last executing test programs: 2m4.86663615s ago: executing program 3 (id=5105): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xffff8000}]}}}]}, 0x40}}, 0x4000) 2m4.559465165s ago: executing program 3 (id=5110): r0 = socket$can_raw(0x1d, 0x3, 0x1) write$binfmt_script(r0, &(0x7f0000000100), 0x10) 2m4.340641912s ago: executing program 3 (id=5114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900018073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000000010000000900020073797a32000000001800038814000080100001800400028006000180000000000900010073797a30"], 0xc8}}, 0x0) 2m4.076038744s ago: executing program 3 (id=5118): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@keep_last_dots}, {@keep_last_dots}, {@namecase}, {@errors_continue}, {}]}, 0x1, 0x1524, &(0x7f0000007640)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) 2m3.562324716s ago: executing program 3 (id=5125): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 2m2.64234194s ago: executing program 3 (id=5135): personality(0x5400004) mmap(&(0x7f0000552000/0x2000)=nil, 0x2000, 0x9, 0x10031, 0xffffffffffffffff, 0x0) 2m2.168209989s ago: executing program 32 (id=5135): personality(0x5400004) mmap(&(0x7f0000552000/0x2000)=nil, 0x2000, 0x9, 0x10031, 0xffffffffffffffff, 0x0) 1m47.333663461s ago: executing program 0 (id=5269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) 1m46.994343759s ago: executing program 0 (id=5270): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000012c0)="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", 0x863}], 0x1) 1m46.511543977s ago: executing program 0 (id=5271): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@newqdisc={0x50, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1ff}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x401}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1m46.335732062s ago: executing program 0 (id=5273): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x30e, &(0x7f0000000900)="$eJzs3b9u00AcB/DvnZ02pVExbRESC6hQCZaKAgNiCUJZ2ZkQkKRShFVEWyRgIVSMiAdgYuEVeAgWEC8ALExsLNmM7nx27PjiJGocp+X7kRo55/vzu/jP3VkCg4j+W3cbPz7d+K3+BODAAXAbkACqgAvgLM5Vn+8edA78diuvIkeXUH8CYUmRydPcbduKqnK6hOGpby5qyTQqRhAEd36WHQSVTl/9FhJYNNeh3l+dcVzTMti5LnChpFBKk/wNRA89vMBKieEQEdEcMOO/NMNETScJSAlsmmF/nsf/7FpjhF4xcZTlpp9JCnILJMZ/PbsLhDq+p/Wu/npP/6xqv4xWieMEUxn4voDwzErNwYR9VfkrCJlY5NJOx8VW8w1aEoeoG4kC6/qzFZ66kRHRbkx2vgyvrYJ7p8LeqBnl0uDuKKSdjt9eVBuW+Ncma/HoxBfxTTwQHj6gFc//3ECow6SPlDdwpGRFxX9teI3LupTKBXMp1ut1mcpyRjdy3rRgjOhl1b4iSdYZPSDoxhFY4jyMNnTbq0g/Vgh7t21rQPQrX7OV8uJv2bK6rfVUKcecCVvNp37uo5RiRF0U78V9sYE/+IxGYv4vVXybSFyZebd6oXOaMyPsz4I9p6tzepmRoxtvXYwjMBYn7hsBEz4te4fHuIWV/Zevnji+395TG48sG89qe8KkVN4C1jzFbzjIyYNuP0UPHq+DYNyag3TKx7/AUUJVQ18/5epUfwR1/4hT1OVjy6yusjhFFn10ohFvWhV6mP2plb/hwrar8RV5J2ShG9HUZSoVqonWkF1Tvz/RHNoX0UE3CZlJLJ1wat4lwvWfnsmbWZ2+z6gPL2eenr/IRKrG7XgFl54KrtrmLiPWBsvDV3CJFq8PWTPqNdelK8DlRKJAbouejvPEEA18x0M+/yciIiIiIiIiIiIiIiIiIiIiIiIiOm5m8S8Wyu4jEREREREREREREREREREREREREREREdFxN/77f5f6b2qy/R/x+v2/3sj3/6ZeAGxeFMX3/xKV418AAAD///k/d1Y=") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101040, 0x0) 1m45.870708439s ago: executing program 0 (id=5274): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2287, 0x1000000000000) 1m45.142330159s ago: executing program 0 (id=5277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) 1m44.419103337s ago: executing program 33 (id=5277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) 2.873164677s ago: executing program 4 (id=6494): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) socket(0x1e, 0x1, 0x0) 2.718015729s ago: executing program 1 (id=6497): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x5, 0x796}, 0x0, 0x0, 0x0, 0x2, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@lifetime_val={0x24, 0x9, {0xfffffffffffffff4, 0x4, 0xdc4, 0x4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2.602308949s ago: executing program 4 (id=6499): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x638, &(0x7f0000000ac0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.538132854s ago: executing program 5 (id=6501): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 2.490159238s ago: executing program 1 (id=6502): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0xfffffffffffffffc) 2.316562962s ago: executing program 4 (id=6505): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000000)={'rti800\x00', [0x80000000, 0xfffffff9, 0x1, 0x8, 0x1000, 0x101, 0x6623, 0x4, 0x8b, 0x80000, 0x4, 0x2, 0xfefffffe, 0x4, 0x6c, 0x4, 0x1, 0x7, 0x4, 0x0, 0x10, 0x5, 0x9, 0x6, 0xfffffffd, 0x1, 0x800, 0xc005, 0x57, 0x8, 0x4]}) 2.286232554s ago: executing program 1 (id=6506): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40082) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0xfffffff7, 0x6, 0xfffffffe}) 2.232785849s ago: executing program 5 (id=6507): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x4040001, 0x0, 0x0) 2.015556246s ago: executing program 1 (id=6510): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f0000000240)={0x180f0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x800000000, 0x2, 0xca1, 0x8, 0x0, 0x6, 0x0, 0x0, [0x6000000, 0x7fff, 0x2]}) 2.015018026s ago: executing program 6 (id=6511): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_pid(r0, &(0x7f0000000280)=0xffffffffffffffff, 0x5a) 1.956297171s ago: executing program 5 (id=6512): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000015006b05c84e21000ab16d6e230675f8020002", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.955757941s ago: executing program 4 (id=6513): set_mempolicy(0x4003, &(0x7f00000001c0)=0x8000000100000003, 0xe1) mincore(&(0x7f000057b000/0x4000)=nil, 0x4000, &(0x7f0000000100)=""/172) 1.928518923s ago: executing program 2 (id=6514): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x80, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x0) 1.794240014s ago: executing program 1 (id=6515): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106412, &(0x7f00000000c0)={0x0, 0x0}) 1.773175286s ago: executing program 6 (id=6516): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_retopts={{0x10, 0x110, 0xc}}], 0x30}, 0x0) 1.694207272s ago: executing program 5 (id=6517): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, 0x0) 1.694096112s ago: executing program 4 (id=6518): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0xa, &(0x7f0000000080)=ANY=[], 0x1, 0xb03, &(0x7f000001c300)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.558345313s ago: executing program 6 (id=6519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0xba01}, 0xc880) 1.518862616s ago: executing program 1 (id=6520): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$eJzs3c1PHOcdAOB3BlyD6w9wfXClSl2pllq1FQKf2mKpGGNjsKkrt7aqXtYLrG3ahbVgqXqwFHKzlFOkHKIcrETKjZPFIVfnT8glR+dsKTnkEimSFaLdnYWdYVds0C7EzvMcmJ33e/c3H+8chjdOVB4ureWW1nKFlVx54f7axdz/yqX15WKID0nL/o8dXv90phfHyVEfez9lt65c+8fdiyF8uvj5y+3t7e1Q1R9aGmv6/M3Xjxeatw1xpk613datdcu/Qwjn9oyrqi+E8K9PQohCCJeTtMlkOxhCOBXqeXcfv3Mv16XRPHtRvJR/Nfdka/zC7ObTrfbfPQrhg9Iv//hg+cvf9I1/8fsudQ8AAAAAAAAAAAAAAAAAwGtu+vatO38fHQvPo9C/Ge19X3c62bZ7P3a7a37d+y8LAAAAAAAAAAAAAAAAAAAAP1K77//norMt3v+fSrYTbepv/7VNxvHujpPemPnbramro2PJ+u/Rnvw/JUlfXe4Lwy3Wfc+u/345U7/1+u97+zmoxvga/Q6FKB7ZfmsnfyjE8chICB8lC7+fj07EpfJa5Q/3y+sri10bxmsrHf/66v2p6CQL+nca/8lM+71f//8Xe46m6v697h1ib7R0/Pvalvv47aij+F/J1DuM+HNw6fj319IGmwtM1C8A1fi/279//Kcy7fcq/qdDCLmoOtZc6gpQncNU09vNV0hLx/9YLS116Ux+yHbn/7eZ+F/NtN8u/me69g1aX/83sjciWkrH/2e1tIFUid3zfzje//y/lmn/KO7/1fFvuP93JB3/5KGtP1Wk9kt2ev2fzrTfq/jfiZNxno5SR8BmVE9v9//qSEvHf2BP/u7zX9zR/O96pv5hPf81+q09/zU9h/wuqj//0Vo6/oNty3V6/s9k6vX6+j9Rm/9xUOn4n6ilpefOQ7W/ncZ/NtN+r+Jfm5UMNOK/ez357ng9/UPzv46k4//zemLcXGKj9rc2/4v2n//fyLR/FPO/6vg34t72+qZIx/9k23LV+H/Wwf3/ZqZe7+Mfwqi5/oGl43+qbbna+T+wf/znMvV6Hf/f9rJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNfAZLIdClE8ktqP45GREK4k++fDiWi+sJifL5UX/rsWwlSSngtnowel8nyhlF9aKS8W84VSqbwQwtUk/1wYiNZK5Up+ufDo2k5bg9HDYmG1Ml8sVEII00n6r8KpRlvzS5XlwqMQwvWdvDNxefXRw8JKfnFp9S+jo6OjYWZnDMNR8f+V4kql3ns9N4TZnbpDUdPgatk3dsZyMvpPeX11pVCqpd9sqlMqLxRKTXXmkrz3wnBUWV1fWShUivlS+UGjv6M0kWynZm7/8/bNsT3596L6dvJwhwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAD/R8/M/vhxD663txCGGi8SFqVf7Zi+Kl/Ku5J1vjF2Y3n269bFcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB7duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBLxygRA1EYgN+Mhdp5DKuQdLYJimhhRPAEegwPE4/iJbyDhYWthQhmBjTuQprd6vuaB/l5eT8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsc3k33t+2XUSKo6/DiJfH17ff+XWZ0zDPvNg/2FNPduPqZjy/aLvy3dO//Kw8eu/zT/r58fQQG2b1PPzdX/5Ps3rneGuvaVjXv/ard08i5SYi+pKfppybZt27AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhmBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86ir4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//78SIGU=") mknod$loop(&(0x7f0000000000)='.\x02\x00', 0x800, 0x1) 1.457914502s ago: executing program 5 (id=6521): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0x0, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'wlan0\x00', {}, {}, 0x6c, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x2, 0x24, 0x6], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x2], 0x0, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @multicast2, 0xffffff00, 0xffffff00, 'rose0\x00', 'gretap0\x00', {0xff}, {}, 0x6, 0x2, 0xc}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x81, 0x2, 0x7fff, 'snmp\x00', {0x400000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 1.152509666s ago: executing program 6 (id=6522): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c02, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000180)="$eJzs3U2MW0cBAOCxd73JNilxSkKXJLQJP2356W6zWcJPBE3VXIiailulikuUpiUiDYhUglaVmuTECVpV4QpFnMqhAoTUXlDUE5dKNBKXikPhwIEoSJU4QCExWu+M93nW5tn7Z3v9fdLseN48e+a9fX5+fzMTgLFVbf5dWJiphHD1rVdP/P2+v00vTnm4NUe9+XeykKqFECoxPZl93vsTS/GtD1480ymuhPnm35QOj99svXdHCOFSOBiuhXrYd/X6K+/MP3bq8skrh959/diNjVl6AAAYL9+8dmxh71/+uH/3h2/cczxsa01Px+f1mN4Zj/uPxwP/dPxfDe3pSiEUTWXzTcZQzeab6DBfsZxaNt9kl/Knss+ttfL3t823raT8icK0TssNoyxtx/VQqc62pavV2dmlc/LQPK+fqsxeOHf+6YsDqiiw7v55bwjhoNBvaDQaLzVX4BDURRBWGxq7Br0HAliS3y9c4VJ+ZWFtWp822Vv5Nx+pdn4/rIPN3v7Lyv/xnwdb/gpjXv4vL9vjsH626taUlit9j3bGdH4fIX9+qd/vf/q8/H5Ercd6druPMCr3F7rVc2KT67Fa3eqfbxdb1ddinNbD17P84vcn/5+Oyv8Y6Oxfm3X9/7XpgV/rXAwHh6AOWzrUhqAOQs+hMegdEDC0lp+bW9KIUn7+XF+ev60kf3tJ/nRJ/h0l+TtK8mGc/fa5n4SXK8vn+fk5fb/Xw9J1tjtj/JE+65Nfj+y3/Py5336ttfz8eWIYZm+efuLsl5968vrS8/+V1vZ/O27vB2O6Hr9b1+IM6Xphfl299ex/vb2capf57srqc+eK+RtLJe5pn6+yZ/lzQmE/s6IeM+3v29VtvgPt89Wz+aZj2J7VNz8+uSN7Xzr+SPvVtL4ms+WtZcsxldUj7Vd2xzivB6xG2h67Pf+fts+ZUKs8fe782YdiOm2nf5iobVucfrj4ob/anLoDa9Nr+5+Z0N7+Z2dreq1a2C+0Dr/T/uJw6/Pap88vJWv5/EdiOv3OfXtiujl99sx3zz+13gsPY+7i8y985/T582e/70V6MW21eOFF2Z5jqz45CONj7rlnvzd38fkXHjz37Olnzj5z9sKRo0ePzM8f/cqRhbnmcf1c8awf2EqWf/QHXRMAAAAAAAAAAACgVz84eeL6n97+0ntL7f+X2/+l9v/pyd/U/v9HWfv/vJ18ahWQ2tnv7pDfHHfvzfZ6TGXz1WL4aFbfPVk5e7P3fSzGrXH8Yvv/1N4+79c11efubHref2+aL+tOYEV/KVNZHySt8QJjg/1PxvSVGP8iwABVpjtPjnFZ/9ZpW2/2T/HSRlWSjZb6E0lbQ+rHJLX/7tavU9r/796EOrL+NqM54aCXEejsH8M4/me1mC4ciQ+6Xv8/NBqDr8Paw/CvZ2EdQ6NhFA9gOAx6/M903TPFF37/je2LIc1285H2/WXefymsxbCPP6n8rTX+Z2v8u572fx16V2/r57n30RX+/bMb7xWKDft63f/my5/6gd5TXmbRh7H8tPz3h97Kb7yWlZ/fEOrRf7Ly7+ix/BXLf2B15f83lp9W2wOf6rX8pRpXqu31yK8bp/t/+XXj5Fa2/Klvz76Xf5UDNd6O5cM46z7ObK8j2A6nURn/t5v8OYwvxnTaEabnHPJf5H7rn56vSL8De7PPr5T8vo3KOMXdjPv4v1+Ncdn3IY3/m7bHeod0tZCudVi3o76twFbz/jDe/xvlcGkI6iAMaRiOMbCLodFoDLQjb72ID9ag1/+g7z4PuvxBr/8y+fi/+TF8Pv5vNTuByMf/zd+fj/+b5+fj6+X5+fi/+frMx//N8+/OPje/gj1Tkv/xkvx9Jfn7l/OnO+UfKHn/J0ryD5Xk31OSf29J/l0l+RMl+Z8uyf9MSf59JfkPlOR/tiR/q2u2Ryl8qcZt+WGc5e3zfP9hfKT7P92+/3tK8oHR9dM3Dj/65G++VV9q/z/VOl9L9/GOx3Qtnjv/MKbz+96hkF7Mezum/5rlD/v1Dhgnef8Z+e/7/SX5wOhKz3n5fsMYqmzvPDnGab/Qrd+qbsf5jJbPxfjzMf5CjB+M8WyM52J8OMbzm1Q/Nsajv/7dsZcry+f7u7L8Xp8nz9sD5f1EHemxPvn1gX6fZ8/78evXWstfZXMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgak2/y4szFRCuPrWqyeeOHVubnHKw6056s2/k4VUrfW+EB6K8USMfx5f3PrgxTPF+HaMK2E+VEKlNT08frNV0o4QwqVwMFwL9bDv6vVX3pl/7NTlk1cOvfv6sRsbtwYAAABg6/tfAAAA//+tyxzC") openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file2\x00', 0x181482, 0x0) 1.09822994s ago: executing program 4 (id=6523): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200801, &(0x7f0000000040)={[{@grpquota}, {@dax_inode}, {@filestreams}, {@filestreams}, {@nolargeio}]}, 0xff, 0x96da, &(0x7f0000009680)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x4}) 1.053958824s ago: executing program 2 (id=6524): r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x101f, 0x1, 0x11, r0, 0x82000000) 1.031758256s ago: executing program 5 (id=6525): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582", @ANYRES32], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 663.806036ms ago: executing program 6 (id=6526): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000000)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xe467}}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fat=@errors_continue}, {@shortname_mixed}, {@shortname_win95}, {@fat=@usefree}, {@shortname_winnt}]}, 0x1, 0x373, &(0x7f0000000340)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x7d1a626) 640.867618ms ago: executing program 2 (id=6527): r0 = getpid() kcmp(r0, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 406.292517ms ago: executing program 2 (id=6528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x4b, 0x1}}) 276.777897ms ago: executing program 6 (id=6529): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'pim6reg\x00'}) 165.049736ms ago: executing program 2 (id=6530): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)='\b\x00', 0x35}, {&(0x7f0000000240)="601c00f52dc4a002f9c0679c56e3a2ee77bc74966ea20000d80317833f4003b57d2d291180d5a943cac59fe2e998a34263c41812a188a3f31d1f35529a2218a80611186a51f7035ad20dbe8dc3acb95c2f5ed341c787b10840df917befe09acd56436795373b287bd630e0a97a94b6921503d1e5e0160f93e2c53ae1a71d98df1e79d05352bdf0491bc9603469a62c31185e20ff9693c967be81b4a0e6ab062fb3c24def1017150381816eec891cbe62114ef9079c5e", 0x10}], 0x2, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x18}, 0x24008004) 0s ago: executing program 2 (id=6531): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@discard}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x476, &(0x7f0000000e00)="$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") lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100)=@v2={0x3, 0x2, 0x6, 0x9454, 0x4, "9d5dab0f"}, 0xd, 0x0) kernel console output (not intermixed with test programs): 8][T15435] OCFS2: File system is now read-only. [ 441.844926][T15435] (syz.3.4994,15435,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 441.862197][T15435] (syz.3.4994,15435,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 441.870637][T15435] (syz.3.4994,15435,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 441.884220][T15435] (syz.3.4994,15435,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 441.893321][T15435] (syz.3.4994,15435,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 441.901950][T15435] (syz.3.4994,15435,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 441.937964][T15435] (syz.3.4994,15435,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 441.997282][T15435] (syz.3.4994,15435,1):ocfs2_mknod:385 ERROR: status = -30 [ 442.046446][T15435] (syz.3.4994,15435,1):ocfs2_mknod:502 ERROR: status = -30 [ 442.072676][T15435] (syz.3.4994,15435,1):ocfs2_mkdir:659 ERROR: status = -30 [ 442.180911][T15470] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5009'. [ 442.260903][T15474] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:0 [ 442.306250][T15475] usb usb8: usbfs: process 15475 (syz.4.5010) did not claim interface 0 before use [ 442.322739][ T4275] ocfs2: Unmounting device (7,3) on (node local) [ 442.592374][T15479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.866622][T15495] netlink: 'syz.3.5020': attribute type 7 has an invalid length. [ 442.935690][T15495] netlink: 'syz.3.5020': attribute type 5 has an invalid length. [ 443.605790][T15515] netlink: 'syz.4.5029': attribute type 10 has an invalid length. [ 443.625322][T15515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5029'. [ 443.659584][T15515] batman_adv: batadv0: Adding interface: virt_wifi0 [ 443.682689][T15515] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.795623][T15515] batman_adv: batadv0: Interface activated: virt_wifi0 [ 444.026390][T15535] printk: syz.4.5039 (15535): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 444.313228][T15543] usb usb1: usbfs: process 15543 (syz.1.5043) did not claim interface 0 before use [ 444.544594][T15550] loop1: detected capacity change from 0 to 16 [ 444.586693][T15550] erofs: (device loop1): mounted with root inode @ nid 36. [ 444.630180][T15550] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 444.652476][T15550] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 444.669996][T15551] loop4: detected capacity change from 0 to 2048 [ 444.672641][T15524] loop3: detected capacity change from 0 to 32768 [ 444.683102][T15550] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 444.745662][T15551] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.766456][T15524] [ 444.766456][T15524] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 444.766456][T15524] [ 444.843970][T15524] JFS: metapage_get_blocks failed [ 444.867864][T15524] ERROR: (device loop3): release_metapage: write_one_page() failed [ 444.867864][T15524] [ 444.920292][T15524] ERROR: (device loop3): diWrite: ixpxd invalid [ 444.920292][T15524] [ 444.949467][T15524] ERROR: (device loop3): txCommit: [ 444.949467][T15524] [ 445.114754][ T4275] [ 445.114754][ T4275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 445.114754][ T4275] [ 445.173427][ T4275] [ 445.173427][ T4275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 445.173427][ T4275] [ 445.486115][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5057'. [ 445.618299][T15540] loop0: detected capacity change from 0 to 40427 [ 445.627085][T15565] loop4: detected capacity change from 0 to 4096 [ 445.672331][T15540] F2FS-fs (loop0): Found nat_bits in checkpoint [ 445.941102][T15540] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 445.965943][T15540] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 446.038759][T15584] netlink: 'syz.4.5062': attribute type 1 has an invalid length. [ 446.038818][T15540] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 446.162026][T15581] loop3: detected capacity change from 0 to 4096 [ 446.357699][T15592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5065'. [ 446.366832][T15592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5065'. [ 446.510902][T15592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5065'. [ 446.863751][T15605] device gtp0 entered promiscuous mode [ 447.007479][ T6771] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 447.191241][ T6771] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 447.208874][T15609] loop2: detected capacity change from 0 to 4096 [ 447.225484][ T6771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.245743][ T6771] usb 4-1: Product: syz [ 447.255868][ T6771] usb 4-1: Manufacturer: syz [ 447.261879][ T6771] usb 4-1: SerialNumber: syz [ 447.303730][ T6771] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 447.383929][ T6771] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 447.690745][T15623] netlink: 'syz.0.5081': attribute type 10 has an invalid length. [ 447.742130][T15623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5081'. [ 447.769554][T15623] batman_adv: batadv0: Adding interface: virt_wifi0 [ 447.797042][T15623] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.830817][T15623] batman_adv: batadv0: Interface activated: virt_wifi0 [ 447.855210][ T8306] usb 4-1: USB disconnect, device number 17 [ 447.957305][ T6541] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 448.013177][T15611] loop1: detected capacity change from 0 to 32768 [ 448.083699][T15611] XFS (loop1): Mounting V5 Filesystem [ 448.149142][ T6541] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 448.168260][ T6541] usb 3-1: config 0 has no interface number 0 [ 448.174547][ T6541] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.225620][T15611] XFS (loop1): Ending clean mount [ 448.234262][ T6541] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 448.257457][ T6541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.275747][ T6541] usb 3-1: Product: syz [ 448.285869][ T6541] usb 3-1: Manufacturer: syz [ 448.290911][ T6541] usb 3-1: SerialNumber: syz [ 448.312420][ T6541] usb 3-1: config 0 descriptor?? [ 448.353353][T15611] XFS (loop1): Quotacheck needed: Please wait. [ 448.427303][ T6541] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 448.475873][T15611] XFS (loop1): Quotacheck: Done. [ 448.479353][T15647] netlink: 'syz.4.5089': attribute type 1 has an invalid length. [ 448.497736][ T6771] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 448.504972][ T6771] ath9k_htc: Failed to initialize the device [ 448.547410][T15647] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5089'. [ 448.556607][ T8306] usb 4-1: ath9k_htc: USB layer deinitialized [ 448.627300][ C0] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 448.774367][ T4267] XFS (loop1): Unmounting Filesystem [ 448.876305][ T6541] usb 3-1: USB disconnect, device number 15 [ 448.900530][ T6541] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 449.036570][T15661] loop4: detected capacity change from 0 to 256 [ 449.104838][T15661] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.335284][T15667] loop3: detected capacity change from 0 to 256 [ 449.824252][T15683] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 450.017152][T15691] loop2: detected capacity change from 0 to 8 [ 450.132410][T15691] SQUASHFS error: lzo decompression failed, data probably corrupt [ 450.186190][T15691] SQUASHFS error: Failed to read block 0x0: -5 [ 450.189580][T15699] loop0: detected capacity change from 0 to 512 [ 450.197499][T15697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5114'. [ 450.211395][T15691] SQUASHFS error: lzo decompression failed, data probably corrupt [ 450.237499][T15691] SQUASHFS error: Failed to read block 0x0: -5 [ 450.251662][ T26] audit: type=1800 audit(1756412251.944:144): pid=15691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5111" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 450.398572][T15699] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 450.447466][T15699] ext4 filesystem being mounted at /973/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.474481][T15708] loop3: detected capacity change from 0 to 256 [ 450.494762][T15708] exfat: Deprecated parameter 'namecase' [ 450.574108][T15708] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 450.730403][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 450.827303][ T26] audit: type=1326 audit(1756412252.514:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15713 comm="syz.2.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8538ebe9 code=0x7ffc0000 [ 450.883444][T15716] loop1: detected capacity change from 0 to 512 [ 450.916622][ T26] audit: type=1326 audit(1756412252.564:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15713 comm="syz.2.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f0a8538ebe9 code=0x7ffc0000 [ 450.972868][T15716] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 450.997436][T15716] System zones: 1-12 [ 451.006976][T15716] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33261: comm syz.1.5121: invalid block [ 451.099680][T15716] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5121: invalid indirect mapped block 8 (level 2) [ 451.105205][ T26] audit: type=1326 audit(1756412252.564:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15713 comm="syz.2.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8538ebe9 code=0x7ffc0000 [ 451.225961][T15716] EXT4-fs (loop1): 1 truncate cleaned up [ 451.264817][T15716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 451.267395][ T26] audit: type=1326 audit(1756412252.564:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15713 comm="syz.2.5122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8538ebe9 code=0x7ffc0000 [ 451.388419][T15716] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 5: comm syz.1.5121: lblock 0 mapped to illegal pblock 5 (length 1) [ 451.508708][T15716] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #2: lblock 0: comm syz.1.5121: error -117 reading directory block [ 451.646603][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 452.135951][T15739] loop1: detected capacity change from 0 to 8192 [ 452.174772][T15739] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 452.222416][T15739] FAT-fs (loop1): error, clusters badly computed (1 != 0) [ 452.240846][T15739] FAT-fs (loop1): Filesystem has been set read-only [ 452.252299][ T4353] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.263436][T15739] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 452.287682][T15739] FAT-fs (loop1): error, clusters badly computed (3 != 2) [ 452.294995][T15739] FAT-fs (loop1): error, clusters badly computed (4 != 3) [ 452.490988][ T4353] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.768954][ T4353] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.827548][T15754] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 453.015022][ T4353] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.228327][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 453.241080][T15769] loop1: detected capacity change from 0 to 128 [ 453.260293][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 453.269787][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 453.279958][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 453.290055][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 453.299669][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 453.424873][T15774] loop0: detected capacity change from 0 to 16 [ 453.426459][T15771] loop4: detected capacity change from 0 to 1024 [ 453.449546][T15774] erofs: (device loop0): mounted with root inode @ nid 36. [ 453.494420][T15774] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 453.523124][T15764] vcan0 speed is unknown, defaulting to 1000 [ 453.577542][T15774] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 453.627784][T15774] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 453.657712][T15774] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 453.717478][T15774] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 454.145856][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5157'. [ 454.277099][T15792] loop4: detected capacity change from 0 to 4096 [ 454.399900][T15798] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.540897][T15792] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 454.650140][T15792] Remounting filesystem read-only [ 454.857547][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5163'. [ 454.918202][T15807] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5163'. [ 454.956094][T15807] netlink: 'syz.2.5163': attribute type 1 has an invalid length. [ 455.078585][T15813] loop4: detected capacity change from 0 to 2048 [ 455.104130][T15813] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 455.123944][T15813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.377503][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 455.515488][T15764] chnl_net:caif_netlink_parms(): no params data found [ 455.580005][ T6541] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 455.792500][ T6541] usb 3-1: Using ep0 maxpacket: 8 [ 455.867525][ T6541] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 455.897751][ T6541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.940971][T15833] netlink: 'syz.4.5171': attribute type 1 has an invalid length. [ 455.947543][ T6541] usb 3-1: Product: syz [ 455.968806][ T6541] usb 3-1: Manufacturer: syz [ 455.976746][ T6541] usb 3-1: SerialNumber: syz [ 456.318127][T15764] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.325322][T15764] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.364315][T15764] device bridge_slave_0 entered promiscuous mode [ 456.427121][ T6541] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 456.442077][ T6541] mxuport: probe of 3-1:254.0 failed with error -5 [ 456.502268][ T6541] usb 3-1: USB disconnect, device number 16 [ 456.728933][T15764] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.736123][T15764] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.768497][T15764] device bridge_slave_1 entered promiscuous mode [ 457.110087][T15764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.169967][T15764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.457481][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 457.494916][T15764] team0: Port device team_slave_0 added [ 457.549635][T15862] loop0: detected capacity change from 0 to 4096 [ 457.579326][T15878] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 457.600907][ T4353] device hsr_slave_0 left promiscuous mode [ 457.618350][ T4353] device hsr_slave_1 left promiscuous mode [ 457.628886][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.670902][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.699119][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.746316][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.839188][ T4353] device bridge_slave_1 left promiscuous mode [ 457.848325][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.939240][T15887] loop1: detected capacity change from 0 to 128 [ 457.975841][ T4353] device bridge_slave_0 left promiscuous mode [ 457.998061][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.076718][T15887] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 458.142735][T15895] loop2: detected capacity change from 0 to 256 [ 458.179346][T15887] ext4 filesystem being mounted at /1051/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 458.187749][T15895] FAT-fs (loop2): Directory bread(block 64) failed [ 458.213742][T15895] FAT-fs (loop2): Directory bread(block 65) failed [ 458.247578][T15895] FAT-fs (loop2): Directory bread(block 66) failed [ 458.268741][T15895] FAT-fs (loop2): Directory bread(block 67) failed [ 458.275443][T15895] FAT-fs (loop2): Directory bread(block 68) failed [ 458.320270][ T4353] device veth0_macvtap left promiscuous mode [ 458.330948][ T4353] device veth1_vlan left promiscuous mode [ 458.339279][T15895] FAT-fs (loop2): Directory bread(block 69) failed [ 458.368201][T15895] FAT-fs (loop2): Directory bread(block 70) failed [ 458.374883][T15895] FAT-fs (loop2): Directory bread(block 71) failed [ 458.429672][T15895] FAT-fs (loop2): Directory bread(block 72) failed [ 458.436370][T15895] FAT-fs (loop2): Directory bread(block 73) failed [ 458.498579][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 458.957775][T15912] Zero length message leads to an empty skb [ 459.537383][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 459.685878][T15924] loop2: detected capacity change from 0 to 1024 [ 459.759646][ T4353] bond1 (unregistering): Released all slaves [ 459.995615][T15918] loop1: detected capacity change from 0 to 32768 [ 460.520833][ T4353] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 460.618444][T15936] loop1: detected capacity change from 0 to 256 [ 460.662175][T15936] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 460.714291][T15936] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 460.795071][T15936] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 460.982537][T15942] netlink: 'syz.2.5216': attribute type 1 has an invalid length. [ 460.995878][T15942] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5216'. [ 461.099554][T15944] loop1: detected capacity change from 0 to 64 [ 461.617358][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 461.746799][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 462.151710][T15966] netlink: 272 bytes leftover after parsing attributes in process `syz.2.5228'. [ 462.751426][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 462.825072][T15976] loop1: detected capacity change from 0 to 512 [ 462.881744][T15978] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.953774][T15976] EXT4-fs (loop1): 1 truncate cleaned up [ 462.965699][T15976] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 463.068819][T15986] tmpfs: Bad value for 'mpol' [ 463.111453][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.306572][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.308344][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 463.640257][T15998] loop2: detected capacity change from 0 to 4096 [ 463.744862][T15999] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 463.766613][T15998] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 463.784478][T15998] Remounting filesystem read-only [ 463.835414][ T4353] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 463.844941][ T4265] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 464.155288][ T4353] team0 (unregistering): Port device bridge0 removed [ 464.247410][ T6541] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 464.340980][ T4353] bond0 (unregistering): Released all slaves [ 464.435981][T15764] team0: Port device team_slave_1 added [ 464.439117][ T6541] usb 3-1: config 0 has an invalid interface number: 152 but max is 0 [ 464.450183][ T6541] usb 3-1: config 0 has no interface number 0 [ 464.456364][ T6541] usb 3-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 464.467776][ T6541] usb 3-1: config 0 interface 152 has no altsetting 0 [ 464.513976][ T6541] usb 3-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 464.543622][ T6541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.587814][ T6541] usb 3-1: Product: syz [ 464.592163][ T6541] usb 3-1: Manufacturer: syz [ 464.624118][ T6541] usb 3-1: SerialNumber: syz [ 464.661479][ T6541] usb 3-1: config 0 descriptor?? [ 464.667465][T16003] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.698096][ T6541] hub 3-1:0.152: bad descriptor, ignoring hub [ 464.721297][T16009] comedi comedi0: dt2817: I/O port conflict (0x3,5) [ 464.728995][ T6541] hub: probe of 3-1:0.152 failed with error -5 [ 464.767970][T15764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.775265][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.847307][T15764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.896481][T15764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.904536][T16003] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.927402][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.058336][T15764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.124684][ T6541] cdc_subset 3-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.2-1, Yopy, ee:ec:4e:38:bd:e2 [ 465.244569][ T6541] usb 3-1: USB disconnect, device number 17 [ 465.270504][ T6541] cdc_subset 3-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.2-1, Yopy [ 465.319162][T15764] device hsr_slave_0 entered promiscuous mode [ 465.358191][T15764] device hsr_slave_1 entered promiscuous mode [ 465.452162][T15764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.466511][T15764] Cannot create hsr debugfs directory [ 466.157790][T16049] loop4: detected capacity change from 0 to 2048 [ 466.181917][T16049] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 466.244926][T16049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.286291][T16046] loop0: detected capacity change from 0 to 4096 [ 466.324635][T15764] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 466.365517][T16046] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 466.377057][T15764] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 466.437639][T15764] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 466.476480][T15764] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 466.586220][T16046] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 466.886637][T15764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.966546][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.008321][ T5545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.022508][T15764] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.108816][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.124119][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.163456][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.170669][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.206744][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.236259][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.258352][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.265528][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.326248][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.344220][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.378282][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.408773][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.435552][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.494571][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.518341][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.564249][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.565065][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.565735][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.570845][T15764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.614221][T16056] loop2: detected capacity change from 0 to 32768 [ 467.644170][T15764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.667768][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.676956][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.765425][T16056] XFS (loop2): Mounting V5 Filesystem [ 467.796257][T16070] loop1: detected capacity change from 0 to 32768 [ 467.920310][T16056] XFS (loop2): Ending clean mount [ 467.992752][T16070] XFS (loop1): Mounting V5 Filesystem [ 468.036880][ T4265] XFS (loop2): Unmounting Filesystem [ 468.194851][T16070] XFS (loop1): Ending clean mount [ 468.224870][T16103] loop0: detected capacity change from 0 to 64 [ 468.234939][T16070] XFS (loop1): Quotacheck needed: Please wait. [ 468.242949][T16069] loop4: detected capacity change from 0 to 40427 [ 468.346822][T16069] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 468.384982][T16069] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 468.462557][T16069] F2FS-fs (loop4): invalid crc value [ 468.482128][T16070] XFS (loop1): Quotacheck: Done. [ 468.559691][T16069] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 468.765177][T15764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.776390][ T4267] XFS (loop1): Unmounting Filesystem [ 468.795648][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.805283][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.906099][T16069] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 468.943272][T16069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 469.093322][T16115] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5272'. [ 469.433322][ T4353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.792411][ T4353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.084362][ T4353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.332903][ T4353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.379431][T16144] loop2: detected capacity change from 0 to 8 [ 470.838418][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 470.868691][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 470.934312][T15764] device veth0_vlan entered promiscuous mode [ 470.970825][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 470.999898][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.020513][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.036511][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.067791][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 471.079361][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 471.089246][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 471.097046][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 471.107287][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 471.114534][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 471.173400][T16160] vcan0 speed is unknown, defaulting to 1000 [ 471.246659][ T4331] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 471.264469][T16159] netlink: 'syz.2.5289': attribute type 27 has an invalid length. [ 471.444215][ T4331] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 471.469613][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.493832][ T4331] usb 2-1: Product: syz [ 471.505487][ T4331] usb 2-1: Manufacturer: syz [ 471.535275][ T4331] usb 2-1: SerialNumber: syz [ 471.542093][ T4331] r8152-cfgselector 2-1: config 0 descriptor?? [ 471.572624][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5292'. [ 471.594371][T16169] netlink: 'syz.2.5293': attribute type 1 has an invalid length. [ 471.778205][T15764] device veth1_vlan entered promiscuous mode [ 471.796332][T16172] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 472.000463][ T4331] r8152-cfgselector 2-1: Unknown version 0x0000 [ 472.030063][ T4331] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 472.051187][T16178] tmpfs: Bad value for 'mpol' [ 472.074089][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 472.104424][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 472.156182][T15764] device veth0_macvtap entered promiscuous mode [ 472.269571][T15764] device veth1_macvtap entered promiscuous mode [ 472.398080][T15764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.408689][T15764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.427348][T15764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.437936][T15764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.448057][T15764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.460648][T15764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.472489][T15764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.487481][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.511915][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.532413][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.576299][T15764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.618830][T15764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.653827][T15764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.692789][T15764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.719618][T15764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.757628][T15764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.788768][T15764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.793034][T16202] loop1: detected capacity change from 0 to 128 [ 472.933920][T16193] device netdevsim0 left promiscuous mode [ 472.965311][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.978079][T16202] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 472.990062][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.032771][T16202] FAT-fs (loop1): Filesystem has been set read-only [ 473.042881][T15764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.066883][T15764] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.147289][T15764] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.148027][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 473.156162][T15764] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.185578][T16210] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5306'. [ 473.284162][T16160] chnl_net:caif_netlink_parms(): no params data found [ 473.875766][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.904890][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.135208][T16160] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.147585][T16160] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.155962][T16160] device bridge_slave_0 entered promiscuous mode [ 474.198891][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 474.248176][T16160] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.255440][T16160] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.299186][T16160] device bridge_slave_1 entered promiscuous mode [ 474.366335][T15846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.396622][T16218] loop2: detected capacity change from 0 to 40427 [ 474.416662][T15846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.495183][T16218] F2FS-fs (loop2): invalid crc value [ 474.502068][T16218] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 474.536025][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 474.572611][T16160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.593352][T16218] F2FS-fs (loop2): Found nat_bits in checkpoint [ 474.690470][T16160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.727925][T16218] F2FS-fs (loop2): recover fsync data on readonly fs [ 474.746894][T16218] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 474.758424][ T4353] device hsr_slave_0 left promiscuous mode [ 474.803849][ T4353] device hsr_slave_1 left promiscuous mode [ 474.829768][T16246] loop1: detected capacity change from 0 to 128 [ 474.895446][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.906672][T16246] FAT-fs (loop1): Directory bread(block 11554) failed [ 474.907721][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.945340][T16246] FAT-fs (loop1): Directory bread(block 11555) failed [ 474.972323][T16246] FAT-fs (loop1): Directory bread(block 11556) failed [ 474.989027][T16246] FAT-fs (loop1): Directory bread(block 11557) failed [ 475.004708][T16246] FAT-fs (loop1): Directory bread(block 11558) failed [ 475.009845][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.037984][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.048413][T16246] FAT-fs (loop1): Directory bread(block 11559) failed [ 475.087480][T16246] FAT-fs (loop1): Directory bread(block 11560) failed [ 475.094348][T16246] FAT-fs (loop1): Directory bread(block 11561) failed [ 475.109692][ T4353] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 475.118987][ T4353] batman_adv: batadv0: Removing interface: virt_wifi0 [ 475.160509][ T4353] device bridge_slave_1 left promiscuous mode [ 475.163759][T16246] FAT-fs (loop1): Directory bread(block 11562) failed [ 475.166792][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.191628][T16246] FAT-fs (loop1): Directory bread(block 11563) failed [ 475.217697][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 475.323717][ T4353] device bridge_slave_0 left promiscuous mode [ 475.367453][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.516448][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5324'. [ 475.528072][ T4353] device veth1_vlan left promiscuous mode [ 475.538397][ T4353] device veth0_vlan left promiscuous mode [ 475.579180][T16261] netlink: zone id is out of range [ 475.584949][T16261] netlink: zone id is out of range [ 475.598244][T16261] netlink: zone id is out of range [ 475.628907][T16261] netlink: zone id is out of range [ 475.653906][T16261] netlink: zone id is out of range [ 475.678687][T16261] netlink: zone id is out of range [ 475.686832][T16261] netlink: zone id is out of range [ 475.735396][T16261] netlink: zone id is out of range [ 475.780664][T16261] netlink: zone id is out of range [ 475.815646][T16267] loop4: detected capacity change from 0 to 256 [ 475.896357][T16267] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d) [ 476.580057][ T4353] bond1 (unregistering): Released all slaves [ 476.650156][T16292] loop4: detected capacity change from 0 to 1024 [ 476.736245][ T4360] hfsplus: b-tree write err: -5, ino 4 [ 476.882031][ T4353] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 477.297563][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 477.360560][T16298] loop4: detected capacity change from 0 to 32768 [ 477.385025][T16298] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 477.421768][T16298] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 477.448113][T16298] ocfs2: Unmounting device (7,4) on (node local) [ 477.846034][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 478.036660][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 478.175436][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.306260][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.511069][T16312] loop4: detected capacity change from 0 to 32768 [ 478.634288][T16310] loop1: detected capacity change from 0 to 40427 [ 478.647727][T16312] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 478.682424][T16310] F2FS-fs (loop1): invalid crc value [ 478.696925][T16312] (syz.4.5344,16312,1):ocfs2_mknod:502 ERROR: status = -2 [ 478.756235][T16310] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 478.766793][T16312] (syz.4.5344,16312,0):ocfs2_create:676 ERROR: status = -2 [ 478.907518][ T4266] (syz-executor,4266,1):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 478.933787][ T4266] ocfs2: Unmounting device (7,4) on (node local) [ 478.980961][T16310] F2FS-fs (loop1): Start checkpoint disabled! [ 479.013592][T16310] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 479.377604][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 479.775777][ T4353] bond0 (unregistering): Released all slaves [ 479.966795][T16160] team0: Port device team_slave_0 added [ 480.006936][T16160] team0: Port device team_slave_1 added [ 480.183548][T16160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.197762][T16160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.288183][T16160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.358367][T16160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.365403][T16160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.462817][T16160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.509040][T16341] bridge0: port 3(macvlan0) entered blocking state [ 480.515853][T16341] bridge0: port 3(macvlan0) entered disabled state [ 480.530859][T16344] loop1: detected capacity change from 0 to 8 [ 480.543337][T16341] device macvlan0 entered promiscuous mode [ 480.574774][T16344] SQUASHFS error: zlib decompression failed, data probably corrupt [ 480.578952][T16341] bridge0: port 3(macvlan0) entered blocking state [ 480.590172][T16341] bridge0: port 3(macvlan0) entered forwarding state [ 480.615368][T16344] SQUASHFS error: Failed to read block 0x9b: -5 [ 480.625645][T16344] SQUASHFS error: Unable to read metadata cache entry [99] [ 480.675642][T16344] SQUASHFS error: Unable to read inode 0x127 [ 480.751988][T16160] device hsr_slave_0 entered promiscuous mode [ 480.814461][T16160] device hsr_slave_1 entered promiscuous mode [ 480.847580][T16160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.857488][T16160] Cannot create hsr debugfs directory [ 481.324288][T16364] netlink: 'syz.4.5360': attribute type 10 has an invalid length. [ 481.339925][T16366] loop5: detected capacity change from 0 to 64 [ 481.402859][T16364] team0: Port device syz_tun added [ 481.556385][T16369] loop1: detected capacity change from 0 to 4096 [ 481.602400][T16160] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 481.652362][T16160] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 481.696168][T16160] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 481.717940][T16369] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 481.745442][T16369] overlayfs: missing 'lowerdir' [ 481.811124][T16160] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 482.170407][T16160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.243208][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.298117][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.342273][T16160] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.423489][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 482.458067][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.498874][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.506081][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.613276][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.659249][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.703347][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.710564][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.778997][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 482.839480][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.898447][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 482.939410][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 482.979809][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 483.043519][T16427] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 483.087988][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 483.101873][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 483.131385][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 483.208179][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 483.264191][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 483.277923][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 483.317645][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 483.331191][T16160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 483.668578][T16449] loop1: detected capacity change from 0 to 256 [ 483.739868][T16449] FAT-fs (loop1): Directory bread(block 64) failed [ 483.766929][T16449] FAT-fs (loop1): Directory bread(block 65) failed [ 483.776141][T16450] loop5: detected capacity change from 0 to 512 [ 483.803687][T16449] FAT-fs (loop1): Directory bread(block 66) failed [ 483.824151][T16450] EXT4-fs: Ignoring removed i_version option [ 483.827604][T16449] FAT-fs (loop1): Directory bread(block 67) failed [ 483.877625][T16449] FAT-fs (loop1): Directory bread(block 68) failed [ 483.879467][T16450] EXT4-fs: Ignoring removed mblk_io_submit option [ 483.914190][T16449] FAT-fs (loop1): Directory bread(block 69) failed [ 483.951524][T16449] FAT-fs (loop1): Directory bread(block 70) failed [ 483.970913][T16449] FAT-fs (loop1): Directory bread(block 71) failed [ 483.984888][T16449] FAT-fs (loop1): Directory bread(block 72) failed [ 483.985110][T16450] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.5390: inode #13: comm syz.5.5390: iget: illegal inode # [ 484.016948][T16449] FAT-fs (loop1): Directory bread(block 73) failed [ 484.050750][T16461] netlink: 'syz.2.5393': attribute type 4 has an invalid length. [ 484.068154][T16450] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.5390: couldn't read orphan inode 13 (err -117) [ 484.097580][T16461] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5393'. [ 484.158085][T16450] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 484.421745][T15764] EXT4-fs (loop5): unmounting filesystem. [ 484.643551][T16160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.675828][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 484.694463][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.266948][T16499] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5406'. [ 485.812105][T16514] loop4: detected capacity change from 0 to 1024 [ 485.887751][T16514] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 485.899713][T16511] loop5: detected capacity change from 0 to 4096 [ 485.908957][T16472] loop1: detected capacity change from 0 to 32768 [ 485.926580][T16514] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 485.936169][T16514] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.5411: Failed to acquire dquot type 0 [ 485.966253][T16511] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 485.990449][T16514] EXT4-fs error (device loop4): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 486.017701][T16472] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 486.026146][T16514] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #13: comm syz.4.5411: corrupted inode contents [ 486.155232][T16514] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #13: comm syz.4.5411: mark_inode_dirty error [ 486.173103][T16472] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 486.231685][T16511] ntfs3: loop5: failed to convert "c46c" to iso8859-4 [ 486.245691][T16514] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #13: comm syz.4.5411: corrupted inode contents [ 486.249782][T16472] ocfs2: Unmounting device (7,1) on (node local) [ 486.276825][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 486.316586][T16105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 486.326255][T16514] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.5411: mark_inode_dirty error [ 486.395673][T16514] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #13: comm syz.4.5411: corrupted inode contents [ 486.414490][T15846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 486.445989][T15846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.465580][T16514] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 486.486540][T15846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.503895][T16514] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #13: comm syz.4.5411: corrupted inode contents [ 486.523479][T15846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.557848][T16514] EXT4-fs error (device loop4): ext4_truncate:4312: inode #13: comm syz.4.5411: mark_inode_dirty error [ 486.571520][T16160] device veth0_vlan entered promiscuous mode [ 486.604084][T16514] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 486.655691][T16160] device veth1_vlan entered promiscuous mode [ 486.676863][T16514] EXT4-fs (loop4): 1 truncate cleaned up [ 486.707335][T16514] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 486.717958][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 486.799818][T15846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 486.828896][T15846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 486.866603][T16514] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 486.866780][T16160] device veth0_macvtap entered promiscuous mode [ 486.913268][T16514] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 486.974703][T16514] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.5411: Failed to acquire dquot type 0 [ 486.980564][T16160] device veth1_macvtap entered promiscuous mode [ 487.037117][T16537] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5418'. [ 487.106998][T16160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.110308][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 487.137411][T16160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.212584][T16160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.236136][T16160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.294148][T16160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.355011][T16160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.395166][T16160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.424389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 487.457747][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 487.489010][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 487.505080][T16526] loop2: detected capacity change from 0 to 32768 [ 487.551086][T16526] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5415 (16526) [ 487.585765][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 487.629245][T16526] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 487.644921][T16160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.685904][T16160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.696124][T16526] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 487.726564][T16526] BTRFS info (device loop2): turning on sync discard [ 487.733676][T16160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.757433][T16526] BTRFS info (device loop2): using free space tree [ 487.787305][T16160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.819992][T16160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.869047][T16160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.928940][T16160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.938905][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 487.962912][ T26] audit: type=1400 audit(1756412289.654:149): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=16570 comm="syz.5.5427" [ 487.983919][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 488.013257][T16552] xt_CT: No such helper "pptp" [ 488.025841][T16160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.128489][T16160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.143247][T16526] BTRFS info (device loop2): enabling ssd optimizations [ 488.208811][T16160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.237246][T16160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.474539][ T4265] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 488.545609][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.588012][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.609201][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 488.812448][T16105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.876199][T16105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.922321][T15846] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 489.265938][T16604] loop1: detected capacity change from 0 to 4096 [ 489.397380][T16604] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 489.647618][T16619] tmpfs: Bad value for 'mpol' [ 489.790839][T16613] loop4: detected capacity change from 0 to 4096 [ 489.854746][T16625] binfmt_misc: register: failed to install interpreter file ./file2 [ 489.864391][T16613] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 489.887848][T16613] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 489.895769][T16613] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 489.915335][T16626] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5445'. [ 489.957496][T16626] net_ratelimit: 43 callbacks suppressed [ 489.957513][T16626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.994477][T16613] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 490.009396][T16613] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 490.072549][T16630] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 490.088719][T16613] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 490.096724][T16613] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 490.212999][T16613] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 490.277371][T16613] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 490.314924][T16613] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 490.532093][T16640] loop1: detected capacity change from 0 to 256 [ 490.615099][T16640] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 491.311184][T16667] loop2: detected capacity change from 0 to 1024 [ 491.319078][T16669] netlink: 'syz.5.5461': attribute type 9 has an invalid length. [ 491.326855][T16669] netlink: 'syz.5.5461': attribute type 7 has an invalid length. [ 491.407416][T16669] netlink: 'syz.5.5461': attribute type 8 has an invalid length. [ 491.455770][T16669] netlink: 'syz.5.5461': attribute type 13 has an invalid length. [ 491.599103][T16678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5466'. [ 491.617390][T16678] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5466'. [ 491.681810][T16678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5466'. [ 491.754380][T16678] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5466'. [ 491.793830][T16678] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5466'. [ 491.811501][T16680] netlink: 'syz.2.5467': attribute type 4 has an invalid length. [ 492.047512][ T8306] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 492.157064][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 492.219356][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.250791][ T8306] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 492.255276][T16699] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 492.267261][ T8306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.339459][ T8306] usb 6-1: config 0 descriptor?? [ 492.362738][ T8306] cp210x 6-1:0.0: cp210x converter detected [ 492.775918][ T8306] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 492.797134][ T8306] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 492.843637][ T8306] usb 6-1: cp210x converter now attached to ttyUSB0 [ 492.864604][ T8306] usb 6-1: USB disconnect, device number 2 [ 492.927930][ T8306] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 492.946764][ T8306] cp210x 6-1:0.0: device disconnected [ 493.311922][T16696] loop6: detected capacity change from 0 to 32768 [ 493.377819][T16696] XFS: noikeep mount option is deprecated. [ 493.552936][T16696] XFS (loop6): Mounting V5 Filesystem [ 493.559807][T16733] sock: sock_timestamping_bind_phc: sock not bind to device [ 493.574611][T16738] xt_l2tp: v2 doesn't support IP mode [ 493.671561][T16743] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 493.689258][T16696] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 493.773186][T16696] XFS (loop6): Starting recovery (logdev: internal) [ 493.830932][T16696] XFS (loop6): Ending recovery (logdev: internal) [ 494.027422][T16160] XFS (loop6): Unmounting Filesystem [ 494.339638][T16761] UBIFS error (pid: 16761): cannot open "./file0", error -22 [ 494.759253][T16774] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5498'. [ 494.835466][T16774] netlink: zone id is out of range [ 494.856508][T16776] tmpfs: Bad value for 'mpol' [ 494.885478][T16774] netlink: del zone limit has 4 unknown bytes [ 495.422650][T16799] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5509'. [ 495.485485][T16799] device netdevsim0 entered promiscuous mode [ 495.791156][T16812] loop1: detected capacity change from 0 to 128 [ 495.868265][T16812] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 495.968525][ T4331] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 495.985744][T16816] netlink: 'syz.5.5514': attribute type 10 has an invalid length. [ 496.014055][T16812] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 496.069578][T16816] team0: Port device syz_tun added [ 496.167547][ T4331] usb 3-1: Using ep0 maxpacket: 32 [ 496.178654][ T4331] usb 3-1: config index 0 descriptor too short (expected 26090, got 796) [ 496.187136][ T4331] usb 3-1: config 231 has too many interfaces: 103, using maximum allowed: 32 [ 496.246963][ T4331] usb 3-1: config 231 has an invalid descriptor of length 0, skipping remainder of the config [ 496.306294][ T4331] usb 3-1: config 231 has 0 interfaces, different from the descriptor's value: 103 [ 496.339493][ T4331] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 496.369287][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.372799][T16782] loop6: detected capacity change from 0 to 40427 [ 496.397437][ T4331] usb 3-1: Product: syz [ 496.397459][ T4331] usb 3-1: Manufacturer: syz [ 496.401149][ T4331] usb 3-1: SerialNumber: syz [ 496.429293][T16782] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff [ 496.434062][T16782] F2FS-fs (loop6): invalid crc value [ 496.451994][T16782] F2FS-fs (loop6): Found nat_bits in checkpoint [ 496.634039][ T4331] usb 3-1: USB disconnect, device number 18 [ 496.783758][T16782] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 497.697044][T16864] loop2: detected capacity change from 0 to 512 [ 497.764983][T16864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 497.811440][T16872] xt_hashlimit: size too large, truncated to 1048576 [ 497.827916][T16872] xt_hashlimit: invalid rate [ 497.903668][T16864] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 497.987612][T16864] ext4 filesystem being mounted at /1165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.005139][ T26] audit: type=1326 audit(1756412299.694:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 498.115222][T16881] xt_nfacct: accounting object `syz0' does not exist [ 498.127568][ T26] audit: type=1326 audit(1756412299.694:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 498.267630][ T26] audit: type=1326 audit(1756412299.694:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 498.314387][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 498.394504][ T26] audit: type=1326 audit(1756412299.694:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16877 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 498.889374][T16909] loop5: detected capacity change from 0 to 24 [ 498.896589][T16909] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 499.005253][T16909] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 499.026934][T16913] loop2: detected capacity change from 0 to 1024 [ 499.192872][T16912] loop1: detected capacity change from 0 to 4096 [ 499.245705][T16912] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 499.300758][ T4360] hfsplus: b-tree write err: -5, ino 4 [ 499.369531][T16915] loop4: detected capacity change from 0 to 4096 [ 499.380039][T16912] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 499.421712][T16915] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 499.611149][T16915] ntfs3: loop4: failed to convert "c46c" to iso8859-3 [ 499.807474][T16930] loop5: detected capacity change from 0 to 64 [ 499.909764][T16930] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 500.451451][T16949] loop2: detected capacity change from 0 to 64 [ 500.588600][T16955] loop1: detected capacity change from 0 to 256 [ 500.656524][T16955] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 500.877486][T16961] netlink: 'syz.2.5569': attribute type 10 has an invalid length. [ 500.926057][T16967] netlink: 'syz.5.5572': attribute type 1 has an invalid length. [ 500.979745][T16961] team0: Port device syz_tun added [ 501.353163][T16978] loop2: detected capacity change from 0 to 512 [ 501.371461][T16980] netlink: 'syz.1.5578': attribute type 1 has an invalid length. [ 501.407402][T16980] netlink: 'syz.1.5578': attribute type 3 has an invalid length. [ 501.455797][T16980] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5578'. [ 501.541417][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.547831][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.556108][T16991] loop6: detected capacity change from 0 to 1024 [ 501.576169][T16978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 501.595952][T16978] ext4 filesystem being mounted at /1173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.608829][T16991] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 501.663454][T16991] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 501.719234][T16991] EXT4-fs error (device loop6): ext4_acquire_dquot:6816: comm syz.6.5581: Failed to acquire dquot type 0 [ 501.796589][T16991] EXT4-fs error (device loop6): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 501.844265][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 501.887253][T16991] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #13: comm syz.6.5581: corrupted inode contents [ 502.022144][T16991] EXT4-fs error (device loop6): ext4_dirty_inode:6119: inode #13: comm syz.6.5581: mark_inode_dirty error [ 502.107564][T16991] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #13: comm syz.6.5581: corrupted inode contents [ 502.139364][T17004] loop5: detected capacity change from 0 to 1024 [ 502.153742][T16991] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #13: comm syz.6.5581: mark_inode_dirty error [ 502.217312][T16991] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #13: comm syz.6.5581: corrupted inode contents [ 502.255869][T17004] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 502.277833][T16991] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 502.288895][T17004] EXT4-fs (loop5): orphan cleanup on readonly fs [ 502.367894][T16991] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #13: comm syz.6.5581: corrupted inode contents [ 502.409983][T17012] netlink: 'syz.1.5588': attribute type 10 has an invalid length. [ 502.418503][T17004] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 502.476469][T17004] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 502.480079][T17012] team0: Port device syz_tun added [ 502.497533][T16991] EXT4-fs error (device loop6): ext4_truncate:4312: inode #13: comm syz.6.5581: mark_inode_dirty error [ 502.539345][T17004] EXT4-fs error (device loop5): ext4_acquire_dquot:6816: comm syz.5.5586: Failed to acquire dquot type 0 [ 502.559549][T16991] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 502.618425][T17004] Quota error (device loop5): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 502.630713][T16991] EXT4-fs (loop6): 1 truncate cleaned up [ 502.636528][T16991] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 502.652708][T17004] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 502.688504][T17004] EXT4-fs error (device loop5): ext4_acquire_dquot:6816: comm syz.5.5586: Failed to acquire dquot type 0 [ 502.742035][T17004] EXT4-fs error (device loop5): ext4_free_blocks:6205: comm syz.5.5586: Freeing blocks not in datazone - block = 0, count = 4096 [ 502.788017][T16991] EXT4-fs error (device loop6): ext4_acquire_dquot:6816: comm syz.6.5581: Failed to acquire dquot type 0 [ 502.823146][T17004] EXT4-fs error (device loop5): ext4_acquire_dquot:6816: comm syz.5.5586: Failed to acquire dquot type 0 [ 502.897757][T17004] EXT4-fs (loop5): 1 orphan inode deleted [ 502.907609][T17004] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 502.968290][T16160] EXT4-fs (loop6): unmounting filesystem. [ 503.007513][T17004] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 16: comm syz.5.5586: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 503.165460][T15764] EXT4-fs (loop5): unmounting filesystem. [ 503.527419][T17039] netlink: 'syz.1.5597': attribute type 8 has an invalid length. [ 503.559030][T17037] loop2: detected capacity change from 0 to 512 [ 503.642724][T17037] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.5598: casefold flag without casefold feature [ 503.685622][T17037] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.5598: couldn't read orphan inode 15 (err -117) [ 503.704757][T17037] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 503.788830][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 504.360208][T17064] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 504.433275][T17064] overlayfs: overlapping lowerdir path [ 505.025754][T17045] loop6: detected capacity change from 0 to 32768 [ 505.097616][T17045] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.5600 (17045) [ 505.180334][T17045] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 505.227510][T17045] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 505.287742][T17045] BTRFS info (device loop6): using free space tree [ 505.401008][T17107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5626'. [ 505.410437][T17107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5626'. [ 505.585336][T17045] BTRFS info (device loop6): enabling ssd optimizations [ 505.702628][T17045] BTRFS error (device loop6): balance: invalid convert system profile raid1c4 [ 505.869090][T16160] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 506.449982][T17146] loop2: detected capacity change from 0 to 4096 [ 506.500362][T17151] netlink: 'syz.5.5638': attribute type 4 has an invalid length. [ 506.555648][T17146] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 506.597329][T17151] netlink: 'syz.5.5638': attribute type 3 has an invalid length. [ 506.605246][T17151] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5638'. [ 506.671330][T17146] ntfs3: loop2: Failed to load $Extend. [ 507.363803][T17179] netlink: 'syz.2.5649': attribute type 10 has an invalid length. [ 507.435694][T17179] team0: Device veth1_vlan is already a lower device of the team interface [ 507.494462][T15846] bridge0: port 3(macvlan0) entered disabled state [ 508.146321][T17161] loop4: detected capacity change from 0 to 32768 [ 508.205382][T17161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5640 (17161) [ 508.317450][T17161] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 508.398122][T17161] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 508.458092][T17161] BTRFS info (device loop4): using free space tree [ 508.649938][T17235] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 508.678076][T17235] overlayfs: overlapping lowerdir path [ 508.727397][T17161] BTRFS info (device loop4): enabling ssd optimizations [ 508.790621][ T6548] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 508.909075][ T4266] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 508.997912][ T6548] usb 3-1: Using ep0 maxpacket: 16 [ 509.005415][ T6548] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.077044][ T6548] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.120691][ T6548] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.149948][ T6548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.190495][ T6548] usb 3-1: Product: syz [ 509.195122][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5672'. [ 509.227424][ T6548] usb 3-1: Manufacturer: syz [ 509.232193][ T6548] usb 3-1: SerialNumber: syz [ 509.571987][ T6548] usb 3-1: cannot find UAC_HEADER [ 509.657110][ T6548] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 509.713499][ T4912] udevd[4912]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.746361][ T6548] usb 3-1: USB disconnect, device number 19 [ 509.787039][T17267] loop6: detected capacity change from 0 to 128 [ 509.823272][T17267] EXT4-fs: Ignoring removed nobh option [ 509.931917][T17267] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 510.003167][T17267] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 510.138122][T17282] netlink: 'syz.4.5683': attribute type 10 has an invalid length. [ 510.219590][T17282] team0: Device veth1_vlan failed to register rx_handler [ 510.382065][T16160] EXT4-fs (loop6): unmounting filesystem. [ 510.570732][T17289] loop5: detected capacity change from 0 to 4096 [ 510.654598][T17289] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 510.689437][T17302] ax25_connect(): syz.2.5691 uses autobind, please contact jreuter@yaina.de [ 510.779836][ T4282] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 510.997460][T17309] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5693'. [ 511.052315][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5694'. [ 511.107344][T17313] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5694'. [ 511.157325][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5694'. [ 511.397591][T17319] netlink: 'syz.1.5697': attribute type 1 has an invalid length. [ 511.405394][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5697'. [ 511.679138][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 511.679155][ T26] audit: type=1326 audit(1756412313.374:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17331 comm="syz.6.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 511.707916][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.847487][ T26] audit: type=1326 audit(1756412313.434:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17331 comm="syz.6.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 511.950891][T17336] netlink: 'syz.2.5705': attribute type 1 has an invalid length. [ 511.967397][ T26] audit: type=1326 audit(1756412313.444:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17331 comm="syz.6.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 512.096867][ T26] audit: type=1326 audit(1756412313.444:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17331 comm="syz.6.5702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 512.729818][T17365] netlink: 'syz.6.5716': attribute type 10 has an invalid length. [ 512.777435][T17365] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5716'. [ 512.849399][T17365] bridge0: port 3(veth0_vlan) entered blocking state [ 512.887371][T17365] bridge0: port 3(veth0_vlan) entered disabled state [ 512.916192][T17365] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 512.985203][T17370] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 513.147257][ T6544] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 513.337406][ T6544] usb 3-1: Using ep0 maxpacket: 16 [ 513.345147][ T6544] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 513.408404][ T6544] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.457277][ T6544] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.517291][ T6544] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 513.567264][ T6544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.598344][ T6544] usb 3-1: config 0 descriptor?? [ 513.642493][ T6544] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 513.796050][T17398] loop1: detected capacity change from 0 to 64 [ 514.126031][ T6548] usb 3-1: USB disconnect, device number 20 [ 514.126044][ C1] pxrc 3-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 514.259043][T17407] overlayfs: unrecognized mount option "\" or missing value [ 514.378848][T17408] ALSA: mixer_oss: invalid OSS volume 'u' [ 514.410935][T17411] libceph: resolve '4' (ret=-3): failed [ 514.583316][T17417] loop1: detected capacity change from 0 to 136 [ 514.625420][T17417] Attempt to read inode for relocated directory [ 514.820143][ T4282] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 514.830160][ T4282] Bluetooth: hci1: Injecting HCI hardware error event [ 514.841202][ T4279] Bluetooth: hci1: hardware error 0x00 [ 514.869173][T17423] tmpfs: Bad value for 'size' [ 515.002350][T17390] loop6: detected capacity change from 0 to 32768 [ 515.085756][T17427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5740'. [ 515.136258][T17390] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 515.225968][T17390] OCFS2: ERROR (device loop6): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 515.247976][T17390] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 515.285425][T17390] OCFS2: File system is now read-only. [ 515.339290][T17390] (syz.6.5727,17390,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 515.377814][T17440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 515.511784][T16160] ocfs2: Unmounting device (7,6) on (node local) [ 515.539348][T17439] loop5: detected capacity change from 0 to 4096 [ 515.607413][T17446] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.806942][T17452] Cannot find add_set index 0 as target [ 516.087520][T17463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5755'. [ 516.112956][T17461] ubi31: attaching mtd0 [ 516.147082][T17461] ubi31: scanning is finished [ 516.188786][T17461] ubi31: empty MTD device detected [ 516.409464][T17471] xt_limit: Overflow, try lower: 65536/2147483648 [ 516.437717][T17461] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 516.467961][T17461] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 516.507428][T17461] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 516.526556][T17475] nfs: Deprecated parameter 'nointr' [ 516.548764][T17461] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 516.607109][T17461] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 516.657775][T17461] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 516.687439][T17461] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 832040323 [ 516.735278][T17476] loop6: detected capacity change from 0 to 4096 [ 516.750324][T17461] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 516.792329][T17472] ubi31: background thread "ubi_bgt31d" started, PID 17472 [ 516.813500][T17476] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 516.899168][ T4279] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 517.065044][T17476] ntfs3: loop6: failed to convert "c46c" to cp861 [ 517.852850][T17516] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5776'. [ 518.198662][T17528] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 518.603792][T17543] loop2: detected capacity change from 0 to 164 [ 518.649595][T17545] loop1: detected capacity change from 0 to 64 [ 518.696242][T17543] syz.2.5784: attempt to access beyond end of device [ 518.696242][T17543] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 518.778765][T17543] syz.2.5784: attempt to access beyond end of device [ 518.778765][T17543] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 518.955211][T17549] loop6: detected capacity change from 0 to 1024 [ 519.361592][T17507] loop4: detected capacity change from 0 to 40427 [ 519.442788][ T4308] hfsplus: b-tree write err: -5, ino 4 [ 519.448752][T17507] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 519.470413][T17507] F2FS-fs (loop4): invalid crc value [ 519.536685][T17507] F2FS-fs (loop4): Found nat_bits in checkpoint [ 519.848798][T17507] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 520.668674][T17604] tipc: Can't bind to reserved service type 2 [ 520.986695][T17618] loop4: detected capacity change from 0 to 256 [ 521.165557][T17618] FAT-fs (loop4): Directory bread(block 64) failed [ 521.199442][T17618] FAT-fs (loop4): Directory bread(block 65) failed [ 521.206711][T17618] FAT-fs (loop4): Directory bread(block 66) failed [ 521.277858][T17618] FAT-fs (loop4): Directory bread(block 67) failed [ 521.287705][T17618] FAT-fs (loop4): Directory bread(block 68) failed [ 521.307331][T17618] FAT-fs (loop4): Directory bread(block 69) failed [ 521.314054][T17618] FAT-fs (loop4): Directory bread(block 70) failed [ 521.327321][T17618] FAT-fs (loop4): Directory bread(block 71) failed [ 521.333983][T17618] FAT-fs (loop4): Directory bread(block 72) failed [ 521.342200][T17629] loop1: detected capacity change from 0 to 256 [ 521.388274][T17629] exfat: Deprecated parameter 'utf8' [ 521.397282][T17618] FAT-fs (loop4): Directory bread(block 73) failed [ 521.404088][T17629] exfat: Deprecated parameter 'utf8' [ 521.460634][T17629] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d) [ 521.678583][T17638] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5822'. [ 521.747397][T17638] device bond_slave_0 entered promiscuous mode [ 521.754562][T17638] device bond_slave_1 entered promiscuous mode [ 521.945832][T17644] loop2: detected capacity change from 0 to 512 [ 521.956406][T17646] loop4: detected capacity change from 0 to 256 [ 522.023849][T17644] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 522.027662][T17646] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 522.047888][T17644] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 522.056438][T17644] System zones: 0-1, 15-15, 18-18, 34-34 [ 522.070121][T17644] EXT4-fs (loop2): orphan cleanup on readonly fs [ 522.077266][T17644] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 522.086982][T17644] EXT4-fs warning (device loop2): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 522.102237][T17644] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 522.120158][T17644] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5825: bg 0: block 40: padding at end of block bitmap is not set [ 522.142747][T17644] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 522.161679][T17644] EXT4-fs (loop2): 1 truncate cleaned up [ 522.173291][T17644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 522.176515][T17654] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5827'. [ 522.250514][T17644] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.5825: bad symlink. [ 522.426911][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 522.622812][T17664] trusted_key: encrypted_key: insufficient parameters specified [ 523.327429][T17692] loop6: detected capacity change from 0 to 1024 [ 523.370110][T17694] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5847'. [ 523.557399][ T6548] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 523.679767][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5850'. [ 523.749157][ T6548] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.779765][ T6548] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 523.820263][ T6548] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 523.866598][ T6548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.911904][ T6548] usb 3-1: config 0 descriptor?? [ 523.969942][T17708] loop6: detected capacity change from 0 to 2048 [ 524.054244][T17708] NILFS (loop6): invalid segment: Magic number mismatch [ 524.111749][T17708] NILFS (loop6): trying rollback from an earlier position [ 524.173670][T17708] NILFS (loop6): recovery complete [ 524.260971][T17717] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 524.299189][T17708] NILFS (loop6): unrecognized mount option "01777777777777777777777ÿÿÿñ¼ÊíXc¥vÌ:ýQºòœÞ" [ 524.343714][ T6548] Bluetooth: Can't get state to change to load configuration err [ 524.367342][ T6548] Bluetooth: Loading sysconfig file failed [ 524.389190][ T6548] ath3k: probe of 3-1:0.0 failed with error -16 [ 524.396702][T17684] loop1: detected capacity change from 0 to 32768 [ 524.436212][ T6548] usb 3-1: USB disconnect, device number 21 [ 524.548316][T17684] jfs_mkdir: dtInsert returned -EIO [ 524.567638][T17684] ERROR: (device loop1): jfs_mkdir: [ 524.567638][T17684] [ 524.595666][T17724] binder: 17723:17724 ioctl c00c6211 9999999999999999 returned -14 [ 524.609180][T17684] ERROR: (device loop1): remounting filesystem as read-only [ 524.947738][T17733] AppArmor: change_hat: Invalid input '' [ 525.223407][T17743] loop1: detected capacity change from 0 to 512 [ 525.297894][T17748] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 525.402396][T17743] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.5865: iget: bad i_size value: 38620345925642 [ 525.462725][T17743] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.5865: couldn't read orphan inode 15 (err -117) [ 525.548729][T17743] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 525.622052][T17743] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.5865: bg 0: block 5: invalid block bitmap [ 525.841858][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 526.997706][ T6548] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 527.187449][ T6548] usb 6-1: Using ep0 maxpacket: 8 [ 527.194951][ T6548] usb 6-1: unable to get BOS descriptor or descriptor too short [ 527.218539][T17812] loop2: detected capacity change from 0 to 4096 [ 527.226421][ T6548] usb 6-1: config 8 has an invalid interface number: 255 but max is 0 [ 527.259450][ T6548] usb 6-1: config 8 has no interface number 0 [ 527.265862][T17812] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 527.290369][ T6548] usb 6-1: config 8 interface 255 has no altsetting 0 [ 527.315228][ T6548] usb 6-1: string descriptor 0 read error: -22 [ 527.354468][ T6548] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 527.386498][ T6548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.669444][T17830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5901'. [ 527.863051][ T6548] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.5-1, 00:00:00:00:00:00. [ 527.917440][ T6548] usb 6-1: USB disconnect, device number 3 [ 528.291406][T17852] netlink: 'syz.6.5908': attribute type 30 has an invalid length. [ 528.727597][T17868] netlink: 'syz.1.5914': attribute type 49 has an invalid length. [ 528.987884][T17878] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5918'. [ 529.297642][ T126] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 529.494286][ T126] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 529.516901][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.540082][ T126] usb 5-1: config 0 descriptor?? [ 529.959202][ T126] ath6kl: Failed to submit usb control message: -71 [ 529.966201][ T126] ath6kl: unable to send the bmi data to the device: -71 [ 529.974881][ T126] ath6kl: Unable to send get target info: -71 [ 529.988553][ T126] ath6kl: Failed to init ath6kl core: -71 [ 530.023257][ T126] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 530.049754][ T126] usb 5-1: USB disconnect, device number 21 [ 530.807699][T17943] xt_TCPMSS: Only works on TCP SYN packets [ 530.917503][ T4331] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 531.113499][ T4331] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 531.132358][ T4331] usb 3-1: config 0 has no interface number 1 [ 531.157735][ T4331] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 531.207240][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.219436][ T4331] usb 3-1: config 0 descriptor?? [ 531.443359][ T4331] qcserial 3-1:0.2: Qualcomm USB modem converter detected [ 531.606040][T17963] 9pnet: Could not find request transport: 0xffffffffffffffff [ 531.716134][ T4331] usb 3-1: USB disconnect, device number 22 [ 531.728131][ T4331] qcserial 3-1:0.2: device disconnected [ 531.843738][T17976] tmpfs: Bad value for 'mpol' [ 532.527295][ T6385] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 532.737350][ T6385] usb 5-1: Using ep0 maxpacket: 8 [ 532.752528][ T6385] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 532.787802][ T6385] usb 5-1: config 0 has no interface number 0 [ 532.796434][ T6385] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 532.830692][ T6385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.869827][T18016] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5953'. [ 532.880145][ T6385] usb 5-1: Product: syz [ 532.890720][ T6385] usb 5-1: Manufacturer: syz [ 532.916092][ T6385] usb 5-1: SerialNumber: syz [ 532.950127][ T6385] usb 5-1: config 0 descriptor?? [ 532.998031][T18020] loop1: detected capacity change from 0 to 128 [ 533.150201][T18020] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 533.175493][ T6385] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 533.192180][ T6385] usb 5-1: No valid video chain found. [ 533.227024][T18020] ext4 filesystem being mounted at /1224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.242706][T18030] loop2: detected capacity change from 0 to 256 [ 533.247889][ T6385] usb 5-1: USB disconnect, device number 22 [ 533.296701][T18020] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.5955: No space for directory leaf checksum. Please run e2fsck -D. [ 533.326651][T18030] FAT-fs (loop2): Directory bread(block 64) failed [ 533.338515][T18030] FAT-fs (loop2): Directory bread(block 65) failed [ 533.363427][T18030] FAT-fs (loop2): Directory bread(block 66) failed [ 533.375293][T18034] loop5: detected capacity change from 0 to 16 [ 533.381901][T18020] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.5955: Directory block failed checksum [ 533.397316][T18030] FAT-fs (loop2): Directory bread(block 67) failed [ 533.404152][T18030] FAT-fs (loop2): Directory bread(block 68) failed [ 533.421534][T18034] erofs: (device loop5): mounted with root inode @ nid 36. [ 533.441628][T18030] FAT-fs (loop2): Directory bread(block 69) failed [ 533.461941][T18030] FAT-fs (loop2): Directory bread(block 70) failed [ 533.473540][T18030] FAT-fs (loop2): Directory bread(block 71) failed [ 533.507641][T18030] FAT-fs (loop2): Directory bread(block 72) failed [ 533.564441][T18030] FAT-fs (loop2): Directory bread(block 73) failed [ 533.636209][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 533.903944][ T26] audit: type=1326 audit(1756412335.594:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.5.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f378ebe9 code=0x7ffc0000 [ 533.985943][ T26] audit: type=1326 audit(1756412335.594:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.5.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f378ebe9 code=0x7ffc0000 [ 534.030098][T18049] netlink: 'syz.4.5965': attribute type 11 has an invalid length. [ 534.087914][ T26] audit: type=1326 audit(1756412335.654:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.5.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f62f378ebe9 code=0x7ffc0000 [ 534.245417][ T26] audit: type=1326 audit(1756412335.654:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.5.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f378ebe9 code=0x7ffc0000 [ 534.397592][ T26] audit: type=1326 audit(1756412335.654:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18045 comm="syz.5.5964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f378ebe9 code=0x7ffc0000 [ 534.597115][T18070] loop1: detected capacity change from 0 to 512 [ 534.644604][T18073] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5973'. [ 534.694586][T18070] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 534.727290][T18073] netlink: 'syz.4.5973': attribute type 1 has an invalid length. [ 534.781062][T18070] EXT4-fs (loop1): 1 truncate cleaned up [ 534.786795][T18070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 534.824427][T18074] block device autoloading is deprecated and will be removed. [ 534.930961][T18079] loop5: detected capacity change from 0 to 256 [ 535.059847][T18079] FAT-fs (loop5): Directory bread(block 64) failed [ 535.116228][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 535.117356][T18079] FAT-fs (loop5): Directory bread(block 65) failed [ 535.158496][T18079] FAT-fs (loop5): Directory bread(block 66) failed [ 535.192473][T18079] FAT-fs (loop5): Directory bread(block 67) failed [ 535.219799][T18079] FAT-fs (loop5): Directory bread(block 68) failed [ 535.238089][T18079] FAT-fs (loop5): Directory bread(block 69) failed [ 535.244966][T18079] FAT-fs (loop5): Directory bread(block 70) failed [ 535.277548][T18079] FAT-fs (loop5): Directory bread(block 71) failed [ 535.284265][T18079] FAT-fs (loop5): Directory bread(block 72) failed [ 535.343523][T18079] FAT-fs (loop5): Directory bread(block 73) failed [ 535.375164][T18097] binder: 18094:18097 ioctl c018620c 200000001180 returned -22 [ 535.772226][T18111] netlink: 'syz.2.5992': attribute type 27 has an invalid length. [ 535.784418][T18111] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 536.043833][T18119] loop2: detected capacity change from 0 to 512 [ 536.105902][T18119] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 536.128432][T18119] ext4 filesystem being mounted at /1251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 536.192653][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 537.408613][T18170] loop5: detected capacity change from 0 to 64 [ 537.862463][T18188] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6025'. [ 538.263240][T18202] loop1: detected capacity change from 0 to 1764 [ 538.366526][T18202] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 538.705063][T18221] loop4: detected capacity change from 0 to 16 [ 538.758163][T18221] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 538.966378][T18230] binder: 18224:18230 ioctl 400c620e 0 returned -14 [ 539.510842][T18249] netlink: 'syz.2.6050': attribute type 1 has an invalid length. [ 539.938791][T18266] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 540.282241][T18274] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6062'. [ 540.350278][T18283] loop2: detected capacity change from 0 to 128 [ 541.069596][T18304] loop4: detected capacity change from 0 to 256 [ 541.205791][T18304] FAT-fs (loop4): Directory bread(block 64) failed [ 541.247338][T18304] FAT-fs (loop4): Directory bread(block 65) failed [ 541.254037][T18304] FAT-fs (loop4): Directory bread(block 66) failed [ 541.315438][T18304] FAT-fs (loop4): Directory bread(block 67) failed [ 541.373214][T18304] FAT-fs (loop4): Directory bread(block 68) failed [ 541.407280][T18304] FAT-fs (loop4): Directory bread(block 69) failed [ 541.417883][T18304] FAT-fs (loop4): Directory bread(block 70) failed [ 541.424482][T18304] FAT-fs (loop4): Directory bread(block 71) failed [ 541.468528][T18311] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6076'. [ 541.479419][T18304] FAT-fs (loop4): Directory bread(block 72) failed [ 541.486002][T18304] FAT-fs (loop4): Directory bread(block 73) failed [ 541.570389][T18277] loop6: detected capacity change from 0 to 32768 [ 541.750662][T18277] (syz.6.6063,18277,1):ocfs2_init_local_system_inodes:492 ERROR: status=-22, sysfile=7, slot=0 [ 541.761154][T18277] (syz.6.6063,18277,1):ocfs2_init_local_system_inodes:501 ERROR: status = -22 [ 541.781109][T18277] (syz.6.6063,18277,1):ocfs2_mount_volume:1815 ERROR: status = -22 [ 541.838150][T18277] (syz.6.6063,18277,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 542.357848][T18297] loop1: detected capacity change from 0 to 40427 [ 542.367365][T18327] loop4: detected capacity change from 0 to 1024 [ 542.449511][T18297] F2FS-fs (loop1): invalid crc value [ 542.454893][T18297] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 542.572663][T18297] F2FS-fs (loop1): Found nat_bits in checkpoint [ 542.596374][T18327] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 542.682242][T18308] loop2: detected capacity change from 0 to 32768 [ 542.690406][T18327] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz.4.6081: directory missing '.' [ 542.835482][T18297] F2FS-fs (loop1): recover fsync data on readonly fs [ 542.843568][T18345] loop6: detected capacity change from 0 to 1024 [ 542.884700][T18308] XFS (loop2): Mounting V5 Filesystem [ 542.888369][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 542.909662][T18297] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 542.919506][T18297] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 543.002712][T18297] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 543.093217][ T4360] hfsplus: b-tree write err: -5, ino 4 [ 543.130334][T18308] XFS (loop2): Ending clean mount [ 543.149933][T18356] loop5: detected capacity change from 0 to 64 [ 543.267514][T18359] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6086'. [ 543.329130][T18359] netlink: 'syz.4.6086': attribute type 1 has an invalid length. [ 543.365980][ T4265] XFS (loop2): Unmounting Filesystem [ 543.399891][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6086'. [ 543.894294][T18374] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6095'. [ 543.950722][T18376] loop5: detected capacity change from 0 to 164 [ 544.057056][T18376] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 544.288453][ T26] audit: type=1326 audit(1756412345.984:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18384 comm="syz.6.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 544.385422][ T26] audit: type=1326 audit(1756412345.984:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18384 comm="syz.6.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 544.537500][ T26] audit: type=1326 audit(1756412345.984:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18384 comm="syz.6.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 544.657429][ T26] audit: type=1326 audit(1756412345.984:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18384 comm="syz.6.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8ebe9 code=0x7ffc0000 [ 545.514060][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6118'. [ 545.974203][T18451] loop4: detected capacity change from 0 to 256 [ 546.047419][T18455] loop6: detected capacity change from 0 to 8 [ 546.070478][T18451] FAT-fs (loop4): Directory bread(block 64) failed [ 546.137531][T18451] FAT-fs (loop4): Directory bread(block 65) failed [ 546.144215][T18451] FAT-fs (loop4): Directory bread(block 66) failed [ 546.157366][T18455] SQUASHFS error: Failed to read block 0x636: -5 [ 546.183307][T18455] SQUASHFS error: Unable to read metadata cache entry [634] [ 546.197488][T18455] SQUASHFS error: Unable to read metadata cache entry [634] [ 546.205314][T18455] SQUASHFS error: Unable to read directory block [629:0] [ 546.225781][T18451] FAT-fs (loop4): Directory bread(block 67) failed [ 546.247373][T18451] FAT-fs (loop4): Directory bread(block 68) failed [ 546.253977][T18451] FAT-fs (loop4): Directory bread(block 69) failed [ 546.327460][T18451] FAT-fs (loop4): Directory bread(block 70) failed [ 546.338410][T18461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6129'. [ 546.367321][T18451] FAT-fs (loop4): Directory bread(block 71) failed [ 546.374039][T18451] FAT-fs (loop4): Directory bread(block 72) failed [ 546.400268][T18451] FAT-fs (loop4): Directory bread(block 73) failed [ 546.967322][ T126] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 547.034358][T18484] loop6: detected capacity change from 0 to 256 [ 547.078200][T18484] exfat: Deprecated parameter 'namecase' [ 547.126915][T18484] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 547.167415][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 547.187643][ T126] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 547.210597][T18491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6141'. [ 547.224133][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.263353][ T126] usb 3-1: Product: syz [ 547.267431][T18491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6141'. [ 547.301795][ T126] usb 3-1: Manufacturer: syz [ 547.306491][ T126] usb 3-1: SerialNumber: syz [ 547.352713][ T126] usb 3-1: config 0 descriptor?? [ 547.448634][T18496] loop4: detected capacity change from 0 to 164 [ 547.579951][ T126] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -5 [ 547.597300][ T126] f81534a_ctrl 3-1:0.0: failed to enable ports: -5 [ 547.624253][ T126] f81534a_ctrl: probe of 3-1:0.0 failed with error -5 [ 547.667352][ T126] usb 3-1: USB disconnect, device number 23 [ 548.087526][T18518] afs: Bad value for 'source' [ 548.515580][T18533] loop4: detected capacity change from 0 to 1764 [ 548.863065][T18540] loop6: detected capacity change from 0 to 4096 [ 549.077333][T18540] NILFS error (device loop6): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 549.459278][ T26] audit: type=1326 audit(1756412351.154:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.6171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ad8ebe9 code=0x7ffc0000 [ 549.534436][ T26] audit: type=1326 audit(1756412351.154:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.6171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc73ad8ebe9 code=0x7ffc0000 [ 549.665163][ T26] audit: type=1326 audit(1756412351.154:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.6171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ad8ebe9 code=0x7ffc0000 [ 549.738008][T18523] loop5: detected capacity change from 0 to 32768 [ 549.763337][ T26] audit: type=1326 audit(1756412351.154:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.6171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ad8ebe9 code=0x7ffc0000 [ 549.844619][T18523] XFS (loop5): Mounting V5 Filesystem [ 549.906083][T18582] JFS: discard option not supported on device [ 549.933797][ T93] block nbd2: Attempted send on invalid socket [ 549.940323][ T93] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.955816][ T93] block nbd2: Attempted send on invalid socket [ 549.962302][ T93] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 549.972258][T18582] Mount JFS Failure: -5 [ 550.139511][T18523] XFS (loop5): Ending clean mount [ 550.178875][T18523] XFS (loop5): Quotacheck needed: Please wait. [ 550.285036][T18594] loop1: detected capacity change from 0 to 1024 [ 550.322871][T18523] XFS (loop5): Quotacheck: Done. [ 550.407561][T18594] hfsplus: extend alloc file! (8192,63991,0) [ 550.631103][T15764] XFS (loop5): Unmounting Filesystem [ 551.134691][T18623] dlm: no locking on control device [ 551.625740][T18629] loop1: detected capacity change from 0 to 4096 [ 552.054233][ T26] audit: type=1326 audit(1756412353.744:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.1.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ad8ebe9 code=0x7ffc0000 [ 552.168233][ T26] audit: type=1326 audit(1756412353.744:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.1.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ad8ebe9 code=0x7ffc0000 [ 552.290377][ T26] audit: type=1326 audit(1756412353.774:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.1.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fc73ad8ebe9 code=0x7ffc0000 [ 552.386416][ T26] audit: type=1326 audit(1756412353.774:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.1.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ad8ebe9 code=0x7ffc0000 [ 552.431862][T18659] loop6: detected capacity change from 0 to 4096 [ 552.509917][ T26] audit: type=1326 audit(1756412353.774:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18649 comm="syz.1.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ad8ebe9 code=0x7ffc0000 [ 552.537995][T18659] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 552.638678][T18671] netlink: 'syz.5.6211': attribute type 5 has an invalid length. [ 552.884053][T16160] EXT4-fs (loop6): unmounting filesystem. [ 552.974827][ T26] audit: type=1326 audit(1756412354.664:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.5.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f378ebe9 code=0x7ffc0000 [ 553.888092][T18719] loop5: detected capacity change from 0 to 65 [ 553.913459][T18715] loop6: detected capacity change from 0 to 2048 [ 553.932548][T18719] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 553.991122][T18715] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.047445][T18715] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 554.151204][T18715] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 554.188534][T18727] loop2: detected capacity change from 0 to 64 [ 554.662622][T18745] netlink: 'syz.2.6241': attribute type 4 has an invalid length. [ 554.831928][T18739] loop6: detected capacity change from 0 to 4096 [ 554.922260][T18739] __ntfs_error: 8 callbacks suppressed [ 554.922282][T18739] ntfs: (device loop6): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 554.987065][T18739] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 555.061926][T18739] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 555.126327][T18759] netlink: 'syz.1.6247': attribute type 1 has an invalid length. [ 555.134979][T18739] ntfs: volume version 3.1. [ 555.181788][T18739] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 556.567274][ T6548] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 556.767392][ T6548] usb 6-1: Using ep0 maxpacket: 32 [ 556.774775][ T6548] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 556.806331][T18814] loop6: detected capacity change from 0 to 64 [ 556.823803][ T6548] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 556.849992][ T6548] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 556.881976][ T6548] usb 6-1: config 1 has no interface number 0 [ 556.902250][ T6548] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 556.943969][ T6548] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 556.976674][ T6548] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 557.006380][ T6548] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 557.015720][ T6548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.056780][T18799] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 557.070469][ T6548] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 557.284325][T18799] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 557.319815][ T6548] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 557.601454][ T126] usb 6-1: USB disconnect, device number 4 [ 557.616826][ T126] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 557.791549][T18845] loop2: detected capacity change from 0 to 1024 [ 557.848220][T18850] SET target dimension over the limit! [ 558.043025][T18854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6293'. [ 558.226445][T18860] netlink: 'syz.6.6295': attribute type 1 has an invalid length. [ 558.279136][T18856] loop2: detected capacity change from 0 to 4096 [ 558.302764][T18864] ./file0: Can't open blockdev [ 558.509128][T18862] loop5: detected capacity change from 0 to 4096 [ 559.121028][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6309'. [ 559.329400][T18894] loop5: detected capacity change from 0 to 24 [ 559.336553][T18894] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 559.435073][T18894] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 559.738648][T18910] netlink: 'syz.2.6319': attribute type 10 has an invalid length. [ 559.863926][T18910] team0: Port device syz_tun removed [ 559.892105][T18910] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 560.632692][T18941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 560.798788][T18949] loop6: detected capacity change from 0 to 256 [ 560.845774][T18949] FAT-fs (loop6): Directory bread(block 64) failed [ 560.867298][T18949] FAT-fs (loop6): Directory bread(block 65) failed [ 560.894973][T18949] FAT-fs (loop6): Directory bread(block 66) failed [ 560.930164][T18949] FAT-fs (loop6): Directory bread(block 67) failed [ 560.978864][T18949] FAT-fs (loop6): Directory bread(block 68) failed [ 560.994514][T18949] FAT-fs (loop6): Directory bread(block 69) failed [ 561.048820][T18949] FAT-fs (loop6): Directory bread(block 70) failed [ 561.055438][T18949] FAT-fs (loop6): Directory bread(block 71) failed [ 561.111426][T18949] FAT-fs (loop6): Directory bread(block 72) failed [ 561.133323][T18949] FAT-fs (loop6): Directory bread(block 73) failed [ 561.353283][T18965] loop5: detected capacity change from 0 to 512 [ 561.501920][T18965] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 561.556295][T18965] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.809924][T15764] EXT4-fs (loop5): unmounting filesystem. [ 561.859298][T18982] xt_hashlimit: max too large, truncated to 1048576 [ 562.060590][T18989] delete_channel: no stack [ 562.257534][ T126] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 562.449104][ T126] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 562.487477][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.527574][ T126] usb 6-1: config 0 descriptor?? [ 562.786436][T19019] loop2: detected capacity change from 0 to 1024 [ 562.825324][T19019] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 562.847227][ T6385] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 562.943243][ T126] [drm:udl_init] *ERROR* Selecting channel failed [ 562.990313][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.996724][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.002478][ T126] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 563.026331][ T126] [drm] Initialized udl on minor 2 [ 563.054240][ T126] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 563.057253][ T6385] usb 7-1: Using ep0 maxpacket: 16 [ 563.071647][T19027] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6376'. [ 563.074304][ T126] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 563.089052][ T6385] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 563.100187][ T126] usb 6-1: USB disconnect, device number 5 [ 563.117685][ T6548] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 563.129074][ T6385] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 563.173694][ T6385] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 563.180970][ T6548] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 563.221339][ T6385] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 563.233599][ T6548] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 563.234810][ T6385] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.260752][ T6385] usb 7-1: Product: syz [ 563.264996][ T6385] usb 7-1: Manufacturer: syz [ 563.276393][ T6385] usb 7-1: SerialNumber: syz [ 563.725247][ T6385] usb 7-1: 0:2 : does not exist [ 563.773111][ T6385] usb 7-1: USB disconnect, device number 2 [ 564.071508][ T4912] udevd[4912]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.114508][T19051] loop1: detected capacity change from 0 to 256 [ 564.194111][T19051] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 564.716270][T19069] netlink: 'syz.6.6397': attribute type 2 has an invalid length. [ 564.749020][T19070] delete_channel: no stack [ 564.786984][T19069] netlink: 119 bytes leftover after parsing attributes in process `syz.6.6397'. [ 564.913029][T19075] loop4: detected capacity change from 0 to 256 [ 565.014905][T19075] FAT-fs (loop4): Directory bread(block 64) failed [ 565.050082][T19075] FAT-fs (loop4): Directory bread(block 65) failed [ 565.056782][T19075] FAT-fs (loop4): Directory bread(block 66) failed [ 565.101992][T19075] FAT-fs (loop4): Directory bread(block 67) failed [ 565.125888][T19075] FAT-fs (loop4): Directory bread(block 68) failed [ 565.157417][T19075] FAT-fs (loop4): Directory bread(block 69) failed [ 565.164156][T19075] FAT-fs (loop4): Directory bread(block 70) failed [ 565.206281][T19075] FAT-fs (loop4): Directory bread(block 71) failed [ 565.237691][T19075] FAT-fs (loop4): Directory bread(block 72) failed [ 565.244332][T19075] FAT-fs (loop4): Directory bread(block 73) failed [ 565.336286][T19087] loop5: detected capacity change from 0 to 8 [ 565.491777][T19091] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6406'. [ 565.927329][ T126] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 566.071316][T19102] loop5: detected capacity change from 0 to 128 [ 566.128706][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 566.139002][ T126] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 566.178588][T19102] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 566.195531][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.216910][ T126] usb 3-1: Product: syz [ 566.224644][T19102] hpfs: filesystem error: improperly stopped [ 566.232139][ T126] usb 3-1: Manufacturer: syz [ 566.242566][ T126] usb 3-1: SerialNumber: syz [ 566.247601][T19102] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 566.269628][ T126] usb 3-1: config 0 descriptor?? [ 566.285949][T19102] hpfs: You really don't want any checks? You are crazy... [ 566.312120][ T126] gspca_main: sq930x-2.14.0 probing 2770:930c [ 566.331567][T19102] hpfs: hpfs_map_sector(): read error [ 566.337056][T19102] hpfs: code page support is disabled [ 566.349028][T19102] hpfs: hpfs_map_sector(): read error [ 566.365336][T19102] hpfs: hpfs_map_sector(): read error [ 566.390737][T19102] hpfs: filesystem error: unable to find root dir [ 566.554711][T19112] syz.1.6417 uses old SIOCAX25GETINFO [ 566.707450][ T126] gspca_sq930x: ucbus_write failed -71 [ 566.947366][ T126] gspca_sq930x: Sensor ov9630 not yet treated [ 566.953603][ T126] sq930x: probe of 3-1:0.0 failed with error -22 [ 566.996122][ T126] usb 3-1: USB disconnect, device number 24 [ 567.331912][ T26] audit: type=1326 audit(1756412369.024:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19139 comm="syz.4.6431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa3b8ebe9 code=0x7ffc0000 [ 567.397195][ T6385] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 567.424711][ T26] audit: type=1326 audit(1756412369.024:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19139 comm="syz.4.6431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f3aa3b8ebe9 code=0x7ffc0000 [ 567.490826][ T26] audit: type=1326 audit(1756412369.024:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19139 comm="syz.4.6431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa3b8ebe9 code=0x7ffc0000 [ 567.587418][ T6385] usb 7-1: Using ep0 maxpacket: 32 [ 567.599194][ T6385] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 567.617963][ T6385] usb 7-1: config 0 has no interface number 0 [ 567.630959][ T6385] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.687322][ T6385] usb 7-1: config 0 interface 85 has no altsetting 0 [ 567.705343][ T6385] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 567.732443][ T6385] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.749017][T19148] loop2: detected capacity change from 0 to 4096 [ 567.756331][ T6385] usb 7-1: Product: syz [ 567.788282][T19148] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 567.798956][ T6385] usb 7-1: Manufacturer: syz [ 567.836231][ T6385] usb 7-1: SerialNumber: syz [ 567.888393][ T6385] usb 7-1: config 0 descriptor?? [ 568.053119][T19148] ntfs: (device loop2): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 568.112051][T19148] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 568.167667][T19148] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 568.244507][T19148] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 568.263377][T19148] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 568.308270][ T6385] appletouch 7-1:0.85: Failed to request geyser raw mode [ 568.309572][T19148] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 568.327766][ T6385] appletouch: probe of 7-1:0.85 failed with error -5 [ 568.375488][T19148] ntfs: volume version 3.1. [ 568.416370][ T6385] usb 7-1: USB disconnect, device number 3 [ 568.483761][T19165] netlink: 'syz.4.6443': attribute type 1 has an invalid length. [ 568.740500][T19171] overlayfs: missing 'lowerdir' [ 568.815753][T19175] binder: 19173:19175 ioctl 40046210 0 returned -14 [ 569.276206][T19192] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.327355][ T6385] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 569.422741][T19197] loop2: detected capacity change from 0 to 2048 [ 569.501622][T19197] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 569.502820][T19203] loop1: detected capacity change from 0 to 164 [ 569.519875][T19197] ext4 filesystem being mounted at /1347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.557227][ T6385] usb 7-1: Using ep0 maxpacket: 32 [ 569.565239][ T6385] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 569.581147][T19203] ISOFS: unable to read i-node block [ 569.588948][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 569.594891][T19203] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 569.625399][ T6385] usb 7-1: config 0 has no interface number 0 [ 569.663079][T19203] ISOFS: unable to read i-node block [ 569.665942][ T6385] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 569.719874][ T6385] usb 7-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 26159, setting to 1024 [ 569.786432][ T6385] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 569.849560][ T6385] usb 7-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 569.867213][ T6385] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.910001][ T6385] usb 7-1: Product: syz [ 569.914233][ T6385] usb 7-1: Manufacturer: syz [ 569.929149][ T6385] usb 7-1: SerialNumber: syz [ 569.963099][ T6385] usb 7-1: config 0 descriptor?? [ 569.988607][T19183] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 569.995921][T19183] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 570.331714][ T6385] usb 7-1: USB disconnect, device number 4 [ 570.513666][T19231] tmpfs: Bad value for 'mpol' [ 571.224574][T19256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6486'. [ 571.889348][T19283] loop4: detected capacity change from 0 to 1024 [ 572.308580][T19301] comedi comedi0: rti800: I/O port conflict (0xffffffff80000000,16) [ 572.833413][T19313] loop2: detected capacity change from 0 to 8192 [ 572.833587][T19320] loop4: detected capacity change from 0 to 2048 [ 572.886992][T19313] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 572.939407][T19322] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 572.972938][T19320] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 573.048570][T19320] Remounting filesystem read-only [ 573.053996][T19320] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 573.203194][T19329] SET target dimension over the limit! [ 573.436745][T19331] loop6: detected capacity change from 0 to 2048 [ 573.558386][T19336] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 573.777377][ T6548] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 573.987414][ T6548] usb 6-1: Using ep0 maxpacket: 8 [ 573.994590][ T6548] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 574.026208][ T6548] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 574.070562][ T6548] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 574.114092][ T6548] usb 6-1: config 250 has no interface number 0 [ 574.149703][ T6548] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 574.204636][ T6548] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 574.243512][ T6548] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 574.275396][T19327] loop1: detected capacity change from 0 to 32768 [ 574.280086][ T6548] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 574.329650][ T6548] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 574.357753][T19327] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 574.373839][ T6548] usb 6-1: config 250 interface 228 has no altsetting 0 [ 574.416635][ T6548] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 574.421270][T19327] [ 574.428263][T19327] ====================================================== [ 574.435284][T19327] WARNING: possible circular locking dependency detected [ 574.442305][T19327] syzkaller #0 Not tainted [ 574.446718][T19327] ------------------------------------------------------ [ 574.453735][T19327] syz.1.6520/19327 is trying to acquire lock: [ 574.459796][T19327] ffff8880509c2378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x2fb/0x720 [ 574.469118][T19327] [ 574.469118][T19327] but task is already holding lock: [ 574.476479][T19327] ffff888055a02990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f29/0x2150 [ 574.485801][T19327] [ 574.485801][T19327] which lock already depends on the new lock. [ 574.485801][T19327] [ 574.496202][T19327] [ 574.496202][T19327] the existing dependency chain (in reverse order) is: [ 574.505214][T19327] [ 574.505214][T19327] -> #2 (jbd2_handle){++++}-{0:0}: [ 574.512513][T19327] jbd2_journal_lock_updates+0xa7/0x380 [ 574.518587][T19327] __ocfs2_flush_truncate_log+0x2cd/0x11d0 [ 574.524922][T19327] ocfs2_flush_truncate_log+0x4b/0x60 [ 574.530819][T19327] ocfs2_sync_fs+0x113/0x310 [ 574.535937][T19327] sync_filesystem+0x1be/0x220 [ 574.541231][T19327] generic_shutdown_super+0x6b/0x340 [ 574.547034][T19327] kill_block_super+0x7c/0xe0 [ 574.552231][T19327] deactivate_locked_super+0x93/0xf0 [ 574.558045][T19327] cleanup_mnt+0x463/0x4f0 [ 574.562986][T19327] task_work_run+0x1ca/0x250 [ 574.568100][T19327] exit_to_user_mode_loop+0xe6/0x110 [ 574.573911][T19327] exit_to_user_mode_prepare+0xb1/0x140 [ 574.580066][T19327] syscall_exit_to_user_mode+0x16/0x40 [ 574.586047][T19327] do_syscall_64+0x58/0xa0 [ 574.590981][T19327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.597498][T19327] [ 574.597498][T19327] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 574.608027][T19327] down_write+0x36/0x60 [ 574.612711][T19327] ocfs2_xattr_set+0xad6/0x11e0 [ 574.618082][T19327] ocfs2_set_acl+0x4e1/0x590 [ 574.623201][T19327] ocfs2_iop_set_acl+0x16f/0x270 [ 574.628662][T19327] posix_acl_xattr_set+0x387/0x3f0 [ 574.634298][T19327] __vfs_setxattr+0x3e0/0x420 [ 574.639502][T19327] __vfs_setxattr_noperm+0x129/0x5e0 [ 574.645492][T19327] vfs_setxattr+0x168/0x2f0 [ 574.650515][T19327] setxattr+0x2b2/0x2d0 [ 574.655197][T19327] path_setxattr+0x142/0x280 [ 574.660326][T19327] __x64_sys_setxattr+0xb7/0xd0 [ 574.665735][T19327] do_syscall_64+0x4c/0xa0 [ 574.670674][T19327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.677093][T19327] [ 574.677093][T19327] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 574.684926][T19327] __lock_acquire+0x2cf8/0x7c50 [ 574.690311][T19327] lock_acquire+0x1b4/0x490 [ 574.695339][T19327] down_read+0x42/0x2d0 [ 574.700113][T19327] ocfs2_init_acl+0x2fb/0x720 [ 574.705313][T19327] ocfs2_mknod+0x1463/0x2350 [ 574.710447][T19327] ocfs2_create+0x1b6/0x4a0 [ 574.715480][T19327] vfs_create+0x2db/0x460 [ 574.720427][T19327] do_mknodat+0x399/0x4c0 [ 574.725281][T19327] __x64_sys_mknod+0x8a/0xa0 [ 574.730392][T19327] do_syscall_64+0x4c/0xa0 [ 574.735331][T19327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.741755][T19327] [ 574.741755][T19327] other info that might help us debug this: [ 574.741755][T19327] [ 574.751986][T19327] Chain exists of: [ 574.751986][T19327] &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle [ 574.751986][T19327] [ 574.767896][T19327] Possible unsafe locking scenario: [ 574.767896][T19327] [ 574.775342][T19327] CPU0 CPU1 [ 574.780703][T19327] ---- ---- [ 574.786068][T19327] lock(jbd2_handle); [ 574.790135][T19327] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 574.799940][T19327] lock(jbd2_handle); [ 574.806539][T19327] lock(&oi->ip_xattr_sem); [ 574.811127][T19327] [ 574.811127][T19327] *** DEADLOCK *** [ 574.811127][T19327] [ 574.819264][T19327] 8 locks held by syz.1.6520/19327: [ 574.824457][T19327] #0: ffff888020bda460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 574.833787][T19327] #1: ffff8880509c2648 (&type->i_mutex_dir_key#17/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 574.844585][T19327] #2: ffff888054f85f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 574.858250][T19327] #3: ffff8880509c5f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 574.871919][T19327] #4: ffff888054f83488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 574.885841][T19327] #5: ffff888020bda650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe6a/0x2350 [ 574.895071][T19327] #6: ffff8880648954e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x366/0x6c0 [ 574.905775][T19327] #7: ffff888055a02990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f29/0x2150 [ 574.915452][T19327] [ 574.915452][T19327] stack backtrace: [ 574.921344][T19327] CPU: 1 PID: 19327 Comm: syz.1.6520 Not tainted syzkaller #0 [ 574.928802][T19327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 574.939215][T19327] Call Trace: [ 574.942501][T19327] [ 574.945441][T19327] dump_stack_lvl+0x168/0x22e [ 574.950129][T19327] ? load_image+0x3b0/0x3b0 [ 574.954812][T19327] ? show_regs_print_info+0x12/0x12 [ 574.960105][T19327] ? print_circular_bug+0x12b/0x1a0 [ 574.965310][T19327] check_noncircular+0x274/0x310 [ 574.970256][T19327] ? add_chain_block+0x940/0x940 [ 574.975199][T19327] ? lockdep_lock+0xdc/0x1e0 [ 574.979799][T19327] ? _find_first_zero_bit+0xcf/0x100 [ 574.985100][T19327] __lock_acquire+0x2cf8/0x7c50 [ 574.989962][T19327] ? verify_lock_unused+0x140/0x140 [ 574.995164][T19327] ? __ocfs2_mknod_locked+0xbf5/0x14a0 [ 575.000634][T19327] ? __lock_acquire+0x7c50/0x7c50 [ 575.005686][T19327] ? do_raw_spin_lock+0x11d/0x280 [ 575.010723][T19327] ? __rwlock_init+0x140/0x140 [ 575.015584][T19327] lock_acquire+0x1b4/0x490 [ 575.020101][T19327] ? ocfs2_init_acl+0x2fb/0x720 [ 575.025046][T19327] ? __might_sleep+0xd0/0xd0 [ 575.029642][T19327] ? read_lock_is_recursive+0x10/0x10 [ 575.035022][T19327] ? trace_ocfs2_claim_new_inode_at_loc+0x240/0x240 [ 575.041701][T19327] ? mark_lock+0x94/0x320 [ 575.046044][T19327] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 575.052028][T19327] down_read+0x42/0x2d0 [ 575.056190][T19327] ? ocfs2_init_acl+0x2fb/0x720 [ 575.061044][T19327] ocfs2_init_acl+0x2fb/0x720 [ 575.065728][T19327] ? ocfs2_mknod_locked+0x145/0x240 [ 575.070948][T19327] ? ocfs2_acl_chmod+0x330/0x330 [ 575.076008][T19327] ? dquot_alloc_inode+0x1fc/0xa20 [ 575.081153][T19327] ? ocfs2_block_signals+0x91/0xd0 [ 575.086371][T19327] ? ocfs2_free_mem_caches+0x50/0x50 [ 575.091682][T19327] ? ocfs2_init_security_get+0x135/0x1a0 [ 575.097373][T19327] ocfs2_mknod+0x1463/0x2350 [ 575.101974][T19327] ? ocfs2_mkdir+0x4a0/0x4a0 [ 575.106616][T19327] ? ocfs2_inode_lock_tracker+0x3e8/0x660 [ 575.112337][T19327] ? __kmem_cache_free+0xb6/0x1f0 [ 575.117367][T19327] ? __lock_acquire+0x7c50/0x7c50 [ 575.122393][T19327] ? do_raw_spin_lock+0x11d/0x280 [ 575.127532][T19327] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 575.133435][T19327] ? __lock_acquire+0x7c50/0x7c50 [ 575.138477][T19327] ? __rwlock_init+0x140/0x140 [ 575.143250][T19327] ? do_raw_spin_unlock+0x11d/0x230 [ 575.148459][T19327] ? _raw_spin_unlock+0x24/0x40 [ 575.153328][T19327] ? put_pid+0xda/0x120 [ 575.157491][T19327] ocfs2_create+0x1b6/0x4a0 [ 575.162000][T19327] ? make_kgid+0x640/0x640 [ 575.166415][T19327] ? ocfs2_lookup+0xa60/0xa60 [ 575.171095][T19327] ? HAS_UNMAPPED_ID+0x1d3/0x230 [ 575.176126][T19327] ? ocfs2_getattr+0x350/0x350 [ 575.180898][T19327] ? inode_permission+0xef/0x480 [ 575.185845][T19327] ? bpf_lsm_inode_create+0x5/0x10 [ 575.190961][T19327] ? security_inode_create+0xb3/0x100 [ 575.196336][T19327] vfs_create+0x2db/0x460 [ 575.200687][T19327] do_mknodat+0x399/0x4c0 [ 575.205022][T19327] ? do_o_path+0x1f0/0x1f0 [ 575.209479][T19327] __x64_sys_mknod+0x8a/0xa0 [ 575.214157][T19327] do_syscall_64+0x4c/0xa0 [ 575.218664][T19327] ? clear_bhb_loop+0x60/0xb0 [ 575.223343][T19327] ? clear_bhb_loop+0x60/0xb0 [ 575.228023][T19327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.233922][T19327] RIP: 0033:0x7fc73ad8ebe9 [ 575.238343][T19327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.258044][T19327] RSP: 002b:00007fc73bcab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 575.266491][T19327] RAX: ffffffffffffffda RBX: 00007fc73afb5fa0 RCX: 00007fc73ad8ebe9 [ 575.274484][T19327] RDX: 0000000000000703 RSI: 0000000000000800 RDI: 0000200000000000 [ 575.282637][T19327] RBP: 00007fc73ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 575.290610][T19327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.298670][T19327] R13: 00007fc73afb6038 R14: 00007fc73afb5fa0 R15: 00007ffd01082238 [ 575.306648][T19327] [ 575.340551][ T6548] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 575.366712][T19354] loop2: detected capacity change from 0 to 512 [ 575.376549][ T6548] usb 6-1: Product: syz [ 575.387679][ T6548] usb 6-1: SerialNumber: syz [ 575.408600][ T6548] hub 6-1:250.228: bad descriptor, ignoring hub [ 575.424861][ T6548] hub: probe of 6-1:250.228 failed with error -5 [ 575.446898][T19354] EXT4-fs (loop2): 1 truncate cleaned up [ 575.456300][T19354] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 575.508588][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 575.556125][T19333] loop4: detected capacity change from 0 to 32768 [ 575.565878][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 575.626518][T19333] XFS (loop4): Mounting V5 Filesystem [ 575.701362][T19333] XFS (loop4): Ending clean mount [ 575.711345][T19333] XFS (loop4): Quotacheck needed: Please wait. [ 575.724664][T19333] XFS (loop4): Quotacheck: Done. [ 575.727948][ T126] usb 6-1: USB disconnect, device number 6 [ 575.765588][ T4266] XFS (loop4): Unmounting Filesystem [ 580.417338][ T4282] Bluetooth: hci4: command 0x0406 tx timeout