last executing test programs: 4.186179158s ago: executing program 0 (id=7144): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x6, &(0x7f0000006680)) setrlimit(0x1, 0x0) 3.954790234s ago: executing program 0 (id=7148): ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000004, 0x7}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0) 3.836389739s ago: executing program 2 (id=7150): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000040)={0x15fff, 0x7, 0x7, 0x5, 0xffffffff, 0xc}) 3.661566504s ago: executing program 0 (id=7151): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x800007, 0x2, 0x201, "0200000025052e8bd9e466020100ff030000000000002a01000800", 0x38416761}) 3.358541721s ago: executing program 0 (id=7158): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f000000ac40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) 3.349431064s ago: executing program 2 (id=7159): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, 0x28) 3.288445596s ago: executing program 3 (id=7160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.133785328s ago: executing program 1 (id=7162): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d1722", 0x32}], 0x1}}], 0x2, 0x40) 2.913390726s ago: executing program 4 (id=7164): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/229, 0xe5}], 0x1, 0x100, 0x9) 2.859501187s ago: executing program 2 (id=7165): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) 2.795062989s ago: executing program 3 (id=7166): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) 2.738685288s ago: executing program 1 (id=7167): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffff2252, 0x101, &(0x7f0000004100)) kcmp(0xffffffffffffffff, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 2.593459418s ago: executing program 2 (id=7169): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0xf5, 0x0, &(0x7f0000000000)) 2.593163425s ago: executing program 4 (id=7170): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'user.', '$\x00'}) 2.490720137s ago: executing program 5 (id=7171): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) sendfile(r0, r0, 0x0, 0x200000) 2.41857226s ago: executing program 1 (id=7172): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.281720282s ago: executing program 4 (id=7173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x9cff}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x63}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.270664247s ago: executing program 2 (id=7174): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x34, 0x32, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x3, 0x0, 0x0, @binary="2f1c007957fdb73f"}]}, 0x34}}, 0xc000) 2.196080613s ago: executing program 3 (id=7175): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc02864cf, &(0x7f00000001c0)) 2.145451723s ago: executing program 5 (id=7176): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 2.01217358s ago: executing program 2 (id=7177): r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.902369355s ago: executing program 1 (id=7178): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x10}, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x140, 0x1a0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff, 0xffffffff, 0xff000000, 0xffffff00], 0x7fffffff, 0x0, {0xffffffff00000001}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0x9, 0x18, 0x8}, {0x1}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff, 0xffffff00, 0xff], 0x4e24, 0x4e23, 0x4e20, 0x4e21, 0x1, 0x4, 0x5, 0x0, 0x10000}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [], [], 'erspan0\x00', 'bond0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wlan1\x00', {0x0, 0x0, 0x7ff0000, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x428) 1.877169314s ago: executing program 5 (id=7179): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="76a6d101", 0x4}], 0x1}, 0x8040880) 1.743859428s ago: executing program 4 (id=7180): r0 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x1000, 0x3, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x24, 0x0, 0x1) 1.649235916s ago: executing program 1 (id=7181): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00008a7000/0x1000)=nil, 0xffffffa2, 0x0) 1.648419383s ago: executing program 3 (id=7182): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1.51072902s ago: executing program 5 (id=7183): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') write$binfmt_format(r0, 0x0, 0x0) 1.359698278s ago: executing program 4 (id=7184): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000009c0), 0x100, 0x0) pread64(r0, 0x0, 0x0, 0x7000000000) 1.272335771s ago: executing program 3 (id=7185): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x7fffffffffffffff) 1.228929027s ago: executing program 0 (id=7186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.228141391s ago: executing program 5 (id=7187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000021c0), 0x0}, 0x20) 13.272868ms ago: executing program 3 (id=7188): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000240)={[{@datacow}, {@nodatasum}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}, {@ssd}, {}, {@acl}, {@datacow}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=") renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 13.10347ms ago: executing program 4 (id=7189): sync() sync() 537.611µs ago: executing program 5 (id=7190): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$eJzs3c9OE10Yx/HfmSlteeHFUTAmxoVBia4M4Ma4aWKI1+BGI9KaEBqIiImysXFtvAD3bLwAL8KVMXGNK1deALsxZ3pKz7QzbYHQAfl+ktrO9Px5zsy0c56RZgTgwnq0sr93/7d9GClUKOmhFNi3bqok6aquVd9s7qzvNBv1QQ2FUlXJw0hJTdNXZm2zkVXV1ktqOJFdKmnaX4fTEcdx/KvoIFCkqnsOs94MpIr7dIZ+4bOs0rM80bPcCqXWGOM5i8yBDvRWM0XHAQAolmmf3wN3np928/cgkBbcad8////8v+B4T+aODooOoWDe+T/JsmJj9++l5K1uvmc06cp3ssSj9mPnYmW1j6zUBNOks8r+ZDGJJZh8ud5s3FvbatYDfVAtYfy8cE5STXWXs2ZF29/0fMa6tLK/sD+sdK6pZAwTdgzL3fhrNa/IbFanx93aozDfzHfzzET6rPrh/K8UG3/Mbk89nujGv5jX3Narp/Y5apfKGeVluxtK19MbduAow7yMRG5LxaHSFwiidJzlzFpl9dRqj24pryfXzmxmreUhteZsrS9ere7RnF/ztJlP5omZ1x991Yo3/w/s1l5Q/yczu5GkpDsyBo6nlJSM/FWtG5klg6OPBUfU3cYf9UIPNPP63e7GarPZ2B73CxvD2Du9mC8i9a7pHARnJcLjvbDfsf4aRY3t0nh6L59401XdTrGTmf4yld2N1YpfuD3Szgmxt8HOx3qE3jsX8IZGOMZvJRSmu9Pzy7wX/xPzD7NfHqad/3n5ymKS9Nh/ogHz9HjYtM1rcSkjN+heqv/Pa8m46/P5GdBUZgbX0mg5V1L31l3ptrdyf68yKOeKdEWH2fD5Z1b0Q8+5/g8AAAAAAAAAAAAAAAAAAHDejOPXGl53/B05AAAAAAAAAAAAAAAAAAAAAADHkH//36pO8f6/qd8BjHz/394bewI4kb8BAAD//+jIZ98=") mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0) 101.761µs ago: executing program 0 (id=7200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e076b48221c9f31687dbe9abc89b", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 0s ago: executing program 1 (id=7191): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x800) ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x5460, 0x0) kernel console output (not intermixed with test programs): 913.505340][T20082] loop2: detected capacity change from 0 to 65536 [ 913.605817][T20082] (syz.2.5842,20082,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 913.721215][T20082] (syz.2.5842,20082,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 913.738576][T20106] loop4: detected capacity change from 0 to 1024 [ 914.205238][T20111] loop2: detected capacity change from 0 to 1024 [ 914.766447][T20115] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 914.822291][T20116] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 914.897444][T20116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 915.473118][T20109] (syz.1.5851,20109,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 915.559008][T20109] (syz.1.5851,20109,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 915.718920][T20113] (syz.4.5853,20113,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 915.766453][T20113] (syz.4.5853,20113,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 916.030762][T20124] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 916.057180][T20125] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 916.106123][T20124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.123377][T20125] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.577095][T20130] set_capacity_and_notify: 6 callbacks suppressed [ 916.577124][T20130] loop1: detected capacity change from 0 to 256 [ 916.656601][T20130] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 916.708040][T20130] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 916.754759][T20130] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 916.787828][T20130] UDF-fs: Scanning with blocksize 512 failed [ 916.803550][T20118] loop2: detected capacity change from 0 to 32768 [ 916.835882][T20130] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 916.897119][T20118] (syz.2.5855,20118,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 916.915477][T20130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.952067][T20118] (syz.2.5855,20118,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 917.109094][T20137] loop3: detected capacity change from 0 to 256 [ 917.152564][T20137] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 917.249454][T20137] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 917.308022][T20137] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 917.327726][T20137] UDF-fs: Scanning with blocksize 512 failed [ 917.372062][T20137] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 917.420335][T20137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 917.774466][T20140] loop1: detected capacity change from 0 to 4096 [ 917.821214][T20140] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 917.858107][T20144] loop3: detected capacity change from 0 to 256 [ 917.905992][T20144] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 917.959995][T20144] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 918.006690][T20144] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 918.040656][T20144] UDF-fs: Scanning with blocksize 512 failed [ 918.079673][T20144] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 918.130697][T20144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 918.426941][T20146] loop1: detected capacity change from 0 to 512 [ 918.479314][T20146] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 918.515463][T20146] UDF-fs: Scanning with blocksize 512 failed [ 918.522536][T20148] loop3: detected capacity change from 0 to 2048 [ 918.544593][T20146] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 918.571086][T20148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 918.580994][T20146] UDF-fs: Scanning with blocksize 1024 failed [ 918.622032][T20146] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 918.658886][T20146] UDF-fs: Scanning with blocksize 2048 failed [ 918.714233][T20146] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 918.787714][T20146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 918.967310][T20150] loop3: detected capacity change from 0 to 512 [ 919.010874][T20150] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 919.057148][T20150] UDF-fs: Scanning with blocksize 512 failed [ 919.093156][T20150] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 919.139794][T20150] UDF-fs: Scanning with blocksize 1024 failed [ 919.177527][T20150] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 919.216804][T20150] UDF-fs: Scanning with blocksize 2048 failed [ 919.226902][T20152] loop1: detected capacity change from 0 to 512 [ 919.246175][T20150] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 919.298198][T20150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 919.707983][T20154] loop1: detected capacity change from 0 to 2048 [ 919.777834][T20154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 920.131404][T20158] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 920.199769][T20158] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 920.267821][T20158] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 920.302921][T20158] UDF-fs: Scanning with blocksize 512 failed [ 920.368629][T20158] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 920.402079][T20163] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 920.423411][T20158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 921.707383][T20170] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 921.732780][T20170] UDF-fs: Scanning with blocksize 512 failed [ 921.771264][T20170] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 921.810481][T20170] UDF-fs: Scanning with blocksize 1024 failed [ 921.844329][T20170] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 921.882418][T20170] UDF-fs: Scanning with blocksize 2048 failed [ 921.937856][T20170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 922.014543][T20183] set_capacity_and_notify: 10 callbacks suppressed [ 922.014573][T20183] loop4: detected capacity change from 0 to 512 [ 922.405336][T20172] loop0: detected capacity change from 0 to 32768 [ 922.572132][T20189] loop4: detected capacity change from 0 to 256 [ 922.698196][T20190] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 922.788113][T20185] loop2: detected capacity change from 0 to 8192 [ 923.043912][T20192] loop4: detected capacity change from 0 to 512 [ 923.429149][T20196] loop0: detected capacity change from 0 to 2048 [ 923.463499][T20198] loop4: detected capacity change from 0 to 128 [ 923.514390][T20198] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 923.563531][T20198] vxfs: WRONG superblock magic 7b318cb5 at 8 [ 923.607701][T20198] vxfs: can't find superblock. [ 923.937619][T20202] loop0: detected capacity change from 0 to 512 [ 924.139078][T20204] loop4: detected capacity change from 0 to 2048 [ 924.211532][T20204] loop4: p1 p2 p3 [ 924.623405][T20206] loop0: detected capacity change from 0 to 8192 [ 924.665546][T20206] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 924.699582][T20206] UDF-fs: Scanning with blocksize 512 failed [ 924.773561][T20206] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 924.818886][T20206] UDF-fs: Scanning with blocksize 1024 failed [ 924.848422][ T7639] udevd[7639]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 924.860879][ T6078] udevd[6078]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 924.878373][T20206] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 924.901452][T20206] UDF-fs: Scanning with blocksize 2048 failed [ 924.933004][T20210] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 924.968212][ T5628] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 924.981642][T20210] UDF-fs: Scanning with blocksize 512 failed [ 925.007180][T20206] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 925.048707][T20210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 925.066067][ T7639] udevd[7639]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 925.172089][ T5628] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 925.220100][ T5628] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 925.268693][ T5628] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 925.309507][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.343335][ T5628] usb 5-1: Product: syz [ 925.363488][ T5628] usb 5-1: Manufacturer: syz [ 925.388938][T20187] (syz.3.5886,20187,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 925.394752][ T5628] usb 5-1: SerialNumber: syz [ 925.443691][T20187] (syz.3.5886,20187,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 925.710832][ T5628] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 925.755208][ T5628] usb 5-1: MIDIStreaming interface descriptor not found [ 925.996605][ T5628] usb 5-1: USB disconnect, device number 49 [ 926.008683][T20220] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 926.054162][T20220] UDF-fs: Scanning with blocksize 512 failed [ 926.077318][T20220] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 926.110935][T20220] UDF-fs: Scanning with blocksize 1024 failed [ 926.155252][T20220] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 926.171285][ T6099] udevd[6099]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 926.199856][T20220] UDF-fs: Scanning with blocksize 2048 failed [ 926.225739][T20220] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 926.277281][T20220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 928.056812][T20215] set_capacity_and_notify: 3 callbacks suppressed [ 928.056841][T20215] loop0: detected capacity change from 0 to 65536 [ 928.160198][T20215] XFS (loop0): Mounting V5 Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591 [ 928.387053][T20228] loop2: detected capacity change from 0 to 32768 [ 928.415454][T20215] XFS (loop0): Ending clean mount [ 928.458974][T20228] (syz.2.5905,20228,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 928.511594][T20228] (syz.2.5905,20228,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 928.652686][ T5622] XFS (loop0): Unmounting Filesystem 3e7e19ec-4fa8-4c61-9f42-f376546f3591 [ 929.169921][T20224] loop3: detected capacity change from 0 to 65536 [ 929.238546][T20224] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 929.603179][T20250] loop1: detected capacity change from 0 to 2048 [ 929.677652][T20252] loop3: detected capacity change from 0 to 128 [ 929.721814][T20250] loop1: p2 p3 p7 [ 930.452874][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 930.454751][ T6542] udevd[6542]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 930.470149][ T6078] udevd[6078]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 931.527548][T20254] loop3: detected capacity change from 0 to 32768 [ 931.604425][T20254] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 931.676911][T20254] XFS (loop3): Log size 516 blocks too small, minimum size is 636 blocks [ 931.728838][T20254] XFS (loop3): AAIEEE! Log failed size checks. Abort! [ 931.833159][T20254] XFS (loop3): log mount failed [ 932.074637][T20281] netlink: 2120 bytes leftover after parsing attributes in process `syz.1.5921'. [ 932.423131][T20287] netlink: 'syz.1.5924': attribute type 11 has an invalid length. [ 932.463644][T20287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5924'. [ 932.956082][T20302] loop5: detected capacity change from 0 to 16 [ 932.995874][T20302] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 933.324801][ T5766] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 933.407699][T20313] loop5: detected capacity change from 0 to 256 [ 933.529739][ T5766] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 933.564674][ T5766] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.613781][ T5766] usb 2-1: config 0 has no interface number 0 [ 933.648582][ T5766] usb 2-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 933.716265][ T5766] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 933.728241][T20320] openvswitch: netlink: IP tunnel dst address not specified [ 933.762938][ T5766] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 933.780137][T20321] loop2: detected capacity change from 0 to 512 [ 933.791568][T20310] loop4: detected capacity change from 0 to 16384 [ 933.798367][ T5766] usb 2-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 933.819983][T20310] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 933.842668][ T5766] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 933.846021][T20321] EXT4-fs (loop2): orphan cleanup on readonly fs [ 933.862376][T20310] UDF-fs: Scanning with blocksize 512 failed [ 933.874261][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.885935][T20321] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 933.913392][T20310] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 933.930299][T20321] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 933.933113][ T5766] usb 2-1: Product: syz [ 933.953656][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 933.960204][ C0] EXT4-fs (loop2): initial error at time 2000525267: ext4_mb_generate_buddy:1314 [ 933.969404][ C0] EXT4-fs (loop2): last error at time 2000525267: ext4_mb_generate_buddy:1314 [ 933.982739][T20321] EXT4-fs error (device loop2): ext4_clear_blocks:874: inode #13: comm syz.2.5940: attempt to clear invalid blocks 2 len 1 [ 933.983107][T20310] UDF-fs: Scanning with blocksize 1024 failed [ 933.996070][T20321] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 934.022675][T20321] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.5940: invalid indirect mapped block 1819239214 (level 0) [ 934.048996][ T5766] usb 2-1: Manufacturer: syz [ 934.055670][ T5766] usb 2-1: SerialNumber: syz [ 934.061021][T20321] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 934.062964][T20321] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.5940: invalid indirect mapped block 1819239214 (level 1) [ 934.092470][T20321] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 934.095404][T20321] EXT4-fs (loop2): 1 truncate cleaned up [ 934.118373][T20310] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 934.165963][T20310] UDF-fs: Scanning with blocksize 2048 failed [ 934.167166][ T5766] usb 2-1: config 0 descriptor?? [ 934.190569][ T5766] symbolserial 2-1:0.175: symbol converter detected [ 934.201446][T20321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 934.228095][T20310] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 934.228564][ T5766] usb 2-1: symbol converter now attached to ttyUSB0 [ 934.316251][T20321] EXT4-fs error (device loop2): ext4_lookup:1781: inode #2: comm syz.2.5940: 'file1' linked to parent dir [ 934.525276][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.615561][ T5773] usb 2-1: USB disconnect, device number 59 [ 934.662523][ T5773] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 934.706928][ T5773] symbolserial 2-1:0.175: device disconnected [ 934.821913][T20336] warning: `syz.2.5948' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 935.195705][T20344] loop2: detected capacity change from 0 to 256 [ 935.230849][T20344] exfat: Deprecated parameter 'utf8' [ 935.253422][T20344] exfat: Deprecated parameter 'utf8' [ 935.273521][T20344] exfat: Deprecated parameter 'utf8' [ 935.333878][T20344] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 935.742893][T20356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5958'. [ 935.927159][T20330] loop5: detected capacity change from 0 to 32768 [ 935.979171][T20330] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 936.059914][T20330] XFS (loop5): Log size 516 blocks too small, minimum size is 636 blocks [ 936.090899][T20330] XFS (loop5): AAIEEE! Log failed size checks. Abort! [ 936.210996][T20330] XFS (loop5): log mount failed [ 936.351380][T20378] loop2: detected capacity change from 0 to 512 [ 936.494693][T20338] loop3: detected capacity change from 0 to 32768 [ 936.556535][T20338] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 936.752483][T20338] XFS (loop3): Ending clean mount [ 937.072840][ T5621] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 937.281637][T20404] loop5: detected capacity change from 0 to 128 [ 937.426233][T20404] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 937.440538][T20404] ext4 filesystem being mounted at /977/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 937.685037][ T5636] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 938.414203][T20433] xt_HMARK: proto mask must be zero with L3 mode [ 938.732318][T20444] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 938.801484][T20410] loop1: detected capacity change from 0 to 32768 [ 938.841548][T20410] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 939.035851][T20410] XFS (loop1): Ending clean mount [ 939.178988][ T5628] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 939.218984][ T5624] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 939.364980][ T5628] usb 1-1: unable to get BOS descriptor or descriptor too short [ 939.408430][ T5628] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.439184][ T5628] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.472125][ T5628] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 939.472756][T20470] loop3: detected capacity change from 0 to 256 [ 939.509068][ T5628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.542144][ T5628] usb 1-1: Product: syz [ 939.555043][ T5628] usb 1-1: Manufacturer: syz [ 939.583291][ T5628] usb 1-1: SerialNumber: syz [ 939.660353][ T5628] usb 1-1: selecting invalid altsetting 1 [ 939.681311][ T5766] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 939.689374][ T5628] usb 1-1: unit 6 not found! [ 939.706270][T20470] FAT-fs (loop3): Directory bread(block 64) failed [ 939.736385][T20470] FAT-fs (loop3): Directory bread(block 65) failed [ 939.760621][T20470] FAT-fs (loop3): Directory bread(block 66) failed [ 939.785167][T20470] FAT-fs (loop3): Directory bread(block 67) failed [ 939.806158][T20470] FAT-fs (loop3): Directory bread(block 68) failed [ 939.831167][T20470] FAT-fs (loop3): Directory bread(block 69) failed [ 939.848308][T20470] FAT-fs (loop3): Directory bread(block 70) failed [ 939.873581][ T5766] usb 3-1: Using ep0 maxpacket: 16 [ 939.878892][T20470] FAT-fs (loop3): Directory bread(block 71) failed [ 939.908571][ T5766] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 939.928737][T20470] FAT-fs (loop3): Directory bread(block 72) failed [ 939.946320][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.954533][T20470] FAT-fs (loop3): Directory bread(block 73) failed [ 939.976043][ T5766] usb 3-1: Product: syz [ 939.992725][ T5766] usb 3-1: Manufacturer: syz [ 940.005620][ T5766] usb 3-1: SerialNumber: syz [ 940.010845][T20470] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 940.026317][T20475] loop1: detected capacity change from 0 to 256 [ 940.035957][ T5766] usb 3-1: config 0 descriptor?? [ 940.045770][ T5766] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 940.090874][ T5628] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 940.273058][ T5766] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 940.289163][ T5628] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 940.294111][ T5766] visor 3-1:0.0: probe with driver visor failed with error -5 [ 940.338919][ T5628] usb 1-1: USB disconnect, device number 46 [ 940.493477][ T6542] udevd[6542]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 940.527338][ T5766] usb 3-1: USB disconnect, device number 46 [ 941.214868][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6014'. [ 941.232335][T20495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.258542][T20495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.333013][T20495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.364000][T20495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.624322][T20507] loop4: detected capacity change from 0 to 256 [ 941.760447][T20507] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 941.799756][T20507] FAT-fs (loop4): Filesystem has been set read-only [ 941.853837][T20471] loop5: detected capacity change from 0 to 65536 [ 941.927755][T20471] XFS (loop5): Deprecated V4 format (crc=0) not supported by kernel. [ 942.023893][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.032202][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.406702][ T5628] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 942.457391][T20532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 942.587874][ T5628] usb 4-1: Using ep0 maxpacket: 32 [ 942.617851][ T5628] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 942.659805][T20537] openvswitch: netlink: IP tunnel dst address not specified [ 942.679621][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 942.734062][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 942.768909][ T5628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 942.816199][ T5628] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 942.851153][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.885977][ T5628] usb 4-1: Product: syz [ 942.905761][ T5628] usb 4-1: Manufacturer: syz [ 942.928793][ T5628] usb 4-1: SerialNumber: syz [ 942.986248][ T5628] usb 4-1: config 0 descriptor?? [ 943.121788][T20553] loop5: detected capacity change from 0 to 256 [ 943.261023][ T5766] usb 4-1: USB disconnect, device number 51 [ 943.264151][T20553] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 943.324764][T20553] FAT-fs (loop5): Filesystem has been set read-only [ 943.666217][T20569] loop0: detected capacity change from 0 to 128 [ 944.539903][T20599] binder: 20597:20599 ioctl c018620c 200000000100 returned -22 [ 944.555309][T20594] loop3: detected capacity change from 0 to 1024 [ 944.594992][T20594] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 945.030089][T20618] loop5: detected capacity change from 0 to 512 [ 945.087873][T20618] EXT4-fs (loop5): orphan cleanup on readonly fs [ 945.148328][T20618] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 945.229818][T20618] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 945.248601][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 945.255078][ C0] EXT4-fs (loop5): initial error at time 2000525277: ext4_mb_generate_buddy:1314 [ 945.264269][ C0] EXT4-fs (loop5): last error at time 2000525277: ext4_mb_generate_buddy:1314 [ 945.307934][T20618] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #13: comm syz.5.6070: attempt to clear invalid blocks 2 len 1 [ 945.322163][T20618] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 945.322698][T20618] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.6070: invalid indirect mapped block 1819239214 (level 0) [ 945.447399][T20618] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 945.448128][T20618] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.6070: invalid indirect mapped block 1819239214 (level 1) [ 945.528539][T20618] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 945.529538][T20618] EXT4-fs (loop5): 1 truncate cleaned up [ 945.604539][T20618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 945.757431][T20618] EXT4-fs error (device loop5): ext4_lookup:1781: inode #2: comm syz.5.6070: 'file1' linked to parent dir [ 945.876683][T20638] loop0: detected capacity change from 0 to 1024 [ 945.925697][ T5636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.015322][T20638] hfsplus: invalid length 256 has been corrected to 255 [ 946.045510][T20638] hfsplus: invalid length 256 has been corrected to 255 [ 946.132226][T20652] xt_HMARK: proto mask must be zero with L3 mode [ 946.156575][T20638] hfsplus: invalid length 256 has been corrected to 255 [ 946.208552][T20638] hfsplus: invalid length 256 has been corrected to 255 [ 946.312680][T20638] hfsplus: invalid length 256 has been corrected to 255 [ 946.431078][T20638] hfsplus: xattr search failed [ 946.444188][T20661] netlink: 'syz.4.6089': attribute type 21 has an invalid length. [ 946.451644][T20638] hfsplus: invalid length 256 has been corrected to 255 [ 946.459092][T20658] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 946.474698][T20661] netlink: 'syz.4.6089': attribute type 1 has an invalid length. [ 946.494659][T20659] loop1: detected capacity change from 0 to 256 [ 946.501196][T20661] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6089'. [ 946.535034][T20664] sctp: [Deprecated]: syz.2.6091 (pid 20664) Use of int in max_burst socket option. [ 946.535034][T20664] Use struct sctp_assoc_value instead [ 946.716414][T20666] loop3: detected capacity change from 0 to 256 [ 946.738953][ T1160] hfsplus: invalid length 256 has been corrected to 255 [ 946.761285][T20668] loop5: detected capacity change from 0 to 256 [ 947.214766][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6100'. [ 947.245604][T20681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.303041][T20681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.410823][T20681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.454965][T20681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.504878][T20688] netlink: 'syz.4.6104': attribute type 4 has an invalid length. [ 947.535058][T20688] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6104'. [ 947.958793][T20707] loop2: detected capacity change from 0 to 256 [ 948.167830][T20713] loop0: detected capacity change from 0 to 8 [ 949.942734][T20771] loop4: detected capacity change from 0 to 1764 [ 950.109874][T20778] loop3: detected capacity change from 0 to 1024 [ 950.622083][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6153'. [ 950.756682][T20792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.797489][T20792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.860052][T20792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.878318][T20802] loop3: detected capacity change from 0 to 256 [ 950.887938][T20792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.640188][ T5766] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 951.758999][T20819] loop4: detected capacity change from 0 to 1024 [ 951.793979][T20819] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 951.896622][T20822] netlink: 'syz.0.6167': attribute type 5 has an invalid length. [ 951.899624][ T5766] usb 6-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 951.957312][ T5766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.966075][T20822] ip6erspan0: entered promiscuous mode [ 952.042317][ T5766] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 952.263472][T20832] netlink: 'syz.2.6172': attribute type 21 has an invalid length. [ 952.466984][ T5766] gspca_sn9c20x: Write register 1001 failed -71 [ 952.479039][ T5766] gspca_sn9c20x: Device initialization failed [ 952.499061][ T5766] gspca_sn9c20x 6-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 952.551028][ T5766] usb 6-1: USB disconnect, device number 64 [ 952.775823][T20849] loop4: detected capacity change from 0 to 256 [ 953.000157][T20856] loop3: detected capacity change from 0 to 128 [ 953.050464][T20856] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 953.112647][T20856] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 953.129556][T20858] loop4: detected capacity change from 0 to 1024 [ 953.152172][T20858] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 953.176239][T20858] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 953.195704][T20862] loop2: detected capacity change from 0 to 1024 [ 953.230724][T20858] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #32: comm syz.4.6185: iget: special inode unallocated [ 953.257763][T20865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6189'. [ 953.289805][T20858] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 953.293081][T20858] EXT4-fs (loop4): no journal found [ 953.302270][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 953.302303][ C1] EXT4-fs (loop4): initial error at time 2000525285: ext4_get_journal_inode:5896: inode 32 [ 953.302360][ C1] EXT4-fs (loop4): last error at time 2000525285: ext4_get_journal_inode:5896: inode 32 [ 953.418284][T20858] EXT4-fs (loop4): can't get journal size [ 953.452690][T20858] EXT4-fs (loop4): filesystem is read-only [ 953.485436][T20858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 953.539053][T20871] cgroup: Unexpected value for 'nofavordynmods' [ 953.734845][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 953.863143][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.961751][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 953.996566][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.019216][T20883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6196'. [ 954.031469][T20882] loop3: detected capacity change from 0 to 256 [ 954.039548][ T10] usb 2-1: Product: syz [ 954.049913][ T10] usb 2-1: Manufacturer: syz [ 954.061960][T20883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.070901][ T10] usb 2-1: SerialNumber: syz [ 954.090140][T20883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.118925][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 954.137839][T20883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.200564][T20883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.242886][T20882] FAT-fs (loop3): Directory bread(block 64) failed [ 954.277028][T20882] FAT-fs (loop3): Directory bread(block 65) failed [ 954.311315][T20882] FAT-fs (loop3): Directory bread(block 66) failed [ 954.326770][T20882] FAT-fs (loop3): Directory bread(block 67) failed [ 954.339721][ T5753] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 954.351489][T20882] FAT-fs (loop3): Directory bread(block 68) failed [ 954.360103][T20885] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 954.373079][T20882] FAT-fs (loop3): Directory bread(block 69) failed [ 954.402418][T20882] FAT-fs (loop3): Directory bread(block 70) failed [ 954.421751][T20882] FAT-fs (loop3): Directory bread(block 71) failed [ 954.436086][T20882] FAT-fs (loop3): Directory bread(block 72) failed [ 954.439652][T20891] netlink: 'syz.4.6200': attribute type 1 has an invalid length. [ 954.443500][T20882] FAT-fs (loop3): Directory bread(block 73) failed [ 954.535084][T20891] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6200'. [ 954.615055][T20882] syz.3.6207: attempt to access beyond end of device [ 954.615055][T20882] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 954.644111][T20882] syz.3.6207: attempt to access beyond end of device [ 954.644111][T20882] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 954.697019][ T30] audit: type=1800 audit(2000525286.645:13): pid=20882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6207" name="file0" dev="loop3" ino=1048629 res=0 errno=0 [ 955.043219][ T10] usb 2-1: USB disconnect, device number 60 [ 955.323020][T20911] netlink: 'syz.0.6222': attribute type 7 has an invalid length. [ 955.416619][T20913] loop4: detected capacity change from 0 to 1024 [ 955.467636][T20913] hfsplus: invalid length 256 has been corrected to 255 [ 955.493923][T20913] hfsplus: invalid length 256 has been corrected to 255 [ 955.510115][T20916] loop2: detected capacity change from 0 to 1024 [ 955.532696][ T5753] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 955.563574][T20913] hfsplus: invalid length 256 has been corrected to 255 [ 955.563715][T20913] hfsplus: invalid length 256 has been corrected to 255 [ 955.563904][T20913] hfsplus: invalid length 256 has been corrected to 255 [ 955.566225][ T5753] ath9k_htc: Failed to initialize the device [ 955.571142][T20913] hfsplus: xattr search failed [ 955.572466][T20913] hfsplus: invalid length 256 has been corrected to 255 [ 955.575136][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 955.677327][T20916] hfsplus: request for non-existent node 33423360 in B*Tree [ 955.687689][T20916] hfsplus: request for non-existent node 33423360 in B*Tree [ 955.721245][ T13] hfsplus: invalid length 256 has been corrected to 255 [ 955.897860][ T30] audit: type=1326 audit(2000525287.777:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20925 comm="syz.1.6217" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cb9ce59 code=0x7ffc0000 [ 955.904822][ T30] audit: type=1326 audit(2000525287.777:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20925 comm="syz.1.6217" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cb9ce59 code=0x7ffc0000 [ 955.923903][ T30] audit: type=1326 audit(2000525287.787:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20925 comm="syz.1.6217" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cb9ce59 code=0x7ffc0000 [ 955.924081][ T30] audit: type=1326 audit(2000525287.796:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20925 comm="syz.1.6217" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe28cb9ce59 code=0x7ffc0000 [ 955.924160][ T30] audit: type=1326 audit(2000525287.796:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20925 comm="syz.1.6217" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fe28cb9ce59 code=0x7ffc0000 [ 955.980132][ T30] audit: type=1326 audit(2000525287.862:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20925 comm="syz.1.6217" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe28cb5d68e code=0x7ffc0000 [ 955.981713][ T30] audit: type=1326 audit(2000525287.862:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20925 comm="syz.1.6217" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe28cb5d68e code=0x7ffc0000 [ 955.988139][ T30] audit: type=1326 audit(2000525287.862:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20925 comm="syz.1.6217" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe28cb5d68e code=0x7ffc0000 [ 955.988241][ T30] audit: type=1326 audit(2000525287.862:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20925 comm="syz.1.6217" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe28cb5d68e code=0x7ffc0000 [ 956.247371][T20933] Driver unsupported XDP return value 0 on prog (id 387) dev N/A, expect packet loss! [ 956.514349][ T5780] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 956.705242][ T5780] usb 4-1: Using ep0 maxpacket: 16 [ 956.709268][ T5780] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 956.709319][ T5780] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 956.709356][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 956.709394][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 956.727855][ T5780] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 956.727900][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.727930][ T5780] usb 4-1: Product: syz [ 956.727952][ T5780] usb 4-1: Manufacturer: syz [ 956.727974][ T5780] usb 4-1: SerialNumber: syz [ 956.730703][ T5780] usb 4-1: config 0 descriptor?? [ 957.074181][ T5780] appledisplay 4-1:0.0: Error while getting initial brightness: -90 [ 957.076344][ T5780] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -90 [ 957.324607][T20957] loop2: detected capacity change from 0 to 16 [ 957.330790][ T5780] usb 4-1: USB disconnect, device number 52 [ 957.434748][T20957] erofs (device loop2): mounted with root inode @ nid 36. [ 957.515648][T20958] loop4: detected capacity change from 0 to 2048 [ 957.567250][T20958] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 957.639513][T20958] syz.4.6233: attempt to access beyond end of device [ 957.639513][T20958] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 957.662671][T20963] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 957.695837][T20962] loop1: detected capacity change from 0 to 2048 [ 957.722906][T20962] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 957.816188][T20958] syz.4.6233: attempt to access beyond end of device [ 957.816188][T20958] loop4: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 957.847594][T20970] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 957.881801][T20958] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0) [ 957.915727][T20969] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 958.108302][T20962] syz.1.6235 (20962) used greatest stack depth: 19704 bytes left [ 958.422293][T20986] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6244'. [ 958.721680][T20993] veth0_to_team: entered promiscuous mode [ 958.748606][T20991] loop5: detected capacity change from 0 to 1024 [ 958.777807][T20991] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 958.812332][T20991] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 958.830088][T20999] syz.4.6252 (20999): /proc/20998/oom_adj is deprecated, please use /proc/20998/oom_score_adj instead. [ 958.862478][T20991] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: inode #32: comm syz.5.6248: iget: special inode unallocated [ 958.912681][T20991] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 958.913065][T20991] EXT4-fs (loop5): no journal found [ 958.922494][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 958.922527][ C0] EXT4-fs (loop5): initial error at time 2000525290: ext4_get_journal_inode:5896: inode 32 [ 958.922582][ C0] EXT4-fs (loop5): last error at time 2000525290: ext4_get_journal_inode:5896: inode 32 [ 959.072910][T20991] EXT4-fs (loop5): can't get journal size [ 959.107639][T20991] EXT4-fs (loop5): filesystem is read-only [ 959.143950][T21009] xt_l2tp: invalid flags combination: c [ 959.169413][T20991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 959.635792][ T5636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.092681][T21031] loop3: detected capacity change from 0 to 1024 [ 960.157725][T21031] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 960.176260][T21034] netlink: 'syz.2.6268': attribute type 5 has an invalid length. [ 960.187094][T21035] netlink: 'syz.0.6281': attribute type 1 has an invalid length. [ 960.230901][T21035] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6281'. [ 960.324810][T21034] ip6erspan0: entered promiscuous mode [ 960.560082][T21045] loop4: detected capacity change from 0 to 64 [ 961.138899][ T5766] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 961.328281][ T5766] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 961.372103][T21071] loop4: detected capacity change from 0 to 1024 [ 961.376484][ T5766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.441516][ T5766] usb 6-1: Product: syz [ 961.460609][ T5766] usb 6-1: Manufacturer: syz [ 961.479818][ T5766] usb 6-1: SerialNumber: syz [ 961.515853][ T5766] usb 6-1: config 0 descriptor?? [ 961.556590][ T5766] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 961.585740][ T5766] dvb-usb: bulk message failed: -22 (4/0) [ 961.601326][T21077] loop0: detected capacity change from 0 to 1024 [ 961.608579][T21079] x_tables: unsorted underflow at hook 3 [ 961.609637][ T5766] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 961.651441][ T5766] dvb-usb: bulk message failed: -22 (5/0) [ 961.668488][ T5766] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 961.735801][ T5766] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 961.814801][ T5766] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 961.877272][ T5766] usb 6-1: USB disconnect, device number 65 [ 962.057330][T21081] loop3: detected capacity change from 0 to 2048 [ 962.078423][T21081] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 962.149993][T21086] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 962.150264][T21081] syz.3.6293: attempt to access beyond end of device [ 962.150264][T21081] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 962.383721][T21081] syz.3.6293: attempt to access beyond end of device [ 962.383721][T21081] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 962.423060][T21081] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 962.603018][T21074] loop1: detected capacity change from 0 to 32768 [ 962.654488][T21074] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6288 (21074) [ 962.723007][T21074] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 962.768409][T21074] BTRFS info (device loop1): using crc32c checksum algorithm [ 962.798547][T21095] loop4: detected capacity change from 0 to 128 [ 962.872498][T21095] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 962.971799][T21074] BTRFS info (device loop1): allowing degraded mounts [ 962.978057][T21095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 963.034994][T21074] BTRFS info (device loop1): enabling ssd optimizations [ 963.085290][T21074] BTRFS info (device loop1): turning on async discard [ 963.121455][T21074] BTRFS info (device loop1): enabling free space tree [ 963.155470][T21074] BTRFS info (device loop1): force zlib compression, level 3 [ 963.688934][ T5624] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 963.729635][T21130] netdevsim netdevsim3: Direct firmware load for / [ 963.729635][T21130] failed with error -2 [ 963.755197][T21130] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 963.755197][T21130] [ 964.051096][T21137] loop5: detected capacity change from 0 to 2048 [ 964.084570][T21137] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 964.133007][T21139] netlink: 'syz.1.6308': attribute type 5 has an invalid length. [ 964.198318][T21137] syz.5.6311: attempt to access beyond end of device [ 964.198318][T21137] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 964.201122][T21144] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 964.245331][T21139] ip6erspan0: entered promiscuous mode [ 964.349112][T21137] syz.5.6311: attempt to access beyond end of device [ 964.349112][T21137] loop5: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 964.398272][T21137] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=0) [ 965.047846][T21160] loop5: detected capacity change from 0 to 128 [ 965.151027][T21160] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 965.223875][T21160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 965.379679][T21172] macvtap0: entered promiscuous mode [ 966.098028][T21190] loop4: detected capacity change from 0 to 2048 [ 966.130872][T21190] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 966.152272][T21197] loop1: detected capacity change from 0 to 64 [ 966.166677][T21190] NILFS (loop4): mounting unchecked fs [ 966.254636][T21190] NILFS (loop4): recovery complete [ 966.292108][T21198] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 966.303637][T21197] Trying to free block not in datazone [ 966.663606][ T10] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 966.726687][T21213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6343'. [ 966.850693][ T10] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 966.887512][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.936413][ T10] usb 1-1: Product: syz [ 966.955170][ T10] usb 1-1: Manufacturer: syz [ 966.977222][ T10] usb 1-1: SerialNumber: syz [ 967.015839][ T10] usb 1-1: config 0 descriptor?? [ 967.025566][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 967.029697][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 967.029746][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 967.029879][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 967.029917][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 967.040549][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 967.053331][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 967.303754][T17591] usb 1-1: USB disconnect, device number 47 [ 967.317949][T21225] loop4: detected capacity change from 0 to 2048 [ 967.324060][T21225] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 967.361303][T21230] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 967.635253][T21235] vxcan3: entered promiscuous mode [ 967.635317][T21235] vxcan3: entered allmulticast mode [ 968.257831][T21253] loop0: detected capacity change from 0 to 1024 [ 968.363906][T21253] hfsplus: request for non-existent node 33423360 in B*Tree [ 968.408933][T21253] hfsplus: request for non-existent node 33423360 in B*Tree [ 968.440360][T21262] loop2: detected capacity change from 0 to 8 [ 969.159582][T21286] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 969.167390][T21285] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6393'. [ 969.190354][T21288] netlink: 'syz.5.6381': attribute type 5 has an invalid length. [ 969.254571][T21288] ip6erspan0: entered promiscuous mode [ 969.826657][ T5773] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 969.935726][T21317] loop1: detected capacity change from 0 to 64 [ 969.967603][T21318] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 970.022505][ T5773] usb 1-1: Using ep0 maxpacket: 32 [ 970.054738][ T5773] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 970.091449][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 970.122173][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 970.155728][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 970.210340][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 970.247930][ T5773] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 970.278047][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.300204][ T5773] usb 1-1: Product: syz [ 970.313614][ T5773] usb 1-1: Manufacturer: syz [ 970.333132][ T5773] usb 1-1: SerialNumber: syz [ 970.369797][ T5773] usb 1-1: config 0 descriptor?? [ 970.457644][T17591] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 970.591877][T21331] loop1: detected capacity change from 0 to 4096 [ 970.629136][T21331] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 970.638780][T17591] usb 6-1: Using ep0 maxpacket: 8 [ 970.658011][T17591] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.683901][T21331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.709263][T17591] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 970.790853][T17591] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 970.833535][ T5773] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 970.840612][T21341] netlink: 'syz.2.6405': attribute type 1 has an invalid length. [ 970.845521][ T5773] input input57: Device does not respond to id packet M [ 970.861680][T21343] netlink: 'syz.3.6406': attribute type 11 has an invalid length. [ 970.869875][T21341] netlink: 932 bytes leftover after parsing attributes in process `syz.2.6405'. [ 970.879437][ T5773] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 970.894014][ T5773] input input57: Device does not respond to id packet P [ 970.910333][T17591] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 970.919614][ T5773] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 970.919676][ T5773] input input57: Device does not respond to id packet B [ 970.920079][ T5773] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 970.961051][T17591] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.984874][T17591] usb 6-1: Product: syz [ 971.007824][ T5773] input input57: Device does not respond to id packet N [ 971.008518][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.028157][T17591] usb 6-1: Manufacturer: syz [ 971.040689][ T5773] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 971.041591][T17591] usb 6-1: SerialNumber: syz [ 971.073806][ T5773] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 971.100209][ T5773] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 971.110273][T17591] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 971.117722][T17591] cdc_ncm 6-1:1.0: bind() failure [ 971.131768][ T5773] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 971.189502][ T5773] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input57 [ 971.292741][ T5773] usb 1-1: USB disconnect, device number 48 [ 971.320870][T17591] cdc_mbim 6-1:1.1: CDC Union missing and no IAD found [ 971.355751][T17591] cdc_mbim 6-1:1.1: bind() failure [ 971.378185][T21351] loop1: detected capacity change from 0 to 1024 [ 971.447404][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6412'. [ 971.480984][T21354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.507136][T21354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.538313][T21354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.545340][ T10] usb 6-1: USB disconnect, device number 66 [ 971.567525][T21354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.771092][T21359] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 971.860853][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 971.860880][ T30] audit: type=1326 audit(2000525302.722:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21362 comm="syz.0.6415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 971.952305][ T30] audit: type=1326 audit(2000525302.722:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21362 comm="syz.0.6415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 972.024044][ T30] audit: type=1326 audit(2000525302.722:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21362 comm="syz.0.6415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 972.125164][ T30] audit: type=1326 audit(2000525302.750:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21362 comm="syz.0.6415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 972.151773][T21372] loop4: detected capacity change from 0 to 256 [ 972.257136][ T30] audit: type=1326 audit(2000525302.750:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21362 comm="syz.0.6415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 972.347594][ T30] audit: type=1326 audit(2000525302.750:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21362 comm="syz.0.6415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 972.378163][T21375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6421'. [ 972.406117][T21372] FAT-fs (loop4): Directory bread(block 64) failed [ 972.421826][ T30] audit: type=1326 audit(2000525302.760:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21362 comm="syz.0.6415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 972.448157][T21372] FAT-fs (loop4): Directory bread(block 65) failed [ 972.475406][T21372] FAT-fs (loop4): Directory bread(block 66) failed [ 972.480269][ T30] audit: type=1326 audit(2000525302.760:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21362 comm="syz.0.6415" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 972.509704][T21372] FAT-fs (loop4): Directory bread(block 67) failed [ 972.545988][T21372] FAT-fs (loop4): Directory bread(block 68) failed [ 972.575966][T21372] FAT-fs (loop4): Directory bread(block 69) failed [ 972.582651][T21372] FAT-fs (loop4): Directory bread(block 70) failed [ 972.597538][T21372] FAT-fs (loop4): Directory bread(block 71) failed [ 972.618496][T21372] FAT-fs (loop4): Directory bread(block 72) failed [ 972.652489][T21372] FAT-fs (loop4): Directory bread(block 73) failed [ 972.708763][T21372] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 973.071301][T21397] tmpfs: Bad value for 'mpol' [ 973.236799][T21400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6431'. [ 973.295020][T21400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.323752][T21400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.363045][T21400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.396068][T21400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.626766][T21408] gtp0: entered promiscuous mode [ 973.660078][T21412] loop3: detected capacity change from 0 to 1024 [ 973.675753][T21408] gtp0: entered allmulticast mode [ 973.989977][T21418] loop1: detected capacity change from 0 to 512 [ 974.030774][T21418] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 974.080317][T21416] loop0: detected capacity change from 0 to 4096 [ 974.103310][T21416] EXT4-fs: Ignoring removed bh option [ 974.109688][T21418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.122978][T21418] ext4 filesystem being mounted at /1124/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.223451][T21416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.241871][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.291917][T21429] loop2: detected capacity change from 0 to 1024 [ 974.638860][T21434] loop5: detected capacity change from 0 to 64 [ 974.859180][T21437] netdevsim netdevsim2: Direct firmware load for / [ 974.859180][T21437] failed with error -2 [ 974.928733][T21437] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 974.928733][T21437] [ 974.935613][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.965832][T21439] vivid-007: ================= START STATUS ================= [ 975.020323][T21439] vivid-007: Generate PTS: true [ 975.028193][T21441] netlink: zone id is out of range [ 975.033888][T21439] vivid-007: Generate SCR: true [ 975.049687][T21439] tpg source WxH: 320x240 (Y'CbCr) [ 975.071407][T21439] tpg field: 1 [ 975.099283][T21439] tpg crop: (0,0)/320x240 [ 975.120748][T21439] tpg compose: (0,0)/320x240 [ 975.143057][T21439] tpg colorspace: 8 [ 975.159081][T21439] tpg transfer function: 0/0 [ 975.187160][T21439] tpg Y'CbCr encoding: 0/0 [ 975.206703][T21439] tpg quantization: 0/0 [ 975.228433][T21439] tpg RGB range: 0/2 [ 975.246500][T21441] netlink: set zone limit has 4 unknown bytes [ 975.254809][T21439] vivid-007: ================== END STATUS ================== [ 975.515881][T21452] loop3: detected capacity change from 0 to 764 [ 975.531638][T21420] loop4: detected capacity change from 0 to 32768 [ 975.684228][ T10] usb 6-1: new low-speed USB device number 67 using dummy_hcd [ 975.882145][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 975.942156][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 976.013097][ T10] usb 6-1: string descriptor 0 read error: -22 [ 976.036009][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 976.081697][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.138743][ T10] usb 6-1: low speed audio streaming not supported [ 976.150044][T21467] loop3: detected capacity change from 0 to 8 [ 976.173029][ T10] usb 6-1: low speed audio streaming not supported [ 976.358111][T17591] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 976.444993][ T10] usb 6-1: USB disconnect, device number 67 [ 976.461365][T21472] loop2: detected capacity change from 0 to 256 [ 976.583524][T17591] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 976.624755][T17591] usb 5-1: config 0 has no interface number 0 [ 976.647771][T17591] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 976.662693][T21472] FAT-fs (loop2): Directory bread(block 64) failed [ 976.683790][T17591] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.696933][T21472] FAT-fs (loop2): Directory bread(block 65) failed [ 976.720943][T21472] FAT-fs (loop2): Directory bread(block 66) failed [ 976.743358][T17591] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 976.764832][T21472] FAT-fs (loop2): Directory bread(block 67) failed [ 976.771430][T17591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.789829][T21472] FAT-fs (loop2): Directory bread(block 68) failed [ 976.797684][T17591] usb 5-1: Product: syz [ 976.803972][T17591] usb 5-1: Manufacturer: syz [ 976.816406][T21472] FAT-fs (loop2): Directory bread(block 69) failed [ 976.830755][T17591] usb 5-1: SerialNumber: syz [ 976.842377][T21472] FAT-fs (loop2): Directory bread(block 70) failed [ 976.852165][T21472] FAT-fs (loop2): Directory bread(block 71) failed [ 976.859551][T21472] FAT-fs (loop2): Directory bread(block 72) failed [ 976.866414][T21472] FAT-fs (loop2): Directory bread(block 73) failed [ 976.874412][T17591] usb 5-1: config 0 descriptor?? [ 976.884773][T21462] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 976.907160][T17591] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 976.928724][T21472] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 976.945026][T17591] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 977.241882][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 977.476490][ T5773] usb 5-1: USB disconnect, device number 50 [ 977.522954][T21495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6491'. [ 977.557097][ T5773] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 977.599651][ T5773] cyberjack 5-1:0.69: device disconnected [ 978.512328][T21528] netlink: 'syz.5.6493': attribute type 3 has an invalid length. [ 978.543670][T21528] netlink: 'syz.5.6493': attribute type 3 has an invalid length. [ 978.586792][T21528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6493'. [ 978.607816][T21532] ipvlan0: entered promiscuous mode [ 978.637852][T21532] ipvlan0: entered allmulticast mode [ 978.659710][T21532] veth0_vlan: entered allmulticast mode [ 979.781797][T21579] gtp0: entered promiscuous mode [ 979.806145][T21579] gtp0: entered allmulticast mode [ 979.822076][T21578] loop1: detected capacity change from 0 to 1024 [ 980.281083][T21594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6525'. [ 980.335595][T21599] IPv6: NLM_F_CREATE should be specified when creating new route [ 980.946923][T21616] gtp0: entered promiscuous mode [ 980.968963][T21623] netlink: 'syz.3.6539': attribute type 1 has an invalid length. [ 980.979115][T21616] gtp0: entered allmulticast mode [ 980.989387][T21620] loop5: detected capacity change from 0 to 1024 [ 981.002989][T21623] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6539'. [ 981.030748][T21623] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6539'. [ 981.069386][T21623] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6539'. [ 981.559877][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 981.742895][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 981.744915][ T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 981.744958][ T10] usb 3-1: config 0 has no interface number 0 [ 981.745006][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 981.745046][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 981.748547][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 981.748594][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.748633][ T10] usb 3-1: Product: syz [ 981.748663][ T10] usb 3-1: Manufacturer: syz [ 981.748693][ T10] usb 3-1: SerialNumber: syz [ 981.771671][ T10] usb 3-1: config 0 descriptor?? [ 981.772650][T21631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 981.772823][T21631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 982.016284][T21631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 982.016473][T21631] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 982.150098][T21624] loop1: detected capacity change from 0 to 32768 [ 982.255144][T21624] jfs_strtoUCS: char2uni returned -22. [ 982.255196][T21624] charset = cp857, char = 0xd5 [ 982.256481][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 982.256526][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 982.256783][ T10] asix 3-1:0.251: probe with driver asix failed with error -5 [ 982.264579][ T10] usb 3-1: USB disconnect, device number 47 [ 982.826975][ T5780] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 983.046281][ T5780] usb 6-1: Using ep0 maxpacket: 32 [ 983.089560][ T5780] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 983.131588][ T5780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.173099][ T5780] usb 6-1: Product: syz [ 983.190805][ T5780] usb 6-1: Manufacturer: syz [ 983.211351][ T5780] usb 6-1: SerialNumber: syz [ 983.250610][ T5780] usb 6-1: config 0 descriptor?? [ 983.291024][ T5780] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 983.733867][ T5780] gspca_topro: reg_w err -71 [ 983.771956][ T5780] gspca_topro: Sensor soi763a [ 983.865519][ T5780] usb 6-1: USB disconnect, device number 68 [ 984.104413][ T5773] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 984.113864][ T10] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 984.288679][ T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 984.310177][ T5773] usb 5-1: Using ep0 maxpacket: 32 [ 984.320718][ T10] usb 2-1: config 0 has no interface number 0 [ 984.325395][ T5773] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 984.343794][ T10] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 984.355361][ T5773] usb 5-1: config 0 has no interface number 0 [ 984.355434][ T5773] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 984.358430][ T5773] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 984.378246][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 984.393506][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 984.407478][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 984.417650][ T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 984.423216][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.425846][ T10] usb 2-1: Product: syz [ 984.425877][ T10] usb 2-1: SerialNumber: syz [ 984.448299][ T5773] usb 5-1: Product: syz [ 984.457154][ T5773] usb 5-1: Manufacturer: syz [ 984.468315][ T5773] usb 5-1: SerialNumber: syz [ 984.478073][ T10] usb 2-1: config 0 descriptor?? [ 984.486308][ T5773] usb 5-1: config 0 descriptor?? [ 984.493654][ T10] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 984.509044][ T5773] redrat3 5-1:0.83: Couldn't find all endpoints [ 984.513117][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input58 [ 984.716096][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 984.719969][ T5773] usb 5-1: USB disconnect, device number 51 [ 984.941811][ T5773] usb 2-1: USB disconnect, device number 61 [ 984.960211][ T5773] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 985.705939][T21714] : entered promiscuous mode [ 985.758607][T21709] netlink: 'syz.3.6575': attribute type 5 has an invalid length. [ 985.819685][T21721] xt_TPROXY: Can be used only with -p tcp or -p udp [ 985.851553][T21709] ip6erspan0: entered promiscuous mode [ 986.102288][T21724] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 986.959876][T21716] loop4: detected capacity change from 0 to 32768 [ 987.048964][T21716] JBD2: Ignoring recovery information on journal [ 987.175270][T21749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6593'. [ 987.277269][T21716] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 987.551534][T21716] (syz.4.6580,21716,1):ocfs2_check_dir_entry:334 ERROR: bad entry in directory #65: directory entry overrun - offset=32, inode=17057, rec_len=280, name_len=10 [ 987.650402][T21716] (syz.4.6580,21716,1):ocfs2_prepare_dir_for_insert:4342 ERROR: status = -2 [ 987.676806][T21716] (syz.4.6580,21716,1):ocfs2_mknod:302 ERROR: status = -2 [ 987.698721][T21716] (syz.4.6580,21716,1):ocfs2_mknod:506 ERROR: status = -2 [ 987.944537][ T5634] ocfs2: Unmounting device (7,4) on (node local) [ 988.834889][T21788] netlink: 'syz.4.6601': attribute type 5 has an invalid length. [ 988.932215][T21788] ip6erspan0: entered promiscuous mode [ 989.034519][T21798] loop2: detected capacity change from 0 to 256 [ 989.068255][T21798] exfat: Deprecated parameter 'namecase' [ 989.091093][T21798] exfat: Deprecated parameter 'utf8' [ 989.162551][T21798] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 989.240673][T21800] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 989.303949][T21800] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 989.686452][T21810] loop0: detected capacity change from 0 to 256 [ 990.092395][T21821] loop3: detected capacity change from 0 to 256 [ 990.192729][T21821] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 990.321210][T21821] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 990.526878][T21795] loop1: detected capacity change from 0 to 32768 [ 990.581972][T21795] JBD2: Ignoring recovery information on journal [ 990.597337][T21828] loop5: detected capacity change from 0 to 2048 [ 990.642530][T21833] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 990.808707][T21795] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 990.973534][T21795] (syz.1.6619,21795,0):ocfs2_check_dir_entry:334 ERROR: bad entry in directory #65: directory entry overrun - offset=32, inode=17057, rec_len=280, name_len=10 [ 990.973636][T21795] (syz.1.6619,21795,0):ocfs2_prepare_dir_for_insert:4342 ERROR: status = -2 [ 990.973682][T21795] (syz.1.6619,21795,0):ocfs2_mknod:302 ERROR: status = -2 [ 990.973725][T21795] (syz.1.6619,21795,0):ocfs2_mknod:506 ERROR: status = -2 [ 991.282414][ T5624] ocfs2: Unmounting device (7,1) on (node local) [ 991.913873][T21859] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 992.466003][T21870] loop1: detected capacity change from 0 to 512 [ 992.565101][T21870] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c11c, mo2=0002] [ 992.586564][T21876] loop4: detected capacity change from 0 to 128 [ 992.598331][T21870] System zones: 0-2, 18-18, 34-34 [ 992.604085][T21876] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 992.632455][T21870] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.6653: bg 0: block 248: padding at end of block bitmap is not set [ 992.657749][T21870] fserror_report: 3 callbacks suppressed [ 992.657774][T21870] loop1: lost filesystem error report for type 5 error -117 [ 992.667319][T21870] Quota error (device loop1): write_blk: dquota write failed [ 992.674685][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 992.674719][ C0] EXT4-fs (loop1): last error at time 2000525322: ext4_validate_block_bitmap:440 [ 992.715683][T21870] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 992.731654][T21870] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.6653: Failed to acquire dquot type 1 [ 992.733417][T21876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 992.748466][T21870] loop1: lost filesystem error report for type 5 error -117 [ 992.842380][T21870] EXT4-fs (loop1): 1 truncate cleaned up [ 992.909820][T21870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.973708][T21870] ext4 filesystem being mounted at /1158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 993.141827][T21870] EXT4-fs error (device loop1): ext4_lookup:1787: inode #2: comm syz.1.6653: deleted inode referenced: 12 [ 993.381279][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.495702][T21891] loop3: detected capacity change from 0 to 4096 [ 993.535733][T21891] ntfs3(loop3): Primary boot: invalid bytes per MFT record 0 (0). [ 993.572020][T21891] ntfs3(loop3): try to read out of volume at offset 0x1ffe00 [ 993.787308][T21891] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 994.160168][T21913] loop3: detected capacity change from 0 to 128 [ 994.247663][T21913] EXT4-fs (loop3): Test dummy encryption mode enabled [ 994.285140][T21913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 994.334216][T21913] System zones: 1-3, 19-19, 35-36 [ 994.397694][T21913] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 994.458382][T21913] ext4 filesystem being mounted at /1096/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 994.518599][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6676'. [ 994.637814][ T5621] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 994.879062][T21929] loop1: detected capacity change from 0 to 1024 [ 994.912692][T21929] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 994.992610][T21929] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.6678: lblock 2 mapped to illegal pblock 2 (length 1) [ 995.007087][T21929] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 995.007386][T21929] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 995.016503][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 995.016540][ C0] EXT4-fs (loop1): initial error at time 2000525324: ext4_map_blocks:791: inode 3: block 2 [ 995.016609][ C0] EXT4-fs (loop1): last error at time 2000525324: ext4_map_blocks:791: inode 3: block 2 [ 995.051779][T21929] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.6678: lblock 0 mapped to illegal pblock 48 (length 1) [ 995.066120][T21929] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 995.069187][T21929] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 995.099099][T21929] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.6678: Failed to acquire dquot type 0 [ 995.113458][T21929] loop1: lost filesystem error report for type 5 error -117 [ 995.122185][T21929] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 995.169489][T21929] loop1: lost filesystem error report for type 5 error -117 [ 995.169837][T21929] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.6678: mark_inode_dirty error [ 995.247277][T21929] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 995.247630][T21929] EXT4-fs warning (device loop1): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 995.292726][T21929] EXT4-fs (loop1): 1 orphan inode deleted [ 995.321202][T21929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 995.323657][ T5828] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 995.444065][ T5828] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 995.486248][ T5828] EXT4-fs error (device loop1): ext4_release_dquot:7068: comm kworker/u8:10: Failed to release dquot type 0 [ 995.617815][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.652349][ T5828] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 995.689012][ T5828] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 995.689023][T21917] loop5: detected capacity change from 0 to 32768 [ 995.689320][ T5828] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 995.755316][T21917] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6673 (21917) [ 995.790711][ T5828] EXT4-fs error (device loop1): ext4_release_dquot:7068: comm kworker/u8:10: Failed to release dquot type 0 [ 995.811482][T21945] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6686'. [ 995.823949][T21917] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 995.843111][T21917] BTRFS info (device loop5): using crc32c checksum algorithm [ 995.845427][ T5828] loop1: lost filesystem error report for type 5 error -117 [ 995.874525][ T5624] EXT4-fs error (device loop1): __ext4_get_inode_loc:4884: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 995.991529][ T5624] loop1: lost filesystem error report for type 5 error -117 [ 995.992213][ T5624] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 996.047366][ T5624] loop1: lost filesystem error report for type 5 error -117 [ 996.047648][ T5624] EXT4-fs error (device loop1): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 996.103162][T21917] BTRFS info (device loop5): allowing degraded mounts [ 996.115251][T21917] BTRFS info (device loop5): enabling ssd optimizations [ 996.146320][T21917] BTRFS info (device loop5): turning on async discard [ 996.206164][T21917] BTRFS info (device loop5): enabling free space tree [ 996.215176][ T5624] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 996.252260][T21917] BTRFS info (device loop5): force zlib compression, level 3 [ 996.763550][ T5636] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 998.194102][T22013] netlink: 'syz.2.6710': attribute type 1 has an invalid length. [ 998.213043][T22013] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6710'. [ 998.223842][T22013] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6710'. [ 998.246802][T22013] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6710'. [ 998.348132][T22017] loop3: detected capacity change from 0 to 256 [ 998.467323][T22017] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 998.562598][T22023] loop0: detected capacity change from 0 to 256 [ 998.603243][T22023] exfat: Deprecated parameter 'utf8' [ 998.662452][T22023] exfat: Deprecated parameter 'utf8' [ 998.843047][T22023] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1000.141869][T22058] 9p: Unknown Cache mode or invalid value fscach [ 1000.603709][T22066] loop0: detected capacity change from 0 to 64 [ 1000.609251][T22066] minix: block size(59136) > page size(4096) not supported by filesystem [ 1001.045812][T22076] 9p: Bad value for 'cache' [ 1001.303663][T22079] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1001.738023][T22088] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1001.887830][T22092] : entered promiscuous mode [ 1001.904602][T22074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1001.920628][ T30] audit: type=1326 audit(2000525330.824:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22095 comm="syz.0.6749" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 1001.949189][T22074] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1001.968410][T22097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6750'. [ 1002.020407][ T30] audit: type=1326 audit(2000525330.843:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22095 comm="syz.0.6749" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 1002.117347][ T30] audit: type=1326 audit(2000525330.852:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22095 comm="syz.0.6749" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 1002.168620][T22074] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1002.204677][T22074] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1002.217180][ T30] audit: type=1326 audit(2000525330.852:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22095 comm="syz.0.6749" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 1002.342700][T22074] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1002.394637][T22074] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1003.754848][ T5773] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 1003.960198][ T5773] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1004.000747][ T5773] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1004.023445][T22137] loop2: detected capacity change from 0 to 256 [ 1004.044292][ T5773] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1004.067463][ T5773] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1004.108076][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1004.161694][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1004.205304][ T5773] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1004.277954][ T5773] usb 1-1: string descriptor 0 read error: -22 [ 1004.307637][ T5773] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1004.349622][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.382261][T22137] FAT-fs (loop2): Directory bread(block 64) failed [ 1004.390496][ T5773] usb 1-1: config 0 descriptor?? [ 1004.402915][ T5773] hub 1-1:0.0: bad descriptor, ignoring hub [ 1004.420355][ T5773] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1004.451879][T22137] FAT-fs (loop2): Directory bread(block 65) failed [ 1004.497475][T22137] FAT-fs (loop2): Directory bread(block 66) failed [ 1004.517291][ T5773] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input59 [ 1004.535050][T22137] FAT-fs (loop2): Directory bread(block 67) failed [ 1004.609298][T22137] FAT-fs (loop2): Directory bread(block 68) failed [ 1004.661939][T22137] FAT-fs (loop2): Directory bread(block 69) failed [ 1004.717112][T22137] FAT-fs (loop2): Directory bread(block 70) failed [ 1004.793905][T22137] FAT-fs (loop2): Directory bread(block 71) failed [ 1004.829640][ T5773] usb 1-1: USB disconnect, device number 49 [ 1004.870368][T22137] FAT-fs (loop2): Directory bread(block 72) failed [ 1004.941658][T22137] FAT-fs (loop2): Directory bread(block 73) failed [ 1005.236235][T22168] openvswitch: netlink: Key type 51 is out of range max 32 [ 1005.554225][T22176] SET target dimension over the limit! [ 1005.868983][T22187] kAFS: unable to lookup cell 't,o(/' [ 1006.060545][T22193] trusted_key: encrypted_key: master key parameter is missing [ 1006.101026][T22186] bridge1: entered promiscuous mode [ 1006.127093][T22186] bridge1: entered allmulticast mode [ 1007.146291][T22229] loop0: detected capacity change from 0 to 256 [ 1007.332724][T22229] FAT-fs (loop0): Directory bread(block 64) failed [ 1007.332777][T22229] FAT-fs (loop0): Directory bread(block 65) failed [ 1007.332880][T22229] FAT-fs (loop0): Directory bread(block 66) failed [ 1007.332921][T22229] FAT-fs (loop0): Directory bread(block 67) failed [ 1007.333021][T22229] FAT-fs (loop0): Directory bread(block 68) failed [ 1007.333060][T22229] FAT-fs (loop0): Directory bread(block 69) failed [ 1007.333159][T22229] FAT-fs (loop0): Directory bread(block 70) failed [ 1007.333198][T22229] FAT-fs (loop0): Directory bread(block 71) failed [ 1007.333298][T22229] FAT-fs (loop0): Directory bread(block 72) failed [ 1007.333337][T22229] FAT-fs (loop0): Directory bread(block 73) failed [ 1007.681233][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1007.681320][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1008.570904][T22269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.896214][ T5745] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1009.002322][T22282] bridge1: entered promiscuous mode [ 1009.031077][T22282] bridge1: entered allmulticast mode [ 1009.087903][ T24] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1009.100513][ T5745] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1009.129915][ T5745] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.172487][ T5745] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1009.219464][ T5745] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1009.266383][ T5745] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1009.286572][ T24] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1009.307307][ T5745] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1009.327661][ T24] usb 5-1: config 0 has no interface number 0 [ 1009.332479][T22291] Unknown options in mask b7f2 [ 1009.357518][ T5745] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1009.377495][ T24] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1009.386803][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1009.406098][ T5745] usb 2-1: Product: syz [ 1009.411578][ T24] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1009.417321][ T5745] usb 2-1: Manufacturer: syz [ 1009.447524][ T24] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1009.467865][ T24] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1009.475164][ T5745] cdc_wdm 2-1:1.0: skipping garbage [ 1009.490949][ T24] usb 5-1: Manufacturer: syz [ 1009.504832][ T5745] cdc_wdm 2-1:1.0: skipping garbage [ 1009.505779][ T24] usb 5-1: SerialNumber: syz [ 1009.534306][ T5745] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1009.545054][ T24] usb 5-1: config 0 descriptor?? [ 1009.571844][ T5745] cdc_wdm 2-1:1.0: Unknown control protocol [ 1009.802221][ T24] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 1009.825896][ T24] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1009.845588][T22272] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 1009.884313][ T24] usb 5-1: USB disconnect, device number 52 [ 1009.924257][ T5745] usb 2-1: USB disconnect, device number 62 [ 1010.169731][T22312] netlink: 'syz.2.6830': attribute type 21 has an invalid length. [ 1010.224739][T22312] IPv6: NLM_F_CREATE should be specified when creating new route [ 1010.574443][T22323] syz_tun: entered promiscuous mode [ 1010.743478][ T5745] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 1010.773178][T22325] loop0: detected capacity change from 0 to 4096 [ 1010.862599][T22330] bridge1: entered promiscuous mode [ 1010.886484][T22330] bridge1: entered allmulticast mode [ 1010.949890][ T5745] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1010.985951][ T5745] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1011.027085][ T5745] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1011.075928][ T5745] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1011.132961][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1011.194850][ T5745] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1011.242368][ T5745] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1011.305999][ T5745] usb 3-1: string descriptor 0 read error: -22 [ 1011.325385][ T5745] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1011.369852][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.418353][ T5745] usb 3-1: config 0 descriptor?? [ 1011.470636][ T5745] hub 3-1:0.0: bad descriptor, ignoring hub [ 1011.507868][ T5745] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1011.550077][ T5745] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input61 [ 1011.554420][ T30] audit: type=1326 audit(2000525339.855:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.5.6844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26cd9ce59 code=0x7ffc0000 [ 1011.722484][ T30] audit: type=1326 audit(2000525339.855:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.5.6844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26cd9ce59 code=0x7ffc0000 [ 1011.765022][ T5753] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1011.875127][ T30] audit: type=1326 audit(2000525339.901:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.5.6844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26cd9ce59 code=0x7ffc0000 [ 1011.903455][ T5745] usb 3-1: USB disconnect, device number 48 [ 1011.966770][ T30] audit: type=1326 audit(2000525339.911:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.5.6844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fc26cd9ce59 code=0x7ffc0000 [ 1012.023673][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1012.034629][ T5753] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1012.054230][ T30] audit: type=1326 audit(2000525339.911:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.5.6844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26cd9ce59 code=0x7ffc0000 [ 1012.084906][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1012.097406][ T5753] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1012.108745][ T5753] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1012.117923][ T30] audit: type=1326 audit(2000525339.911:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.5.6844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26cd9ce59 code=0x7ffc0000 [ 1012.143608][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.153801][ T30] audit: type=1326 audit(2000525339.911:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.5.6844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26cd9ce59 code=0x7ffc0000 [ 1012.180386][ T30] audit: type=1326 audit(2000525339.911:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.5.6844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc26cd9ce59 code=0x7ffc0000 [ 1012.180584][ T5753] usb 2-1: config 0 descriptor?? [ 1012.208040][ T30] audit: type=1326 audit(2000525339.911:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22347 comm="syz.5.6844" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc26cd9ce59 code=0x7ffc0000 [ 1012.461564][ T5753] hdpvr 2-1:0.0: firmware version 0x7e dated M8 9 >S|hnBk矉?qC$F [ 1012.475996][ T5753] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1012.681575][T22373] loop3: detected capacity change from 0 to 1024 [ 1012.697105][ T5753] hdpvr 2-1:0.0: device init failed [ 1012.720254][ T5753] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 1012.792566][ T5753] usb 2-1: USB disconnect, device number 63 [ 1013.260769][T22391] loop5: detected capacity change from 0 to 1024 [ 1013.289985][T22391] EXT4-fs: Ignoring removed orlov option [ 1013.326940][T22391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.443271][T22391] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.6855: bit already cleared for inode 13 [ 1013.632956][ T5636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.788447][T22405] bridge1: entered promiscuous mode [ 1013.788487][T22405] bridge1: entered allmulticast mode [ 1013.873747][T22410] loop5: detected capacity change from 0 to 164 [ 1015.206986][T22415] loop4: detected capacity change from 0 to 32768 [ 1015.232668][T22415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6868 (22415) [ 1015.291443][T22415] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1015.328830][ T5745] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1015.332416][T22415] BTRFS info (device loop4): using crc32c checksum algorithm [ 1015.342392][T22449] loop1: detected capacity change from 0 to 4096 [ 1015.500815][T22449] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 1015.502940][T22415] BTRFS info (device loop4): allowing degraded mounts [ 1015.514650][T22415] BTRFS info (device loop4): enabling ssd optimizations [ 1015.522554][T22415] BTRFS info (device loop4): turning on async discard [ 1015.530073][T22415] BTRFS info (device loop4): enabling free space tree [ 1015.543634][ T5745] usb 3-1: Using ep0 maxpacket: 16 [ 1015.559040][T22415] BTRFS info (device loop4): force zlib compression, level 3 [ 1015.570689][ T5745] usb 3-1: config 1 has an invalid interface number: 19 but max is 0 [ 1015.598037][ T5745] usb 3-1: config 1 has no interface number 0 [ 1015.649672][ T5745] usb 3-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid maxpacket 128, setting to 64 [ 1015.701775][ T5745] usb 3-1: config 1 interface 19 has no altsetting 0 [ 1015.723319][ T5745] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 1015.729694][T22472] loop3: detected capacity change from 0 to 512 [ 1015.759981][T22475] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6889'. [ 1015.771725][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.784433][T22472] EXT4-fs: Ignoring removed nobh option [ 1015.802245][ T5745] usb 3-1: Product: syz [ 1015.825243][ T5745] usb 3-1: Manufacturer: syz [ 1015.849842][ T5745] usb 3-1: SerialNumber: syz [ 1015.909515][T22472] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #3: comm syz.3.6891: corrupted inode contents [ 1015.937301][T22472] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1015.946376][T22472] EXT4-fs (loop3): Remounting filesystem read-only [ 1015.955631][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1015.955665][ C1] EXT4-fs (loop3): initial error at time 2000525343: ext4_do_update_inode:5690: inode 3 [ 1015.955723][ C1] EXT4-fs (loop3): last error at time 2000525343: ext4_do_update_inode:5690: inode 3 [ 1015.956542][ T5745] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1016.007753][T22472] Quota error (device loop3): write_blk: dquota write failed [ 1016.048766][T22472] EXT4-fs (loop3): 1 truncate cleaned up [ 1016.098930][T22472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1016.140190][T22472] ext4 filesystem being mounted at /1125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.244858][ T5745] usb 3-1: USB disconnect, device number 49 [ 1016.251112][ T13] usb 3-1: Failed to submit usb control message: -71 [ 1016.278854][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 1016.300235][ T13] usb 3-1: unable to get target info from device [ 1016.317874][T22472] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.323037][ T13] usb 3-1: could not get target info (-71) [ 1016.369466][ T5634] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1016.371954][ T13] usb 3-1: could not probe fw (-71) [ 1017.170411][T22507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6903'. [ 1017.745488][T22525] loop0: detected capacity change from 0 to 1024 [ 1017.764511][T22525] EXT4-fs: Ignoring removed orlov option [ 1017.830508][T22525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1017.884300][ T24] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1017.902133][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1017.902157][ T30] audit: type=1400 audit(2000525345.797:144): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=22528 comm="syz.2.6913" [ 1017.982128][T22531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6914'. [ 1017.986271][T22525] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.6912: bit already cleared for inode 13 [ 1017.991604][T22531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6914'. [ 1018.053072][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1018.079479][ T24] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 [ 1018.102656][ T24] usb 6-1: config 0 has no interface number 1 [ 1018.141396][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1018.172445][ T24] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1018.202320][ T24] usb 6-1: Product: syz [ 1018.208435][ T24] usb 6-1: Manufacturer: syz [ 1018.221365][ T24] usb 6-1: SerialNumber: syz [ 1018.250794][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.261998][ T24] usb 6-1: config 0 descriptor?? [ 1018.434659][T22541] loop2: detected capacity change from 0 to 512 [ 1018.515767][ T24] qcserial 6-1:0.37: Qualcomm USB modem converter detected [ 1018.534641][T22541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.628378][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6919'. [ 1018.673038][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6922'. [ 1018.814893][ T5753] usb 6-1: USB disconnect, device number 69 [ 1018.850108][ T5753] qcserial 6-1:0.37: device disconnected [ 1018.943091][ T5623] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.611489][T22579] Cannot find set identified by id 1 to match [ 1020.564365][T22573] loop1: detected capacity change from 0 to 32768 [ 1020.615604][T22573] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6934 (22573) [ 1020.688358][T22573] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1020.732462][T22573] BTRFS info (device loop1): using sha256 checksum algorithm [ 1021.028879][T22573] BTRFS info (device loop1): enabling ssd optimizations [ 1021.056044][T22573] BTRFS info (device loop1): turning on async discard [ 1021.072602][T22573] BTRFS info (device loop1): enabling free space tree [ 1021.188405][T22636] loop2: detected capacity change from 0 to 1764 [ 1021.341907][T22591] loop4: detected capacity change from 0 to 32768 [ 1021.420634][ T5624] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1021.434516][T22591] diRead: diIAGRead returned -5 [ 1021.462041][T22591] jfs_lookup: iget failed on inum 1048352 [ 1021.695922][T22601] loop0: detected capacity change from 0 to 32768 [ 1021.757447][T22601] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6947 (22601) [ 1021.859345][T22646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6960'. [ 1021.887482][T22601] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1021.940297][T22601] BTRFS info (device loop0): using crc32c checksum algorithm [ 1022.401245][T22601] BTRFS info (device loop0): allowing degraded mounts [ 1022.423319][T22601] BTRFS info (device loop0): enabling ssd optimizations [ 1022.466222][T22601] BTRFS info (device loop0): turning on async discard [ 1022.508314][T22601] BTRFS info (device loop0): enabling free space tree [ 1022.535855][T22601] BTRFS info (device loop0): force zlib compression, level 3 [ 1022.995902][T22686] netlink: 'syz.1.6982': attribute type 16 has an invalid length. [ 1023.027350][T22686] netlink: 'syz.1.6982': attribute type 17 has an invalid length. [ 1023.158858][T22690] bridge1: entered promiscuous mode [ 1023.194722][T22690] bridge1: entered allmulticast mode [ 1023.349175][T22694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6972'. [ 1023.387610][T22694] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6972'. [ 1023.444595][T22694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6972'. [ 1023.475551][T22696] loop5: detected capacity change from 0 to 512 [ 1023.648246][ T5622] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1023.660797][T22696] tmpfs: Bad value for 'mpol' [ 1024.722974][T22724] netlink: 'syz.4.6989': attribute type 2 has an invalid length. [ 1025.130895][T22737] loop1: detected capacity change from 0 to 512 [ 1025.585628][T22711] loop5: detected capacity change from 0 to 32768 [ 1025.620381][T22711] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6983 (22711) [ 1025.694112][T22711] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1025.739711][T22711] BTRFS info (device loop5): using sha256 checksum algorithm [ 1025.881269][T22768] netlink: 'syz.2.7005': attribute type 10 has an invalid length. [ 1025.911028][T22711] BTRFS info (device loop5): enabling ssd optimizations [ 1025.929521][T22711] BTRFS info (device loop5): turning on async discard [ 1025.942882][T22711] BTRFS info (device loop5): enabling free space tree [ 1025.950686][T22768] veth1_macvtap: left promiscuous mode [ 1026.091123][T22748] loop3: detected capacity change from 0 to 8192 [ 1026.220376][ T5636] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1026.242452][T22776] loop4: detected capacity change from 0 to 512 [ 1026.310544][T22776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.365403][T22730] loop0: detected capacity change from 0 to 32768 [ 1026.489868][T22730] diRead: diIAGRead returned -5 [ 1026.519811][T22730] jfs_lookup: iget failed on inum 1048352 [ 1026.770450][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.032340][T22784] loop3: detected capacity change from 0 to 2048 [ 1027.139737][T22789] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1027.416989][T22795] bridge1: entered promiscuous mode [ 1027.447104][T22795] bridge1: entered allmulticast mode [ 1027.734551][T22799] loop5: detected capacity change from 0 to 1024 [ 1028.173064][T22815] loop5: detected capacity change from 0 to 256 [ 1028.254081][T22815] FAT-fs (loop5): Directory bread(block 64) failed [ 1028.270798][T22811] loop2: detected capacity change from 0 to 4096 [ 1028.283178][T22815] FAT-fs (loop5): Directory bread(block 65) failed [ 1028.319181][T22815] FAT-fs (loop5): Directory bread(block 66) failed [ 1028.349189][T22818] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1028.352141][T22815] FAT-fs (loop5): Directory bread(block 67) failed [ 1028.430901][T22811] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 1028.455828][T22815] FAT-fs (loop5): Directory bread(block 68) failed [ 1028.479100][T22815] FAT-fs (loop5): Directory bread(block 69) failed [ 1028.509850][T22815] FAT-fs (loop5): Directory bread(block 70) failed [ 1028.553543][T22815] FAT-fs (loop5): Directory bread(block 71) failed [ 1028.569512][T22811] Remounting filesystem read-only [ 1028.589491][T22815] FAT-fs (loop5): Directory bread(block 72) failed [ 1028.623332][T22815] FAT-fs (loop5): Directory bread(block 73) failed [ 1028.988393][T22830] set_capacity_and_notify: 1 callbacks suppressed [ 1028.988421][T22830] loop0: detected capacity change from 0 to 2048 [ 1029.136842][T22838] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1029.653379][T22851] openvswitch: netlink: IP tunnel dst address not specified [ 1029.717904][T22845] loop3: detected capacity change from 0 to 4096 [ 1029.759165][T22845] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1029.811209][T22845] ntfs3(loop3): It is recommended to use chkdsk. [ 1030.028336][T22862] netlink: 'syz.4.7047': attribute type 10 has an invalid length. [ 1030.053698][T22865] netlink: 'syz.0.7049': attribute type 1 has an invalid length. [ 1030.084896][T22865] netlink: 1008 bytes leftover after parsing attributes in process `syz.0.7049'. [ 1030.112388][T22862] veth1_macvtap: left promiscuous mode [ 1030.569587][T22877] ip6t_srh: unknown srh invflags 4000 [ 1030.637302][ T30] audit: type=1326 audit(2000525357.719:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.0.7056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 1030.674288][T22876] loop1: detected capacity change from 0 to 2048 [ 1030.720799][ T30] audit: type=1326 audit(2000525357.719:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.0.7056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 1030.769575][T22883] kAFS: Can only specify source 'none' with -o dyn [ 1030.791693][T22884] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1030.816102][ T30] audit: type=1326 audit(2000525357.766:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.0.7056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 1030.841941][ T30] audit: type=1326 audit(2000525357.766:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.0.7056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 1030.879134][ T30] audit: type=1326 audit(2000525357.766:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22878 comm="syz.0.7056" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50bd9ce59 code=0x7ffc0000 [ 1031.581685][T22898] loop1: detected capacity change from 0 to 4096 [ 1031.714314][T22908] loop2: detected capacity change from 0 to 1764 [ 1031.888826][T22917] netlink: 'syz.3.7074': attribute type 1 has an invalid length. [ 1032.141864][T22898] Process accounting resumed [ 1032.206658][T22921] loop0: detected capacity change from 0 to 1764 [ 1032.302684][T22925] Cannot find set identified by id 0 to match [ 1032.385147][ T5773] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 1032.582224][T22927] loop2: detected capacity change from 0 to 4096 [ 1032.601031][ T5773] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1032.623797][T22927] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1032.637390][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.682615][ T5773] usb 5-1: config 0 descriptor?? [ 1032.713144][ T5773] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1032.784102][T22927] ntfs3(loop2): ino=19, mi_enum_attr [ 1032.893581][T22927] ntfs3(loop2): failed to convert "c46c" to iso8859-2 [ 1032.967556][T22927] ntfs3(loop2): ino=20, mi_enum_attr [ 1033.144958][ T5773] gp8psk: usb out operation failed. [ 1033.157741][ T5773] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1033.185582][ T5773] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1033.233325][ T5773] usb 5-1: USB disconnect, device number 53 [ 1033.248497][ T5745] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1033.276000][T22945] netlink: 'syz.0.7089': attribute type 10 has an invalid length. [ 1033.312667][T22945] veth1_macvtap: left promiscuous mode [ 1033.327944][T22947] loop1: detected capacity change from 0 to 64 [ 1033.395985][T22947] Bad inode number on dev loop1: 5 is out of range [ 1033.412410][T22923] loop5: detected capacity change from 0 to 32768 [ 1033.462911][ T5745] usb 4-1: Using ep0 maxpacket: 8 [ 1033.491406][ T5745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1033.543409][ T5745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1033.583659][ T5745] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1033.610712][ T5745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1033.661460][ T5745] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1033.689063][ T5745] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1033.707806][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.755140][ T5745] usb 4-1: config 0 descriptor?? [ 1033.778391][T22939] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1034.339512][T13288] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 1034.349855][ T5753] usb 4-1: USB disconnect, device number 53 [ 1034.667243][T22976] loop5: detected capacity change from 0 to 2048 [ 1034.748628][T22976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.762300][T22976] ext4 filesystem being mounted at /1167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.786351][T22976] Quota error (device loop5): do_check_range: Getting block 196612 out of range 1-5 [ 1034.800595][T22976] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1034.810672][T22976] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.7103: Failed to acquire dquot type 0 [ 1034.871473][T22978] loop2: detected capacity change from 0 to 4096 [ 1034.887480][T22986] loop4: detected capacity change from 0 to 64 [ 1034.903370][T22978] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1034.971168][ T5636] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.040280][T22978] ntfs3(loop2): ino=19, mi_enum_attr [ 1035.136654][T22978] ntfs3(loop2): failed to convert "c46c" to maccroatian [ 1035.160641][T22978] ntfs3(loop2): ino=20, mi_enum_attr [ 1035.648946][T23002] loop0: detected capacity change from 0 to 128 [ 1035.743537][T23002] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1035.844284][T23002] ext4 filesystem being mounted at /1130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.972955][T23016] loop4: detected capacity change from 0 to 256 [ 1036.044071][T23018] netlink: 45 bytes leftover after parsing attributes in process `syz.3.7120'. [ 1036.346474][ T5622] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1036.363438][T23025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7126'. [ 1036.417547][T23026] loop3: detected capacity change from 0 to 512 [ 1036.477869][T23026] FAT-fs (loop3): FAT read failed (blocknr 194) [ 1036.860705][T23040] netlink: 'syz.3.7133': attribute type 9 has an invalid length. [ 1037.171705][T23052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1037.457832][T23061] netlink: 'syz.5.7143': attribute type 21 has an invalid length. [ 1037.733526][T23071] loop3: detected capacity change from 0 to 256 [ 1037.842116][T23075] loop2: detected capacity change from 0 to 128 [ 1037.904229][T23075] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1037.984862][T23075] ext4 filesystem being mounted at /1237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.216318][ T5623] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1038.921122][T23111] loop3: detected capacity change from 0 to 512 [ 1039.005887][T23111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.420190][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.664340][T23093] loop0: detected capacity change from 0 to 32768 [ 1039.705416][T23093] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7158 (23093) [ 1039.761168][T23093] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1039.803269][T23093] BTRFS info (device loop0): using sha256 checksum algorithm [ 1039.959168][T17591] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1039.997944][T23093] BTRFS info (device loop0): enabling ssd optimizations [ 1040.048161][T23093] BTRFS info (device loop0): turning on async discard [ 1040.089975][T23093] BTRFS info (device loop0): enabling free space tree [ 1040.162338][T17591] usb 3-1: Using ep0 maxpacket: 16 [ 1040.180929][T17591] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1040.207861][T17591] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1040.248244][T17591] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1040.287734][T17591] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1040.304358][ T5622] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1040.324144][T17591] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1040.364603][T17591] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1040.381908][T17591] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1040.442662][T17591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.460604][T23164] syz.3.7185: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1040.526295][T23164] CPU: 1 UID: 0 PID: 23164 Comm: syz.3.7185 Not tainted syzkaller #0 PREEMPT(full) [ 1040.526349][T23164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1040.526374][T23164] Call Trace: [ 1040.526388][T23164] [ 1040.526411][T23164] dump_stack_lvl+0x100/0x190 [ 1040.526463][T23164] warn_alloc.cold+0x95/0x1c1 [ 1040.526509][T23164] ? __pfx_warn_alloc+0x10/0x10 [ 1040.526572][T23164] ? __lock_acquire+0x4a5/0x2630 [ 1040.526645][T23164] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1040.526691][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.526748][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.526799][T23164] ? rcu_is_watching+0x12/0xc0 [ 1040.526861][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.526911][T23164] ? trace_contention_end+0x122/0x170 [ 1040.526972][T23164] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1040.527018][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.527072][T23164] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 1040.527115][T23164] ? find_held_lock+0x2b/0x80 [ 1040.527180][T23164] ? tomoyo_path_number_perm+0x28f/0x580 [ 1040.527225][T23164] ? tomoyo_path_number_perm+0x28f/0x580 [ 1040.527267][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.527323][T23164] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1040.527364][T23164] ? __pfx___mutex_lock+0x10/0x10 [ 1040.527413][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.527471][T23164] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1040.527515][T23164] ? futex_wait+0x11e/0x370 [ 1040.527562][T23164] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1040.527608][T23164] __vmalloc_node_noprof+0xad/0xf0 [ 1040.527649][T23164] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1040.527703][T23164] dvb_dvr_do_ioctl+0x15d/0x270 [ 1040.527757][T23164] dvb_usercopy+0x167/0x340 [ 1040.527800][T23164] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1040.527850][T23164] ? __pfx_dvb_usercopy+0x10/0x10 [ 1040.527913][T23164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1040.527964][T23164] ? __fget_files+0x21f/0x3d0 [ 1040.528017][T23164] dvb_dvr_ioctl+0x29/0x40 [ 1040.528065][T23164] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1040.528111][T23164] __x64_sys_ioctl+0x18e/0x210 [ 1040.528178][T23164] do_syscall_64+0x10b/0xf80 [ 1040.528224][T23164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.528267][T23164] RIP: 0033:0x7fbad2d9ce59 [ 1040.528297][T23164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.528339][T23164] RSP: 002b:00007fbad3d2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1040.528379][T23164] RAX: ffffffffffffffda RBX: 00007fbad3015fa0 RCX: 00007fbad2d9ce59 [ 1040.528413][T23164] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 1040.528440][T23164] RBP: 00007fbad2e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1040.528467][T23164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.528493][T23164] R13: 00007fbad3016038 R14: 00007fbad3015fa0 R15: 00007ffc8fe0c258 [ 1040.528548][T23164] [ 1040.533180][T23164] Mem-Info: [ 1040.790116][T17591] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1040.885070][T23164] active_anon:14868 inactive_anon:1 isolated_anon:0 [ 1040.885070][T23164] active_file:18046 inactive_file:41052 isolated_file:0 [ 1040.885070][T23164] unevictable:768 dirty:586 writeback:0 [ 1040.885070][T23164] slab_reclaimable:11188 slab_unreclaimable:99441 [ 1040.885070][T23164] mapped:38471 shmem:7848 pagetables:3674 [ 1040.885070][T23164] sec_pagetables:0 bounce:0 [ 1040.885070][T23164] kernel_misc_reclaimable:0 [ 1040.885070][T23164] free:1277148 free_pcp:8537 free_cma:0 [ 1040.947084][T23169] openvswitch: netlink: Tunnel attr 148 out of range max 16 [ 1040.974385][T23164] Node 0 active_anon:52572kB inactive_anon:4kB active_file:72184kB inactive_file:164012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146684kB dirty:2344kB writeback:0kB shmem:23056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12316kB pagetables:14560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1041.072496][T17591] scsi host1: usb-storage 3-1:1.0 [ 1041.098132][T23164] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1041.158702][T23164] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1041.190986][T23164] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1041.196895][T23164] Node 0 DMA32 free:1155184kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39472kB inactive_anon:4kB active_file:72184kB inactive_file:164012kB unevictable:1536kB writepending:2344kB zspages:0kB present:3129332kB managed:2537160kB mlocked:0kB bounce:0kB free_pcp:48040kB local_pcp:25244kB free_cma:0kB [ 1041.234063][T23164] lowmem_reserve[]: 0 0 1 1 1 [ 1041.238934][T23164] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1092kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1041.300918][T17591] usb 3-1: USB disconnect, device number 50 [ 1041.304851][T23164] lowmem_reserve[]: 0 0 0 0 0 [ 1041.312100][T23164] Node 1 Normal free:3945148kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1041.345938][T23164] lowmem_reserve[]: 0 0 0 0 0 [ 1041.351037][T23164] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1041.364366][T23164] Node 0 DMA32: 7084*4kB (UME) 4784*8kB (UM) 3586*16kB (UME) 1169*32kB (UME) 1036*64kB (UME) 852*128kB (UME) 548*256kB (UME) 291*512kB (UM) 137*1024kB (UME) 22*2048kB (UM) 86*4096kB (UM) = 1163632kB [ 1041.384412][T23164] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1041.396168][T23164] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 6*16kB (UM) 6*32kB (UM) 6*64kB (UM) 4*128kB (UM) 6*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 962*4096kB (M) = 3945148kB [ 1041.412958][T23164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1041.422558][T23164] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1041.432299][T23164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1041.441975][T23164] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1041.452227][T23164] 60250 total pagecache pages [ 1041.457570][T23164] 0 pages in swap cache [ 1041.461885][T23164] Free swap = 124996kB [ 1041.466944][T23164] Total swap = 124996kB [ 1041.471148][T23164] 2097051 pages RAM [ 1041.474944][T23164] 0 pages HighMem/MovableOnly [ 1041.479797][T23164] 430873 pages reserved [ 1041.483977][T23164] 0 pages cma reserved [ 1041.596622][T23175] loop5: detected capacity change from 0 to 64 [ 1041.675175][T12526] ------------[ cut here ]------------ [ 1041.681089][T12526] kernel BUG at fs/hfs/inode.c:474! [ 1041.706093][T12526] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1041.712570][T12526] CPU: 0 UID: 0 PID: 12526 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 1041.722186][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1041.732270][T12526] Workqueue: writeback wb_workfn (flush-7:5) [ 1041.738323][T12526] RIP: 0010:hfs_write_inode+0x428/0xab0 [ 1041.743947][T12526] Code: d2 8b 4c 89 f7 e8 a8 85 0e ff 49 83 fe 03 0f 84 cb 02 00 00 49 83 fe 04 74 12 49 83 fe 02 0f 84 00 fd ff ff e8 79 8a 0e ff 90 <0f> 0b e8 71 8a 0e ff 48 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 [ 1041.763588][T12526] RSP: 0018:ffffc900086cf3d0 EFLAGS: 00010293 [ 1041.769683][T12526] RAX: 0000000000000000 RBX: 1ffff920010d9e7c RCX: ffffffff82fa04e8 [ 1041.777682][T12526] RDX: ffff8880302b0000 RSI: ffffffff82fa0507 RDI: ffff8880302b0000 [ 1041.785680][T12526] RBP: ffff888012ebd290 R08: 0000000000000007 R09: 0000000000000004 [ 1041.793667][T12526] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1041.801650][T12526] R13: ffffc900086cf410 R14: 0000000000000000 R15: ffffc900086cf470 [ 1041.809632][T12526] FS: 0000000000000000(0000) GS:ffff88812436d000(0000) knlGS:0000000000000000 [ 1041.818571][T12526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1041.825157][T12526] CR2: 00007f5eeb968000 CR3: 00000000544fe000 CR4: 0000000000350ef0 [ 1041.833130][T12526] Call Trace: [ 1041.836405][T12526] [ 1041.839339][T12526] ? __pfx_hfs_write_inode+0x10/0x10 [ 1041.844643][T12526] ? __lock_acquire+0x4a5/0x2630 [ 1041.849614][T12526] ? __writeback_single_inode+0x454/0x1350 [ 1041.855450][T12526] ? __writeback_single_inode+0x454/0x1350 [ 1041.861287][T12526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.866946][T12526] __writeback_single_inode+0xcd4/0x1350 [ 1041.872617][T12526] ? __pfx___writeback_single_inode+0x10/0x10 [ 1041.878715][T12526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.884373][T12526] ? do_raw_spin_unlock+0x145/0x1e0 [ 1041.889599][T12526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.895249][T12526] writeback_sb_inodes+0x766/0x1c60 [ 1041.900490][T12526] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1041.906157][T12526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.911832][T12526] ? __pfx___up_read+0x10/0x10 [ 1041.916625][T12526] ? __writeback_inodes_wb+0x104/0x2d0 [ 1041.922112][T12526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.927770][T12526] __writeback_inodes_wb+0xf8/0x2d0 [ 1041.933001][T12526] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 1041.938842][T12526] ? queue_io+0x287/0x540 [ 1041.943200][T12526] wb_writeback+0x720/0xb90 [ 1041.947735][T12526] ? __pfx_wb_writeback+0x10/0x10 [ 1041.952789][T12526] ? get_nr_inodes+0x100/0x150 [ 1041.957563][T12526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.963214][T12526] ? _raw_spin_unlock_irq+0x23/0x50 [ 1041.968444][T12526] wb_workfn+0x890/0xc00 [ 1041.972732][T12526] ? __pfx_wb_workfn+0x10/0x10 [ 1041.977532][T12526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.983180][T12526] ? rcu_is_watching+0x12/0xc0 [ 1041.987968][T12526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1041.993620][T12526] process_one_work+0xa0e/0x1980 [ 1041.998591][T12526] ? __pfx_process_one_work+0x10/0x10 [ 1042.004020][T12526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.009680][T12526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.015332][T12526] worker_thread+0x5ef/0xe50 [ 1042.019967][T12526] ? __pfx_worker_thread+0x10/0x10 [ 1042.025094][T12526] ? kthread+0x13a/0x450 [ 1042.029347][T12526] ? __pfx_worker_thread+0x10/0x10 [ 1042.034559][T12526] kthread+0x370/0x450 [ 1042.038640][T12526] ? __pfx_kthread+0x10/0x10 [ 1042.043242][T12526] ret_from_fork+0x72b/0xd50 [ 1042.047850][T12526] ? __pfx_ret_from_fork+0x10/0x10 [ 1042.052993][T12526] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1042.058640][T12526] ? __switch_to+0x800/0x1100 [ 1042.063342][T12526] ? __switch_to_asm+0x39/0x70 [ 1042.068127][T12526] ? __pfx_kthread+0x10/0x10 [ 1042.072731][T12526] ret_from_fork_asm+0x1a/0x30 [ 1042.077526][T12526] [ 1042.080538][T12526] Modules linked in: [ 1042.085226][T12526] ---[ end trace 0000000000000000 ]--- [ 1042.154878][T12526] RIP: 0010:hfs_write_inode+0x428/0xab0 [ 1042.160536][T12526] Code: d2 8b 4c 89 f7 e8 a8 85 0e ff 49 83 fe 03 0f 84 cb 02 00 00 49 83 fe 04 74 12 49 83 fe 02 0f 84 00 fd ff ff e8 79 8a 0e ff 90 <0f> 0b e8 71 8a 0e ff 48 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 [ 1042.180321][T12526] RSP: 0018:ffffc900086cf3d0 EFLAGS: 00010293 [ 1042.186465][T12526] RAX: 0000000000000000 RBX: 1ffff920010d9e7c RCX: ffffffff82fa04e8 [ 1042.194479][T12526] RDX: ffff8880302b0000 RSI: ffffffff82fa0507 RDI: ffff8880302b0000 [ 1042.202489][T12526] RBP: ffff888012ebd290 R08: 0000000000000007 R09: 0000000000000004 [ 1042.211068][T12526] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1042.222015][T12526] R13: ffffc900086cf410 R14: 0000000000000000 R15: ffffc900086cf470 [ 1042.230131][T12526] FS: 0000000000000000(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000 [ 1042.239121][T12526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1042.245820][T12526] CR2: 00007fa50bfea2f8 CR3: 000000000e596000 CR4: 0000000000350ef0 [ 1042.254029][T12526] Kernel panic - not syncing: Fatal exception [ 1042.260304][T12526] Kernel Offset: disabled [ 1042.264617][T12526] Rebooting in 86400 seconds..