYBi5+y+NW+x/AAAAGEbu/gfELU32v/5f/z9s///f+v/dPl//r/8fmf5/2uH2/7tHnUn/r//f5O+v/9f/s9Pc+v/c/Q+MW5rsfwAAAOggd/+D4hb7HwAAAIaRu/+yuMX+BwAAgGHk7n9w3NJk/2/r/48sevb/mfHq//ez/z/q/X/9v/5f/7//Drb/v+Iff+bT/3v/X/8f9P/6f/0/282t/8/d/5C4pcn+BwAAgA5y9z80brH/AQAAYBi5+x8Wt9j/AAAAMIzc/Q+PW5rsf+//e/9/2Pf/9f+7fr7+X/8/Mu//T+vU/19224WX3HXdv19/Lp+v/+/Q/9+0b99f/6//Z6e59f+5+x8RtzTZ/wAAANBB7v5Hxi32PwAAAAwjd/+j4hb7HwAAAIaRu//RcUuT/a//1//r//X/+v/ln6//30z6/2md+v/z+Xz9f4f+f/++v/5f/89Oc+v/c/c/Jm5psv8BAACgg9z9j41b7H8AAAAYRu7+y+MW+x8AAACGkbv/ZNzSZP/r//e///+b/l//H1f/r//X/+8//f80/f8K+n/9v/5f/89aza3/z91/RdzSZP8DAABAB7n7Hxe32P8AAAAwjNz9j49b7H8AAAAYRu7+J8QtTfa//t/7//p//b/+f/nn6/83k/5/2sH3/8v+Crk7/f/G9/8X6P/1//p/tjrH/v/uiT9tr6X/z93/xLilyf4HAACADnL3Pylusf8BAABgGLn7nxy32P8AAAAwjNz9T4lbmux//b/+f0/9f/z/+HL9v/5/C/3/afr/edH/T5vN+/9Hji39Yf3/xvf/3v/X/+v/Ocvc3v/P3f/UuCWG36X/dV7/MQEAAIAZyd3/tLilya//AwAAQAe5+58et9j/AAAAMIzc/c+IW5rsf/2//t/7//p//f/yz5/q/6/f8v30//Oi/582m/5/F/p//f8mf3/9v/6fnebW/+fuf2bc0mT/AwAAQAe5+6+MW+x/AAAAGEbu/mfFLfY/AAAADCN3/7Pjlib7f3n/f+Zf1//vjf7/7O+v/1/+x8e6+v/8d9T/T/b//+P9/570/9P0/yvo//X/+v/d+v8Tq36+/p9l5tb/5+5/TtzSZP8DAABAB7n7nxu32P8AAAAwjNz9z4tb7H8AAAAYRu7+58ctTfa/9//1//r/zev/vf9/2mG+/7848P7/mP5/j/T/0/T/K+j/9f/6f+//s1Zz6/9z978gbmmy/wEAAKCD3P0vjFvsfwAAANgMW3/vwPbfUBpy978obrH/AQAAYBi5+18ctzTZ//p//b/+X//fu/8/viH9v/f/90r/P03/v8Lh9v9HBu3/jw3W/1+128+fQ/9/uf6fmTmr/7/hzI8fVv+fu/8lcUuT/Q8AAAAd5O5/adxi/wMAAMAwcve/LG6x/wEAAGAYuftfHrc02f/73v+f2P2z9f/6f/2//v/w+/9Nef9f/79X+v9p+v8VvP/v/X/v/+v/Wauz+v8tDqv/z93/irj1jwCa7H8AAADoIHf/K+MW+x8AAACGkbv/qrjF/gcAAIBh5O5/VdzSZP97/1//r//X/+v/l3++/n8z6f+n6f9X0P/r//X/+n/Wam79f+7+V8ctTfY/AAAAdJC7/zVxi/0PAAAAw8jd/9q4xf4HAACAYeTuf13c0mT/6//3t//PH9f/6/8X+n/9v/7/QLTt/48s+yvRTrv0/7fc9+T/nf0j+n/9v/5f/6//Zw1m0f+fOvN3l7n7Xx+3NNn/AAAA0EHu/jfELfY/AAAADCN3/xvjFvsfAAAAhpG7/01xyz37f3uFunmOr/jX9f/e/9f/6//1/8s/X/+/mdr2/3vk/f8V9P/6f/2//p+1mkX/v+V/z93/5rjFr/8DAADAMHL3vyVusf8BAABgGLn73xq32P8AAAAwjNz9b4tbmux//b/+X/+v/9f/L/98/f9m0v9P0/+voP/X/6+l/79//Ij+X//P3Pr/3P1Xxy1N9j8AAAB0kLv/7XGL/Q8AAADDyN3/jrjF/gcAAIBh5O5/Z9zSZP/r//X/+n/9v/5/+efr/zeT/n+a/n+xWFwz8QWW9f+n/lX/r//3/r/+n/M0t/4/d/+74pYm+x8AAAA6yN1/Tdxi/wMAAMAwcvdfG7fY/wAAADCM3P3vjlua7H/9v/5f/6//b9T/H9H/j0//P03/v4L3//X/+n/9P2s1t/4/d/974pYm+x8AAAA6yN1/Xdxi/wMAAMAwcve/N26x/wEAAGAYufuvj1t23f9HD+BbHRz9v/5f/6//b9T/D/j+//HVH9zM/vX/C/2//l//v4L+X/+v/2e7ufX/ufvfF7f49X8AAAAYRu7+98ct9j8AAAAMI3f/B+IW+x8AAACGkbv/g3FLk/2v/9f/6//1//r/5Z+/Gf3/6s/txvv/0/T/K+j/9f/6f/0/azW3/j93/4filib7HwAAADrI3X9D3GL/AwAAwDBy9384brH/AQAAYBi5+z8StzTZ/4fR/x/dcvX/c+v/Fwv9v/5f/3/aAfT/xxf6/7XT/0/T/6+g/x+z/z+6GKj/P7Hrz9f/M0dz6/9z9380bmmy/wEAAKCD3P03xi32PwAAAAwjd//H4hb7HwAAAIaRu//jcUuT/e/9f/3/xr7/f0H8BP2//n9z+//6b1X/vz76/2n6/xX0//vV/9+xli94eN9/Rv3/7vT/zNHc+v/c/TfFLU32PwAAAHSQu/8TcYv9DwAAAMPI3f/JuMX+BwAAgGHk7v9U3NJk/+v/9f8b2/97/1//r//X/y+h/5+m/19B/z/m+//6f/0/h2Zu/X/u/k/HLU32PwAAAHSQu//muMX+BwAAgGHk7r8lbrH/AQAAYBi5+z8TtzTZ//p//b/+fzP7/+P6f/2//n+pufT/F1/8v7fq//X/+n/9v/5f/9/d3Pr/3P2fjVua7H8AAADoIHf/5+IW+x8AAACGkbv/83GL/Q8AAADDyN3/hbilyf7f2f9fsDhdqJ62rP+PRk3/v4X+/+zvr/9f/seH9//1//r//TeX/t/7/+f3/fX/+v9N/v7n1P9ftPPn6/8Z0dz6/9z9t8YtTfY/AAAAdJC7/4txi/0PAAAAw8jd/6W4xf4HAACAYeTuvy1uabL/vf+v/9f/6//1/8s/X/+/mdbb/5/Q/+v/9f/6/37v//+L/p/1mVv/n7v/y3FLk/0PAAAAHeTu/0rcYv8DAADAMHL3fzVusf8BAABgGLn7vxa3NNn/+n/9v/5f/6//X/75+v/N5P3/afr/FWba/+ffoer/5/39h+n/vf/PGq21/9/+F6Xz6P9z9389bmmy/wEAAKCD3P3fiFvsfwAAABhG7v5vxi32PwAAAAwjd/+34pYm+3/9/f9F+v+g/59L/39v/f+2z9f/6/9Hpv/Pv6Ivp/9f4Z4/zR2bXf+f9P/z/v76f/0/O621/1/s+NvRc+7/c/ffHrc02f8AAADQQe7+b8ct9j8AAAAMI3f/d+IW+x8AAACGkbv/u3FLk/3v/f9e/f+RRcf+3/v/+n/9fyf6/2n6/xVm+v5/0v/P+/vr//X/7DS3/j93//filib7HwAAADbV///n/W7f6/9t7v7vxy32PwAAAAwjd/8P4hb7HwAAAIaRu/+HcUuT/a//79X/93z/X/+v/9f/d6L/n6b/X0H/r//X/+v/Wau59f+5+38Ut2wZfsfO+T8lAAAAMCe5+38ctzT59X8AAADoIHf/T+KWHfv/1B5/VzsAAAAwN7n7fxq37OHX//9j377VwdH/z7z/X4zf/9+50P/r/0/T/+v/10H/P+2f7P9PHdH/6/8n6P/1//p/tptb/5+7/2dxi9//DwAAAJvsrH+ikLv/53GL/Q8AAADDyN3/i7jF/gcAAIBh5O6/I25psv/1/zPv/8/r/f8T9T9tQv/v/f997P+vPL708/X/+v+R6f+nef9/Bf2//l//r/9nrebW/+fuvzNuabL/AQAAoIPc/b+MW+x/AAAAGEbu/l/FLfY/AAAADCN3/6/jlib7X/8/Yv+/We//6/+9/3/+/f+/XXjy5nvd59qr9f+csfb+P/7WYFn/n38s6P8PpP+/cdm/n/5f/z+n76//1/+z09z6/9z9v4lbmux/AAAA6CB3/11xi/0PAAAAw8jd/9u4xf4HAACAYeTu/13c0mT/6//1/3Pp//O/60Po/09uXv+fTXH3/t/7//r/nbz/P22D+3/v/+v/Z//99f/6f3aaW/+fu//3cUuT/Q8AAAAd5O7/Q9xi/wMAAMAwcvf/MW6x/wEAAGAYufv/FLc02f/6f/3/XPr/5P3/Mz/P+/+n6f/1/+dC/z9N/7+C/l//r//X/7NWc+v/c/f/OW5psv8BAACgg9z9d8ct9j8AAAAMI3f/X+IW+x8AAACGkbv/r3FLk/2v/9f/6//1//r/5Z+v/99M+v9p+v8V9P/6f/2//p+1mlv/n7v/7wEAAP//TYN26A==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 6m45.794105517s ago: executing program 5 (id=2412): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0x4, 0x0, 0x3}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000200)) 6m45.249267265s ago: executing program 34 (id=2411): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') 6m44.055553834s ago: executing program 5 (id=2426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m43.53577055s ago: executing program 35 (id=2426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m24.689597533s ago: executing program 4 (id=2595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x60}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 6m24.443211886s ago: executing program 4 (id=2598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001400)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x40008004) 6m24.060227085s ago: executing program 4 (id=2602): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m23.74008129s ago: executing program 4 (id=2593): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 6m22.210167267s ago: executing program 6 (id=2606): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) 6m22.210030277s ago: executing program 4 (id=2607): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='[:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 1 [ 561.868868][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 561.885222][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 561.905389][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 561.912997][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 561.927545][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 561.996399][T10136] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 562.014379][T10136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.064943][T10136] usb 1-1: config 0 descriptor?? [ 562.076022][T21079] vxcan1 speed is unknown, defaulting to 1000 [ 562.267165][T21092] deleting an unspecified loop device is not supported. [ 562.506607][T10136] [drm:udl_init] *ERROR* Selecting channel failed [ 562.589019][T10136] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 562.610437][T10136] [drm] Initialized udl on minor 2 [ 562.668053][T10136] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 562.713130][T10136] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 562.774499][T10136] usb 1-1: USB disconnect, device number 24 [ 562.781475][T21104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 562.792801][T10144] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 562.802361][T21104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 562.830060][T10144] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 562.841438][T21104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 562.855228][T21104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 562.863346][T10144] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 562.923269][T21104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.929013][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.618267][ T26] kauditd_printk_skb: 3032 callbacks suppressed [ 563.618281][ T26] audit: type=1326 audit(1774269196.829:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6979c799 code=0x7ffc0000 [ 563.626509][T21138] loop8: detected capacity change from 0 to 256 [ 563.647208][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.684517][ T26] audit: type=1326 audit(1774269196.889:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6979c799 code=0x7ffc0000 [ 563.717286][ T26] audit: type=1326 audit(1774269196.899:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6979c799 code=0x7ffc0000 [ 563.740414][ T26] audit: type=1326 audit(1774269196.899:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f8c6979c799 code=0x7ffc0000 [ 563.762744][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.800494][T21138] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 563.819770][ T26] audit: type=1326 audit(1774269196.899:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6979c799 code=0x7ffc0000 [ 563.918789][ T26] audit: type=1326 audit(1774269196.899:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6979c799 code=0x7ffc0000 [ 563.965848][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 564.058055][ T26] audit: type=1326 audit(1774269196.899:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6979c799 code=0x7ffc0000 [ 564.080490][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.203869][ T26] audit: type=1326 audit(1774269196.899:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8c6979c799 code=0x7ffc0000 [ 564.207524][T21079] chnl_net:caif_netlink_parms(): no params data found [ 564.226362][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.302053][ T26] audit: type=1326 audit(1774269196.899:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21139 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8c6979c799 code=0x7ffc0000 [ 564.309423][T21117] loop7: detected capacity change from 0 to 32768 [ 564.446905][T21117] JBD2: Ignoring recovery information on journal [ 564.663464][T21117] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 564.978548][T10228] ocfs2: Unmounting device (7,7) on (node local) [ 565.033625][T21079] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.048344][T21079] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.082765][T21079] device bridge_slave_0 entered promiscuous mode [ 565.150117][T21079] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.168896][T21186] loop0: detected capacity change from 0 to 256 [ 565.184468][T21079] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.192667][T21079] device bridge_slave_1 entered promiscuous mode [ 565.215256][T21186] exfat: Deprecated parameter 'namecase' [ 565.233053][T21190] loop8: detected capacity change from 0 to 1024 [ 565.269742][T21186] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 565.335368][T21190] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 565.425374][T21079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.635914][T10264] EXT4-fs (loop8): unmounting filesystem. [ 565.811302][T21205] printk: syz.7.6433 (21205): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 565.907559][T21079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.040677][T21079] team0: Port device team_slave_0 added [ 566.054529][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 566.330543][T21079] team0: Port device team_slave_1 added [ 566.348484][T21219] netlink: 'syz.2.6439': attribute type 10 has an invalid length. [ 566.415401][T21219] device veth0_vlan left promiscuous mode [ 566.464488][T10136] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 566.464822][T21219] device veth0_vlan entered promiscuous mode [ 566.485773][T21219] team0: Device veth0_vlan failed to register rx_handler [ 566.623821][T21079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.649195][T21079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.682219][T10136] usb 1-1: unable to get BOS descriptor or descriptor too short [ 566.695606][T10136] usb 1-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 566.728601][T10136] usb 1-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 566.748239][T10136] usb 1-1: config 66 has no interface number 0 [ 566.770327][T21079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.793621][T10136] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 566.834417][T10136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.842455][T10136] usb 1-1: Product: syz [ 566.859383][T10136] usb 1-1: Manufacturer: syz [ 566.864558][T21079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.871816][T10136] usb 1-1: SerialNumber: syz [ 566.884512][T21079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.947573][T21079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.959499][T21240] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6444'. [ 566.989929][T13136] device hsr_slave_0 left promiscuous mode [ 567.010944][T13136] device hsr_slave_1 left promiscuous mode [ 567.030777][T13136] device bridge_slave_1 left promiscuous mode [ 567.055286][T13136] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.086120][T13136] device bridge_slave_0 left promiscuous mode [ 567.101332][T13136] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.138385][T21249] Non-string source [ 567.149828][T11392] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 567.175439][T10136] usb 1-1: USB disconnect, device number 25 [ 567.209548][T13136] device veth1_macvtap left promiscuous mode [ 567.234618][T13136] device veth1_vlan left promiscuous mode [ 567.349282][T11392] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 567.365093][T11392] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.373928][T11392] usb 8-1: Product: syz [ 567.378956][T11392] usb 8-1: Manufacturer: syz [ 567.383851][T11392] usb 8-1: SerialNumber: syz [ 567.401196][T11392] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 567.441655][T11392] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 567.608205][T13136] bond1 (unregistering): Released all slaves [ 567.760361][T21261] loop0: detected capacity change from 0 to 2048 [ 567.811116][T21261] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.878318][T10136] usb 8-1: USB disconnect, device number 18 [ 568.144485][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 568.524471][T11392] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 568.531516][T11392] ath9k_htc: Failed to initialize the device [ 568.551040][T10136] usb 8-1: ath9k_htc: USB layer deinitialized [ 568.856902][T13136] team0 (unregistering): Port device team_slave_1 removed [ 568.913957][T13136] team0 (unregistering): Port device team_slave_0 removed [ 568.974168][T13136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.036697][T13136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.469869][T13136] bond0 (unregistering): Released all slaves [ 569.611445][T21271] netlink: 'syz.7.6456': attribute type 2 has an invalid length. [ 569.742952][T21079] device hsr_slave_0 entered promiscuous mode [ 569.824810][T21079] device hsr_slave_1 entered promiscuous mode [ 569.842556][T21079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.884619][T21079] Cannot create hsr debugfs directory [ 570.204466][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 570.254246][T21287] 9pnet: Could not find request transport: virTio [ 570.873896][T21309] x_tables: unsorted underflow at hook 1 [ 570.891344][T21278] loop2: detected capacity change from 0 to 32768 [ 570.991494][T21278] JBD2: Ignoring recovery information on journal [ 571.164726][T21278] (syz.2.6460,21278,0):ocfs2_clear_journal_error:1114 ERROR: File system error 33023 recorded in journal 0. [ 571.228199][T21278] (syz.2.6460,21278,0):ocfs2_clear_journal_error:1116 ERROR: File system on device loop2 needs checking. [ 571.350349][T21278] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 571.363731][T21325] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6475'. [ 571.402505][T21327] syz.8.6476 (21327): /proc/21326/oom_adj is deprecated, please use /proc/21326/oom_score_adj instead. [ 571.424564][T21325] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6475'. [ 571.446404][T13141] (kworker/u4:18,13141,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0 [ 571.527712][T21278] (syz.2.6460,21278,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=0, inode=397313, rec_len=0, name_len=1 [ 571.574445][T21278] (syz.2.6460,21278,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 571.631520][T21278] (syz.2.6460,21278,1):ocfs2_mknod:298 ERROR: status = -2 [ 571.677382][T21278] (syz.2.6460,21278,1):ocfs2_mknod:502 ERROR: status = -2 [ 571.730193][T21338] loop0: detected capacity change from 0 to 256 [ 571.732314][T21278] (syz.2.6460,21278,1):ocfs2_mkdir:659 ERROR: status = -2 [ 571.782126][T21338] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 571.830697][T21334] loop7: detected capacity change from 0 to 4096 [ 571.858880][T21338] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 571.888288][T21338] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 571.973545][T11405] ocfs2: Unmounting device (7,2) on (node local) [ 572.021500][T21334] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 572.214186][T10228] EXT4-fs (loop7): unmounting filesystem. [ 572.612377][T21360] loop2: detected capacity change from 0 to 1024 [ 572.655166][T21360] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 572.676907][T21079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 572.740094][T21079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 572.776666][T21079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 572.791767][T21360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 572.840769][T21368] netlink: 'syz.7.6490': attribute type 4 has an invalid length. [ 572.900374][T21360] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 572.944764][T21079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 573.038373][ T26] audit: type=1326 audit(1774269206.249:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21376 comm="syz.8.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 573.112925][T11405] EXT4-fs (loop2): unmounting filesystem. [ 573.174647][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 573.199696][ T26] audit: type=1326 audit(1774269206.249:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21376 comm="syz.8.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 573.290689][ T26] audit: type=1326 audit(2000000000.000:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21376 comm="syz.8.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 573.347222][T21079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.398151][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 573.413807][ T26] audit: type=1326 audit(2000000000.000:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21376 comm="syz.8.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 573.437908][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 573.478256][T21079] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.530682][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 573.547889][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 573.575048][T13141] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.582228][T13141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.609907][T21389] loop8: detected capacity change from 0 to 2048 [ 573.639315][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 573.667706][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 573.705707][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 573.774685][T21389] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.784917][T13141] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.792022][T13141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.831060][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 573.840205][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 573.937276][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 573.950395][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 573.983299][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 574.011684][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 574.071866][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 574.090895][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 574.115660][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 574.127300][T21411] ALSA: mixer_oss: invalid OSS volume '~¢)–„VÄ]Qå' [ 574.145317][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 574.171530][T21079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 574.192577][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 574.474994][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6511'. [ 574.518423][T21426] netlink: 312 bytes leftover after parsing attributes in process `syz.8.6511'. [ 574.584752][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6511'. [ 575.148499][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 575.156867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 575.203809][T21079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.316357][T13138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 575.350025][T21462] xt_addrtype: ipv6 does not support BROADCAST matching [ 575.355203][T13138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 575.438313][T13128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 575.461836][T13128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 575.478654][T21079] device veth0_vlan entered promiscuous mode [ 575.506538][T13128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 575.551042][T13128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 575.582120][T21079] device veth1_vlan entered promiscuous mode [ 575.644212][T21474] netlink: 'syz.0.6530': attribute type 8 has an invalid length. [ 575.713741][T21079] device veth0_macvtap entered promiscuous mode [ 575.745095][T13138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 575.766834][T13138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 575.830324][T13138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 575.896500][T21079] device veth1_macvtap entered promiscuous mode [ 575.947519][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.974859][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.000683][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.039378][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.080316][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.114360][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.146711][T21079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.224541][T13134] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 576.245395][T13134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 576.254227][T13134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 576.318935][T21468] loop2: detected capacity change from 0 to 40427 [ 576.334031][T21468] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 576.383865][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.410412][T21468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 576.424448][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.442303][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.466175][T21468] F2FS-fs (loop2): invalid crc value [ 576.471535][T21468] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 576.481181][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.518058][T21472] loop8: detected capacity change from 0 to 32768 [ 576.523266][T21468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 576.544447][T21079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.568600][T21472] XFS (loop8): Mounting V5 Filesystem [ 576.600663][T21079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.605082][T21472] XFS (loop8): Ending clean mount [ 576.635447][T21472] XFS (loop8): Quotacheck needed: Please wait. [ 576.689238][T21472] XFS (loop8): Quotacheck: Done. [ 576.690817][T21079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.757333][T21468] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 576.796666][T13128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 576.806319][T13128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 576.824784][T21468] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 576.838462][T21079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.885748][T21079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.895681][T21468] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 576.904673][T21468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 576.931873][T21079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.953641][T21079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.983351][T10264] XFS (loop8): Unmounting Filesystem [ 576.990188][T21508] loop7: detected capacity change from 0 to 1024 [ 577.045663][T21508] EXT4-fs: inline encryption not supported [ 577.268338][T21508] EXT4-fs error (device loop7): ext4_free_blocks:6219: comm syz.7.6539: Freeing blocks not in datazone - block = 0, count = 4096 [ 577.280326][T21514] ufs: You didn't specify the type of your ufs filesystem [ 577.280326][T21514] [ 577.280326][T21514] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 577.280326][T21514] [ 577.280326][T21514] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 577.313104][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.355830][T21508] EXT4-fs (loop7): Remounting filesystem read-only [ 577.362608][T21508] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.6539: Invalid inode bitmap blk 0 in block_group 0 [ 577.435559][T21514] ufs: ufstype=old is supported read-only [ 577.453257][T13138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.477029][T13138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.510134][ T52] block nbd0: Attempted send on invalid socket [ 577.516497][ T52] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 577.527750][T21508] EXT4-fs (loop7): Remounting filesystem read-only [ 577.554731][T21508] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 577.586806][T21508] EXT4-fs (loop7): Remounting filesystem read-only [ 577.603822][T13138] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 577.637876][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.658684][T21508] EXT4-fs (loop7): 1 orphan inode deleted [ 577.672713][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.708164][T13128] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 577.732084][T21508] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 577.891453][T21508] EXT4-fs error (device loop7): ext4_search_dir:1549: inode #2: block 16: comm syz.7.6539: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 578.000497][T21508] EXT4-fs (loop7): Remounting filesystem read-only [ 578.172957][T10228] EXT4-fs (loop7): unmounting filesystem. [ 578.824582][ T4311] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 579.009357][T21568] netlink: 'syz.7.6561': attribute type 1 has an invalid length. [ 579.028310][ T4311] usb 9-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 579.048020][ T4311] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.074366][ T4311] usb 9-1: Product: syz [ 579.088932][ T4311] usb 9-1: Manufacturer: syz [ 579.093585][ T4311] usb 9-1: SerialNumber: syz [ 579.145204][ T4311] usb 9-1: config 0 descriptor?? [ 579.331331][T21581] loop3: detected capacity change from 0 to 1024 [ 579.385420][ T4311] peak_usb 9-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 579.427604][ T4261] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 579.596466][ T4311] peak_usb 9-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 579.622202][ T4311] peak_usb 9-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 579.774967][ T4311] peak_usb: probe of 9-1:0.0 failed with error -71 [ 579.808445][ T4311] usb 9-1: USB disconnect, device number 23 [ 580.453855][T21587] loop2: detected capacity change from 0 to 32768 [ 580.504043][T21587] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.6569 (21587) [ 580.601442][T21587] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 580.630056][T21587] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 580.704457][T21587] BTRFS info (device loop2): enabling auto defrag [ 580.742685][T21587] BTRFS info (device loop2): use no compression [ 580.769682][T21587] BTRFS info (device loop2): max_inline at 4096 [ 580.808538][T21587] BTRFS info (device loop2): using free space tree [ 580.841205][T21598] loop7: detected capacity change from 0 to 32768 [ 581.069289][T21598] XFS (loop7): Mounting V5 Filesystem [ 581.205977][T21598] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 581.207079][T21587] BTRFS info (device loop2): enabling ssd optimizations [ 581.247193][T21598] XFS (loop7): Tail block (0x29) overwrite detected. Updated to 0x30 [ 581.349062][T21598] XFS (loop7): Ending clean mount [ 581.391026][T21598] XFS (loop7): Quotacheck needed: Please wait. [ 581.480669][T21667] loop8: detected capacity change from 0 to 512 [ 581.498240][T13132] XFS (loop7): Metadata corruption detected at xfs_dinode_verify+0x2d5/0x1110, inode 0x1803 dinode [ 581.537191][T21667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 581.553196][T21624] loop0: detected capacity change from 0 to 32768 [ 581.564632][T13132] XFS (loop7): Unmount and run xfs_repair [ 581.584764][T13132] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 581.676281][T13132] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 581.685351][T13132] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 581.695403][T13132] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 581.704590][T13132] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 581.710269][T21667] EXT4-fs error (device loop8): mb_free_blocks:1824: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 581.713535][T13132] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 581.737483][T13132] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 581.746573][T13132] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 581.766721][T21624] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 581.773171][T13132] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 581.792058][T21667] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #11: comm syz.8.6588: corrupted inode contents [ 581.818723][T11405] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 581.831489][T21624] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 581.845054][T21667] EXT4-fs error (device loop8): ext4_dirty_inode:6137: inode #11: comm syz.8.6588: mark_inode_dirty error [ 581.889555][T21598] XFS (loop7): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 581.936527][T21667] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.6588: invalid indirect mapped block 1 (level 1) [ 581.967657][T21624] (syz.0.6581,21624,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 582.062808][T21667] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #11: comm syz.8.6588: corrupted inode contents [ 582.159194][T21667] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 582.207769][T21667] EXT4-fs error (device loop8): ext4_do_update_inode:5272: inode #11: comm syz.8.6588: corrupted inode contents [ 582.285145][T21667] EXT4-fs error (device loop8): ext4_truncate:4318: inode #11: comm syz.8.6588: mark_inode_dirty error [ 582.343205][ T26] audit: type=1326 audit(2000000009.280:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.3.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191719c799 code=0x7ffc0000 [ 582.369607][T21667] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 582.435926][T21667] EXT4-fs (loop8): 1 truncate cleaned up [ 582.441726][T21667] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 582.460207][ T26] audit: type=1326 audit(2000000009.280:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.3.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f191719c799 code=0x7ffc0000 [ 582.570980][ T26] audit: type=1326 audit(2000000009.280:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21682 comm="syz.3.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191719c799 code=0x7ffc0000 [ 582.598747][T10228] XFS (loop7): Unmounting Filesystem [ 582.643510][T21667] EXT4-fs (loop8): re-mounted. Quota mode: none. [ 582.734830][T11340] ocfs2: Unmounting device (7,0) on (node local) [ 582.953097][T21695] overlayfs: conflicting options: nfs_export=on,index=off [ 582.962912][T10264] EXT4-fs (loop8): unmounting filesystem. [ 583.439277][T21711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6601'. [ 583.479218][T21711] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6601'. [ 583.517283][T21711] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6601'. [ 583.599367][T21711] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 583.682969][T21718] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6605'. [ 583.847860][ T26] audit: type=1326 audit(2000000010.790:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc999b9c799 code=0x7ffc0000 [ 583.934419][ T26] audit: type=1326 audit(2000000010.820:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fc999b9c799 code=0x7ffc0000 [ 584.045289][ T26] audit: type=1326 audit(2000000010.820:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc999b9c799 code=0x7ffc0000 [ 584.144362][ T26] audit: type=1326 audit(2000000010.820:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.2.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc999b9c799 code=0x7ffc0000 [ 584.623630][T21720] loop7: detected capacity change from 0 to 32768 [ 584.688707][T21720] [ 584.688707][T21720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 584.688707][T21720] [ 584.699667][T21749] loop2: detected capacity change from 0 to 4096 [ 584.727569][T21755] netlink: 'syz.0.6619': attribute type 1 has an invalid length. [ 584.764062][T21755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6619'. [ 584.779682][T21720] [ 584.779682][T21720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 584.779682][T21720] [ 584.822936][T21720] [ 584.822936][T21720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 584.822936][T21720] [ 584.850540][T21749] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 584.890897][T21720] [ 584.890897][T21720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 584.890897][T21720] [ 584.932363][T21720] [ 584.932363][T21720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 584.932363][T21720] [ 584.937600][T21749] ntfs3: loop2: Failed to load $Extend. [ 584.982622][T21720] [ 584.982622][T21720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 584.982622][T21720] [ 585.080202][ T107] [ 585.080202][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 585.080202][ T107] [ 585.175592][T13138] [ 585.175592][T13138] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 585.175592][T13138] [ 585.222083][T13138] [ 585.222083][T13138] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 585.222083][T13138] [ 585.272546][T10228] [ 585.272546][T10228] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 585.272546][T10228] [ 585.294220][T10228] [ 585.294220][T10228] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 585.294220][T10228] [ 585.354459][ T107] [ 585.354459][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 585.354459][ T107] [ 585.550626][T21776] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6625'. [ 585.894195][T21792] rtc_cmos 00:00: Alarms can be up to one day in the future [ 586.641409][T21785] loop2: detected capacity change from 0 to 32768 [ 587.114652][T11393] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 587.314377][T11393] usb 4-1: Using ep0 maxpacket: 16 [ 587.323210][T11393] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 587.394557][T11393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.403178][T11393] usb 4-1: Product: syz [ 587.440685][T11393] usb 4-1: Manufacturer: syz [ 587.467514][T11393] usb 4-1: SerialNumber: syz [ 587.481933][T11393] r8152-cfgselector 4-1: config 0 descriptor?? [ 587.932858][T11393] r8152-cfgselector 4-1: Unknown version 0x0000 [ 587.974581][T11393] r8152-cfgselector 4-1: USB disconnect, device number 10 [ 588.058622][T21874] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6666'. [ 588.082313][T21874] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6666'. [ 588.268964][T21884] netlink: 'syz.8.6670': attribute type 1 has an invalid length. [ 588.296244][T21886] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6671'. [ 588.364621][T10145] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 588.562495][T10145] usb 1-1: config 0 has no interfaces? [ 588.581625][T10145] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 588.643845][T10145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.682867][T10145] usb 1-1: Product: syz [ 588.712997][T10145] usb 1-1: Manufacturer: syz [ 588.722655][T10145] usb 1-1: SerialNumber: syz [ 588.748303][T10145] r8152-cfgselector 1-1: config 0 descriptor?? [ 588.975841][T10145] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 589.043975][T21914] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6680'. [ 589.090474][T21914] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6680'. [ 589.144702][T21916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6682'. [ 589.149908][T21914] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6680'. [ 589.195023][T10145] usb 1-1: USB disconnect, device number 26 [ 589.872566][T21910] loop3: detected capacity change from 0 to 32768 [ 589.897478][T21938] loop2: detected capacity change from 0 to 4096 [ 589.941895][T21938] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 589.952252][T21910] /dev/loop3: Can't open blockdev [ 590.102013][T21938] ntfs3: loop2: failed to convert "c46c" to iso8859-4 [ 591.021694][T21980] loop2: detected capacity change from 0 to 1024 [ 591.061877][ C1] sd 0:0:1:0: [sda] tag#2573 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 591.072476][ C1] sd 0:0:1:0: [sda] tag#2573 CDB: Read(6) 08 00 00 00 03 44 [ 591.086111][T11393] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 591.141186][T21986] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 591.285241][T21980] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 591.292598][T11393] usb 1-1: Using ep0 maxpacket: 32 [ 591.303717][T11393] usb 1-1: string descriptor 0 read error: -22 [ 591.303902][T21980] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 591.333246][T11393] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 591.370080][T11393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.434052][T11393] usb 1-1: MIDIStreaming interface descriptor not found [ 591.595089][T13132] hfsplus: b-tree write err: -5, ino 25 [ 591.621435][T13132] hfsplus: b-tree write err: -5, ino 4 [ 591.631615][T13132] hfsplus: b-tree write err: -5, ino 2 [ 591.652201][T13132] hfsplus: b-tree write err: -5, ino 23 [ 591.701966][T11393] usb 1-1: USB disconnect, device number 27 [ 592.024692][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6719'. [ 592.054140][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6719'. [ 592.579073][T21995] loop7: detected capacity change from 0 to 40427 [ 592.609046][T21995] F2FS-fs (loop7): build fault injection attr: rate: 684, type: 0x3ffff [ 592.625974][T21995] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x35f7 [ 592.627575][T22001] loop8: detected capacity change from 0 to 32768 [ 592.660253][T21995] F2FS-fs (loop7): invalid crc value [ 592.689781][T22001] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.6714 (22001) [ 592.719803][T21995] F2FS-fs (loop7): Found nat_bits in checkpoint [ 592.791137][T22001] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 592.852438][T22001] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 592.914525][T22001] BTRFS info (device loop8): enabling auto defrag [ 592.940283][T22001] BTRFS info (device loop8): use no compression [ 592.952094][T21995] F2FS-fs (loop7): Start checkpoint disabled! [ 592.958423][T22001] BTRFS info (device loop8): max_inline at 4096 [ 592.986598][T22036] netlink: 'syz.2.6729': attribute type 13 has an invalid length. [ 593.000318][T22001] BTRFS info (device loop8): using free space tree [ 593.046292][T21995] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 593.240464][T21995] syz.7.6713: attempt to access beyond end of device [ 593.240464][T21995] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 593.404834][T22001] BTRFS info (device loop8): enabling ssd optimizations [ 593.728236][T10264] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 593.736393][T13136] kworker/u4:16: attempt to access beyond end of device [ 593.736393][T13136] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 594.190792][ T4259] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop8 scanned by udevd (4259) [ 594.594088][T22098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6733'. [ 594.716936][T22103] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (253) [ 594.774058][T22108] loop2: detected capacity change from 0 to 128 [ 594.866135][T22108] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 594.928342][T22108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 595.034560][T11393] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 595.214546][T11391] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 595.226099][T11393] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 595.249708][T11393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.272621][T11393] usb 1-1: Product: syz [ 595.291203][T11393] usb 1-1: Manufacturer: syz [ 595.308799][T11393] usb 1-1: SerialNumber: syz [ 595.331512][T11393] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 595.427033][T11391] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 595.438164][T11393] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 595.457766][T11391] usb 8-1: config 0 has no interface number 0 [ 595.482816][T11391] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 595.514883][T11391] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 595.542054][T11391] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 595.586262][T11391] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.634765][T11391] usb 8-1: config 0 descriptor?? [ 595.678386][T11391] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input23 [ 595.886993][T11391] usb 1-1: USB disconnect, device number 28 [ 595.912433][ T4311] usb 8-1: USB disconnect, device number 19 [ 595.948234][ T4259] udevd[4259]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 595.985233][ T4259] udevd[4259]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 596.295968][T22156] netlink: 'syz.8.6764': attribute type 12 has an invalid length. [ 596.524472][T11393] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 596.531542][T11393] ath9k_htc: Failed to initialize the device [ 596.563675][T11391] usb 1-1: ath9k_htc: USB layer deinitialized [ 596.703089][T22170] loop0: detected capacity change from 0 to 1024 [ 596.728132][ T26] audit: type=1326 audit(2000000023.670:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22173 comm="syz.8.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 596.750739][ C1] vkms_vblank_simulate: vblank timer overrun [ 596.881059][ T26] audit: type=1326 audit(2000000023.700:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22173 comm="syz.8.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 596.922301][T22170] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 596.933111][T22170] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 597.025745][ T26] audit: type=1326 audit(2000000023.700:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22173 comm="syz.8.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 597.048358][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.157796][T13141] hfsplus: b-tree write err: -5, ino 25 [ 597.163605][T13141] hfsplus: b-tree write err: -5, ino 4 [ 597.168946][ T26] audit: type=1326 audit(2000000023.700:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22173 comm="syz.8.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 597.192229][T13141] hfsplus: b-tree write err: -5, ino 2 [ 597.232019][T13141] hfsplus: b-tree write err: -5, ino 23 [ 597.406774][ T4276] Bluetooth: hci4: command 0x0405 tx timeout [ 597.509103][T22205] netlink: 288 bytes leftover after parsing attributes in process `syz.8.6784'. [ 599.219445][T22277] loop3: detected capacity change from 0 to 2048 [ 599.252130][T22281] overlayfs: conflicting options: userxattr,metacopy=on [ 599.266088][T22277] /dev/loop3: Can't open blockdev [ 599.324780][ T4259] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 599.673226][T22296] loop2: detected capacity change from 0 to 512 [ 599.679460][T22294] device bridge1 entered promiscuous mode [ 599.816495][T22296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 599.939825][T22296] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.6822: bg 0: bad block bitmap checksum [ 599.960713][T22306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6824'. [ 600.021944][T22296] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6179: Filesystem failed CRC [ 600.169682][T22315] tmpfs: Bad value for 'mpol' [ 600.190161][T22317] loop3: detected capacity change from 0 to 64 [ 600.340106][T11405] EXT4-fs (loop2): unmounting filesystem. [ 600.463104][T22324] syz.3.6832: vmalloc error: size 9007199254740992, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 600.594397][T22324] CPU: 1 PID: 22324 Comm: syz.3.6832 Not tainted syzkaller #0 [ 600.601926][T22324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.612196][T22324] Call Trace: [ 600.615502][T22324] [ 600.618462][T22324] dump_stack_lvl+0x188/0x24e [ 600.623179][T22324] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 600.629630][T22324] ? show_regs_print_info+0x12/0x12 [ 600.634866][T22324] ? load_image+0x400/0x400 [ 600.639402][T22324] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 600.645851][T22324] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 600.652386][T22324] warn_alloc+0x242/0x330 [ 600.656752][T22324] ? zone_watermark_ok_safe+0x270/0x270 [ 600.662356][T22324] __vmalloc_node_range+0x11e/0x13b0 [ 600.667682][T22324] ? __mutex_trylock_common+0x155/0x260 [ 600.673265][T22324] ? trace_raw_output_contention_end+0xd0/0xd0 [ 600.679470][T22324] ? rcu_is_watching+0x11/0xa0 [ 600.684277][T22324] ? __mutex_lock+0x1ab/0xaf0 [ 600.689346][T22324] ? free_vm_area+0x50/0x50 [ 600.693890][T22324] ? dvb_demux_do_ioctl+0x313/0x530 [ 600.699125][T22324] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 600.704622][T22324] ? mutex_lock_nested+0x10/0x10 [ 600.709666][T22324] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 600.715712][T22324] vmalloc+0x75/0x80 [ 600.719644][T22324] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 600.725494][T22324] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 600.731171][T22324] dvb_demux_do_ioctl+0x450/0x530 [ 600.736241][T22324] dvb_usercopy+0x191/0x2b0 [ 600.740775][T22324] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 600.746350][T22324] ? dvb_generic_ioctl+0xb0/0xb0 [ 600.751336][T22324] ? dvb_demux_poll+0x210/0x210 [ 600.756223][T22324] dvb_demux_ioctl+0x25/0x30 [ 600.760840][T22324] __se_sys_ioctl+0xfa/0x170 [ 600.765464][T22324] do_syscall_64+0x4c/0xa0 [ 600.769912][T22324] ? clear_bhb_loop+0x60/0xb0 [ 600.774619][T22324] ? clear_bhb_loop+0x60/0xb0 [ 600.779319][T22324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.785241][T22324] RIP: 0033:0x7f191719c799 [ 600.789685][T22324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.809421][T22324] RSP: 002b:00007f191808c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.817887][T22324] RAX: ffffffffffffffda RBX: 00007f1917415fa0 RCX: 00007f191719c799 [ 600.825978][T22324] RDX: 0020000000000000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 600.833990][T22324] RBP: 00007f1917232c99 R08: 0000000000000000 R09: 0000000000000000 [ 600.841990][T22324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.849993][T22324] R13: 00007f1917416038 R14: 00007f1917415fa0 R15: 00007ffd1550bf78 [ 600.858020][T22324] [ 601.024386][T10145] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 601.094125][T22340] raw_sendmsg: syz.7.6837 forgot to set AF_INET. Fix it! [ 601.223159][T22344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 601.225305][T22310] loop8: detected capacity change from 0 to 32768 [ 601.232358][T10145] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.254643][T22344] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 601.264787][T10145] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.281930][T22332] loop2: detected capacity change from 0 to 32768 [ 601.290303][T22344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 601.299874][T10145] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 601.311920][T22344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 601.317379][T22324] Mem-Info: [ 601.320558][T10145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 601.331056][T10145] usb 1-1: SerialNumber: syz [ 601.385351][T22324] active_anon:17604 inactive_anon:1 isolated_anon:0 [ 601.385351][T22324] active_file:18027 inactive_file:41179 isolated_file:0 [ 601.385351][T22324] unevictable:768 dirty:392 writeback:0 [ 601.385351][T22324] slab_reclaimable:19765 slab_unreclaimable:101780 [ 601.385351][T22324] mapped:30228 shmem:9589 pagetables:1031 [ 601.385351][T22324] sec_pagetables:0 bounce:0 [ 601.385351][T22324] kernel_misc_reclaimable:0 [ 601.385351][T22324] free:1296911 free_pcp:8651 free_cma:0 [ 601.431165][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.445562][T22332] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 601.460813][T22310] XFS (loop8): Mounting V5 Filesystem [ 601.475173][T22324] Node 0 active_anon:70416kB inactive_anon:4kB active_file:72108kB inactive_file:164512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120912kB dirty:1564kB writeback:0kB shmem:36820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:13308kB pagetables:4124kB sec_pagetables:0kB all_unreclaimable? no [ 601.556497][T10145] usb 1-1: 0:2 : does not exist [ 601.586368][T22332] JBD2: Ignoring recovery information on journal [ 601.597954][T22324] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 601.628408][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.718176][T10145] usb 1-1: USB disconnect, device number 29 [ 601.754908][T22324] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 601.759776][T22310] XFS (loop8): Ending clean mount [ 601.831906][T22332] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 601.902108][T22324] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 601.937920][T22324] Node 0 DMA32 free:1267268kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:70200kB inactive_anon:4kB active_file:72108kB inactive_file:165316kB unevictable:1536kB writepending:1572kB present:3129332kB managed:2592976kB mlocked:0kB bounce:0kB free_pcp:17272kB local_pcp:8308kB free_cma:0kB [ 601.968553][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.004667][T22324] lowmem_reserve[]: 0 0 1 1 1 [ 602.019753][T22324] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 602.055160][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.138271][T11405] ocfs2: Unmounting device (7,2) on (node local) [ 602.138539][T10264] XFS (loop8): Unmounting Filesystem [ 602.214692][T22324] lowmem_reserve[]: 0 0 0 0 0 [ 602.224875][T22324] Node 1 Normal free:3904276kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18048kB local_pcp:8352kB free_cma:0kB [ 602.254372][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.411976][T22324] lowmem_reserve[]: 0 0 0 0 0 [ 602.434838][T22324] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 602.503123][T22324] Node 0 DMA32: 794*4kB (UME) 902*8kB (UME) 520*16kB (UME) 361*32kB (UME) 514*64kB (UME) 285*128kB (UME) 134*256kB (UME) 67*512kB (UME) 17*1024kB (UME) 5*2048kB (M) 268*4096kB (UM) = 1293624kB [ 602.535598][ C1] vkms_vblank_simulate: vblank timer overrun [ 602.542285][T22324] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 602.634703][T22324] Node 1 Normal: 267*4kB (UME) 69*8kB (UME) 32*16kB (UME) 94*32kB (U) 58*64kB (UME) 25*128kB (UME) 8*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3904276kB [ 602.679220][T11391] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 602.694729][T22324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 602.734343][T22324] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 602.769323][T22324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 602.808692][T22324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 602.846832][T22324] 61101 total pagecache pages [ 602.865033][T22324] 1 pages in swap cache [ 602.869286][T22324] Free swap = 124728kB [ 602.893952][T22324] Total swap = 124996kB [ 602.898307][T22324] 2097051 pages RAM [ 602.902178][T22324] 0 pages HighMem/MovableOnly [ 602.905868][T11391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 602.927228][T22324] 415206 pages reserved [ 602.937361][T22324] 0 pages cma reserved [ 602.959197][T11391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 603.026446][T11391] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 603.046595][T11391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.094436][T11391] usb 1-1: Product: syz [ 603.098654][T11391] usb 1-1: Manufacturer: syz [ 603.103370][T11391] usb 1-1: SerialNumber: syz [ 603.148581][T11391] usb 1-1: config 0 descriptor?? [ 603.423804][T11391] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input24 [ 603.678150][T11391] usb 1-1: USB disconnect, device number 30 [ 604.003807][T22419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.248905][T22424] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6865'. [ 604.293616][T22391] loop2: detected capacity change from 0 to 40427 [ 604.319873][T22391] F2FS-fs (loop2): Invalid segment count (0) [ 604.378547][T22391] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 604.434834][T22391] F2FS-fs (loop2): invalid crc value [ 604.480036][T22391] F2FS-fs (loop2): Found nat_bits in checkpoint [ 604.504117][T22436] ipt_rpfilter: unknown options [ 604.719090][T22391] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 604.733155][T22391] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 605.121179][T22463] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6877'. [ 606.239561][T22504] tmpfs: Bad value for 'size' [ 606.632660][T22519] loop7: detected capacity change from 0 to 2048 [ 606.715429][T22519] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 606.759702][T22519] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #12: block 2: comm syz.7.6902: lblock 0 mapped to illegal pblock 2 (length 1) [ 607.016154][T10228] EXT4-fs (loop7): unmounting filesystem. [ 607.682086][T22568] loop2: detected capacity change from 0 to 1764 [ 607.765017][T22568] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 607.856804][T22578] loop8: detected capacity change from 0 to 64 [ 608.101109][T22586] loop2: detected capacity change from 0 to 2048 [ 608.147994][T22586] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 608.224438][T22593] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 608.436689][T22600] loop3: detected capacity change from 0 to 8 [ 608.489529][T22600] /dev/loop3: Can't open blockdev [ 608.820292][T22613] netlink: 'syz.3.6936': attribute type 2 has an invalid length. [ 608.861987][T22613] netlink: 504 bytes leftover after parsing attributes in process `syz.3.6936'. [ 608.994842][T22622] loop7: detected capacity change from 0 to 2048 [ 609.051623][T22622] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 609.098811][T22622] ext4 filesystem being mounted at /964/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.130678][T22629] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6951'. [ 609.192624][T22622] fscrypt (loop7, inode 14): Error -61 getting encryption context [ 609.343559][T10228] EXT4-fs (loop7): unmounting filesystem. [ 609.815882][T22656] netlink: 720 bytes leftover after parsing attributes in process `syz.8.6952'. [ 609.845533][T22655] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6953'. [ 609.897696][T22660] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 610.069646][T22665] loop8: detected capacity change from 0 to 512 [ 610.080954][T22666] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003 [ 610.197577][T22665] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 610.380150][T22665] EXT4-fs error (device loop8): ext4_empty_dir:3139: inode #12: comm syz.8.6956: Directory block failed checksum [ 610.458836][T22682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6963'. [ 610.485976][T22682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 610.493300][T22682] IPv6: NLM_F_CREATE should be set when creating new route [ 610.500647][T22682] IPv6: NLM_F_CREATE should be set when creating new route [ 610.587948][T10264] EXT4-fs (loop8): unmounting filesystem. [ 610.614797][T22678] loop0: detected capacity change from 0 to 8192 [ 610.725179][T22678] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 610.816809][T22678] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 610.865752][T22678] REISERFS (device loop0): using ordered data mode [ 610.872410][T22678] reiserfs: using flush barriers [ 610.894590][T22678] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 610.933202][T22694] netlink: 'syz.3.6967': attribute type 21 has an invalid length. [ 610.942011][T22678] REISERFS (device loop0): checking transaction log (loop0) [ 610.957442][T22694] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6967'. [ 610.996730][T22678] REISERFS (device loop0): Using r5 hash to sort names [ 611.024833][T22678] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 611.425234][T22690] loop8: detected capacity change from 0 to 32768 [ 611.507995][T22690] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 611.689240][T22718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6974'. [ 611.974726][T22727] tc_dump_action: action bad kind [ 611.996676][ T4261] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 9 [ 612.095828][ T26] audit: type=1326 audit(2000000039.040:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22730 comm="syz.7.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a919c799 code=0x7ffc0000 [ 612.212967][ T26] audit: type=1326 audit(2000000039.050:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22730 comm="syz.7.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89a915cfce code=0x7ffc0000 [ 612.313971][ T26] audit: type=1326 audit(2000000039.060:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22730 comm="syz.7.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89a919c42b code=0x7ffc0000 [ 612.404423][ T5902] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 612.424624][ T26] audit: type=1326 audit(2000000039.060:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22730 comm="syz.7.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89a919c42b code=0x7ffc0000 [ 612.538068][ T26] audit: type=1326 audit(2000000039.060:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22730 comm="syz.7.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89a919c42b code=0x7ffc0000 [ 612.594439][ T5902] usb 8-1: Using ep0 maxpacket: 8 [ 612.602250][ T5902] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.653834][ T5902] usb 8-1: config 0 has no interfaces? [ 612.659741][ T26] audit: type=1326 audit(2000000039.060:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22730 comm="syz.7.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89a919c42b code=0x7ffc0000 [ 612.689718][ T5902] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 612.709783][ T5902] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 612.741567][ T5902] usb 8-1: Product: syz [ 612.749188][ T26] audit: type=1326 audit(2000000039.360:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22730 comm="syz.7.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89a919c42b code=0x7ffc0000 [ 612.764419][ T5902] usb 8-1: Manufacturer: syz [ 612.824481][ T5902] usb 8-1: SerialNumber: syz [ 612.829237][ T26] audit: type=1326 audit(2000000039.360:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22730 comm="syz.7.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89a919c42b code=0x7ffc0000 [ 612.840364][ T5902] usb 8-1: config 0 descriptor?? [ 612.860597][T22758] loop2: detected capacity change from 0 to 512 [ 612.939598][T22758] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 612.954727][T22758] ext4 filesystem being mounted at /783/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.967775][ T26] audit: type=1326 audit(2000000039.540:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22730 comm="syz.7.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89a919c42b code=0x7ffc0000 [ 613.044984][ T26] audit: type=1326 audit(2000000039.540:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22730 comm="syz.7.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89a919c42b code=0x7ffc0000 [ 613.182681][T22767] device bond2 entered promiscuous mode [ 613.186071][ T5902] usb 8-1: USB disconnect, device number 20 [ 613.231041][T11405] EXT4-fs (loop2): unmounting filesystem. [ 613.236881][T22767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.429928][T22774] comedi comedi2: Cannot bond this driver to itself! [ 613.623840][T22782] loop2: detected capacity change from 0 to 64 [ 613.936062][T22764] loop8: detected capacity change from 0 to 32768 [ 614.034174][T22764] ERROR: (device loop8): dbAlloc: the hint is outside the map [ 614.034174][T22764] [ 614.073110][T22796] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.115321][T22764] ERROR: (device loop8): remounting filesystem as read-only [ 615.107132][T22836] SET target dimension over the limit! [ 615.125384][T22793] loop3: detected capacity change from 0 to 32768 [ 615.172641][T22793] /dev/loop3: Can't open blockdev [ 615.594468][T22856] loop7: detected capacity change from 0 to 256 [ 615.653636][T22856] FAT-fs (loop7): Directory bread(block 64) failed [ 615.683542][T22856] FAT-fs (loop7): Directory bread(block 65) failed [ 615.718213][T22856] FAT-fs (loop7): Directory bread(block 66) failed [ 615.754712][T22856] FAT-fs (loop7): Directory bread(block 67) failed [ 615.761392][T22856] FAT-fs (loop7): Directory bread(block 68) failed [ 615.786661][T22857] loop2: detected capacity change from 0 to 4096 [ 615.853769][T22856] FAT-fs (loop7): Directory bread(block 69) failed [ 615.887060][T22864] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 615.931103][T22856] FAT-fs (loop7): Directory bread(block 70) failed [ 615.975003][T22856] FAT-fs (loop7): Directory bread(block 71) failed [ 615.981933][T22856] FAT-fs (loop7): Directory bread(block 72) failed [ 616.002129][T22856] FAT-fs (loop7): Directory bread(block 73) failed [ 616.147233][T22857] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 616.174590][T10145] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 616.294541][T22857] Remounting filesystem read-only [ 616.387136][T10145] usb 4-1: unable to get BOS descriptor or descriptor too short [ 616.415317][T10145] usb 4-1: not running at top speed; connect to a high speed hub [ 616.430031][T10145] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 616.465708][T11405] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 616.474351][T10145] usb 4-1: config 12 has no interface number 0 [ 616.523285][T10145] usb 4-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 616.533749][T22878] SET target dimension over the limit! [ 616.577316][T10145] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 616.604409][T10145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.612945][T10145] usb 4-1: Product: syz [ 616.651926][T10145] usb 4-1: Manufacturer: syz [ 616.658255][T10145] usb 4-1: SerialNumber: syz [ 616.670795][T22884] trusted_key: encrypted_key: insufficient parameters specified [ 616.986414][T10145] usb 4-1: USB disconnect, device number 11 [ 616.996516][T22896] tmpfs: Bad value for 'mpol' [ 617.275427][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.405249][T22912] netlink: 'syz.8.7049': attribute type 1 has an invalid length. [ 617.615939][T22921] loop8: detected capacity change from 0 to 65 [ 617.720723][T22921] BFS-fs: bfs_fill_super(): NOTE: filesystem loop8 was created with 512 inodes, the real maximum is 511, mounting anyway [ 618.667821][T22965] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 619.054988][T22985] overlayfs: conflicting options: nfs_export=on,index=off [ 619.264709][T22991] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.313305][T22991] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 619.327688][T22997] loop0: detected capacity change from 0 to 512 [ 619.392685][T13141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 619.508573][T22997] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 619.536872][T22997] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7085: invalid indirect mapped block 8 (level 2) [ 619.612433][T22997] EXT4-fs (loop0): Remounting filesystem read-only [ 619.639340][T22997] EXT4-fs (loop0): 1 truncate cleaned up [ 619.704420][T22997] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 619.927306][T11340] EXT4-fs (loop0): unmounting filesystem. [ 620.263590][T23037] loop7: detected capacity change from 0 to 512 [ 620.347756][T23037] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 620.375124][T23037] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 620.398601][T23037] EXT4-fs (loop7): 1 truncate cleaned up [ 620.404697][T23037] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 620.417991][T23040] device syz_tun entered promiscuous mode [ 620.511176][T23040] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 620.550119][T23037] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 620.740392][T10228] EXT4-fs (loop7): unmounting filesystem. [ 620.959458][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7111'. [ 621.982798][T23102] loop8: detected capacity change from 0 to 4096 [ 622.044789][T23102] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 622.124586][T10145] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 622.140487][T23102] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 622.183328][T23118] loop7: detected capacity change from 0 to 256 [ 622.305582][T23121] netlink: 'syz.3.7135': attribute type 3 has an invalid length. [ 622.317178][T10145] usb 1-1: unable to get BOS descriptor or descriptor too short [ 622.337504][T10145] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 622.343861][T23121] netlink: 766 bytes leftover after parsing attributes in process `syz.3.7135'. [ 622.364452][T10264] ntfs3: loop8: ntfs_sync_fs r=1a failed, -22. [ 622.371764][T10264] ntfs3: loop8: ntfs_evict_inode r=1a failed, -22. [ 622.396488][T10145] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 622.418640][T10145] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 622.438821][T10145] usb 1-1: config 129 has no interface number 0 [ 622.463156][T10145] usb 1-1: config 129 has no interface number 1 [ 622.491905][T10145] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 622.512865][T23126] loop8: detected capacity change from 0 to 8 [ 622.565853][T10145] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 622.594501][T10145] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 622.608996][T23126] SQUASHFS error: Failed to read block 0x71: -5 [ 622.644606][T10145] usb 1-1: config 129 interface 135 has no altsetting 0 [ 622.653073][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 622.653087][ T26] audit: type=1800 audit(2000000049.590:3358): pid=23126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7136" name="file0" dev="loop8" ino=1 res=0 errno=0 [ 622.687869][T10145] usb 1-1: config 129 interface 5 has no altsetting 0 [ 622.730273][T10145] usb 1-1: string descriptor 0 read error: -22 [ 622.764757][T10145] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 622.794453][T10145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.855154][T10145] usb 1-1: MIDIStreaming interface descriptor not found [ 622.984972][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7141'. [ 623.064495][T23136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7141'. [ 623.143065][T10145] usb 1-1: USB disconnect, device number 31 [ 623.590603][T23162] loop8: detected capacity change from 0 to 256 [ 623.869344][T23169] loop7: detected capacity change from 0 to 512 [ 623.912695][T23172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7153'. [ 623.999892][T23169] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 624.020485][T23169] ext4 filesystem being mounted at /1005/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.189064][T10228] EXT4-fs (loop7): unmounting filesystem. [ 624.367975][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.861677][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7173'. [ 625.152458][T23226] loop0: detected capacity change from 0 to 256 [ 625.209855][T23226] exfat: Deprecated parameter 'utf8' [ 625.224517][T23226] exfat: Deprecated parameter 'namecase' [ 625.230348][T23226] exfat: Deprecated parameter 'namecase' [ 625.277134][T23226] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 625.788279][T23254] device xfrm0 entered promiscuous mode [ 626.435253][ T26] audit: type=1326 audit(2000000053.380:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23286 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 626.534482][ T26] audit: type=1326 audit(2000000053.410:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23286 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 626.646323][ T26] audit: type=1326 audit(2000000053.410:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23286 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 626.678960][T23293] loop2: detected capacity change from 0 to 256 [ 626.754715][ T26] audit: type=1326 audit(2000000053.410:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23286 comm="syz.8.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936b39c799 code=0x7ffc0000 [ 626.899896][T23293] FAT-fs (loop2): Directory bread(block 64) failed [ 626.949127][T23293] FAT-fs (loop2): Directory bread(block 65) failed [ 626.980638][T23293] FAT-fs (loop2): Directory bread(block 66) failed [ 626.994507][T23293] FAT-fs (loop2): Directory bread(block 67) failed [ 627.001218][T23293] FAT-fs (loop2): Directory bread(block 68) failed [ 627.044612][T23293] FAT-fs (loop2): Directory bread(block 69) failed [ 627.064920][T23293] FAT-fs (loop2): Directory bread(block 70) failed [ 627.102101][T23293] FAT-fs (loop2): Directory bread(block 71) failed [ 627.145035][T23293] FAT-fs (loop2): Directory bread(block 72) failed [ 627.184879][T23293] FAT-fs (loop2): Directory bread(block 73) failed [ 627.190653][T23309] netlink: 'syz.7.7212': attribute type 1 has an invalid length. [ 627.685340][T23329] netlink: 'syz.7.7221': attribute type 49 has an invalid length. [ 627.901072][T23339] xt_hashlimit: overflow, rate too high: 0 [ 628.387364][T23361] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 628.848262][T23380] ieee802154 phy1 wpan1: encryption failed: -90 [ 628.860175][T23377] loop0: detected capacity change from 0 to 2048 [ 628.863669][T23382] loop3: detected capacity change from 0 to 512 [ 628.907713][T23382] /dev/loop3: Can't open blockdev [ 628.940264][T23377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 629.460125][T23397] loop3: detected capacity change from 0 to 512 [ 629.570707][T23397] /dev/loop3: Can't open blockdev [ 629.601132][T23371] loop2: detected capacity change from 0 to 32768 [ 629.709594][T23405] loop0: detected capacity change from 0 to 128 [ 629.710382][T23371] jfs_mkdir: dtInsert returned -EIO [ 629.762192][T23371] ERROR: (device loop2): jfs_mkdir: [ 629.762192][T23371] [ 629.765799][T23403] loop8: detected capacity change from 0 to 2048 [ 629.780353][T23405] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 629.853425][T23371] ERROR: (device loop2): remounting filesystem as read-only [ 629.861486][T23405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 629.955751][T23403] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 629.984472][T23403] ext4 filesystem being mounted at /953/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.102227][T23403] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #15: comm syz.8.7251: corrupted xattr block 128 [ 630.448592][T10264] EXT4-fs (loop8): unmounting filesystem. [ 630.491403][T23428] loop0: detected capacity change from 0 to 736 [ 630.664394][T10145] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 630.774051][T23437] loop7: detected capacity change from 0 to 256 [ 630.866248][T10145] usb 4-1: Using ep0 maxpacket: 8 [ 630.873098][T10145] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 630.895667][T23439] loop2: detected capacity change from 0 to 736 [ 630.924580][T10145] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 630.973752][T10145] usb 4-1: config 6 has no interface number 0 [ 631.022631][T10145] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 631.053210][T23439] tmpfs: Unknown parameter 'ö$TñaFm´éIÊ(9»ôטÁÞzñ6m›+N`1x¦†*‹40œ« Ó?·W‘ Ì„ ' [ 631.090406][T10145] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 631.146134][T10145] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 631.177652][T10145] usb 4-1: Product: syz [ 631.181916][T10145] usb 4-1: Manufacturer: syz [ 631.214705][T10145] usb 4-1: SerialNumber: syz [ 631.240318][T10145] hso 4-1:6.2: Failed to find INT IN ep [ 631.331322][T11391] kernel write not supported for file /1929/net/ip6_tables_targets (pid: 11391 comm: kworker/0:16) [ 631.524612][ T5902] usb 4-1: USB disconnect, device number 12 [ 631.908041][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.101648][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.358321][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.391173][T23479] set_capacity_and_notify: 1 callbacks suppressed [ 632.391190][T23479] loop7: detected capacity change from 0 to 64 [ 632.465987][T23479] hfs: invalid btree extent records (0 size) [ 632.510723][T23479] hfs: unable to open catalog tree [ 632.612744][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.837478][T23491] usb usb8: usbfs: process 23491 (syz.3.7286) did not claim interface 0 before use [ 633.232344][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 633.251178][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 633.260236][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 633.269017][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 633.277959][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 633.285482][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 633.528570][T23511] (unnamed net_device) (uninitialized): (slave netdevsim1): Device is not bonding slave [ 633.561236][T23511] (unnamed net_device) (uninitialized): option active_slave: invalid value (netdevsim1) [ 633.784499][T10145] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 633.830247][T23503] vxcan1 speed is unknown, defaulting to 1000 [ 633.984442][T10145] usb 8-1: Using ep0 maxpacket: 8 [ 633.992016][T10145] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 634.031247][T10145] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 634.091293][T10145] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 634.111553][T10145] usb 8-1: Product: syz [ 634.125385][T23533] loop8: detected capacity change from 0 to 128 [ 634.136384][T10145] usb 8-1: Manufacturer: syz [ 634.141035][T10145] usb 8-1: SerialNumber: syz [ 634.160457][T23533] FAT-fs (loop8): Directory bread(block 162) failed [ 634.186548][T23533] FAT-fs (loop8): Directory bread(block 163) failed [ 634.193375][T23533] FAT-fs (loop8): Directory bread(block 164) failed [ 634.293464][T23533] FAT-fs (loop8): Directory bread(block 165) failed [ 634.302625][T23533] FAT-fs (loop8): Directory bread(block 166) failed [ 634.309748][T23533] FAT-fs (loop8): Directory bread(block 167) failed [ 634.325803][T23533] FAT-fs (loop8): Directory bread(block 168) failed [ 634.332931][T23533] FAT-fs (loop8): Directory bread(block 169) failed [ 634.349258][T23533] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 634.398278][T10145] usb 8-1: Handspring Visor / Palm OS: No valid connect info available [ 634.420223][T23533] FAT-fs (loop8): Directory bread(block 162) failed [ 634.427964][T10145] usb 8-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 634.438681][T23533] FAT-fs (loop8): Directory bread(block 163) failed [ 634.464034][T10145] usb 8-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 634.489758][T10145] usb 8-1: Handspring Visor / Palm OS: Number of ports: 2 [ 634.508082][T23533] syz.8.7304: attempt to access beyond end of device [ 634.508082][T23533] loop8: rw=3, sector=226, nr_sectors = 6 limit=128 [ 634.535831][T23533] syz.8.7304: attempt to access beyond end of device [ 634.535831][T23533] loop8: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 634.571467][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7307'. [ 634.619166][T10145] usb 8-1: palm_os_3_probe - error -71 getting bytes available request [ 634.676825][T10145] visor 8-1:1.0: Handspring Visor / Palm OS converter detected [ 634.739194][T10145] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 634.797023][T10145] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 634.908052][T10145] usb 8-1: USB disconnect, device number 21 [ 634.970522][T10145] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 635.040531][T10145] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 635.065846][T10145] visor 8-1:1.0: device disconnected [ 635.175350][T11391] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 635.313444][T23503] chnl_net:caif_netlink_parms(): no params data found [ 635.324952][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 635.382010][T11391] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 635.414590][T11391] usb 3-1: config 0 has no interface number 0 [ 635.447693][T11391] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 635.502730][T11391] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 635.533517][T11391] usb 3-1: config 0 interface 96 has no altsetting 0 [ 635.576129][T11391] usb 3-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 635.594359][T11391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.602515][T11391] usb 3-1: Product: syz [ 635.606788][T11391] usb 3-1: Manufacturer: syz [ 635.611693][T11391] usb 3-1: SerialNumber: syz [ 635.626210][T11391] usb 3-1: config 0 descriptor?? [ 635.854472][T10145] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 636.055461][T10145] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 636.059723][T11391] usb 3-1: USB disconnect, device number 28 [ 636.083997][T10145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.101550][T10145] usb 4-1: Product: syz [ 636.110831][T10145] usb 4-1: Manufacturer: syz [ 636.134440][T10145] usb 4-1: SerialNumber: syz [ 636.149889][T10145] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 636.191706][T10145] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 636.315526][T23503] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.322665][T23503] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.345700][T23503] device bridge_slave_0 entered promiscuous mode [ 636.405570][T23503] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.412878][T23503] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.459621][T23503] device bridge_slave_1 entered promiscuous mode [ 636.592828][T23503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.629646][T23503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.634135][T23584] loop8: detected capacity change from 0 to 2048 [ 636.676991][ T4311] usb 4-1: USB disconnect, device number 13 [ 636.769624][T23586] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 636.803538][ T46] device hsr_slave_0 left promiscuous mode [ 636.994254][ T46] device hsr_slave_1 left promiscuous mode [ 637.021179][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.029819][T23584] NILFS (loop8): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 637.043617][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.051882][T23584] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 637.069909][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.081285][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.094062][ T46] device bridge_slave_1 left promiscuous mode [ 637.112915][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.117878][T23589] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 637.128050][T23584] Remounting filesystem read-only [ 637.148423][T23584] NILFS (loop8): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0 [ 637.165597][ T46] device bridge_slave_0 left promiscuous mode [ 637.196317][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.220999][T23584] NILFS error (device loop8): nilfs_bmap_last_key: broken bmap (inode number=16) [ 637.244422][T10145] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 637.268718][T10145] ath9k_htc: Failed to initialize the device [ 637.283186][T23584] NILFS (loop8): error -5 truncating bmap (ino=16) [ 637.306918][ T4311] usb 4-1: ath9k_htc: USB layer deinitialized [ 637.371015][T23594] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 637.385075][T23594] overlayfs: missing 'lowerdir' [ 637.395334][ T46] device veth1_macvtap left promiscuous mode [ 637.405869][ T46] device veth0_macvtap left promiscuous mode [ 637.419166][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 637.478567][ T46] device veth1_vlan left promiscuous mode [ 637.577041][T10264] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 638.697769][T23615] loop2: detected capacity change from 0 to 32768 [ 638.751452][T23615] [ 638.751452][T23615] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 638.751452][T23615] [ 638.770017][ T46] bond2 (unregistering): Released all slaves [ 638.786560][ T46] bond1 (unregistering): Released all slaves [ 638.793325][T23615] ialloc: diAlloc returned -5! [ 638.867324][ T26] audit: type=1326 audit(2000000065.810:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23634 comm="syz.3.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191719c799 code=0x7ffc0000 [ 638.900054][T11405] [ 638.900054][T11405] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 638.900054][T11405] [ 638.920958][ T26] audit: type=1326 audit(2000000065.840:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23634 comm="syz.3.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f191719c799 code=0x7ffc0000 [ 638.930035][T11405] [ 638.930035][T11405] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 638.930035][T11405] [ 639.025696][ T26] audit: type=1326 audit(2000000065.840:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23634 comm="syz.3.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191719c799 code=0x7ffc0000 [ 639.088781][ T26] audit: type=1326 audit(2000000065.840:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23634 comm="syz.3.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191719c799 code=0x7ffc0000 [ 639.476673][T23653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7347'. [ 639.487220][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 639.704481][T11391] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 639.886625][T11391] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.898813][T11391] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.914414][T11391] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 639.923724][T11391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 639.932702][T11391] usb 4-1: SerialNumber: syz [ 639.953363][T11391] usb 4-1: 0:2 : does not exist [ 639.958919][T11391] usb 4-1: unit 64 not found! [ 640.172413][T11391] usb 4-1: USB disconnect, device number 14 [ 640.218019][ T46] team0 (unregistering): Port device team_slave_1 removed [ 640.287363][ T46] team0 (unregistering): Port device team_slave_0 removed [ 640.353291][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.423349][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.982833][ T46] bond0 (unregistering): Released all slaves [ 641.107993][T23503] team0: Port device team_slave_0 added [ 641.117723][T23503] team0: Port device team_slave_1 added [ 641.124228][T23612] IPv6: Can't replace route, no match found [ 641.133525][T23649] netlink: 'syz.7.7345': attribute type 13 has an invalid length. [ 641.335657][T23668] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 641.349488][T23668] overlayfs: missing 'lowerdir' [ 641.563061][T23649] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.571113][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 641.911712][T23649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.952996][T23649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.259291][T23649] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.268561][T23649] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.277785][T23649] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.288214][T23649] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.457037][T23657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 642.496771][T23657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 642.513384][T23657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 642.550135][T23674] netlink: 'syz.8.7356': attribute type 21 has an invalid length. [ 642.559734][T23674] netlink: 'syz.8.7356': attribute type 6 has an invalid length. [ 642.567995][T23674] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7356'. [ 642.581663][T23676] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7357'. [ 642.649519][T23503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.704486][T23503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.809522][T23503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.865111][T23503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.872191][T23503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.989324][T23503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.149093][T23503] device hsr_slave_0 entered promiscuous mode [ 643.172854][T23503] device hsr_slave_1 entered promiscuous mode [ 643.761600][T23714] loop7: detected capacity change from 0 to 64 [ 644.150453][T23721] netlink: 'syz.3.7378': attribute type 21 has an invalid length. [ 644.194530][T23721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7378'. [ 644.790479][T23747] loop8: detected capacity change from 0 to 1024 [ 644.935377][T23747] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 645.003474][T23747] ext4 filesystem being mounted at /984/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.129462][T23747] EXT4-fs warning (device loop8): ext4_empty_dir:3156: inode #12: comm syz.8.7387: directory missing '..' [ 645.184621][T23756] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 645.235095][T23756] EXT4-fs (loop8): Remounting filesystem read-only [ 645.369697][T10264] EXT4-fs (loop8): unmounting filesystem. [ 645.483186][T23503] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 645.554189][T23503] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 645.619898][T23503] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 645.654213][T23503] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 646.013068][T23503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.082524][T23790] loop7: detected capacity change from 0 to 8192 [ 646.120252][T13138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 646.142147][T13138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 646.169669][T23503] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.176373][T23790] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 646.260089][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 646.279964][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.329737][T13132] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.336917][T13132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.384745][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 646.398344][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 646.467787][T13132] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.475064][T13132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.482334][T23807] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7411'. [ 646.493618][T23806] xt_hashlimit: size too large, truncated to 1048576 [ 646.528541][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 646.538972][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 646.550394][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 646.598827][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 646.621954][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 646.667074][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 646.712601][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 646.766589][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 646.802998][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.837868][T23503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.873647][T23817] loop8: detected capacity change from 0 to 512 [ 646.882548][T23503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.905163][T23817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 646.913408][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 646.936036][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 646.971090][T13132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.988785][T23817] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.7417: inode has both inline data and extents flags [ 647.057264][T23817] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.7417: couldn't read orphan inode 15 (err -117) [ 647.122423][T23817] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 647.286997][T23827] netlink: 'syz.7.7421': attribute type 10 has an invalid length. [ 647.296864][T10264] EXT4-fs (loop8): unmounting filesystem. [ 647.309848][T23831] loop2: detected capacity change from 0 to 64 [ 647.317778][T23831] hfs: unable to locate alternate MDB [ 647.323206][T23831] hfs: continuing without an alternate MDB [ 647.352079][ T26] audit: type=1800 audit(2000000074.290:3367): pid=23831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7422" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 647.449909][ T8132] [ 647.452293][ T8132] ====================================================== [ 647.459322][ T8132] WARNING: possible circular locking dependency detected [ 647.466362][ T8132] syzkaller #0 Not tainted [ 647.470800][ T8132] ------------------------------------------------------ [ 647.477833][ T8132] kworker/u4:9/8132 is trying to acquire lock: [ 647.484002][ T8132] ffff8880796d9af8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 647.494933][ T8132] [ 647.494933][ T8132] but task is already holding lock: [ 647.502312][ T8132] ffff8880542ee0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 647.511742][ T8132] [ 647.511742][ T8132] which lock already depends on the new lock. [ 647.511742][ T8132] [ 647.522134][ T8132] [ 647.522134][ T8132] the existing dependency chain (in reverse order) is: [ 647.531147][ T8132] [ 647.531147][ T8132] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 647.539070][ T8132] __mutex_lock+0x12d/0xaf0 [ 647.544097][ T8132] hfs_find_init+0x15b/0x1d0 [ 647.549198][ T8132] hfs_extend_file+0x35d/0x13f0 [ 647.554562][ T8132] hfs_bmap_reserve+0x103/0x420 [ 647.559926][ T8132] hfs_cat_create+0x204/0x8e0 [ 647.565124][ T8132] hfs_create+0x62/0xd0 [ 647.569789][ T8132] path_openat+0x1181/0x2ee0 [ 647.574892][ T8132] do_filp_open+0x1f1/0x430 [ 647.579910][ T8132] do_sys_openat2+0x150/0x4b0 [ 647.585140][ T8132] __x64_sys_openat+0x135/0x160 [ 647.590509][ T8132] do_syscall_64+0x4c/0xa0 [ 647.595449][ T8132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.601853][ T8132] [ 647.601853][ T8132] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 647.611043][ T8132] __lock_acquire+0x2d07/0x7d10 [ 647.616508][ T8132] lock_acquire+0x1bb/0x4a0 [ 647.621522][ T8132] __mutex_lock+0x12d/0xaf0 [ 647.626538][ T8132] hfs_extend_file+0xfb/0x13f0 [ 647.631989][ T8132] hfs_bmap_reserve+0x103/0x420 [ 647.637362][ T8132] __hfs_ext_write_extent+0x1fa/0x470 [ 647.643335][ T8132] hfs_ext_write_extent+0x17b/0x200 [ 647.649072][ T8132] hfs_write_inode+0xd8/0xa20 [ 647.654259][ T8132] __writeback_single_inode+0x75b/0x1160 [ 647.660408][ T8132] writeback_sb_inodes+0xb30/0x1850 [ 647.666115][ T8132] wb_writeback+0x482/0xd50 [ 647.671126][ T8132] wb_workfn+0x423/0xee0 [ 647.675878][ T8132] process_one_work+0x8a2/0x1160 [ 647.681324][ T8132] worker_thread+0xaa2/0x1270 [ 647.686509][ T8132] kthread+0x29d/0x330 [ 647.691082][ T8132] ret_from_fork+0x1f/0x30 [ 647.696024][ T8132] [ 647.696024][ T8132] other info that might help us debug this: [ 647.696024][ T8132] [ 647.706343][ T8132] Possible unsafe locking scenario: [ 647.706343][ T8132] [ 647.713773][ T8132] CPU0 CPU1 [ 647.719208][ T8132] ---- ---- [ 647.724572][ T8132] lock(&tree->tree_lock/1); [ 647.729254][ T8132] lock(&HFS_I(tree->inode)->extents_lock); [ 647.737746][ T8132] lock(&tree->tree_lock/1); [ 647.744940][ T8132] lock(&HFS_I(tree->inode)->extents_lock); [ 647.750994][ T8132] [ 647.750994][ T8132] *** DEADLOCK *** [ 647.750994][ T8132] [ 647.759561][ T8132] 3 locks held by kworker/u4:9/8132: [ 647.764832][ T8132] #0: ffff888143a7f138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 647.775437][ T8132] #1: ffffc90003457d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 647.787253][ T8132] #2: ffff8880542ee0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 647.796992][ T8132] [ 647.796992][ T8132] stack backtrace: [ 647.802891][ T8132] CPU: 0 PID: 8132 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 647.810422][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.820463][ T8132] Workqueue: writeback wb_workfn (flush-7:2) [ 647.826560][ T8132] Call Trace: [ 647.829839][ T8132] [ 647.832767][ T8132] dump_stack_lvl+0x188/0x24e [ 647.837527][ T8132] ? load_image+0x400/0x400 [ 647.842021][ T8132] ? show_regs_print_info+0x12/0x12 [ 647.847388][ T8132] ? print_circular_bug+0x12b/0x1a0 [ 647.852582][ T8132] check_noncircular+0x296/0x330 [ 647.857515][ T8132] ? look_up_lock_class+0x75/0x140 [ 647.862627][ T8132] ? add_chain_block+0x940/0x940 [ 647.867554][ T8132] ? lockdep_lock+0xf1/0x1f0 [ 647.872146][ T8132] ? unwind_next_frame+0x1880/0x20b0 [ 647.877423][ T8132] ? _find_first_zero_bit+0xcf/0x100 [ 647.882695][ T8132] __lock_acquire+0x2d07/0x7d10 [ 647.887624][ T8132] ? ret_from_fork+0x1f/0x30 [ 647.892208][ T8132] ? ret_from_fork+0x1f/0x30 [ 647.896788][ T8132] ? verify_lock_unused+0x140/0x140 [ 647.901982][ T8132] ? stack_trace_save+0xa6/0xf0 [ 647.906825][ T8132] ? stack_trace_snprint+0xf0/0xf0 [ 647.911931][ T8132] ? check_noncircular+0x189/0x330 [ 647.917209][ T8132] ? add_chain_block+0x940/0x940 [ 647.922146][ T8132] lock_acquire+0x1bb/0x4a0 [ 647.926643][ T8132] ? hfs_extend_file+0xfb/0x13f0 [ 647.931573][ T8132] ? __might_sleep+0xd0/0xd0 [ 647.936148][ T8132] ? read_lock_is_recursive+0x10/0x10 [ 647.941514][ T8132] __mutex_lock+0x12d/0xaf0 [ 647.946095][ T8132] ? hfs_extend_file+0xfb/0x13f0 [ 647.951032][ T8132] ? verify_lock_unused+0x140/0x140 [ 647.956228][ T8132] ? hfs_extend_file+0xfb/0x13f0 [ 647.961158][ T8132] ? mutex_lock_nested+0x10/0x10 [ 647.966099][ T8132] ? __stack_depot_save+0x421/0x460 [ 647.971313][ T8132] hfs_extend_file+0xfb/0x13f0 [ 647.976258][ T8132] ? hfs_ext_write_extent+0x14e/0x200 [ 647.981622][ T8132] ? hfs_write_inode+0xd8/0xa20 [ 647.986469][ T8132] ? hfs_get_block+0xc50/0xc50 [ 647.991226][ T8132] ? trace_raw_output_contention_end+0xd0/0xd0 [ 647.997371][ T8132] ? rcu_is_watching+0x11/0xa0 [ 648.002126][ T8132] ? trace_contention_end+0x5f/0x170 [ 648.007403][ T8132] ? memset+0x1e/0x40 [ 648.011372][ T8132] ? hfs_brec_find+0x197/0x500 [ 648.016215][ T8132] hfs_bmap_reserve+0x103/0x420 [ 648.021063][ T8132] __hfs_ext_write_extent+0x1fa/0x470 [ 648.026449][ T8132] hfs_ext_write_extent+0x17b/0x200 [ 648.031658][ T8132] ? verify_lock_unused+0x140/0x140 [ 648.036892][ T8132] ? hfs_ext_keycmp+0x310/0x310 [ 648.041753][ T8132] ? writeback_sb_inodes+0x46b/0x1850 [ 648.047130][ T8132] hfs_write_inode+0xd8/0xa20 [ 648.051802][ T8132] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 648.057173][ T8132] ? __writeback_single_inode+0x4ae/0x1160 [ 648.063063][ T8132] ? __lock_acquire+0x7d10/0x7d10 [ 648.068083][ T8132] ? do_raw_spin_lock+0x128/0x2f0 [ 648.073100][ T8132] ? __rwlock_init+0x140/0x140 [ 648.077859][ T8132] __writeback_single_inode+0x75b/0x1160 [ 648.083495][ T8132] writeback_sb_inodes+0xb30/0x1850 [ 648.088692][ T8132] ? queue_io+0x5a0/0x5a0 [ 648.093041][ T8132] ? rcu_is_watching+0x11/0xa0 [ 648.098088][ T8132] wb_writeback+0x482/0xd50 [ 648.102620][ T8132] ? percpu_ref_tryget+0x250/0x250 [ 648.107721][ T8132] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 648.113699][ T8132] ? _raw_spin_unlock_irq+0x1f/0x40 [ 648.118885][ T8132] wb_workfn+0x423/0xee0 [ 648.123123][ T8132] ? inode_wait_for_writeback+0x220/0x220 [ 648.128847][ T8132] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 648.134831][ T8132] ? read_lock_is_recursive+0x10/0x10 [ 648.140193][ T8132] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 648.146075][ T8132] ? _raw_spin_unlock+0x40/0x40 [ 648.150915][ T8132] ? _raw_spin_unlock_irq+0x1f/0x40 [ 648.156105][ T8132] ? process_one_work+0x7b0/0x1160 [ 648.161204][ T8132] process_one_work+0x8a2/0x1160 [ 648.166165][ T8132] ? worker_detach_from_pool+0x240/0x240 [ 648.171785][ T8132] ? _raw_spin_lock_irq+0xb7/0xf0 [ 648.176809][ T8132] ? _raw_spin_lock_irqsave+0x100/0x100 [ 648.182444][ T8132] ? kthread_data+0x4b/0xc0 [ 648.187030][ T8132] worker_thread+0xaa2/0x1270 [ 648.191700][ T8132] ? __kthread_parkme+0x162/0x1c0 [ 648.196828][ T8132] kthread+0x29d/0x330 [ 648.200970][ T8132] ? worker_clr_flags+0x1a0/0x1a0 [ 648.205985][ T8132] ? kthread_blkcg+0xd0/0xd0 [ 648.210565][ T8132] ret_from_fork+0x1f/0x30 [ 648.214977][ T8132] [ 648.365969][ T8132] hfs: new node 0 already hashed? [ 648.371236][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 648.380429][ T8132] ------------[ cut here ]------------ [ 648.380438][T13146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.393351][ T8132] WARNING: CPU: 1 PID: 8132 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 648.402348][ T8132] Modules linked in: [ 648.406264][ T8132] CPU: 1 PID: 8132 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 648.413799][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.423916][ T8132] Workqueue: writeback wb_workfn (flush-7:2) [ 648.429955][ T8132] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 648.435627][ T8132] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 648.455275][ T8132] RSP: 0018:ffffc90003456e80 EFLAGS: 00010246 [ 648.461448][ T8132] RAX: 000000000000001f RBX: ffff8880542ee0e0 RCX: 12dd1b22c1c1c100 [ 648.469552][ T8132] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 648.477649][ T8132] RBP: 0000000000000000 R08: ffffc90003456b87 R09: 1ffff9200068ad70 [ 648.485726][ T8132] R10: dffffc0000000000 R11: fffff5200068ad71 R12: 0000000000000000 [ 648.493744][ T8132] R13: ffff8880542ee000 R14: ffff888020251e00 R15: dffffc0000000000 [ 648.501756][ T8132] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 648.510709][ T8132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.517326][ T8132] CR2: 00007f19173e92f8 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 648.525318][ T8132] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 648.533282][ T8132] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 648.541289][ T8132] Call Trace: [ 648.544584][ T8132] [ 648.547509][ T8132] hfs_bmap_alloc+0x53d/0x5d0 [ 648.552178][ T8132] ? hfs_bmap_reserve+0x420/0x420 [ 648.557247][ T8132] ? rcu_is_watching+0x11/0xa0 [ 648.562026][ T8132] hfs_btree_inc_height+0xfd/0xac0 [ 648.567257][ T8132] ? hfs_brec_insert+0x6f6/0xbd0 [ 648.572199][ T8132] ? hfs_brec_insert+0xbd0/0xbd0 [ 648.577174][ T8132] ? do_raw_spin_unlock+0x11d/0x230 [ 648.582372][ T8132] hfs_brec_insert+0x744/0xbd0 [ 648.587165][ T8132] ? hfs_brec_keylen+0x350/0x350 [ 648.592112][ T8132] __hfs_ext_write_extent+0x2a1/0x470 [ 648.597605][ T8132] hfs_ext_write_extent+0x17b/0x200 [ 648.602813][ T8132] ? verify_lock_unused+0x140/0x140 [ 648.608060][ T8132] ? hfs_ext_keycmp+0x310/0x310 [ 648.613092][ T8132] ? writeback_sb_inodes+0x46b/0x1850 [ 648.618591][ T8132] hfs_write_inode+0xd8/0xa20 [ 648.623293][ T8132] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 648.628725][ T8132] ? __writeback_single_inode+0x4ae/0x1160 [ 648.634668][ T8132] ? __lock_acquire+0x7d10/0x7d10 [ 648.639714][ T8132] ? do_raw_spin_lock+0x128/0x2f0 [ 648.644759][ T8132] ? __rwlock_init+0x140/0x140 [ 648.649525][ T8132] __writeback_single_inode+0x75b/0x1160 [ 648.655190][ T8132] writeback_sb_inodes+0xb30/0x1850 [ 648.660401][ T8132] ? queue_io+0x5a0/0x5a0 [ 648.664765][ T8132] ? rcu_is_watching+0x11/0xa0 [ 648.669547][ T8132] wb_writeback+0x482/0xd50 [ 648.674045][ T8132] ? percpu_ref_tryget+0x250/0x250 [ 648.679187][ T8132] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 648.685205][ T8132] ? _raw_spin_unlock_irq+0x1f/0x40 [ 648.690396][ T8132] wb_workfn+0x423/0xee0 [ 648.694686][ T8132] ? inode_wait_for_writeback+0x220/0x220 [ 648.700425][ T8132] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 648.706444][ T8132] ? read_lock_is_recursive+0x10/0x10 [ 648.711907][ T8132] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 648.717824][ T8132] ? _raw_spin_unlock+0x40/0x40 [ 648.722684][ T8132] ? _raw_spin_unlock_irq+0x1f/0x40 [ 648.727912][ T8132] ? process_one_work+0x7b0/0x1160 [ 648.733043][ T8132] process_one_work+0x8a2/0x1160 [ 648.738034][ T8132] ? worker_detach_from_pool+0x240/0x240 [ 648.743682][ T8132] ? _raw_spin_lock_irq+0xb7/0xf0 [ 648.748751][ T8132] ? _raw_spin_lock_irqsave+0x100/0x100 [ 648.754330][ T8132] ? kthread_data+0x4b/0xc0 [ 648.758939][ T8132] worker_thread+0xaa2/0x1270 [ 648.763611][ T8132] ? __kthread_parkme+0x162/0x1c0 [ 648.768751][ T8132] kthread+0x29d/0x330 [ 648.772827][ T8132] ? worker_clr_flags+0x1a0/0x1a0 [ 648.777888][ T8132] ? kthread_blkcg+0xd0/0xd0 [ 648.782480][ T8132] ret_from_fork+0x1f/0x30 [ 648.786927][ T8132] [ 648.789948][ T8132] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 648.797210][ T8132] CPU: 1 PID: 8132 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 648.804828][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.814879][ T8132] Workqueue: writeback wb_workfn (flush-7:2) [ 648.820887][ T8132] Call Trace: [ 648.824167][ T8132] [ 648.827090][ T8132] dump_stack_lvl+0x188/0x24e [ 648.831845][ T8132] ? memcpy+0x3c/0x60 [ 648.835819][ T8132] ? show_regs_print_info+0x12/0x12 [ 648.841030][ T8132] ? load_image+0x400/0x400 [ 648.845533][ T8132] panic+0x2e5/0x730 [ 648.849425][ T8132] ? bpf_jit_dump+0xd0/0xd0 [ 648.853915][ T8132] ? ret_from_fork+0x1f/0x30 [ 648.858547][ T8132] __warn+0x2f8/0x4f0 [ 648.862512][ T8132] ? hfs_bnode_create+0x37a/0x400 [ 648.867552][ T8132] ? hfs_bnode_create+0x37a/0x400 [ 648.872580][ T8132] report_bug+0x2ba/0x4f0 [ 648.876898][ T8132] ? hfs_bnode_create+0x37a/0x400 [ 648.881916][ T8132] handle_bug+0x3a/0x70 [ 648.886079][ T8132] exc_invalid_op+0x16/0x40 [ 648.890589][ T8132] asm_exc_invalid_op+0x16/0x20 [ 648.895439][ T8132] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 648.902294][ T8132] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 648.921891][ T8132] RSP: 0018:ffffc90003456e80 EFLAGS: 00010246 [ 648.927950][ T8132] RAX: 000000000000001f RBX: ffff8880542ee0e0 RCX: 12dd1b22c1c1c100 [ 648.935958][ T8132] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 648.944032][ T8132] RBP: 0000000000000000 R08: ffffc90003456b87 R09: 1ffff9200068ad70 [ 648.952084][ T8132] R10: dffffc0000000000 R11: fffff5200068ad71 R12: 0000000000000000 [ 648.960046][ T8132] R13: ffff8880542ee000 R14: ffff888020251e00 R15: dffffc0000000000 [ 648.968037][ T8132] hfs_bmap_alloc+0x53d/0x5d0 [ 648.972718][ T8132] ? hfs_bmap_reserve+0x420/0x420 [ 648.977746][ T8132] ? rcu_is_watching+0x11/0xa0 [ 648.982532][ T8132] hfs_btree_inc_height+0xfd/0xac0 [ 648.987733][ T8132] ? hfs_brec_insert+0x6f6/0xbd0 [ 648.992657][ T8132] ? hfs_brec_insert+0xbd0/0xbd0 [ 648.997592][ T8132] ? do_raw_spin_unlock+0x11d/0x230 [ 649.002805][ T8132] hfs_brec_insert+0x744/0xbd0 [ 649.007562][ T8132] ? hfs_brec_keylen+0x350/0x350 [ 649.012491][ T8132] __hfs_ext_write_extent+0x2a1/0x470 [ 649.017857][ T8132] hfs_ext_write_extent+0x17b/0x200 [ 649.023054][ T8132] ? verify_lock_unused+0x140/0x140 [ 649.028242][ T8132] ? hfs_ext_keycmp+0x310/0x310 [ 649.033085][ T8132] ? writeback_sb_inodes+0x46b/0x1850 [ 649.038458][ T8132] hfs_write_inode+0xd8/0xa20 [ 649.043131][ T8132] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 649.048499][ T8132] ? __writeback_single_inode+0x4ae/0x1160 [ 649.054301][ T8132] ? __lock_acquire+0x7d10/0x7d10 [ 649.059411][ T8132] ? do_raw_spin_lock+0x128/0x2f0 [ 649.064443][ T8132] ? __rwlock_init+0x140/0x140 [ 649.069198][ T8132] __writeback_single_inode+0x75b/0x1160 [ 649.074839][ T8132] writeback_sb_inodes+0xb30/0x1850 [ 649.080052][ T8132] ? queue_io+0x5a0/0x5a0 [ 649.084380][ T8132] ? rcu_is_watching+0x11/0xa0 [ 649.089155][ T8132] wb_writeback+0x482/0xd50 [ 649.093654][ T8132] ? percpu_ref_tryget+0x250/0x250 [ 649.098764][ T8132] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 649.104764][ T8132] ? _raw_spin_unlock_irq+0x1f/0x40 [ 649.109976][ T8132] wb_workfn+0x423/0xee0 [ 649.114227][ T8132] ? inode_wait_for_writeback+0x220/0x220 [ 649.120034][ T8132] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 649.126008][ T8132] ? read_lock_is_recursive+0x10/0x10 [ 649.131373][ T8132] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 649.137272][ T8132] ? _raw_spin_unlock+0x40/0x40 [ 649.142107][ T8132] ? _raw_spin_unlock_irq+0x1f/0x40 [ 649.147292][ T8132] ? process_one_work+0x7b0/0x1160 [ 649.152388][ T8132] process_one_work+0x8a2/0x1160 [ 649.157316][ T8132] ? worker_detach_from_pool+0x240/0x240 [ 649.162937][ T8132] ? _raw_spin_lock_irq+0xb7/0xf0 [ 649.167951][ T8132] ? _raw_spin_lock_irqsave+0x100/0x100 [ 649.173478][ T8132] ? kthread_data+0x4b/0xc0 [ 649.178059][ T8132] worker_thread+0xaa2/0x1270 [ 649.182732][ T8132] ? __kthread_parkme+0x162/0x1c0 [ 649.187780][ T8132] kthread+0x29d/0x330 [ 649.191837][ T8132] ? worker_clr_flags+0x1a0/0x1a0 [ 649.197021][ T8132] ? kthread_blkcg+0xd0/0xd0 [ 649.201595][ T8132] ret_from_fork+0x1f/0x30 [ 649.206003][ T8132] [ 649.209495][ T8132] Kernel Offset: disabled [ 649.213893][ T8132] Rebooting in 86400 seconds..