last executing test programs: 5.985465938s ago: executing program 1 (id=2358): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 5.797220136s ago: executing program 1 (id=2361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1f) 5.605398134s ago: executing program 1 (id=2365): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x40, 0x7a0, 0x401, 0x9642, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x64, 0x0, 0x4c, 0x29, 0x0, @private=0xa010101, @multicast2}}}}) 5.54313929s ago: executing program 1 (id=2367): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f000001fa40)=ANY=[]) 3.812051322s ago: executing program 0 (id=2399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001a00715ca1ad1c02d15d924081"], 0x14}}, 0x0) 3.712372351s ago: executing program 1 (id=2402): msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000000000000a2c775123584f1ec5cad0868b3658c1e1873fe8e49af91"], 0x0, 0x800) syz_usb_connect(0x0, 0x107, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b2111d40c71b10905336000000010902f50001000000000904"], 0x0) 3.616122741s ago: executing program 0 (id=2405): r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000005c0), 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000002500)="f245bc3088c1d99cf091b2", 0xb) 3.448606836s ago: executing program 0 (id=2409): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x80, &(0x7f0000000340)=ANY=[], 0x40, 0x2f5, &(0x7f0000000a40)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x0]}}, {@nr_blocks}]}) 3.350733826s ago: executing program 2 (id=2411): r0 = syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}, {}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@creator={'creator', 0x3d, "b1fde0af"}}, {@barrier}, {@umask={'umask', 0x3d, 0x804}}]}, 0x0, 0x6e2, &(0x7f0000001140)="$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") getdents64(r0, &(0x7f0000002140)=""/4105, 0x1009) 3.186046881s ago: executing program 0 (id=2415): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000150f7640f00a057a0000010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00001100000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.097261929s ago: executing program 2 (id=2416): syz_mount_image$jfs(&(0x7f0000005d40), &(0x7f0000000000)='./file0\x00', 0x204000, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f71756f74612c67727071756f74612c646973636172642c696f636861727365743d63703835322c6e6f646973636172642c67727071756f74612c000ac68cc4c42447c5"], 0x1, 0x5d0c, &(0x7f000000bb40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) 2.109326171s ago: executing program 2 (id=2420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280040012000500160001000000080014"], 0x48}}, 0x0) 2.01909416s ago: executing program 1 (id=2422): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 1.938730228s ago: executing program 4 (id=2423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newsa={0x118, 0x12, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@local}, {@in=@loopback}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, [@address_filter={0x4, 0x1a, {@in6=@mcast2, @in6=@empty}}]}, 0x118}}, 0x0) 1.693352431s ago: executing program 2 (id=2424): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 1.639371736s ago: executing program 2 (id=2426): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe6, 0x35, 0x55, 0x40, 0x5ac, 0x290, 0xdc1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x2}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x0) 1.548032894s ago: executing program 4 (id=2427): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 1.441355314s ago: executing program 4 (id=2429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 1.436893555s ago: executing program 4 (id=2430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000500)="84163d431f3b16dbdef8f5d4d873f2773bf4415e889eecc3"}, 0x3a) 1.391394759s ago: executing program 3 (id=2431): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="88010000100013070000000000000000fe800000000000000000000000000800000000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012"], 0x188}}, 0x0) 1.367207451s ago: executing program 4 (id=2432): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f59, &(0x7f0000009040)="$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") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') 1.307116387s ago: executing program 3 (id=2433): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0xa4ff) 1.205258446s ago: executing program 3 (id=2434): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0x1, 0x1, @raw_data=[0x0, 0x0, 0x100a]}) 1.186601178s ago: executing program 3 (id=2435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 1.143794432s ago: executing program 0 (id=2436): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000340), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"00000000000000000000008000", 0x0, 0x0, {}, {}, 0x80000000000, [0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x6faa]}) 1.066349249s ago: executing program 3 (id=2437): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@hat={'changehat ', 0x1}, 0x1d) 995.138526ms ago: executing program 3 (id=2438): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="20138b000000e30900e2"], 0x0, 0x0, 0x0, 0x0, 0x0}) 642.794869ms ago: executing program 4 (id=2439): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000140)={[{@journal_async_commit}, {@heartbeat_none}, {@localflocks}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0xfffffffffffffffa}}, {@noacl}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0xa, 0x7ec, 0x2000000000, 0x2000000000002, 0x3, 0x0, 0x7ffd}) 113.282879ms ago: executing program 0 (id=2440): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x20800) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/202, 0xca}], 0x1) 0s ago: executing program 2 (id=2441): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0xff8c) kernel console output (not intermixed with test programs): 3.237924][ T26] audit: type=1326 audit(1727868784.444:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2df7dff9 code=0x7ffc0000 [ 133.326632][ T6593] XFS (loop0): Mounting V5 Filesystem [ 133.497726][ T6593] XFS (loop0): Ending clean mount [ 133.514737][ T6593] XFS (loop0): Quotacheck needed: Please wait. [ 133.545849][ T6635] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 133.560829][ T6593] XFS (loop0): Quotacheck: Done. [ 133.650261][ T3644] XFS (loop0): Unmounting Filesystem [ 133.763728][ T26] audit: type=1326 audit(1727868785.161:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2df7dff9 code=0x7ffc0000 [ 133.787490][ T26] audit: type=1326 audit(1727868785.161:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f1e2df7dff9 code=0x7ffc0000 [ 133.810917][ T26] audit: type=1326 audit(1727868785.171:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2df7dff9 code=0x7ffc0000 [ 134.101216][ T6648] loop2: detected capacity change from 0 to 128 [ 134.124132][ T6648] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 134.160724][ T6648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.189324][ T6650] loop0: detected capacity change from 0 to 1024 [ 134.226063][ T6650] fuse: Bad value for 'fd' [ 134.425228][ T6654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1263'. [ 134.444824][ T3639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.454478][ T3639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.464255][ T3639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.483303][ T3639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.491567][ T3639] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 134.499007][ T3639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.032857][ T6662] loop2: detected capacity change from 0 to 32768 [ 135.073640][ T6662] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1267 (6662) [ 135.125635][ T6662] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.151217][ T6662] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 135.169458][ T6656] chnl_net:caif_netlink_parms(): no params data found [ 135.192945][ T6662] BTRFS info (device loop2): using free space tree [ 135.207487][ T6679] netlink: 'syz.0.1272': attribute type 9 has an invalid length. [ 135.247207][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1273'. [ 135.352751][ T3642] Bluetooth: hci4: command tx timeout [ 135.379533][ T6699] netlink: 1080 bytes leftover after parsing attributes in process `syz.3.1275'. [ 135.463246][ T6662] BTRFS info (device loop2): enabling ssd optimizations [ 135.491681][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.507195][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.519217][ T6656] device bridge_slave_0 entered promiscuous mode [ 135.532960][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.540204][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.551316][ T6656] device bridge_slave_1 entered promiscuous mode [ 135.632351][ T6656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.704025][ T3650] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.712423][ T6712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.724252][ T6656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.964883][ T6656] team0: Port device team_slave_0 added [ 136.024722][ T6656] team0: Port device team_slave_1 added [ 136.104888][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.111894][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.215489][ T6729] loop2: detected capacity change from 0 to 256 [ 136.233306][ T6656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.242516][ T6729] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 136.283980][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.302730][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.362615][ T6656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.481175][ T6656] device hsr_slave_0 entered promiscuous mode [ 136.509217][ T6656] device hsr_slave_1 entered promiscuous mode [ 136.552934][ T3639] Bluetooth: hci5: command tx timeout [ 136.560282][ T6656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.610290][ T6656] Cannot create hsr debugfs directory [ 136.700781][ T6745] netlink: 'syz.3.1292': attribute type 10 has an invalid length. [ 136.726874][ T6745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1292'. [ 136.741291][ T6745] device team0 entered promiscuous mode [ 136.782704][ T6745] device team_slave_0 entered promiscuous mode [ 136.789127][ T6745] device team_slave_1 entered promiscuous mode [ 136.797387][ T6745] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 136.806128][ T6749] loop2: detected capacity change from 0 to 4096 [ 136.935184][ T6749] ntfs3: loop2: Failed to load $Extend. [ 137.018263][ T6749] ntfs3: loop2: ino=1f, "file2" attr_set_size [ 137.095804][ T6656] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.291538][ T6656] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.434583][ T6761] nvme_fabrics: missing parameter 'transport=%s' [ 137.438771][ T6656] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.441887][ T6761] nvme_fabrics: missing parameter 'nqn=%s' [ 137.581205][ T6656] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.823898][ T6757] loop0: detected capacity change from 0 to 32768 [ 137.834057][ T2036] pvrusb2: request_firmware fatal error with code=-110 [ 137.865863][ T2036] pvrusb2: Failure uploading firmware1 [ 137.870044][ T6656] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.871351][ T2036] pvrusb2: Device initialization was not successful. [ 137.871372][ T2036] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 137.871380][ T2036] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 137.917752][ T6757] XFS (loop0): Invalid device [./file0], error=-16 [ 137.920931][ T6656] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.957375][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1310'. [ 137.973169][ T4218] pvrusb2: Device being rendered inoperable [ 137.991033][ T6656] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.991672][ T2036] pvrusb2: Failed to submit write-control URB status=-19 [ 138.014684][ T6656] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 138.037423][ T6780] netlink: 'syz.3.1311': attribute type 9 has an invalid length. [ 138.064135][ T2036] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 138.086257][ T2036] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 138.242098][ T6784] loop2: detected capacity change from 0 to 64 [ 138.311698][ T6788] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 138.324786][ T6656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.354169][ T6788] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1315'. [ 138.376820][ T6656] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.405040][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.433631][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.473735][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.482515][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.523503][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.530623][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.563026][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.605546][ T6796] autofs4:pid:6796:autofs_fill_super: called with bogus options [ 138.615395][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.624937][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.632039][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.632925][ T3639] Bluetooth: hci5: command tx timeout [ 138.683193][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.700723][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.722304][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.763564][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.787340][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.820735][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.844396][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.862617][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.896022][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.941634][ T6656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.973626][ T6656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.989445][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.006638][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.032215][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.103101][ T6815] ALSA: mixer_oss: invalid OSS volume 'üÃÿ%—ˆ†å' [ 139.452963][ T6832] Cannot find del_set index 12 as target [ 139.596390][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.616072][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.665158][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.672144][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 139.693022][ T6843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1340'. [ 139.739284][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.768593][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.780732][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 139.812850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.834402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.867581][ T6656] device veth0_vlan entered promiscuous mode [ 139.883859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.902093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.916915][ T6656] device veth1_vlan entered promiscuous mode [ 139.962371][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.978819][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.998633][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.014665][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.067136][ T6656] device veth0_macvtap entered promiscuous mode [ 140.125361][ T6656] device veth1_macvtap entered promiscuous mode [ 140.172134][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.195725][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.206041][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.216800][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.219702][ T6859] loop3: detected capacity change from 0 to 4096 [ 140.226892][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.226909][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.254815][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.266272][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.276424][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.287140][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.324252][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.333566][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.352520][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.361360][ T6859] ntfs3: loop3: Failed to load $Extend. [ 140.382294][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.389908][ T6859] ntfs3: loop3: ino=1f, "file2" attr_set_size [ 140.426010][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.449257][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.480229][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.499914][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.519084][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.529756][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.548752][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.566448][ T6865] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1352'. [ 140.575521][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.587110][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.607207][ T6656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.624489][ T6656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.646286][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.685803][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.706337][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.714028][ T3639] Bluetooth: hci5: command tx timeout [ 140.726562][ T6656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.770182][ T6656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.775060][ T6857] loop0: detected capacity change from 0 to 32768 [ 140.800202][ T6656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.800259][ T6857] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1348 (6857) [ 140.835699][ T6656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.881172][ T6857] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 140.922789][ T6857] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 140.973387][ T6857] BTRFS info (device loop0): force zlib compression, level 3 [ 140.980846][ T6857] BTRFS info (device loop0): force clearing of disk cache [ 141.023218][ T6857] BTRFS info (device loop0): setting nodatasum [ 141.029468][ T6857] BTRFS info (device loop0): use zlib compression, level 3 [ 141.033788][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.076826][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.083676][ T6857] BTRFS info (device loop0): allowing degraded mounts [ 141.092842][ T6857] BTRFS info (device loop0): enabling disk space caching [ 141.115642][ T6857] BTRFS info (device loop0): disk space caching is enabled [ 141.126268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.134259][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.142477][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.185055][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.343009][ T6857] BTRFS info (device loop0): enabling ssd optimizations [ 141.379610][ T6857] BTRFS info (device loop0): rebuilding free space tree [ 141.410810][ T6857] BTRFS info (device loop0): disabling free space tree [ 141.472168][ T6857] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.497343][ T6857] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.585080][ T6857] BTRFS info (device loop0): balance: start -f -sdrange=4398046511104..0,limit=42949672976,stripes=0..255 [ 141.619296][ T6857] BTRFS info (device loop0): balance: ended with status: 0 [ 141.651183][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'. [ 141.853117][ T3644] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 142.200574][ T6918] tmpfs: Bad value for 'mpol' [ 142.209846][ T6919] loop1: detected capacity change from 0 to 256 [ 142.228006][ T6921] netlink: 'syz.0.1364': attribute type 8 has an invalid length. [ 142.634447][ T3642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 142.644591][ T3642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 142.653341][ T3642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 142.663452][ T3642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 142.672127][ T3642] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 142.679568][ T3642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 142.793097][ T3639] Bluetooth: hci5: command tx timeout [ 142.817644][ T6917] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.065297][ T6933] chnl_net:caif_netlink_parms(): no params data found [ 143.111385][ T6955] loop3: detected capacity change from 0 to 512 [ 143.193169][ T6917] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 143.207112][ T6917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.242436][ T6955] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.257828][ T6955] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038 (0x7fffffff) [ 143.278873][ T6917] usb 1-1: config 0 descriptor?? [ 143.344128][ T6917] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 143.383051][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.405995][ T3641] EXT4-fs (loop3): unmounting filesystem. [ 143.413471][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.421826][ T6933] device bridge_slave_0 entered promiscuous mode [ 143.473123][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.505102][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.539383][ T6973] loop1: detected capacity change from 0 to 2048 [ 143.547169][ T6933] device bridge_slave_1 entered promiscuous mode [ 143.625292][ T6978] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.656530][ T6933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.685296][ T6973] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 143.703800][ T6933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.743107][ T6973] Remounting filesystem read-only [ 143.763055][ T6917] gspca_stv06xx: I2C: Read error writing address: -71 [ 143.815740][ T6933] team0: Port device team_slave_0 added [ 143.839762][ T6917] usb 1-1: USB disconnect, device number 6 [ 143.860946][ T6933] team0: Port device team_slave_1 added [ 143.955217][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.992826][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.057224][ T6933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.070677][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.078327][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.127678][ T6933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.241618][ T6933] device hsr_slave_0 entered promiscuous mode [ 144.267784][ T6933] device hsr_slave_1 entered promiscuous mode [ 144.321026][ T6933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.334475][ T6933] Cannot create hsr debugfs directory [ 144.530729][ T7018] loop1: detected capacity change from 0 to 256 [ 144.713189][ T3642] Bluetooth: hci6: command tx timeout [ 144.725546][ T7020] loop2: detected capacity change from 0 to 2048 [ 144.768548][ T7020] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.847760][ T6933] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.859168][ T7028] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.073389][ T6933] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.156160][ T7032] xt_CT: No such helper "syz0" [ 145.261845][ T6933] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.455749][ T6933] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.657296][ T7054] loop0: detected capacity change from 0 to 1024 [ 145.753782][ T7054] hfsplus: keylen 65060 too large [ 145.759437][ T7054] hfsplus: keylen 65060 too large [ 145.788158][ T6933] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.813503][ T6933] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.851916][ T6933] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.871962][ T6933] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.080126][ T7037] loop2: detected capacity change from 0 to 32768 [ 146.104404][ T6933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.136920][ T7037] [ 146.136920][ T7037] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.136920][ T7037] [ 146.185796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.187330][ T26] audit: type=1326 audit(1727868797.591:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.0.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448197dff9 code=0x7ffc0000 [ 146.217806][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.239298][ T6933] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.263963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.287718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.294555][ T7037] [ 146.294555][ T7037] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.294555][ T7037] [ 146.315781][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.323042][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.346434][ T26] audit: type=1326 audit(1727868797.591:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.0.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448197dff9 code=0x7ffc0000 [ 146.382048][ T7037] [ 146.382048][ T7037] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.382048][ T7037] [ 146.387489][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.420989][ T7037] [ 146.420989][ T7037] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.420989][ T7037] [ 146.421761][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.441433][ T26] audit: type=1326 audit(1727868797.631:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.0.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f448197dff9 code=0x7ffc0000 [ 146.462473][ T7047] loop3: detected capacity change from 0 to 32768 [ 146.484846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.513495][ T26] audit: type=1326 audit(1727868797.631:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.0.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448197dff9 code=0x7ffc0000 [ 146.524221][ T134] [ 146.524221][ T134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.524221][ T134] [ 146.543670][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.554017][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.591658][ T7047] read_mapping_page failed! [ 146.604616][ T7047] jfs_create: dtInsert returned -EIO [ 146.621539][ T7047] ERROR: (device loop3): jfs_create: [ 146.621539][ T7047] [ 146.630919][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.631188][ T3650] [ 146.631188][ T3650] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.631188][ T3650] [ 146.639358][ T26] audit: type=1326 audit(1727868797.631:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.0.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448197dff9 code=0x7ffc0000 [ 146.647844][ T7055] loop1: detected capacity change from 0 to 32768 [ 146.680384][ T7047] ERROR: (device loop3): remounting filesystem as read-only [ 146.703315][ T3650] [ 146.703315][ T3650] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.703315][ T3650] [ 146.706245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.733105][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.745346][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.774789][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.783957][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.793303][ T3642] Bluetooth: hci6: command tx timeout [ 146.811090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.819923][ T7055] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1425 (7055) [ 146.853205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.900615][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.909352][ T7055] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 146.927374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.936563][ T7055] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 146.957195][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.972776][ T7055] BTRFS info (device loop1): force zlib compression, level 3 [ 146.986849][ T6933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.001919][ T7055] BTRFS info (device loop1): force clearing of disk cache [ 147.033414][ T7055] BTRFS info (device loop1): setting nodatasum [ 147.053945][ T7055] BTRFS info (device loop1): use zlib compression, level 3 [ 147.061206][ T7055] BTRFS info (device loop1): allowing degraded mounts [ 147.113957][ T7055] BTRFS info (device loop1): enabling disk space caching [ 147.121041][ T7055] BTRFS info (device loop1): disk space caching is enabled [ 147.526491][ T7055] BTRFS info (device loop1): enabling ssd optimizations [ 147.557040][ T7055] BTRFS info (device loop1): rebuilding free space tree [ 147.591021][ T7055] BTRFS info (device loop1): disabling free space tree [ 147.596052][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.632886][ T7055] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.632969][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.668842][ T7055] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.687005][ T6933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.855025][ T7055] BTRFS info (device loop1): balance: start -f -sdrange=4398046511104..0,limit=42949672976,stripes=0..255 [ 147.892915][ T7055] BTRFS info (device loop1): balance: ended with status: 0 [ 148.070688][ T6656] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 148.090497][ T7128] loop2: detected capacity change from 0 to 256 [ 148.245255][ T7128] FAT-fs (loop2): Directory bread(block 64) failed [ 148.251836][ T7128] FAT-fs (loop2): Directory bread(block 65) failed [ 148.288162][ T7128] FAT-fs (loop2): Directory bread(block 66) failed [ 148.329456][ T7128] FAT-fs (loop2): Directory bread(block 67) failed [ 148.357976][ T7128] FAT-fs (loop2): Directory bread(block 68) failed [ 148.408023][ T7128] FAT-fs (loop2): Directory bread(block 69) failed [ 148.423420][ T7128] FAT-fs (loop2): Directory bread(block 70) failed [ 148.430078][ T7128] FAT-fs (loop2): Directory bread(block 71) failed [ 148.473580][ T7128] FAT-fs (loop2): Directory bread(block 72) failed [ 148.531979][ T7128] FAT-fs (loop2): Directory bread(block 73) failed [ 148.664774][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 148.872746][ T3642] Bluetooth: hci6: command tx timeout [ 148.897151][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.918329][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.966135][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.976268][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.995252][ T6933] device veth0_vlan entered promiscuous mode [ 149.042790][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.066724][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.088810][ T6933] device veth1_vlan entered promiscuous mode [ 149.197163][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.231021][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.273613][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.274589][ T7174] loop3: detected capacity change from 0 to 8 [ 149.313723][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.348185][ T6933] device veth0_macvtap entered promiscuous mode [ 149.369295][ T7170] loop2: detected capacity change from 0 to 4096 [ 149.385797][ T6933] device veth1_macvtap entered promiscuous mode [ 149.398075][ T7174] SQUASHFS error: Failed to read block 0x60: -5 [ 149.416116][ T7170] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 149.433387][ T26] audit: type=1800 audit(1727868800.841:2439): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1467" name="file1" dev="loop3" ino=1 res=0 errno=0 [ 149.473340][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.511732][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.553339][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.614208][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.628536][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.672935][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.700698][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.742829][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.766631][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.782439][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.791019][ T26] audit: type=1326 audit(1727868801.191:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.1.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af857dff9 code=0x7ffc0000 [ 149.794529][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.814575][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.867315][ T26] audit: type=1326 audit(1727868801.191:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.1.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af857dff9 code=0x7ffc0000 [ 149.875761][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.939081][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.968451][ T26] audit: type=1326 audit(1727868801.231:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.1.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f7af857dff9 code=0x7ffc0000 [ 149.998807][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.035832][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.069629][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.082798][ T26] audit: type=1326 audit(1727868801.231:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7187 comm="syz.1.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af857dff9 code=0x7ffc0000 [ 150.107078][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.144124][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.192711][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.218316][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.239654][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.260459][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.277816][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.280359][ T7194] loop3: detected capacity change from 0 to 4096 [ 150.306149][ T7194] ntfs: volume version 3.1. [ 150.315215][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.347133][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.382382][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.402333][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.413746][ T6933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.433693][ T6933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.457016][ T6933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.510217][ T7202] netlink: 'syz.0.1483': attribute type 3 has an invalid length. [ 150.560010][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.571918][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.594402][ T6933] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.603975][ T6933] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.612926][ T7212] ipt_CLUSTERIP: Please specify destination IP [ 150.629196][ T6933] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.642562][ T6933] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.651276][ T7214] loop1: detected capacity change from 0 to 1024 [ 150.780103][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 150.812919][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 150.842069][ T6801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.860551][ T6801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.905424][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.953069][ T3642] Bluetooth: hci6: command tx timeout [ 150.959364][ T3724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.025312][ T3724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.084569][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.631011][ T7256] wlan0 speed is unknown, defaulting to 1000 [ 151.654342][ T7255] loop4: detected capacity change from 0 to 1024 [ 151.667850][ T7256] wlan0 speed is unknown, defaulting to 1000 [ 151.684065][ T7255] hfsplus: unable to parse mount options [ 151.722350][ T7258] delete_channel: no stack [ 151.728952][ T7256] wlan0 speed is unknown, defaulting to 1000 [ 151.746748][ T7255] 9pnet_fd: p9_fd_create_tcp (7255): problem connecting socket to 127.0.0.1 [ 151.793227][ T7256] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.845468][ T7256] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 151.962505][ T7256] wlan0 speed is unknown, defaulting to 1000 [ 151.992188][ T7256] wlan0 speed is unknown, defaulting to 1000 [ 152.020166][ T7256] wlan0 speed is unknown, defaulting to 1000 [ 152.036352][ T7256] wlan0 speed is unknown, defaulting to 1000 [ 152.073378][ T7256] wlan0 speed is unknown, defaulting to 1000 [ 152.096302][ T7256] wlan0 speed is unknown, defaulting to 1000 [ 152.123983][ T7256] wlan0 speed is unknown, defaulting to 1000 [ 152.272846][ T7268] netlink: 'syz.2.1514': attribute type 4 has an invalid length. [ 152.445644][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'. [ 152.507282][ T7247] loop0: detected capacity change from 0 to 32768 [ 152.541168][ T7247] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1504 (7247) [ 152.629687][ T7247] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.693946][ T7247] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 152.733448][ T7247] BTRFS info (device loop0): using free space tree [ 153.022743][ T3684] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 153.221125][ T7247] BTRFS info (device loop0): enabling ssd optimizations [ 153.226059][ T7250] loop3: detected capacity change from 0 to 65536 [ 153.345228][ T7250] XFS (loop3): Mounting V5 Filesystem [ 153.432935][ T3684] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 153.452731][ T3684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.483598][ T3644] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.514017][ T3684] usb 5-1: config 0 has no interface number 0 [ 153.536317][ T7333] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1531'. [ 153.546310][ T3684] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 153.593132][ T3684] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 153.634877][ T3684] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.661337][ T3684] usb 5-1: config 0 interface 52 has no altsetting 0 [ 153.826835][ T3684] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 153.837961][ T3684] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 153.846667][ T3684] usb 5-1: Product: syz [ 153.850921][ T3684] usb 5-1: Manufacturer: syz [ 153.855647][ T3684] usb 5-1: SerialNumber: syz [ 153.871656][ T7250] XFS (loop3): Ending clean mount [ 153.880919][ T3684] usb 5-1: config 0 descriptor?? [ 153.900927][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 153.900941][ T26] audit: type=1326 audit(1727868805.301:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af857dff9 code=0x7ffc0000 [ 153.929788][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.941663][ T7250] XFS (loop3): Quotacheck needed: Please wait. [ 153.984836][ T26] audit: type=1326 audit(1727868805.341:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f7af857dff9 code=0x7ffc0000 [ 154.034054][ T26] audit: type=1326 audit(1727868805.341:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.1.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af857dff9 code=0x7ffc0000 [ 154.087928][ T7250] XFS (loop3): Quotacheck: Done. [ 154.174275][ T3684] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 154.193959][ T3641] XFS (loop3): Unmounting Filesystem [ 154.201564][ T3684] synaptics_usb: probe of 5-1:0.52 failed with error -5 [ 154.414092][ T4781] usb 5-1: USB disconnect, device number 5 [ 154.638718][ T7369] loop0: detected capacity change from 0 to 22 [ 154.660323][ T7367] loop2: detected capacity change from 0 to 2048 [ 154.680865][ T7369] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 154.740811][ T7367] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 154.752245][ T7369] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 155.318559][ T7389] loop4: detected capacity change from 0 to 256 [ 155.538933][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1559'. [ 155.554342][ T7393] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 155.727256][ T7402] loop4: detected capacity change from 0 to 64 [ 155.779560][ T4219] wlan0 speed is unknown, defaulting to 1000 [ 156.054753][ T26] audit: type=1326 audit(1727868807.461:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448197dff9 code=0x7ffc0000 [ 156.161298][ T26] audit: type=1326 audit(1727868807.461:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448197dff9 code=0x7ffc0000 [ 156.164972][ T7421] loop1: detected capacity change from 0 to 256 [ 156.278818][ T26] audit: type=1326 audit(1727868807.461:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f448197dff9 code=0x7ffc0000 [ 156.444629][ T26] audit: type=1326 audit(1727868807.851:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448197dff9 code=0x7ffc0000 [ 156.547908][ T26] audit: type=1326 audit(1727868807.851:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.0.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448197dff9 code=0x7ffc0000 [ 157.038256][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'. [ 157.094408][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'. [ 157.131190][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'. [ 158.216271][ T26] audit: type=1326 audit(1727868809.621:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f27f7dff9 code=0x7ffc0000 [ 158.318748][ T26] audit: type=1326 audit(1727868809.651:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f5f27f7dff9 code=0x7ffc0000 [ 158.429742][ T7535] loop3: detected capacity change from 0 to 16 [ 158.533530][ T7535] erofs: (device loop3): mounted with root inode @ nid 36. [ 158.716464][ T7542] loop0: detected capacity change from 0 to 4096 [ 158.832820][ T7542] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 158.907908][ T7542] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 159.030615][ T7560] mmap: syz.3.1623 (7560): VmData 37466112 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 159.132012][ T7564] loop2: detected capacity change from 0 to 64 [ 159.359573][ T7572] netlink: 'syz.3.1628': attribute type 21 has an invalid length. [ 159.389428][ T7572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1628'. [ 159.672992][ T7589] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1634'. [ 159.714796][ T7589] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1634'. [ 159.807440][ T7593] loop0: detected capacity change from 0 to 1764 [ 159.941434][ T6245] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.963227][ T7544] loop4: detected capacity change from 0 to 32768 [ 160.005639][ T7544] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1617 (7544) [ 160.106476][ T7544] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.162888][ T7544] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 160.171602][ T7544] BTRFS info (device loop4): using free space tree [ 160.308811][ T7617] loop2: detected capacity change from 0 to 256 [ 160.476401][ T7544] BTRFS info (device loop4): enabling ssd optimizations [ 160.514029][ T7626] loop3: detected capacity change from 0 to 2048 [ 160.603662][ T7647] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.629845][ T6933] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.730871][ T7653] loop2: detected capacity change from 0 to 512 [ 160.928674][ T7653] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.946785][ T7653] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038 (0x7fffffff) [ 161.143509][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 162.515826][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 162.610343][ T7746] loop1: detected capacity change from 0 to 256 [ 162.667097][ T7746] exfat: Deprecated parameter 'namecase' [ 162.708950][ T7746] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 162.799197][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'. [ 163.127098][ T7763] loop0: detected capacity change from 0 to 1024 [ 163.499945][ T6801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.664917][ T6801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.668931][ T7752] loop3: detected capacity change from 0 to 32768 [ 163.718684][ T7752] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1691 (7752) [ 163.768872][ T7757] loop2: detected capacity change from 0 to 32768 [ 163.780911][ T7752] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.823641][ T7757] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1693 (7757) [ 163.835312][ T7752] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 163.868588][ T7752] BTRFS info (device loop3): using free space tree [ 163.882605][ T6801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.898454][ T6120] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (6120) [ 164.144593][ T6801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.193118][ T7799] ipt_CLUSTERIP: unknown mode 209974702 [ 164.354390][ T7752] BTRFS info (device loop3): enabling ssd optimizations [ 164.479693][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 164.509318][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'. [ 164.555639][ T3642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.567333][ T3642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.575881][ T3642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.587963][ T3641] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.613725][ T3642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.623803][ T3642] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 164.632543][ T3648] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.660201][ T3639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.679958][ T3639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.697547][ T3639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.706353][ T3639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.717517][ T3639] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 164.728471][ T3639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.852762][ T4455] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.952028][ T7815] wlan0 speed is unknown, defaulting to 1000 [ 165.112807][ T4455] usb 5-1: Using ep0 maxpacket: 8 [ 165.241158][ T4455] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 165.262682][ T4455] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 165.292836][ T4455] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 165.325202][ T4455] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 165.353222][ T4455] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.371841][ T4455] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.401301][ T4455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.460041][ T4455] usbtmc 5-1:16.0: bulk endpoints not found [ 165.672459][ T4455] usb 5-1: USB disconnect, device number 6 [ 165.803947][ T7854] loop0: detected capacity change from 0 to 4096 [ 165.822925][ T7854] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 166.144333][ T7815] chnl_net:caif_netlink_parms(): no params data found [ 166.792754][ T3639] Bluetooth: hci5: command tx timeout [ 166.828609][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.837255][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.845836][ T7815] device bridge_slave_0 entered promiscuous mode [ 166.858575][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.866166][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.882857][ T7815] device bridge_slave_1 entered promiscuous mode [ 167.097691][ T7869] loop2: detected capacity change from 0 to 40427 [ 167.149986][ T7869] F2FS-fs (loop2): invalid crc value [ 167.171271][ T7869] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 167.222024][ T7906] loop0: detected capacity change from 0 to 4096 [ 167.237598][ T7869] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.246663][ T7815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.295474][ T7906] __ntfs_error: 2 callbacks suppressed [ 167.295492][ T7906] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 167.374323][ T7906] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 167.398049][ T7906] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 167.407130][ T7869] F2FS-fs (loop2): recover fsync data on readonly fs [ 167.437411][ T7906] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 167.455132][ T7869] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 167.477895][ T7869] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 167.500080][ T7815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.504177][ T7906] ntfs: volume version 3.1. [ 167.524617][ T7869] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.591366][ T7906] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 167.605552][ T7906] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 167.670318][ T7815] team0: Port device team_slave_0 added [ 167.712902][ T6801] device hsr_slave_0 left promiscuous mode [ 167.743813][ T6801] device hsr_slave_1 left promiscuous mode [ 167.794360][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.826669][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.893890][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.901349][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.994437][ T6801] device bridge_slave_1 left promiscuous mode [ 168.002863][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.035811][ T6801] device bridge_slave_0 left promiscuous mode [ 168.042086][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.175766][ T6801] device veth1_macvtap left promiscuous mode [ 168.214381][ T6801] device veth0_macvtap left promiscuous mode [ 168.220523][ T6801] device veth1_vlan left promiscuous mode [ 168.274394][ T6801] device veth0_vlan left promiscuous mode [ 168.873912][ T3639] Bluetooth: hci5: command tx timeout [ 168.914984][ T7930] loop3: detected capacity change from 0 to 32768 [ 168.923081][ T7930] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1755 (7930) [ 168.954578][ T7930] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.982762][ T7930] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 169.011780][ T7930] BTRFS info (device loop3): using free space tree [ 169.154444][ T7943] loop0: detected capacity change from 0 to 32768 [ 169.172532][ T7930] BTRFS info (device loop3): enabling ssd optimizations [ 169.184034][ T7943] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1761 (7943) [ 169.265279][ T7943] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.314432][ T3641] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.322889][ T7943] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 169.343041][ T7943] BTRFS info (device loop0): metadata ratio 4 [ 169.350603][ T7943] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 169.384970][ T7943] BTRFS info (device loop0): force lzo compression, level 0 [ 169.402886][ T7943] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 169.476105][ T7943] BTRFS info (device loop0): trying to use backup root at mount time [ 169.492724][ T7943] BTRFS info (device loop0): doing ref verification [ 169.499575][ T7943] BTRFS info (device loop0): disabling tree log [ 169.515255][ T7943] BTRFS info (device loop0): using free space tree [ 169.791198][ T1278] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 169.843946][ T7943] BTRFS warning (device loop0): couldn't read tree root [ 169.862151][ T7943] BTRFS warning (device loop0): try to load backup roots slot 1 [ 169.872402][ T33] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 169.915329][ T7943] BTRFS warning (device loop0): couldn't read tree root [ 169.922352][ T7943] BTRFS warning (device loop0): try to load backup roots slot 2 [ 169.941198][ T7943] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 169.971080][ T7943] BTRFS warning (device loop0): couldn't read tree root [ 169.982771][ T7943] BTRFS warning (device loop0): try to load backup roots slot 3 [ 170.046232][ T7943] BTRFS info (device loop0): enabling ssd optimizations [ 170.066224][ T7943] BTRFS info (device loop0): rebuilding free space tree [ 170.103510][ T7943] BTRFS info (device loop0): checking UUID tree [ 170.258443][ T3644] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.358656][ T6801] team0 (unregistering): Port device team_slave_1 removed [ 170.613629][ T6801] team0 (unregistering): Port device team_slave_0 removed [ 170.743723][ T6801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.770262][ T8009] loop3: detected capacity change from 0 to 32768 [ 170.800662][ T8009] XFS: ikeep mount option is deprecated. [ 170.873277][ T6801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.891802][ T8009] XFS (loop3): Mounting V5 Filesystem [ 170.952859][ T3639] Bluetooth: hci5: command tx timeout [ 171.011736][ T8009] XFS (loop3): Ending clean mount [ 171.035475][ T8009] XFS (loop3): Quotacheck needed: Please wait. [ 171.099194][ T8009] XFS (loop3): Quotacheck: Done. [ 171.212216][ T3641] XFS (loop3): Unmounting Filesystem [ 171.250594][ T8017] loop0: detected capacity change from 0 to 40427 [ 171.271770][ T8017] F2FS-fs (loop0): invalid crc value [ 171.303001][ T8017] F2FS-fs (loop0): Found nat_bits in checkpoint [ 171.408749][ T8017] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 171.462137][ T8017] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.533497][ T8017] F2FS-fs (loop0): switch extent_cache option is not allowed [ 171.879693][ T8035] loop0: detected capacity change from 0 to 16 [ 171.893794][ T8035] erofs: (device loop0): mounted with root inode @ nid 36. [ 171.920025][ T8035] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 171.937394][ T8035] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 171.963210][ T8035] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 171.977442][ T8035] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 172.005564][ T8035] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 172.015670][ T8035] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 172.035584][ T26] audit: type=1800 audit(1727868823.431:2457): pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1779" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 172.198803][ T6801] bond0 (unregistering): Released all slaves [ 172.278528][ T7815] team0: Port device team_slave_1 added [ 172.292068][ T7958] netlink: 'syz.2.1768': attribute type 20 has an invalid length. [ 172.313319][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 172.493235][ T8047] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1786'. [ 172.522491][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.546513][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.650456][ T7815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.679254][ T8057] loop2: detected capacity change from 0 to 256 [ 172.690831][ T8053] lo speed is unknown, defaulting to 1000 [ 172.692007][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.720677][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.818771][ T7815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.854205][ T8053] lo speed is unknown, defaulting to 1000 [ 172.860830][ T8053] lo speed is unknown, defaulting to 1000 [ 172.909250][ T8053] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 173.000296][ T7815] device hsr_slave_0 entered promiscuous mode [ 173.033066][ T3648] Bluetooth: hci5: command tx timeout [ 173.073106][ T7815] device hsr_slave_1 entered promiscuous mode [ 173.104707][ T7815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.112304][ T7815] Cannot create hsr debugfs directory [ 173.152464][ T8053] lo speed is unknown, defaulting to 1000 [ 173.166024][ T8053] lo speed is unknown, defaulting to 1000 [ 173.247549][ T8053] lo speed is unknown, defaulting to 1000 [ 173.257787][ T8076] loop4: detected capacity change from 0 to 1024 [ 173.296496][ T8053] lo speed is unknown, defaulting to 1000 [ 173.313670][ T8053] lo speed is unknown, defaulting to 1000 [ 173.319103][ T8076] EXT4-fs: Ignoring removed orlov option [ 173.351466][ T8053] lo speed is unknown, defaulting to 1000 [ 173.393682][ T8076] EXT4-fs (loop4): filesystem is read-only [ 173.399535][ T8076] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 38698 [ 173.415511][ T8053] lo speed is unknown, defaulting to 1000 [ 173.686627][ T8093] loop4: detected capacity change from 0 to 512 [ 173.794196][ T8093] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.1802: corrupted inode contents [ 173.838787][ T8093] EXT4-fs (loop4): Remounting filesystem read-only [ 173.850713][ T8093] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #3: comm syz.4.1802: mark_inode_dirty error [ 173.911929][ T8093] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.1802: corrupted inode contents [ 173.947296][ T8093] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.1802: mark_inode_dirty error [ 174.009108][ T8093] Quota error (device loop4): write_blk: dquota write failed [ 174.063118][ T8093] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 174.108010][ T8093] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.1802: Failed to acquire dquot type 0 [ 174.137285][ T8110] loop0: detected capacity change from 0 to 2048 [ 174.139283][ T8093] EXT4-fs (loop4): 1 truncate cleaned up [ 174.151827][ T8093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.153853][ T8113] loop2: detected capacity change from 0 to 512 [ 174.176986][ T8093] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038 (0x7fffffff) [ 174.235388][ T8117] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.264218][ T8113] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 174.290305][ T8093] EXT4-fs error (device loop4): ext4_empty_dir:3175: inode #12: block 13: comm syz.4.1802: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 174.294451][ T8110] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 174.314235][ T8093] EXT4-fs (loop4): Remounting filesystem read-only [ 174.332968][ T8113] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038 (0x7fffffff) [ 174.343296][ T4213] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 174.368048][ T6933] EXT4-fs (loop4): unmounting filesystem. [ 174.392499][ T8110] Remounting filesystem read-only [ 174.399548][ T8110] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 174.415195][ T3724] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.417230][ T8113] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 174.438803][ T8113] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 174.450488][ T8113] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.1809: Failed to acquire dquot type 0 [ 174.468442][ T3724] Quota error (device loop4): write_blk: dquota write failed [ 174.478710][ T3724] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 174.521485][ T3724] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.547402][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 174.552885][ T3724] Quota error (device loop4): write_blk: dquota write failed [ 174.561955][ T3724] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 174.602504][ T3724] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 174.607093][ T7815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.649973][ T3724] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 174.663776][ T7815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.678757][ T3724] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 174.681831][ T7815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.717526][ T7815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.742974][ T4213] usb 4-1: config 1 has an invalid interface number: 65 but max is 1 [ 174.761706][ T4213] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.782372][ T4213] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 174.809434][ T4213] usb 4-1: config 1 has no interface number 2 [ 174.833943][ T4213] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.855248][ T4213] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.875521][ T4213] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.919749][ T4213] usb 4-1: config 1 interface 1 has no altsetting 0 [ 174.949737][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.027119][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.043611][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.084990][ T7815] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.133179][ T4213] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.143821][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.153538][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=131 [ 175.161731][ T4213] usb 4-1: Product: syz [ 175.187221][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.227308][ T4213] usb 4-1: Manufacturer: syz [ 175.243232][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.250380][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.263248][ T4213] usb 4-1: SerialNumber: syz [ 175.292947][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.301952][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.311848][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.319011][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.330884][ T4213] cdc_ncm 4-1:1.65: CDC Union missing and no IAD found [ 175.339611][ T4213] cdc_ncm 4-1:1.65: bind() failure [ 175.348823][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.377972][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.406133][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.457396][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.479128][ T8149] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 175.495740][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.580622][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.610931][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.624523][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.675672][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.703461][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.734674][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.763861][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.789405][ T7815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.809864][ T4213] usb 4-1: USB disconnect, device number 8 [ 176.215171][ T8179] loop0: detected capacity change from 0 to 256 [ 176.222088][ T8179] exfat: Deprecated parameter 'debug' [ 176.256757][ T8182] usb usb8: usbfs: process 8182 (syz.4.1833) did not claim interface 0 before use [ 176.281220][ T8179] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011eee, chksum : 0x5374553f, utbl_chksum : 0xe619d30d) [ 176.341393][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.392908][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.407788][ T7815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.450167][ T8184] loop2: detected capacity change from 0 to 1764 [ 176.486337][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.502346][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.591537][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.607633][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.655910][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.683604][ T6801] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.732944][ T7815] device veth0_vlan entered promiscuous mode [ 176.767888][ T7815] device veth1_vlan entered promiscuous mode [ 176.885629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.927193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.969955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.999892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.039598][ T7815] device veth0_macvtap entered promiscuous mode [ 177.095996][ T7815] device veth1_macvtap entered promiscuous mode [ 177.196063][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.260375][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.312760][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.351882][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.392960][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.422652][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.433064][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.462750][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.528087][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.548556][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.558685][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.572094][ T8238] loop2: detected capacity change from 0 to 1024 [ 177.574256][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.624094][ T8238] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.636797][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.651189][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'. [ 177.661704][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.715631][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.731092][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.740953][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.752515][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.820717][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.852774][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.870878][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.891968][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.937014][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.949075][ T8254] overlayfs: bad mount option "redirect_dir=off:/" [ 177.972431][ T8253] loop4: detected capacity change from 0 to 2048 [ 177.976042][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.989825][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.022252][ T8253] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.030233][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.051110][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.061570][ T7815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.076163][ T7815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.107975][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 178.109364][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.228303][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.248030][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.306135][ T7815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.352533][ T7815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.385721][ T7815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.416658][ T7815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.448958][ T8269] loop0: detected capacity change from 0 to 2048 [ 178.546841][ T8276] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.730986][ T6801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.773058][ T6801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.837420][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.910916][ T3724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.970565][ T3724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.033640][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.651792][ T8315] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (33026) [ 179.682782][ T8315] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 179.855906][ T8268] loop4: detected capacity change from 0 to 40427 [ 179.912757][ T8268] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 179.933069][ T8268] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 180.013856][ T8268] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.068347][ T8335] overlayfs: missing 'lowerdir' [ 180.218033][ T8268] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.238270][ T8268] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.589110][ T8299] loop2: detected capacity change from 0 to 32768 [ 180.730849][ T8299] XFS (loop2): Mounting V5 Filesystem [ 180.864243][ T8299] XFS (loop2): Ending clean mount [ 181.102785][ T3650] XFS (loop2): Unmounting Filesystem [ 181.128706][ T8381] loop0: detected capacity change from 0 to 1024 [ 181.972983][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1915'. [ 182.165094][ T8415] loop3: detected capacity change from 0 to 4096 [ 182.335401][ T8415] ntfs3: loop3: try to read out of volume at offset 0x3fffffc7000 [ 182.724042][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'. [ 182.832891][ T8460] loop0: detected capacity change from 0 to 256 [ 182.909846][ T8463] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 182.937992][ T8460] FAT-fs (loop0): Directory bread(block 64) failed [ 182.955822][ T8460] FAT-fs (loop0): Directory bread(block 65) failed [ 182.962516][ T8460] FAT-fs (loop0): Directory bread(block 66) failed [ 183.002837][ T8460] FAT-fs (loop0): Directory bread(block 67) failed [ 183.009496][ T8460] FAT-fs (loop0): Directory bread(block 68) failed [ 183.043034][ T8460] FAT-fs (loop0): Directory bread(block 69) failed [ 183.064734][ T8460] FAT-fs (loop0): Directory bread(block 70) failed [ 183.071314][ T8460] FAT-fs (loop0): Directory bread(block 71) failed [ 183.118793][ T8460] FAT-fs (loop0): Directory bread(block 72) failed [ 183.156682][ T8460] FAT-fs (loop0): Directory bread(block 73) failed [ 183.683890][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'. [ 183.740777][ T8505] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 183.802570][ T8497] loop3: detected capacity change from 0 to 8192 [ 183.841232][ T8497] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.863935][ T8497] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 183.883001][ T8497] REISERFS (device loop3): using ordered data mode [ 183.894590][ T8497] reiserfs: using flush barriers [ 183.935000][ T8497] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.952128][ T8497] REISERFS (device loop3): checking transaction log (loop3) [ 183.984521][ T8497] REISERFS (device loop3): Using r5 hash to sort names [ 183.991447][ T8497] REISERFS (device loop3): using 3.5.x disk format [ 184.020514][ T8497] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 184.182723][ T5265] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 184.218056][ T8522] netlink: 'syz.0.1955': attribute type 3 has an invalid length. [ 184.443000][ T5265] usb 3-1: Using ep0 maxpacket: 8 [ 184.471898][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1958'. [ 184.481925][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1958'. [ 184.492147][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1958'. [ 184.582883][ T5265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 184.612938][ T5265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 184.653266][ T5265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.663443][ T8532] cgroup: Invalid name [ 184.683560][ T5265] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.722711][ T5265] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 241 [ 184.742694][ T5265] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 184.754114][ T8518] loop4: detected capacity change from 0 to 32768 [ 184.761595][ T5265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.772342][ T8518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1954 (8518) [ 184.786052][ T5265] usb 3-1: config 0 descriptor?? [ 184.793816][ T8518] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.817683][ T8514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.820111][ T8538] loop1: detected capacity change from 0 to 128 [ 184.835912][ T8514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.847076][ T8518] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 184.847082][ T8540] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 184.847151][ T8518] BTRFS info (device loop4): using free space tree [ 185.182772][ T8518] BTRFS info (device loop4): enabling ssd optimizations [ 185.222436][ T8564] __vm_enough_memory: pid: 8564, comm: syz.1.1967, no enough memory for the allocation [ 185.394759][ T5267] usb 3-1: USB disconnect, device number 6 [ 185.422778][ T3639] Bluetooth: hci7: Opcode 0x0c03 failed: -19 [ 185.433890][ T8570] loop0: detected capacity change from 0 to 512 [ 185.455656][ T6933] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.498745][ T8542] loop3: detected capacity change from 0 to 32768 [ 185.515168][ T8570] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.525568][ T8570] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038 (0x7fffffff) [ 185.705310][ T8542] XFS (loop3): Mounting V5 Filesystem [ 185.717910][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 185.878270][ T8542] XFS (loop3): Ending clean mount [ 186.009294][ T3641] XFS (loop3): Unmounting Filesystem [ 186.112870][ T4775] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.222972][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 186.482324][ T8613] tmpfs: Bad value for 'mpol' [ 186.501293][ T4775] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 186.522722][ T4775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.557857][ T4775] usb 5-1: config 0 descriptor?? [ 186.668021][ T8622] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.747307][ T26] audit: type=1326 audit(1727868838.151:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8623 comm="syz.2.1991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e2df7dff9 code=0x0 [ 187.029338][ T4775] ath6kl: Failed to submit usb control message: -71 [ 187.037160][ T4775] ath6kl: unable to send the bmi data to the device: -71 [ 187.071076][ T4775] ath6kl: Unable to send get target info: -71 [ 187.108601][ T4775] ath6kl: Failed to init ath6kl core: -71 [ 187.211607][ T4775] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 187.238510][ T4775] usb 5-1: USB disconnect, device number 7 [ 187.480146][ T8660] loop3: detected capacity change from 0 to 2048 [ 187.513113][ T8660] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 187.533659][ T6245] udevd[6245]: incorrect nilfs2 checksum on /dev/loop3 [ 187.540514][ T8660] syz.3.2007: attempt to access beyond end of device [ 187.540514][ T8660] loop3: rw=0, sector=1125899906842706, nr_sectors = 2 limit=2048 [ 187.555151][ T8664] netlink: 'syz.0.2009': attribute type 21 has an invalid length. [ 187.555230][ T8664] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2009'. [ 187.595631][ T8660] NILFS (loop3): I/O error reading meta-data file (ino=5, block-offset=0) [ 187.612309][ T8660] NILFS (loop3): error -5 while loading super root [ 187.800514][ T8660] loop3: detected capacity change from 0 to 2048 [ 187.853715][ T8660] NILFS (loop3): corrupt root inode [ 188.263453][ T8688] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2021'. [ 188.795745][ T8705] loop2: detected capacity change from 0 to 2048 [ 188.851344][ T8705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.007437][ T8672] loop0: detected capacity change from 0 to 40427 [ 189.055850][ T8672] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 189.092911][ T8672] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 189.133049][ T8672] F2FS-fs (loop0): invalid crc value [ 189.156028][ T8722] loop1: detected capacity change from 0 to 256 [ 189.179253][ T8723] loop3: detected capacity change from 0 to 512 [ 189.196157][ T8672] F2FS-fs (loop0): Found nat_bits in checkpoint [ 189.206308][ T8722] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 189.320896][ T8723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.343122][ T8723] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038 (0x7fffffff) [ 189.354492][ T8672] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 189.361553][ T8672] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 189.446926][ T3641] EXT4-fs (loop3): unmounting filesystem. [ 189.614545][ T8730] loop2: detected capacity change from 0 to 4096 [ 189.655618][ T8730] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 189.723429][ T8730] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 189.822774][ T8730] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 189.870299][ T8730] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 189.909127][ T8730] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 189.941942][ T8702] loop4: detected capacity change from 0 to 40427 [ 189.958024][ T8730] ntfs: volume version 3.1. [ 189.971861][ T8730] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 190.001951][ T8702] F2FS-fs (loop4): invalid crc value [ 190.021500][ T8730] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 190.043222][ T8702] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.103400][ T8730] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 190.122799][ T8730] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 190.233454][ T8702] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.797217][ T8771] loop2: detected capacity change from 0 to 2048 [ 190.853315][ T8771] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 190.865945][ T6245] udevd[6245]: incorrect nilfs2 checksum on /dev/loop2 [ 190.903559][ T8771] syz.2.2059: attempt to access beyond end of device [ 190.903559][ T8771] loop2: rw=0, sector=1125899906842706, nr_sectors = 2 limit=2048 [ 190.957610][ T8771] NILFS (loop2): I/O error reading meta-data file (ino=5, block-offset=0) [ 190.997981][ T8771] NILFS (loop2): error -5 while loading super root [ 191.047670][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2064'. [ 191.113028][ T8783] netlink: 'syz.4.2064': attribute type 2 has an invalid length. [ 191.120988][ T8783] netlink: 'syz.4.2064': attribute type 1 has an invalid length. [ 191.262237][ T8771] loop2: detected capacity change from 0 to 2048 [ 191.337331][ T8771] NILFS (loop2): corrupt root inode [ 191.443451][ T8798] netlink: 121244 bytes leftover after parsing attributes in process `syz.0.2071'. [ 191.612665][ T4736] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 191.702585][ T8811] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2078'. [ 191.865792][ T8817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2081'. [ 191.993229][ T4736] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 192.001456][ T4736] usb 5-1: config 0 has no interface number 0 [ 192.192966][ T4736] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 192.202217][ T4736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.211541][ T4736] usb 5-1: Product: syz [ 192.231954][ T4736] usb 5-1: Manufacturer: syz [ 192.251883][ T4736] usb 5-1: SerialNumber: syz [ 192.279839][ T4736] usb 5-1: config 0 descriptor?? [ 192.578865][ T5267] usb 5-1: USB disconnect, device number 8 [ 192.597096][ T8855] xt_TCPMSS: Only works on TCP SYN packets [ 192.840909][ T8865] mkiss: ax0: crc mode is auto. [ 192.972897][ T4780] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 193.212792][ T4780] usb 1-1: Using ep0 maxpacket: 8 [ 193.325827][ T8883] loop1: detected capacity change from 0 to 4096 [ 193.332921][ T4780] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 193.352768][ T4780] usb 1-1: config 0 has no interface number 0 [ 193.358894][ T4780] usb 1-1: config 0 interface 5 has no altsetting 0 [ 193.372827][ T8883] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 193.512310][ T8883] ntfs3: loop1: failed to convert "c46c" to iso8859-4 [ 193.563026][ T4780] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 193.590713][ T4780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.629966][ T4780] usb 1-1: Product: syz [ 193.638987][ T4780] usb 1-1: Manufacturer: syz [ 193.652958][ T4780] usb 1-1: SerialNumber: syz [ 193.694407][ T4780] usb 1-1: config 0 descriptor?? [ 193.866639][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2123'. [ 194.168459][ T4736] usb 1-1: USB disconnect, device number 7 [ 194.172925][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.180579][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.188509][ T4736] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 194.273127][ T8891] loop2: detected capacity change from 0 to 32768 [ 194.342097][ T8909] loop4: detected capacity change from 0 to 2048 [ 194.352523][ T8909] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.490449][ T8891] XFS (loop2): Mounting V5 Filesystem [ 194.720184][ T8891] XFS (loop2): Ending clean mount [ 194.813241][ T8891] XFS (loop2): Quotacheck needed: Please wait. [ 194.875373][ T8891] XFS (loop2): Quotacheck: Done. [ 194.949039][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2135'. [ 195.000592][ T8935] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 195.039187][ T3650] XFS (loop2): Unmounting Filesystem [ 195.605152][ T8954] CIFS mount error: No usable UNC path provided in device string! [ 195.605152][ T8954] [ 195.633989][ T8954] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 195.785281][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2146'. [ 195.918102][ T8937] loop0: detected capacity change from 0 to 32768 [ 195.927837][ T8948] loop4: detected capacity change from 0 to 32768 [ 195.960424][ T8948] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2142 (8948) [ 196.020676][ T8948] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.040204][ T8948] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 196.052925][ T8948] BTRFS info (device loop4): using free space tree [ 196.055611][ T8937] XFS (loop0): Mounting V5 Filesystem [ 196.157743][ T8937] XFS (loop0): Ending clean mount [ 196.169100][ T8937] XFS (loop0): Quotacheck needed: Please wait. [ 196.212723][ T4736] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 196.253479][ T8987] loop3: detected capacity change from 0 to 256 [ 196.278251][ T8937] XFS (loop0): Quotacheck: Done. [ 196.311838][ T8948] BTRFS info (device loop4): enabling ssd optimizations [ 196.338649][ T3644] XFS (loop0): Unmounting Filesystem [ 196.339630][ T8987] FAT-fs (loop3): Directory bread(block 64) failed [ 196.350740][ T8987] FAT-fs (loop3): Directory bread(block 65) failed [ 196.359084][ T8987] FAT-fs (loop3): Directory bread(block 66) failed [ 196.371097][ T8987] FAT-fs (loop3): Directory bread(block 67) failed [ 196.378488][ T8987] FAT-fs (loop3): Directory bread(block 68) failed [ 196.385365][ T8987] FAT-fs (loop3): Directory bread(block 69) failed [ 196.392216][ T8987] FAT-fs (loop3): Directory bread(block 70) failed [ 196.398882][ T8987] FAT-fs (loop3): Directory bread(block 71) failed [ 196.405711][ T8987] FAT-fs (loop3): Directory bread(block 72) failed [ 196.412436][ T8987] FAT-fs (loop3): Directory bread(block 73) failed [ 196.482828][ T4736] usb 3-1: Using ep0 maxpacket: 16 [ 196.547462][ T6933] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.612773][ T4736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 196.633137][ T4736] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 196.652644][ T4736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.675489][ T4736] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 196.771932][ T8997] loop3: detected capacity change from 0 to 64 [ 196.871447][ T4736] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 196.881654][ T4736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.890355][ T4736] usb 3-1: Product: syz [ 196.894927][ T4736] usb 3-1: Manufacturer: syz [ 196.899964][ T4736] usb 3-1: SerialNumber: syz [ 196.944978][ T4736] usb 3-1: config 0 descriptor?? [ 196.983990][ T4736] port100 3-1:0.0: NFC: Could not get supported command types [ 197.242243][ T4780] usb 3-1: USB disconnect, device number 7 [ 197.245687][ T9002] loop3: detected capacity change from 0 to 8192 [ 197.299315][ T9002] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 197.323655][ T9002] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 197.348851][ T9002] REISERFS (device loop3): using ordered data mode [ 197.362893][ T9002] reiserfs: using flush barriers [ 197.376826][ T9002] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.394053][ T9002] REISERFS (device loop3): checking transaction log (loop3) [ 197.402529][ T9002] REISERFS (device loop3): Using r5 hash to sort names [ 197.424831][ T9002] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 197.445690][ T9002] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 197.492710][ T8999] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 197.732829][ T8999] usb 5-1: Using ep0 maxpacket: 32 [ 197.853151][ T8999] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.001806][ T9037] loop0: detected capacity change from 0 to 2048 [ 198.015584][ T9037] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 198.043007][ T8999] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 198.063180][ T8999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.093093][ T8999] usb 5-1: Product: syz [ 198.101892][ T8999] usb 5-1: Manufacturer: syz [ 198.106811][ T9037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.117843][ T8999] usb 5-1: SerialNumber: syz [ 198.131212][ T8999] usb 5-1: config 0 descriptor?? [ 198.187564][ T8999] cdc_ether 5-1:0.0: skipping garbage [ 198.193544][ T8999] usb 5-1: bad CDC descriptors [ 198.209036][ T8999] usb 5-1: unsupported MDLM descriptors [ 198.290760][ T9047] autofs4:pid:9047:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 198.322858][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2175'. [ 198.341001][ T9047] autofs4:pid:9047:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 198.411270][ T8999] usb 5-1: USB disconnect, device number 9 [ 198.960816][ T9045] loop3: detected capacity change from 0 to 32768 [ 199.015556][ T9045] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2174 (9045) [ 199.054656][ T9045] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.091731][ T9045] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 199.138234][ T9045] BTRFS info (device loop3): using free space tree [ 199.277855][ T2036] pvrusb2: request_firmware fatal error with code=-110 [ 199.285958][ T2036] pvrusb2: Failure uploading firmware1 [ 199.291687][ T2036] pvrusb2: Device initialization was not successful. [ 199.326602][ T2036] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 199.387586][ T2036] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 199.458528][ T4218] pvrusb2: Device being rendered inoperable [ 199.527904][ T9045] BTRFS info (device loop3): enabling ssd optimizations [ 199.633557][ T9116] loop2: detected capacity change from 0 to 512 [ 199.702362][ T9116] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 8 [ 199.770614][ T3641] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.838358][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2201'. [ 200.553686][ T9131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2207'. [ 200.621026][ T9131] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 200.644374][ T9133] loop3: detected capacity change from 0 to 16 [ 200.664322][ T9090] loop0: detected capacity change from 0 to 32768 [ 200.672506][ T9133] erofs: (device loop3): mounted with root inode @ nid 36. [ 200.688512][ T9090] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2195 (9090) [ 200.711856][ T9133] CIFS mount error: No usable UNC path provided in device string! [ 200.711856][ T9133] [ 200.734531][ T9133] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 200.753050][ T9090] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.790080][ T9090] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 200.842755][ T9090] BTRFS info (device loop0): using free space tree [ 201.019135][ T9149] binder: 9147:9149 ioctl c00c6211 0 returned -14 [ 201.245293][ T9111] loop4: detected capacity change from 0 to 32768 [ 201.263849][ T9111] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 201.272136][ T9111] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 201.358523][ T9090] BTRFS info (device loop0): enabling ssd optimizations [ 201.460522][ T9111] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 201.476094][ T4780] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 201.485384][ T4780] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 201.602501][ T4780] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 117ms [ 201.623453][ T4780] gfs2: fsid=syz:syz.0: jid=0: Done [ 201.628812][ T9111] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 201.724432][ T3644] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.940735][ T9189] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2227'. [ 202.382859][ T4218] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 202.572324][ T9210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2236'. [ 202.597865][ T9211] loop2: detected capacity change from 0 to 1024 [ 202.742299][ T9213] loop0: detected capacity change from 0 to 64 [ 202.762939][ T4218] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 202.772952][ T4218] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 202.781407][ T4218] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 202.791475][ T4218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 202.801838][ T4218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 203.053017][ T4218] usb 2-1: string descriptor 0 read error: -22 [ 203.059342][ T4218] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 203.099267][ T4218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.148813][ T4218] usb 2-1: config 0 descriptor?? [ 203.203504][ T4218] hub 2-1:0.0: bad descriptor, ignoring hub [ 203.209533][ T4218] hub: probe of 2-1:0.0 failed with error -5 [ 203.254927][ T4218] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 203.514793][ T8999] usb 2-1: USB disconnect, device number 4 [ 203.905612][ T33] device hsr_slave_0 left promiscuous mode [ 203.922816][ T5266] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 203.951846][ T33] device hsr_slave_1 left promiscuous mode [ 203.963527][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.971149][ T9219] loop2: detected capacity change from 0 to 32768 [ 203.977869][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.986631][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.004101][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.011750][ T9219] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2241 (9219) [ 204.027034][ T33] device bridge_slave_1 left promiscuous mode [ 204.073341][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.092274][ T9219] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 204.114063][ T33] device bridge_slave_0 left promiscuous mode [ 204.120326][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.162885][ T9219] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 204.165443][ T5266] usb 4-1: Using ep0 maxpacket: 16 [ 204.202315][ T9231] loop4: detected capacity change from 0 to 32768 [ 204.202834][ T9219] BTRFS info (device loop2): turning off barriers [ 204.262803][ T9219] BTRFS info (device loop2): enabling auto defrag [ 204.269604][ T9219] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 204.317253][ T9219] BTRFS info (device loop2): trying to use backup root at mount time [ 204.333313][ T33] device veth1_macvtap left promiscuous mode [ 204.345000][ T33] device veth0_macvtap left promiscuous mode [ 204.353870][ T5266] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 204.363868][ T9219] BTRFS info (device loop2): force zlib compression, level 3 [ 204.380017][ T5266] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 204.381694][ T33] device veth1_vlan left promiscuous mode [ 204.399714][ T9219] BTRFS info (device loop2): enabling ssd optimizations [ 204.413246][ T9219] BTRFS info (device loop2): using spread ssd allocation scheme [ 204.433071][ T33] device veth0_vlan left promiscuous mode [ 204.441990][ T9219] BTRFS info (device loop2): using free space tree [ 204.562823][ T41] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 204.628208][ T5266] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 204.641899][ T5266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.653567][ T5266] usb 4-1: Product: syz [ 204.659795][ T5266] usb 4-1: Manufacturer: syz [ 204.668283][ T5266] usb 4-1: SerialNumber: syz [ 204.677964][ T5266] usb 4-1: config 0 descriptor?? [ 204.708418][ T9237] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.718461][ T9237] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.731079][ T9219] BTRFS info (device loop2: state M): not using ssd optimizations [ 204.748202][ T9219] BTRFS info (device loop2: state M): not using spread ssd allocation scheme [ 204.766748][ T9219] BTRFS warning (device loop2: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 204.789151][ T9219] BTRFS info (device loop2: state M): trying to use backup root at mount time [ 204.809516][ T9219] BTRFS info (device loop2: state M): enabling ssd optimizations [ 204.819650][ T9219] BTRFS info (device loop2: state M): using spread ssd allocation scheme [ 204.873792][ T3650] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 204.952892][ T9237] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.975864][ T9237] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 205.066832][ T33] bond2 (unregistering): Released all slaves [ 205.093255][ T41] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 205.102337][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.115371][ T41] usb 2-1: Product: syz [ 205.119989][ T41] usb 2-1: Manufacturer: syz [ 205.125255][ T41] usb 2-1: SerialNumber: syz [ 205.133226][ T41] usb 2-1: config 0 descriptor?? [ 205.190269][ T33] bond1 (unregistering): Released all slaves [ 205.212841][ T5266] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 205.244053][ T5266] asix: probe of 4-1:0.0 failed with error -71 [ 205.263012][ T5266] usb 4-1: USB disconnect, device number 9 [ 205.392987][ T41] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 205.605388][ T41] usb write operation failed. (-71) [ 205.637915][ T41] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 205.666363][ T41] usb write operation failed. (-71) [ 205.737417][ T41] usb 2-1: USB disconnect, device number 5 [ 206.068316][ T33] team0 (unregistering): Port device team_slave_1 removed [ 206.148586][ T33] team0 (unregistering): Port device team_slave_0 removed [ 206.283292][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.354274][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.620672][ T9314] loop3: detected capacity change from 0 to 2048 [ 206.655060][ T9314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.921485][ T33] bond0 (unregistering): (slave team0): Releasing backup interface [ 207.054655][ T33] bond0 (unregistering): Released all slaves [ 207.126544][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2260'. [ 207.148847][ T9290] IPv6: sit1: Disabled Multicast RS [ 207.259898][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2279'. [ 207.355896][ T9320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2279'. [ 207.375052][ T9320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2279'. [ 207.378418][ T9325] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2281'. [ 207.531976][ T9329] netlink: 121244 bytes leftover after parsing attributes in process `syz.2.2284'. [ 207.654619][ T9335] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.822059][ T9339] netlink: 'syz.3.2288': attribute type 5 has an invalid length. [ 207.842846][ T4778] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 208.010109][ T9345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.049782][ T9345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.059573][ T9345] device team0 left promiscuous mode [ 208.071513][ T9345] device team_slave_0 left promiscuous mode [ 208.078145][ T9345] device team_slave_1 left promiscuous mode [ 208.112282][ T9345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.120006][ T9345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.166234][ T9345] device bond1 left promiscuous mode [ 208.212981][ T4778] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 208.239141][ T4778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.260099][ T9351] loop1: detected capacity change from 0 to 256 [ 208.261684][ T9321] loop4: detected capacity change from 0 to 32768 [ 208.281303][ T4778] usb 1-1: config 0 descriptor?? [ 208.346168][ T4778] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 208.774456][ T4778] gspca_sn9c2028: read1 error -71 [ 208.793124][ T4778] gspca_sn9c2028: read1 error -71 [ 208.798319][ T4778] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 208.835559][ T4778] usb 1-1: USB disconnect, device number 8 [ 209.083468][ T9381] overlayfs: missing 'lowerdir' [ 209.120025][ T9379] loop3: detected capacity change from 0 to 1024 [ 209.379628][ T9389] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2314'. [ 209.622273][ T9403] usb usb9: usbfs: process 9403 (syz.0.2321) did not claim interface 0 before use [ 209.753316][ T9402] loop3: detected capacity change from 0 to 4096 [ 209.842581][ T9402] ntfs3: loop3: Failed to load $Extend. [ 209.992796][ T3687] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 210.193518][ T9425] loop3: detected capacity change from 0 to 256 [ 210.217134][ T9425] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 210.240798][ T33] device hsr_slave_0 left promiscuous mode [ 210.287184][ T33] device hsr_slave_1 left promiscuous mode [ 210.315087][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.322581][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.383122][ T3687] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 210.391358][ T3687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.403758][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.416468][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.429319][ T3687] usb 3-1: config 0 has no interface number 0 [ 210.431078][ T9433] x_tables: unsorted entry at hook 3 [ 210.438436][ T3687] usb 3-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 210.452504][ T3687] usb 3-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 210.473891][ T33] device bridge_slave_1 left promiscuous mode [ 210.480141][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.499186][ T33] device bridge_slave_0 left promiscuous mode [ 210.509052][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.585491][ T33] device veth0_macvtap left promiscuous mode [ 210.598428][ T33] device veth1_vlan left promiscuous mode [ 210.610983][ T33] device veth0_vlan left promiscuous mode [ 210.623063][ T3687] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 210.639892][ T3687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.657169][ T3687] usb 3-1: Product: syz [ 210.666996][ T3687] usb 3-1: Manufacturer: syz [ 210.676190][ T3687] usb 3-1: SerialNumber: syz [ 210.697818][ T3687] usb 3-1: config 0 descriptor?? [ 210.744005][ T3687] cdc_ether 3-1:0.185: skipping garbage [ 210.753966][ T3687] usb 3-1: bad CDC descriptors [ 210.771366][ T3687] usb 3-1: unsupported MDLM descriptors [ 210.907333][ T9415] loop1: detected capacity change from 0 to 40427 [ 210.939363][ T9415] F2FS-fs (loop1): invalid crc value [ 210.983287][ T9415] F2FS-fs (loop1): Found nat_bits in checkpoint [ 210.994952][ T5267] usb 3-1: USB disconnect, device number 8 [ 211.061558][ T9415] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 211.102722][ T9415] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 211.640966][ T9458] loop1: detected capacity change from 0 to 128 [ 211.682893][ T9458] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 211.912827][ T5266] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 212.054854][ T33] team0 (unregistering): Port device team_slave_1 removed [ 212.125534][ T33] team0 (unregistering): Port device team_slave_0 removed [ 212.176646][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.249681][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.493006][ T5266] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 212.511545][ T5266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.523927][ T5266] usb 4-1: Product: syz [ 212.528135][ T5266] usb 4-1: Manufacturer: syz [ 212.536325][ T5266] usb 4-1: SerialNumber: syz [ 212.559436][ T5266] usb 4-1: config 0 descriptor?? [ 212.698592][ T33] bond0 (unregistering): Released all slaves [ 212.773591][ T9471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2352'. [ 212.833137][ T5266] usb 4-1: ignoring: probably an ADSL modem [ 213.113198][ T5266] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 213.138270][ T5266] usb 4-1: USB disconnect, device number 10 [ 213.182853][ T8999] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 213.291137][ T9497] loop2: detected capacity change from 0 to 2048 [ 213.323442][ T9497] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 213.380969][ T9501] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.462695][ T8999] usb 5-1: Using ep0 maxpacket: 8 [ 213.573078][ T9507] loop0: detected capacity change from 0 to 4096 [ 213.586079][ T8999] usb 5-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=d7.cc [ 213.599491][ T8999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.621128][ T9507] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 213.623633][ T8999] usb 5-1: config 0 descriptor?? [ 213.686857][ T4459] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 213.704405][ T8999] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 213.717291][ T8999] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 213.732980][ T9507] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 213.748019][ T9507] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 213.749394][ T8999] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 213.788896][ T8999] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 213.819552][ T8999] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 213.844954][ T8999] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 213.865817][ T8999] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 213.885879][ T102] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 213.897844][ T8999] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 213.917211][ T3644] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 213.929288][ T8999] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 213.957952][ T8999] usb 5-1: USB disconnect, device number 10 [ 214.003931][ T8999] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 214.043950][ T8999] keyspan 5-1:0.0: device disconnected [ 214.063218][ T4459] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 214.080404][ T4459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.084090][ T9525] loop0: detected capacity change from 0 to 1024 [ 214.091293][ T4459] usb 2-1: config 0 descriptor?? [ 214.160902][ T9530] loop3: detected capacity change from 0 to 8 [ 214.220025][ T9530] SQUASHFS error: Unable to read inode 0xa7 [ 214.239066][ T9525] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 214.366201][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 214.478244][ T9546] loop0: detected capacity change from 0 to 512 [ 214.505966][ T9546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 214.564365][ T4459] ath6kl: Failed to submit usb control message: -71 [ 214.571110][ T4459] ath6kl: unable to send the bmi data to the device: -71 [ 214.574165][ T9549] netlink: 'syz.4.2387': attribute type 11 has an invalid length. [ 214.593236][ T9549] netlink: 'syz.4.2387': attribute type 5 has an invalid length. [ 214.600177][ T4459] ath6kl: Unable to send get target info: -71 [ 214.610307][ T9546] EXT4-fs (loop0): 1 truncate cleaned up [ 214.628752][ T9546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 214.663328][ T4459] ath6kl: Failed to init ath6kl core: -71 [ 214.663349][ T9554] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 214.792949][ T4459] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 214.820151][ T4459] usb 2-1: USB disconnect, device number 6 [ 214.860190][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 214.973229][ T9567] tmpfs: Bad value for 'mpol' [ 214.984789][ T9569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.099111][ T9572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2398'. [ 215.117168][ T9575] kAFS: unable to lookup cell '' [ 215.480523][ T9594] loop0: detected capacity change from 0 to 128 [ 215.487159][ T4459] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 215.514129][ T9594] FAT-fs (loop0): bogus sectors per cluster 0 [ 215.530536][ T9594] FAT-fs (loop0): Can't find a valid FAT filesystem [ 215.567795][ T9599] loop2: detected capacity change from 0 to 1024 [ 215.625563][ T9599] hfsplus: bad catalog entry type [ 215.652237][ T9602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2413'. [ 215.702281][ T9602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2413'. [ 215.717087][ T102] hfsplus: b-tree write err: -5, ino 4 [ 215.774927][ T9608] loop4: detected capacity change from 0 to 256 [ 215.821485][ T9608] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 215.853448][ T4459] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 215.871861][ T4459] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.900536][ T4459] usb 2-1: config 0 has no interface number 0 [ 215.907199][ T4459] usb 2-1: config 0 interface 175 has no altsetting 0 [ 215.950311][ T4459] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 215.960956][ T4459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.993987][ T8999] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 215.996045][ T4459] usb 2-1: config 0 descriptor?? [ 216.044165][ T4459] option 2-1:0.175: GSM modem (1-port) converter detected [ 216.249428][ T4778] usb 2-1: USB disconnect, device number 7 [ 216.287876][ T4778] option 2-1:0.175: device disconnected [ 216.437939][ T9612] loop3: detected capacity change from 0 to 32768 [ 216.494021][ T9612] JBD2: Ignoring recovery information on journal [ 216.556471][ T9612] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 216.561932][ T9614] loop4: detected capacity change from 0 to 32768 [ 216.572786][ T8999] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 216.578089][ T9610] loop2: detected capacity change from 0 to 32768 [ 216.581824][ T8999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.581848][ T8999] usb 1-1: Product: syz [ 216.581863][ T8999] usb 1-1: Manufacturer: syz [ 216.604925][ T9614] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 216.605325][ T8999] usb 1-1: SerialNumber: syz [ 216.625162][ T8999] usb 1-1: config 0 descriptor?? [ 216.630463][ T9614] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 216.701086][ T9614] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 216.711766][ T4459] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 216.719322][ T4459] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 216.751123][ T3641] ocfs2: Unmounting device (7,3) on (node local) [ 216.773327][ T4459] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 54ms [ 216.782274][ T4459] gfs2: fsid=syz:syz.0: jid=0: Done [ 216.801679][ T9614] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 216.890789][ T8999] hso 1-1:0.0: Can't find BULK IN endpoint [ 216.897374][ T8999] usb-storage 1-1:0.0: USB Mass Storage device detected [ 217.103726][ T4459] usb 1-1: USB disconnect, device number 9 [ 217.222945][ T4452] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 217.532814][ T4778] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 217.772901][ T4452] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 217.786700][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 217.786715][ T26] audit: type=1400 audit(1727868869.191:2459): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9653 comm="syz.3.2437" [ 217.796651][ T4452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.889697][ T4452] usb 2-1: Product: syz [ 217.894623][ T4452] usb 2-1: Manufacturer: syz [ 217.901346][ T4452] usb 2-1: SerialNumber: syz [ 217.912786][ T4778] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 217.921859][ T4778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.954471][ T4778] usb 3-1: config 0 descriptor?? [ 217.988866][ T4452] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 217.999806][ T4778] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 218.139755][ T9644] loop4: detected capacity change from 0 to 32768 [ 218.192936][ T4218] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 218.243685][ T8999] usb 3-1: USB disconnect, device number 9 [ 218.279866][ T9652] loop0: detected capacity change from 0 to 32768 [ 218.289707][ T9652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2436 (9652) [ 218.326315][ T9652] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.346427][ T9652] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 218.373995][ T9652] BTRFS info (device loop0): using free space tree [ 218.509508][ T9652] BTRFS info (device loop0): enabling ssd optimizations [ 218.582907][ T4452] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 218.692186][ T3644] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.751233][ T9665] loop4: detected capacity change from 0 to 32768 [ 218.779089][ T9665] (syz.4.2439,9665,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.797120][ T4218] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 218.826971][ T4218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.864425][ T4218] usb 4-1: Product: syz [ 218.868625][ T4218] usb 4-1: Manufacturer: syz [ 218.874791][ T9665] (syz.4.2439,9665,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.889016][ T4218] usb 4-1: SerialNumber: syz [ 218.910296][ T4218] r8152-cfgselector 4-1: config 0 descriptor?? [ 218.930070][ T9665] JBD2: Ignoring recovery information on journal [ 218.996927][ T9680] loop2: detected capacity change from 0 to 512 [ 219.026242][ T7981] usb 2-1: USB disconnect, device number 8 [ 219.086651][ T9665] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 219.106865][ T9680] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2441: inode #1: comm syz.2.2441: iget: illegal inode # [ 219.152003][ T9665] [ 219.152133][ T9680] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2441: error while reading EA inode 1 err=-117 [ 219.154349][ T9665] ====================================================== [ 219.154357][ T9665] WARNING: possible circular locking dependency detected [ 219.154363][ T9665] 6.1.112-syzkaller #0 Not tainted [ 219.154372][ T9665] ------------------------------------------------------ [ 219.154377][ T9665] syz.4.2439/9665 is trying to acquire lock: [ 219.154386][ T9665] ffff88807215a648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 219.154447][ T9665] [ 219.154447][ T9665] but task is already holding lock: [ 219.154452][ T9665] ffff8880544600a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x2a0/0xb60 [ 219.154497][ T9665] [ 219.154497][ T9665] which lock already depends on the new lock. [ 219.154497][ T9665] [ 219.154502][ T9665] [ 219.154502][ T9665] the existing dependency chain (in reverse order) is: [ 219.154508][ T9665] [ 219.154508][ T9665] -> #6 (&dquot->dq_lock [ 219.169333][ T9680] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 219.173638][ T9665] ){+.+.}-{3:3}: [ 219.173654][ T9665] lock_acquire+0x1f8/0x5a0 [ 219.173680][ T9665] __mutex_lock+0x132/0xd80 [ 219.181174][ T9680] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2441: inode #1: comm syz.2.2441: iget: illegal inode # [ 219.185749][ T9665] dquot_commit+0x57/0x510 [ 219.185772][ T9665] ext4_write_dquot+0x1fd/0x360 [ 219.185796][ T9665] mark_all_dquot_dirty+0xf7/0x400 [ 219.185815][ T9665] __dquot_free_space+0x956/0xe70 [ 219.185833][ T9665] ext4_free_blocks+0x1fb8/0x3020 [ 219.185848][ T9665] ext4_ext_remove_space+0x22bb/0x4f30 [ 219.185868][ T9665] ext4_ext_truncate+0x201/0x360 [ 219.185887][ T9665] ext4_truncate+0xa1d/0x1290 [ 219.185903][ T9665] ext4_evict_inode+0xb68/0x1150 [ 219.195105][ T9680] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2441: error while reading EA inode 1 err=-117 [ 219.198847][ T9665] evict+0x529/0x930 [ 219.198872][ T9665] do_unlinkat+0x509/0x820 [ 219.212228][ T9680] EXT4-fs (loop2): 1 orphan inode deleted [ 219.218757][ T9665] __x64_sys_unlinkat+0xca/0xf0 [ 219.218781][ T9665] do_syscall_64+0x3b/0xb0 [ 219.218801][ T9665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.218822][ T9665] [ 219.218822][ T9665] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 219.218850][ T9665] lock_acquire+0x1f8/0x5a0 [ 219.218870][ T9665] down_write+0x36/0x60 [ 219.218885][ T9665] ext4_truncate+0x999/0x1290 [ 219.218901][ T9665] ext4_setattr+0x10f5/0x1a00 [ 219.230501][ T9680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 219.238884][ T9665] notify_change+0xce3/0xfc0 [ 219.238916][ T9665] do_truncate+0x21c/0x300 [ 219.238933][ T9665] do_sys_ftruncate+0x2e2/0x380 [ 219.238951][ T9665] do_syscall_64+0x3b/0xb0 [ 219.238964][ T9665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.238983][ T9665] [ 219.238983][ T9665] -> #4 (jbd2_handle){++++}-{0:0}: [ 219.239012][ T9665] lock_acquire+0x1f8/0x5a0 [ 219.239033][ T9665] start_this_handle+0x1f71/0x21b0 [ 219.239051][ T9665] jbd2__journal_start+0x2d1/0x5c0 [ 219.473207][ T9665] jbd2_journal_start+0x25/0x30 [ 219.478578][ T9665] ocfs2_start_trans+0x3c0/0x6f0 [ 219.484025][ T9665] ocfs2_reserve_suballoc_bits+0x8f8/0x5190 [ 219.490513][ T9665] ocfs2_reserve_new_inode+0x524/0xde0 [ 219.496484][ T9665] ocfs2_mknod+0xe0b/0x2e20 [ 219.501493][ T9665] ocfs2_create+0x1c0/0x4e0 [ 219.506499][ T9665] path_openat+0x12f1/0x2e60 [ 219.511600][ T9665] do_filp_open+0x230/0x480 [ 219.516609][ T9665] do_sys_openat2+0x13b/0x4f0 [ 219.521795][ T9665] __x64_sys_openat+0x243/0x290 [ 219.527153][ T9665] do_syscall_64+0x3b/0xb0 [ 219.532077][ T9665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.538481][ T9665] [ 219.538481][ T9665] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 219.546983][ T9665] lock_acquire+0x1f8/0x5a0 [ 219.551997][ T9665] down_read+0xad/0xa30 [ 219.556658][ T9665] ocfs2_start_trans+0x3b5/0x6f0 [ 219.562105][ T9665] ocfs2_reserve_suballoc_bits+0x8f8/0x5190 [ 219.568504][ T9665] ocfs2_reserve_new_inode+0x524/0xde0 [ 219.574475][ T9665] ocfs2_mknod+0xe0b/0x2e20 [ 219.579481][ T9665] ocfs2_create+0x1c0/0x4e0 [ 219.584490][ T9665] path_openat+0x12f1/0x2e60 [ 219.589591][ T9665] do_filp_open+0x230/0x480 [ 219.594598][ T9665] do_sys_openat2+0x13b/0x4f0 [ 219.599783][ T9665] __x64_sys_openat+0x243/0x290 [ 219.605140][ T9665] do_syscall_64+0x3b/0xb0 [ 219.610057][ T9665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.616459][ T9665] [ 219.616459][ T9665] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 219.623922][ T9665] lock_acquire+0x1f8/0x5a0 [ 219.628934][ T9665] ocfs2_start_trans+0x2b0/0x6f0 [ 219.634378][ T9665] ocfs2_write_info+0x124/0x3a0 [ 219.639738][ T9665] dquot_set_dqinfo+0x488/0x6f0 [ 219.645097][ T9665] quota_setinfo+0x3d6/0x4f0 [ 219.650197][ T9665] __se_sys_quotactl+0x2b1/0x770 [ 219.655641][ T9665] do_syscall_64+0x3b/0xb0 [ 219.660562][ T9665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.666963][ T9665] [ 219.666963][ T9665] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 219.675808][ T9665] lock_acquire+0x1f8/0x5a0 [ 219.680822][ T9665] down_write+0x36/0x60 [ 219.685484][ T9665] ocfs2_lock_global_qf+0x221/0x2a0 [ 219.691195][ T9665] ocfs2_write_info+0xd2/0x3a0 [ 219.696466][ T9665] dquot_set_dqinfo+0x488/0x6f0 [ 219.701831][ T9665] quota_setinfo+0x3d6/0x4f0 [ 219.706926][ T9665] __se_sys_quotactl+0x2b1/0x770 [ 219.712372][ T9665] do_syscall_64+0x3b/0xb0 [ 219.717292][ T9665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.723692][ T9665] [ 219.723692][ T9665] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 219.734280][ T9665] validate_chain+0x1661/0x5950 [ 219.739635][ T9665] __lock_acquire+0x125b/0x1f80 [ 219.745001][ T9665] lock_acquire+0x1f8/0x5a0 [ 219.750011][ T9665] down_write+0x36/0x60 [ 219.754670][ T9665] ocfs2_lock_global_qf+0x202/0x2a0 [ 219.760380][ T9665] ocfs2_acquire_dquot+0x2ad/0xb60 [ 219.766003][ T9665] dqget+0x762/0xe90 [ 219.770403][ T9665] dquot_set_dqblk+0x27/0xf20 [ 219.775590][ T9665] quota_setquota+0x6d3/0x840 [ 219.780779][ T9665] __se_sys_quotactl+0x2b1/0x770 [ 219.786229][ T9665] do_syscall_64+0x3b/0xb0 [ 219.791150][ T9665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.797561][ T9665] [ 219.797561][ T9665] other info that might help us debug this: [ 219.797561][ T9665] [ 219.807771][ T9665] Chain exists of: [ 219.807771][ T9665] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ei->i_data_sem --> &dquot->dq_lock [ 219.807771][ T9665] [ 219.823664][ T9665] Possible unsafe locking scenario: [ 219.823664][ T9665] [ 219.831099][ T9665] CPU0 CPU1 [ 219.836446][ T9665] ---- ---- [ 219.841790][ T9665] lock(&dquot->dq_lock); [ 219.846209][ T9665] lock(&ei->i_data_sem); [ 219.853142][ T9665] lock(&dquot->dq_lock); [ 219.860069][ T9665] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 219.867352][ T9665] [ 219.867352][ T9665] *** DEADLOCK *** [ 219.867352][ T9665] [ 219.875484][ T9665] 2 locks held by syz.4.2439/9665: [ 219.880580][ T9665] #0: ffff888055be40e0 (&type->s_umount_key#66){++++}-{3:3}, at: user_get_super+0x11a/0x250 [ 219.890760][ T9665] #1: ffff8880544600a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x2a0/0xb60 [ 219.900760][ T9665] [ 219.900760][ T9665] stack backtrace: [ 219.906644][ T9665] CPU: 0 PID: 9665 Comm: syz.4.2439 Not tainted 6.1.112-syzkaller #0 [ 219.914708][ T9665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 219.924751][ T9665] Call Trace: [ 219.928018][ T9665] [ 219.930935][ T9665] dump_stack_lvl+0x1e3/0x2cb [ 219.935613][ T9665] ? nf_tcp_handle_invalid+0x642/0x642 [ 219.941069][ T9665] ? print_circular_bug+0x12b/0x1a0 [ 219.946342][ T9665] check_noncircular+0x2fa/0x3b0 [ 219.951279][ T9665] ? add_chain_block+0x850/0x850 [ 219.956200][ T9665] ? queued_spin_lock_slowpath+0x42/0x50 [ 219.961832][ T9665] ? lockdep_lock+0x1a7/0x2a0 [ 219.966505][ T9665] ? _find_first_zero_bit+0xd0/0x100 [ 219.971781][ T9665] validate_chain+0x1661/0x5950 [ 219.976624][ T9665] ? reacquire_held_locks+0x660/0x660 [ 219.982074][ T9665] ? ocfs2_read_blocks_sync+0xcd0/0xcd0 [ 219.987621][ T9665] ? look_up_lock_class+0x77/0x140 [ 219.992721][ T9665] ? register_lock_class+0x100/0x990 [ 219.998001][ T9665] ? ocfs2_read_inode_block+0x148/0x1d0 [ 220.003539][ T9665] ? is_dynamic_key+0x260/0x260 [ 220.008382][ T9665] ? mark_lock+0x9a/0x340 [ 220.012706][ T9665] __lock_acquire+0x125b/0x1f80 [ 220.017554][ T9665] lock_acquire+0x1f8/0x5a0 [ 220.022048][ T9665] ? ocfs2_lock_global_qf+0x202/0x2a0 [ 220.027414][ T9665] ? read_lock_is_recursive+0x10/0x10 [ 220.032777][ T9665] ? ocfs2_lock_global_qf+0x1cb/0x2a0 [ 220.038163][ T9665] ? __might_sleep+0xb0/0xb0 [ 220.042739][ T9665] ? do_raw_spin_lock+0x14a/0x370 [ 220.047750][ T9665] ? do_raw_spin_unlock+0x137/0x8a0 [ 220.052936][ T9665] down_write+0x36/0x60 [ 220.057083][ T9665] ? ocfs2_lock_global_qf+0x202/0x2a0 [ 220.062534][ T9665] ocfs2_lock_global_qf+0x202/0x2a0 [ 220.067731][ T9665] ? lock_buffer+0x80/0x80 [ 220.072146][ T9665] ? trace_contention_end+0x61/0x170 [ 220.077424][ T9665] ocfs2_acquire_dquot+0x2ad/0xb60 [ 220.082531][ T9665] ? ocfs2_destroy_dquot+0x40/0x40 [ 220.087634][ T9665] ? percpu_counter_add_batch+0x142/0x160 [ 220.093373][ T9665] dqget+0x762/0xe90 [ 220.097269][ T9665] dquot_set_dqblk+0x27/0xf20 [ 220.101936][ T9665] ? __might_fault+0xbd/0x110 [ 220.106608][ T9665] quota_setquota+0x6d3/0x840 [ 220.111713][ T9665] ? quota_getnextquota+0x6b0/0x6b0 [ 220.116907][ T9665] ? bpf_lsm_capable+0x5/0x10 [ 220.121570][ T9665] ? security_capable+0x86/0xb0 [ 220.126418][ T9665] ? do_quotactl+0x4e1/0x6c0 [ 220.131001][ T9665] __se_sys_quotactl+0x2b1/0x770 [ 220.135932][ T9665] ? __x64_sys_quotactl+0xa0/0xa0 [ 220.140946][ T9665] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 220.146923][ T9665] ? print_irqtrace_events+0x210/0x210 [ 220.152377][ T9665] ? print_irqtrace_events+0x210/0x210 [ 220.157917][ T9665] ? syscall_enter_from_user_mode+0x2e/0x230 [ 220.163885][ T9665] ? lockdep_hardirqs_on+0x94/0x130 [ 220.169069][ T9665] ? syscall_enter_from_user_mode+0x2e/0x230 [ 220.175036][ T9665] do_syscall_64+0x3b/0xb0 [ 220.179438][ T9665] ? clear_bhb_loop+0x45/0xa0 [ 220.184106][ T9665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.189987][ T9665] RIP: 0033:0x7fae7d37dff9 [ 220.194399][ T9665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.213995][ T9665] RSP: 002b:00007fae7e1d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 220.222399][ T9665] RAX: ffffffffffffffda RBX: 00007fae7d535f80 RCX: 00007fae7d37dff9 [ 220.230368][ T9665] RDX: 0000000000000000 RSI: 0000000020002540 RDI: ffffffff80000800 [ 220.238331][ T9665] RBP: 00007fae7d3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 220.246287][ T9665] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000000 [ 220.254247][ T9665] R13: 0000000000000000 R14: 00007fae7d535f80 R15: 00007ffed9c1b068 [ 220.262236][ T9665] [ 220.266697][ T4452] usb 2-1: Service connection timeout for: 256 [ 220.304536][ T4452] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 220.320396][ T4452] ath9k_htc: Failed to initialize the device [ 220.320877][ T3650] EXT4-fs (loop2): unmounting filesystem. [ 220.327872][ T7981] usb 2-1: ath9k_htc: USB layer deinitialized [ 220.352080][ T6933] ocfs2: Unmounting device (7,4) on (node local) [ 220.532823][ T4218] r8152-cfgselector 4-1: Unknown version 0x0000 [ 220.541301][ T4218] r8152-cfgselector 4-1: USB disconnect, device number 11