last executing test programs: 6m21.389436668s ago: executing program 1 (id=1360): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 6m21.179994766s ago: executing program 1 (id=1362): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0xfffffffffffffffe, 0xff3f) 6m20.937431001s ago: executing program 1 (id=1364): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setgid(0x0) 6m20.620103151s ago: executing program 1 (id=1366): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1018056, &(0x7f0000000080)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@noquota}, {}, {@nodiscard}, {@usrquota}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x24, 0x6260, &(0x7f0000000340)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m18.59409973s ago: executing program 1 (id=1382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 6m14.076531306s ago: executing program 1 (id=1407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000600000009"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x10, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xde97}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xd, 0x3, 0x6, 0x1, 0x200}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x5, 0xa, &(0x7f0000000980)=""/10, 0x40f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 6m13.622689035s ago: executing program 32 (id=1407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000600000009"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x10, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xde97}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xd, 0x3, 0x6, 0x1, 0x200}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x5, 0xa, &(0x7f0000000980)=""/10, 0x40f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 6.789776473s ago: executing program 0 (id=5044): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000008000000000000610022f0192477e33d7ce45f3ff38e89a83582b7"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) 6.246766648s ago: executing program 0 (id=5048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x44, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x18, 0x1c2, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @nested={0x18, 0x9, 0x0, 0x1, [@nested={0x14, 0xff, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @pid}]}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 5.544581068s ago: executing program 0 (id=5053): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x20, 0x1, 0x18}, './file0\x00'}) 5.165334884s ago: executing program 0 (id=5056): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000400)=0x5) 4.156637348s ago: executing program 3 (id=5068): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0xffffffffffffffff, &(0x7f0000000080)) 4.0862375s ago: executing program 5 (id=5070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) 3.945298275s ago: executing program 3 (id=5073): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 3.734540806s ago: executing program 3 (id=5076): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.348903313s ago: executing program 5 (id=5081): read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0x0, r0, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r1}}}, 0x78) 3.162221992s ago: executing program 3 (id=5085): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) 3.112466106s ago: executing program 5 (id=5086): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x43, &(0x7f0000000000), 0x4) 2.957287859s ago: executing program 5 (id=5088): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000005c0)={0x3, [[0x9ef8, 0xf1, 0xc9, 0x1, 0xfffffffc, 0x0, 0x3], [0x0, 0x2000001, 0x0, 0x10000007, 0x20000000, 0x4], [0x2, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0x1}, {0xffffffff, 0x1000000}, {0x5, 0x5, 0x0, 0x1}, {0x0, 0xfffffffe}, {0x0, 0x3}, {0xffffffff, 0x400}, {0xfffffffe}, {0x3, 0xffff}, {0x2, 0x10000000}, {0x9, 0xd78}, {0xfffffff8, 0x2}], '\x00', 0x0, 0x0, 0x0, 0xf8}) 2.549181632s ago: executing program 5 (id=5091): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15) 2.549038549s ago: executing program 2 (id=5092): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000040000701feffffff00000000017c00000400d7002c0001800600060086ddffff0c001500030000000000000014001900fe800000000000000000000000000019040002"], 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.288089878s ago: executing program 0 (id=5094): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00 (0002:0000) [ 515.189712][ T9] uvcvideo 6-1:0.199: No valid video chain found. [ 515.215724][T15040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.318023][T15042] loop3: detected capacity change from 0 to 16 [ 515.336139][T15042] erofs (device loop3): mounted with root inode @ nid 36. [ 515.343041][T15044] netlink: 'syz.4.3864': attribute type 39 has an invalid length. [ 515.348566][T15042] erofs (device loop3): invalid h_shared_count 243 @ nid 89 [ 515.349213][T15042] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 515.349238][T15042] erofs (device loop3): readahead error at folio 1 @ nid 89 [ 515.408548][T15042] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 515.408578][T15042] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 515.408598][T15042] erofs (device loop3): read error -117 @ 1 of nid 89 [ 515.408833][ T38] audit: type=1800 audit(1776121562.343:320): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3863" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 515.836974][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 515.933525][ T37] usb 6-1: USB disconnect, device number 11 [ 515.984598][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 515.990082][ T9] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 515.990109][ T9] usb 3-1: config 0 has no interface number 0 [ 515.990155][ T9] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 515.990183][ T9] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 516.077664][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 516.077697][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.077720][ T9] usb 3-1: Product: syz [ 516.077736][ T9] usb 3-1: Manufacturer: syz [ 516.077751][ T9] usb 3-1: SerialNumber: syz [ 516.164102][ T9] usb 3-1: config 0 descriptor?? [ 516.165497][T15046] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 516.165759][T15046] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 516.404977][T15046] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 516.407621][T15046] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 516.461693][T15056] loop4: detected capacity change from 0 to 256 [ 516.640971][T15056] FAT-fs (loop4): Directory bread(block 64) failed [ 516.641007][T15056] FAT-fs (loop4): Directory bread(block 65) failed [ 516.641133][T15056] FAT-fs (loop4): Directory bread(block 66) failed [ 516.641158][T15056] FAT-fs (loop4): Directory bread(block 67) failed [ 516.641251][T15056] FAT-fs (loop4): Directory bread(block 68) failed [ 516.641272][T15056] FAT-fs (loop4): Directory bread(block 69) failed [ 516.641378][T15056] FAT-fs (loop4): Directory bread(block 70) failed [ 516.641401][T15056] FAT-fs (loop4): Directory bread(block 71) failed [ 516.641508][T15056] FAT-fs (loop4): Directory bread(block 72) failed [ 516.641532][T15056] FAT-fs (loop4): Directory bread(block 73) failed [ 516.713437][ T9] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 516.713480][ T9] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 516.714025][ T9] asix 3-1:0.251: probe with driver asix failed with error -5 [ 516.752567][ T9] usb 3-1: USB disconnect, device number 20 [ 517.009123][ T38] audit: type=1800 audit(1776121563.933:321): pid=15056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3870" name="file1" dev="loop4" ino=1048668 res=0 errno=0 [ 517.294169][T15048] loop0: detected capacity change from 0 to 32768 [ 517.324707][ T6065] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 517.386258][T15048] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 517.428450][T15072] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3875'. [ 517.545435][ T6065] usb 6-1: Using ep0 maxpacket: 16 [ 517.547715][ T6065] usb 6-1: config 0 has an invalid interface number: 180 but max is 0 [ 517.547744][ T6065] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.547766][ T6065] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 517.547790][ T6065] usb 6-1: config 0 has no interface number 1 [ 517.613890][ T6065] usb 6-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 517.613926][ T6065] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.613958][ T6065] usb 6-1: Product: syz [ 517.613974][ T6065] usb 6-1: Manufacturer: syz [ 517.613990][ T6065] usb 6-1: SerialNumber: syz [ 517.648627][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 517.674922][ T6065] usb 6-1: config 0 descriptor?? [ 517.701985][ T6065] rndis_host 6-1:0.180: rndis: master #0/ffff88804c090000 slave #1/0000000000000000 [ 517.744939][T15048] XFS (loop0): Ending clean mount [ 517.796744][ T9] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 517.796781][ T9] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 517.796822][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 517.796847][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.921234][ T6065] usb 6-1: USB disconnect, device number 12 [ 518.291565][ T9] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 518.319608][ T9] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input13 [ 518.453371][T15061] loop3: detected capacity change from 0 to 32768 [ 518.474825][ T9] input: failed to attach handler kbd to device input13, error: -5 [ 518.517324][ T9] usb 5-1: USB disconnect, device number 18 [ 518.523561][T15048] syz.0.3865: attempt to access beyond end of device [ 518.523561][T15048] loop0: rw=4096, sector=4227071, nr_sectors = 1 limit=32768 [ 518.681930][ T5827] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 519.574644][ T5911] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 519.807331][ T5911] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 519.807365][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 519.807385][ T5911] usb 3-1: Product: syz [ 519.807402][ T5911] usb 3-1: SerialNumber: syz [ 519.964599][ T5911] usb 3-1: config 0 descriptor?? [ 520.014876][ T37] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 520.068114][ T9] kernel write not supported for file /input/mice (pid: 9 comm: kworker/0:0) [ 520.291081][ T37] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 520.291113][ T37] usb 1-1: config 0 has no interface number 1 [ 520.291176][ T37] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 520.291216][ T37] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 520.292582][ T37] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 520.292635][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.292658][ T37] usb 1-1: SerialNumber: syz [ 520.436319][ T9] usb 3-1: USB disconnect, device number 21 [ 520.475238][ T37] usb 1-1: config 0 descriptor?? [ 520.527684][ T37] uvcvideo 1-1:0.199: Found UVC 0.00 device (0002:0000) [ 520.527720][ T37] uvcvideo 1-1:0.199: No valid video chain found. [ 520.905875][ T9] usb 1-1: USB disconnect, device number 15 [ 521.020326][T15137] loop4: detected capacity change from 0 to 512 [ 521.117356][T15137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.123363][T15144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3906'. [ 521.349626][T15150] ceph: No source [ 521.424889][T15137] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.3904: bg 0: bad block bitmap checksum [ 521.623866][T15137] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 521.659860][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3912'. [ 521.808231][ T37] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 521.862675][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.994641][T15168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3919'. [ 521.994683][T15168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3919'. [ 522.017119][ T37] usb 4-1: config index 0 descriptor too short (expected 2084, got 36) [ 522.017204][ T37] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 522.017341][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.017426][ T37] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 522.017545][ T37] usb 4-1: New USB device found, idVendor=054c, idProduct=0cc6, bcdDevice= 0.00 [ 522.017612][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.100983][ T37] usb 4-1: config 0 descriptor?? [ 522.160588][ T37] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 522.160614][ T37] usbhid 4-1:0.0: can't add hid device: -22 [ 522.160728][ T37] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 522.278633][T15176] netlink: 'syz.2.3922': attribute type 1 has an invalid length. [ 522.303676][T15170] loop5: detected capacity change from 0 to 256 [ 522.335249][ T9] usb 4-1: USB disconnect, device number 14 [ 522.474106][T15170] FAT-fs (loop5): Directory bread(block 64) failed [ 522.474140][T15170] FAT-fs (loop5): Directory bread(block 65) failed [ 522.474242][T15170] FAT-fs (loop5): Directory bread(block 66) failed [ 522.474267][T15170] FAT-fs (loop5): Directory bread(block 67) failed [ 522.474363][T15170] FAT-fs (loop5): Directory bread(block 68) failed [ 522.508142][T15170] FAT-fs (loop5): Directory bread(block 69) failed [ 522.508269][T15170] FAT-fs (loop5): Directory bread(block 70) failed [ 522.508295][T15170] FAT-fs (loop5): Directory bread(block 71) failed [ 522.508401][T15170] FAT-fs (loop5): Directory bread(block 72) failed [ 522.508427][T15170] FAT-fs (loop5): Directory bread(block 73) failed [ 522.820212][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3926'. [ 522.820240][T15184] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3926'. [ 522.820257][T15184] netlink: 580 bytes leftover after parsing attributes in process `syz.5.3926'. [ 522.820273][T15184] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3926'. [ 523.322373][T15199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3934'. [ 523.504666][T15204] bond0: option lacp_active: invalid value (9) [ 523.538583][T15204] bond0 (unregistering): Released all slaves [ 523.851163][T15220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.909330][ T10] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 524.067214][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.067243][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 524.068020][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 524.068066][ T10] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 524.068091][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.108217][T15211] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.142706][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 524.142748][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 524.143717][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 524.143733][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 524.608642][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 524.608682][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 524.666418][ T38] audit: type=1326 audit(1776121571.603:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5161c819 code=0x7ffc0000 [ 524.671413][ T38] audit: type=1326 audit(1776121571.603:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5161c819 code=0x7ffc0000 [ 524.723473][ T38] audit: type=1326 audit(1776121571.663:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5161c819 code=0x7ffc0000 [ 524.723991][ T38] audit: type=1326 audit(1776121571.663:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5161c819 code=0x7ffc0000 [ 524.724043][ T38] audit: type=1326 audit(1776121571.663:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f4d5161c819 code=0x7ffc0000 [ 524.757126][ T38] audit: type=1326 audit(1776121571.663:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5161c819 code=0x7ffc0000 [ 524.799413][ T38] audit: type=1326 audit(1776121571.693:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5161c819 code=0x7ffc0000 [ 524.799549][ T38] audit: type=1326 audit(1776121571.723:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d5161c819 code=0x7ffc0000 [ 524.799680][ T38] audit: type=1326 audit(1776121571.733:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d5161c819 code=0x7ffc0000 [ 524.817589][T15219] loop3: detected capacity change from 0 to 32768 [ 524.946990][ T10] usb 6-1: USB disconnect, device number 13 [ 525.075020][T15219] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.280331][T15219] XFS (loop3): Ending clean mount [ 525.478742][T15257] geneve3: entered allmulticast mode [ 525.521344][ T5828] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.667514][ T38] audit: type=1326 audit(1776121572.593:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.4.3959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5161c819 code=0x7ffc0000 [ 525.846830][T15263] loop0: detected capacity change from 0 to 4096 [ 525.849132][T15263] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 525.953143][T15267] loop4: detected capacity change from 0 to 2048 [ 525.962289][T15267] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 526.043282][T15267] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 526.044170][T15263] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 526.060857][T15267] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 526.099072][T15263] ntfs3(loop0): ino=19, mi_enum_attr [ 526.115229][T15267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 526.192947][T15263] ntfs3(loop0): failed to convert "c46c" to macgaelic [ 526.197187][T15263] ntfs3(loop0): ino=20, mi_enum_attr [ 527.599336][T15295] libceph: resolve '96' (ret=-3): failed [ 527.824953][T15277] loop4: detected capacity change from 0 to 32768 [ 527.908911][T15285] loop3: detected capacity change from 0 to 32768 [ 527.935313][T15285] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3960 (15285) [ 527.936010][T15277] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 527.966491][T15285] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 527.966614][T15285] BTRFS info (device loop3): using sha256 checksum algorithm [ 528.050000][T15277] XFS (loop4): Ending clean mount [ 528.287150][T15285] BTRFS info (device loop3): enabling ssd optimizations [ 528.287196][T15285] BTRFS info (device loop3): turning on async discard [ 528.287216][T15285] BTRFS info (device loop3): enabling free space tree [ 528.441957][ T5828] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 528.521737][ T5831] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 529.058827][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3985'. [ 529.908556][T15356] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3995'. [ 529.908848][T15356] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3995'. [ 530.127080][T15358] bond5: option updelay: invalid value (18446744073709551615) [ 530.127123][T15358] bond5: option updelay: allowed values 0 - 2147483647 [ 530.171221][T15358] bond5 (unregistering): Released all slaves [ 530.983457][ T5910] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 531.004344][T15384] loop5: detected capacity change from 0 to 2048 [ 531.026414][T15389] loop2: detected capacity change from 0 to 512 [ 531.110455][T15384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 531.156847][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 531.182060][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 531.182096][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 531.182124][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 531.211147][ T5910] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 531.211234][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.211292][ T5910] usb 1-1: Product: syz [ 531.211349][ T5910] usb 1-1: Manufacturer: syz [ 531.211396][ T5910] usb 1-1: SerialNumber: syz [ 531.336703][ T5910] usb 1-1: config 0 descriptor?? [ 531.432975][T15389] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.4011: iget: bad extra_isize 90 (inode size 256) [ 531.433015][T15389] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 531.434448][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 531.434469][ C1] EXT4-fs (loop2): initial error at time 1776121578: ext4_xattr_inode_iget:441: inode 11 [ 531.434501][ C1] EXT4-fs (loop2): last error at time 1776121578: ext4_xattr_inode_iget:441: inode 11 [ 531.488155][T15389] EXT4-fs (loop2): Remounting filesystem read-only [ 531.488363][T15389] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 531.488447][T15389] EXT4-fs (loop2): 1 orphan inode deleted [ 531.491513][T15389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.588555][T15397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.639480][ T5910] usb 1-1: no audio or video endpoints found [ 531.648532][T15389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.662178][T15395] loop3: detected capacity change from 0 to 256 [ 531.678692][ T5910] usb 1-1: USB disconnect, device number 16 [ 531.682726][T15395] exfat: Deprecated parameter 'utf8' [ 531.682745][T15395] exfat: Deprecated parameter 'utf8' [ 531.876376][T15395] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 532.245736][ T37] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 532.401401][T15414] loop0: detected capacity change from 0 to 64 [ 532.416986][ T37] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 532.417017][ T37] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 532.417042][ T37] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.417055][ T37] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 532.417070][ T37] usb 6-1: config 1 has no interface number 0 [ 532.417104][ T37] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 532.417121][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.502524][ T37] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 532.634605][T15420] dlm: no locking on control device [ 532.700430][ T37] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 532.700832][ T37] snd_usb_pod 6-1:1.1: invalid control EP [ 532.700848][ T37] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 532.751293][ T37] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 532.751867][ T37] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 532.942208][ T5910] usb 6-1: USB disconnect, device number 14 [ 533.277281][T15429] loop2: detected capacity change from 0 to 4096 [ 533.292013][T15429] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 533.356445][T15429] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 533.357982][T15429] ntfs3(loop2): ino=19, mi_enum_attr [ 533.402334][T15429] ntfs3(loop2): failed to convert "c46c" to macgaelic [ 533.431322][T15429] ntfs3(loop2): ino=20, mi_enum_attr [ 533.697484][T15445] loop4: detected capacity change from 0 to 1024 [ 533.872522][T15453] netlink: 'syz.3.4039': attribute type 39 has an invalid length. [ 534.207593][T15458] netlink: 'syz.0.4041': attribute type 2 has an invalid length. [ 534.442063][T15467] veth1_vlan: left allmulticast mode [ 534.642367][T15472] loop2: detected capacity change from 0 to 4096 [ 534.654850][T15472] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 534.677870][T15473] loop4: detected capacity change from 0 to 4096 [ 534.704607][T15473] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 534.831162][T15473] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 534.842433][T15473] ntfs3(loop4): ino=19, mi_enum_attr [ 534.912190][T15473] ntfs3(loop4): failed to convert "c46c" to macgaelic [ 534.981640][T15485] loop0: detected capacity change from 0 to 64 [ 535.198070][T15473] ntfs3(loop4): ino=20, mi_enum_attr [ 536.011520][T15499] loop4: detected capacity change from 0 to 8192 [ 536.037886][T15499] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 536.113910][T15499] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 536.113940][T15499] FAT-fs (loop4): Filesystem has been set read-only [ 536.396519][ T5831] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 536.821231][T15533] loop2: detected capacity change from 0 to 512 [ 536.881500][T15533] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 537.065101][T15533] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 537.238579][T15547] loop5: detected capacity change from 0 to 1024 [ 537.383242][ T5829] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 537.629372][T15553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4089'. [ 537.711356][ T6039] hfsplus: b-tree write err: -5, ino 25 [ 537.711556][ T6039] hfsplus: b-tree write err: -5, ino 4 [ 537.711687][ T6039] hfsplus: b-tree write err: -5, ino 2 [ 537.794227][ T6039] hfsplus: b-tree write err: -5, ino 20 [ 538.251983][T15569] netlink: 112 bytes leftover after parsing attributes in process `syz.5.4097'. [ 538.496371][T15541] loop0: detected capacity change from 0 to 32768 [ 538.550005][T15580] program syz.5.4101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.646889][T15578] loop2: detected capacity change from 0 to 1024 [ 538.677314][T15578] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 538.685564][T15578] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 538.876345][T15541] JBD2: Ignoring recovery information on journal [ 538.876943][T15578] EXT4-fs (loop2): orphan cleanup on readonly fs [ 539.101141][T15578] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.4100: Invalid inode table block 0 in block_group 0 [ 539.101175][T15578] loop2: lost filesystem error report for type 5 error -117 [ 539.113094][T15578] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 539.113329][T15578] loop2: lost filesystem error report for type 5 error -117 [ 539.114533][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 539.114554][ C1] EXT4-fs (loop2): initial error at time 1776121586: __ext4_get_inode_loc:4885 [ 539.114578][ C1] EXT4-fs (loop2): last error at time 1776121586: ext4_reserve_inode_write:6383 [ 539.122599][T15578] EXT4-fs error (device loop2): ext4_quota_write:7423: inode #3: comm syz.2.4100: mark_inode_dirty error [ 539.122710][T15578] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 539.126118][T15578] __quota_error: 8 callbacks suppressed [ 539.126171][T15578] Quota error (device loop2): write_blk: dquota write failed [ 539.126406][T15578] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 539.126522][T15578] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.4100: Failed to acquire dquot type 0 [ 539.126590][T15578] loop2: lost filesystem error report for type 5 error -117 [ 539.139224][T15578] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.4100: Invalid inode table block 0 in block_group 0 [ 539.139361][T15578] loop2: lost filesystem error report for type 5 error -117 [ 539.199572][T15593] openvswitch: netlink: Duplicate or invalid key (type 0). [ 539.199692][T15593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.418920][T15541] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 539.542554][T15578] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 539.542581][T15578] loop2: lost filesystem error report for type 5 error -117 [ 539.542903][T15578] EXT4-fs error (device loop2): ext4_ext_truncate:4557: inode #15: comm syz.2.4100: mark_inode_dirty error [ 539.542935][T15578] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 539.549544][T15578] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.4100: Invalid inode table block 0 in block_group 0 [ 539.549643][T15578] loop2: lost filesystem error report for type 5 error -117 [ 539.550691][T15578] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 539.550758][T15578] loop2: lost filesystem error report for type 5 error -117 [ 539.564169][T15578] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 539.564244][T15578] loop2: lost filesystem error report for type 5 error -117 [ 539.602875][T15578] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.4100: Invalid inode table block 0 in block_group 0 [ 539.602990][T15578] loop2: lost filesystem error report for type 5 error -117 [ 539.603749][T15578] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 539.603804][T15578] loop2: lost filesystem error report for type 5 error -117 [ 539.720681][T15578] EXT4-fs error (device loop2): ext4_truncate:4690: inode #15: comm syz.2.4100: mark_inode_dirty error [ 539.720720][T15578] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 539.721015][T15578] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 539.721345][T15578] EXT4-fs (loop2): 1 truncate cleaned up [ 539.782670][T15578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 539.846035][T15578] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.4100: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 540.280100][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.287473][T15608] trusted_key: encrypted_key: hex blob is missing [ 540.427249][T15541] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 540.497693][T15541] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 540.497712][T15541] OCFS2: File system is now read-only. [ 540.497733][T15541] (syz.0.4081,15541,1):ocfs2_search_chain:1948 ERROR: status = -30 [ 540.497760][T15541] (syz.0.4081,15541,1):ocfs2_search_chain:2036 ERROR: status = -30 [ 540.497786][T15541] (syz.0.4081,15541,1):ocfs2_claim_suballoc_bits:2123 ERROR: status = -30 [ 540.497810][T15541] (syz.0.4081,15541,1):ocfs2_claim_suballoc_bits:2176 ERROR: status = -30 [ 540.497835][T15541] (syz.0.4081,15541,1):ocfs2_claim_new_inode:2417 ERROR: status = -30 [ 540.497858][T15541] (syz.0.4081,15541,1):ocfs2_claim_new_inode:2432 ERROR: status = -30 [ 540.497881][T15541] (syz.0.4081,15541,1):ocfs2_mknod_locked:642 ERROR: status = -30 [ 540.497905][T15541] (syz.0.4081,15541,1):ocfs2_mknod:389 ERROR: status = -30 [ 540.598113][T15541] (syz.0.4081,15541,0):ocfs2_mknod:506 ERROR: status = -30 [ 540.598148][T15541] (syz.0.4081,15541,0):ocfs2_mkdir:662 ERROR: status = -30 [ 540.799401][T15618] MTD: Attempt to mount non-MTD device "./file0" [ 540.799771][T15618] ./file0: Can't open blockdev [ 541.005693][ T5827] ocfs2: Unmounting device (7,0) on (node local) [ 542.196210][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 542.397840][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 542.401574][ T9] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 542.409486][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 542.409576][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.409642][ T9] usb 6-1: Product: syz [ 542.409679][ T9] usb 6-1: Manufacturer: syz [ 542.409723][ T9] usb 6-1: SerialNumber: syz [ 542.476807][ T9] r8152-cfgselector 6-1: Unknown version 0x0000 [ 542.476836][ T9] r8152-cfgselector 6-1: config 0 descriptor?? [ 542.668287][T15659] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4135'. [ 542.668320][T15659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4135'. [ 542.668342][T15659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4135'. [ 542.668360][T15659] netlink: 'syz.3.4135': attribute type 6 has an invalid length. [ 542.945220][ T37] r8152-cfgselector 6-1: USB disconnect, device number 15 [ 543.034670][T15673] loop0: detected capacity change from 0 to 64 [ 543.930255][T15690] loop2: detected capacity change from 0 to 2048 [ 543.957850][T15690] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=66359, location=66359 [ 544.001152][T15690] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.354545][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 544.506115][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 544.508671][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 544.508699][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 544.508721][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 544.508781][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 544.508805][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 544.508830][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6 [ 544.508857][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 544.508879][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 544.508905][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 544.508949][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 544.508973][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.601595][ T9] usb 6-1: config 0 descriptor?? [ 544.646920][ T38] audit: type=1326 audit(1776121591.583:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.2.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebf88c819 code=0x7ffc0000 [ 544.647731][ T38] audit: type=1326 audit(1776121591.583:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.2.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebf88c819 code=0x7ffc0000 [ 544.793772][ T38] audit: type=1326 audit(1776121591.673:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.2.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f5ebf88c819 code=0x7ffc0000 [ 544.804748][ T38] audit: type=1326 audit(1776121591.733:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.2.4155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebf88c819 code=0x7ffc0000 [ 544.859930][ T6051] usb 6-1: USB disconnect, device number 16 [ 545.693413][T15713] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 545.760367][T15713] bond0 (unregistering): Released all slaves [ 546.091538][T15696] Bluetooth: hci3: command 0x0406 tx timeout [ 546.229001][T15731] program syz.5.4169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.738614][ T38] audit: type=1326 audit(1776121593.673:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15742 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df839c819 code=0x7ffc0000 [ 546.740507][ T38] audit: type=1326 audit(1776121593.673:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15742 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df839c819 code=0x7ffc0000 [ 546.742049][ T38] audit: type=1326 audit(1776121593.673:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15742 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df839c819 code=0x7ffc0000 [ 546.742352][ T38] audit: type=1326 audit(1776121593.673:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15742 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f4df839c819 code=0x7ffc0000 [ 546.805965][ T38] audit: type=1326 audit(1776121593.723:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15742 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df839c819 code=0x7ffc0000 [ 546.900409][ T38] audit: type=1326 audit(1776121593.833:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15742 comm="syz.0.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4df835d04e code=0x7ffc0000 [ 547.444670][T15753] netlink: 'syz.0.4180': attribute type 62 has an invalid length. [ 547.444714][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4180'. [ 547.901365][T15766] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4186'. [ 548.010279][T15727] loop3: detected capacity change from 0 to 32768 [ 548.020002][T15766] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4186'. [ 548.031937][T15727] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4167 (15727) [ 548.074599][ T6051] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 548.078895][T15727] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 548.078929][T15727] BTRFS info (device loop3): using crc32c checksum algorithm [ 548.219764][ T6051] usb 1-1: too many configurations: 37, using maximum allowed: 8 [ 548.233590][ T6051] usb 1-1: config index 0 descriptor too short (expected 72, got 36) [ 548.269830][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 548.269870][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 548.269899][ T6051] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 548.271775][ T6051] usb 1-1: config index 1 descriptor too short (expected 72, got 36) [ 548.271828][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 548.271857][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 548.271884][ T6051] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 548.273619][ T6051] usb 1-1: config index 2 descriptor too short (expected 72, got 36) [ 548.273684][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 548.273714][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 548.273742][ T6051] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 548.294755][ T6051] usb 1-1: config index 3 descriptor too short (expected 72, got 36) [ 548.294806][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 548.294831][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 548.294857][ T6051] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 548.313122][ T6051] usb 1-1: config index 4 descriptor too short (expected 72, got 36) [ 548.313182][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 548.313212][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 548.313241][ T6051] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 548.326465][ T6051] usb 1-1: config index 5 descriptor too short (expected 72, got 36) [ 548.326525][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 548.326556][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 548.326584][ T6051] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 548.392890][ T6051] usb 1-1: config index 6 descriptor too short (expected 72, got 36) [ 548.392952][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 548.392984][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 548.393012][ T6051] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 548.484634][ T6051] usb 1-1: config index 7 descriptor too short (expected 72, got 36) [ 548.484696][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 548.484725][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 548.484753][ T6051] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 549.452686][ T6051] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 549.452721][ T6051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.452743][ T6051] usb 1-1: Product: syz [ 549.452757][ T6051] usb 1-1: Manufacturer: syz [ 549.452772][ T6051] usb 1-1: SerialNumber: syz [ 549.556201][T15762] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 549.556339][T15762] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 549.575421][ T6051] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 549.786786][ T37] usb 1-1: USB disconnect, device number 17 [ 549.967395][T15787] netlink: 'syz.2.4189': attribute type 10 has an invalid length. [ 550.176967][T15727] BTRFS error (device loop3): open_ctree failed: -4 [ 551.207742][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 551.394520][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 551.396961][ T10] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 551.396990][ T10] usb 6-1: config 8 has an invalid descriptor of length 64, skipping remainder of the config [ 551.397013][ T10] usb 6-1: config 8 has no interface number 0 [ 551.397058][ T10] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 551.397096][ T10] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 551.397127][ T10] usb 6-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1024 [ 551.397153][ T10] usb 6-1: config 8 interface 206 has no altsetting 0 [ 551.400109][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 551.400138][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.400159][ T10] usb 6-1: Product: syz [ 551.400174][ T10] usb 6-1: Manufacturer: syz [ 551.400191][ T10] usb 6-1: SerialNumber: syz [ 551.422885][T15804] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 551.718084][ T10] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 551.810454][ T10] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 551.854041][ T10] usb 6-1: USB disconnect, device number 17 [ 551.895884][T15798] loop0: detected capacity change from 0 to 32768 [ 551.911072][T15798] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4192 (15798) [ 551.948719][T15798] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 551.948755][T15798] BTRFS info (device loop0): using sha256 checksum algorithm [ 552.011673][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 552.012605][ T10] garmin_gps 6-1:8.206: device disconnected [ 552.439004][T15798] BTRFS info (device loop0): enabling ssd optimizations [ 552.439033][T15798] BTRFS info (device loop0): turning on async discard [ 552.439051][T15798] BTRFS info (device loop0): enabling free space tree [ 552.658346][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4202'. [ 552.700530][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 552.700550][ T38] audit: type=1326 audit(1776121599.613:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.3.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 552.700602][ T38] audit: type=1326 audit(1776121599.633:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.3.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 552.759902][ T5827] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 552.773847][ T38] audit: type=1326 audit(1776121599.693:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.3.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 552.774027][ T38] audit: type=1326 audit(1776121599.703:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.3.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 552.819255][ T38] audit: type=1326 audit(1776121599.713:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.3.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 552.819417][ T38] audit: type=1326 audit(1776121599.733:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.3.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 552.819543][ T38] audit: type=1326 audit(1776121599.743:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.3.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 552.819673][ T38] audit: type=1326 audit(1776121599.743:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.3.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 552.826900][ T38] audit: type=1326 audit(1776121599.743:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.3.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 553.599736][T15811] loop4: detected capacity change from 0 to 32768 [ 553.747575][T15811] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4200 (15811) [ 553.832423][T15811] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 553.832457][T15811] BTRFS info (device loop4): using sha256 checksum algorithm [ 554.104978][T15811] BTRFS info (device loop4): enabling ssd optimizations [ 554.105008][T15811] BTRFS info (device loop4): turning on async discard [ 554.105026][T15811] BTRFS info (device loop4): enabling free space tree [ 554.250205][T15811] BTRFS info (device loop4): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 554.332063][T15878] netlink: 'syz.3.4215': attribute type 5 has an invalid length. [ 555.643502][ T5831] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 555.836886][T15909] loop5: detected capacity change from 0 to 512 [ 555.838001][T15909] EXT4-fs: Ignoring removed orlov option [ 555.838838][T15909] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 555.858347][ T5910] IPVS: starting estimator thread 0... [ 556.028680][T15907] IPVS: using max 11 ests per chain, 26400 per kthread [ 556.494211][T15916] loop2: detected capacity change from 0 to 4096 [ 556.741157][T15909] EXT4-fs (loop5): 1 orphan inode deleted [ 556.741181][T15909] EXT4-fs (loop5): 1 truncate cleaned up [ 556.748760][T15909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.891684][T15916] ntfs3(loop2): ino=b, mi_enum_attr [ 556.891717][T15916] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 556.892075][T15916] ntfs3(loop2): Failed to load $Extend (-22). [ 556.892096][T15916] ntfs3(loop2): Failed to initialize $Extend. [ 557.256556][ T9356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.498517][T15926] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 557.622381][T15928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4241'. [ 557.622420][T15928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4241'. [ 558.645297][T15947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4248'. [ 559.119671][T15958] loop0: detected capacity change from 0 to 4096 [ 559.132441][T15958] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 559.234229][T15958] ntfs3(loop0): ino=19, mi_enum_attr [ 559.398606][T15886] block device autoloading is deprecated and will be removed. [ 559.647727][T15974] loop2: detected capacity change from 0 to 164 [ 559.884907][T15978] loop0: detected capacity change from 0 to 2048 [ 559.934078][T15978] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 559.946164][T15978] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 559.968916][T15978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 560.006279][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 560.014283][ T6051] kernel write not supported for file /input/mice (pid: 6051 comm: kworker/1:6) [ 560.184048][ T9] usb 5-1: config index 0 descriptor too short (expected 65157, got 72) [ 560.202097][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 560.202125][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.202144][ T9] usb 5-1: Product: syz [ 560.202158][ T9] usb 5-1: Manufacturer: syz [ 560.202172][ T9] usb 5-1: SerialNumber: syz [ 560.385567][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 560.460877][ T5910] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 561.441957][T16009] loop5: detected capacity change from 0 to 8 [ 561.512675][T16006] loop0: detected capacity change from 0 to 4096 [ 561.888884][ T5910] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 561.889080][ T5910] ath9k_htc: Failed to initialize the device [ 561.942434][ T9] usb 5-1: USB disconnect, device number 19 [ 561.951710][T16009] SQUASHFS error: lzo decompression failed, data probably corrupt [ 561.951742][T16009] SQUASHFS error: Failed to read block 0x91: -5 [ 561.951760][T16009] SQUASHFS error: Unable to read metadata cache entry [8f] [ 561.951776][T16009] SQUASHFS error: Unable to read inode 0x11f [ 562.021271][T16006] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 562.072696][T16009] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 562.072696][T16009] SȘȞZ6' [ 562.210172][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 562.809161][T15991] loop2: detected capacity change from 0 to 32768 [ 563.065435][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.243662][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4286'. [ 563.243688][T16022] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4286'. [ 563.243705][T16022] netlink: 580 bytes leftover after parsing attributes in process `syz.4.4286'. [ 563.243721][T16022] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4286'. [ 563.726936][T16039] loop5: detected capacity change from 0 to 256 [ 563.734316][T16039] exfat: Deprecated parameter 'utf8' [ 563.785741][T15991] read_mapping_page failed! [ 563.785776][T15991] jfs_rename: dtInsert returned -EIO [ 563.857434][T16039] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 563.904202][T16007] loop3: detected capacity change from 0 to 32768 [ 563.995935][T16007] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 564.041610][T16007] XFS (loop3): Ending clean mount [ 564.614100][ T5828] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 564.839264][T16065] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4305'. [ 564.897824][T16067] openvswitch: netlink: Message has 4 unknown bytes. [ 564.898039][T16067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.390683][T16073] bridge0: port 1(team_slave_0) entered blocking state [ 565.390777][T16073] bridge0: port 1(team_slave_0) entered disabled state [ 565.390985][T16073] team_slave_0: entered allmulticast mode [ 565.459278][T16073] team_slave_0: entered promiscuous mode [ 566.883938][T16103] netlink: 'syz.0.4320': attribute type 1 has an invalid length. [ 566.883965][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4320'. [ 567.636112][T16110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4323'. [ 568.227023][T16124] loop0: detected capacity change from 0 to 1024 [ 568.306267][T16124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.355993][T16124] EXT4-fs: Ignoring sb option on remount [ 568.373862][T16086] loop2: detected capacity change from 0 to 32768 [ 568.408057][T16124] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 568.468026][T16131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.468299][T16086] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 568.512753][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.617406][T16086] XFS (loop2): Ending clean mount [ 568.799287][T16086] syz.2.4312: attempt to access beyond end of device [ 568.799287][T16086] loop2: rw=4096, sector=4227071, nr_sectors = 1 limit=32768 [ 569.079489][ T5829] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 569.158789][T16143] loop4: detected capacity change from 0 to 4096 [ 569.228429][T16145] bond3: option updelay: invalid value (18446744073709551615) [ 569.228450][T16145] bond3: option updelay: allowed values 0 - 2147483647 [ 569.281401][T16143] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 569.299409][T16143] ntfs3(loop4): Failed to load $Extend (-22). [ 569.299434][T16143] ntfs3(loop4): Failed to initialize $Extend. [ 569.402080][T16145] bond3 (unregistering): Released all slaves [ 570.143869][T16157] loop0: detected capacity change from 0 to 4096 [ 570.153752][T16157] EXT4-fs: Ignoring removed mblk_io_submit option [ 570.183968][T16157] EXT4-fs (loop0): Test dummy encryption mode enabled [ 570.207132][T16157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.273167][T16168] loop2: detected capacity change from 0 to 256 [ 570.418135][T16168] FAT-fs (loop2): Directory bread(block 64) failed [ 570.418171][T16168] FAT-fs (loop2): Directory bread(block 65) failed [ 570.418391][T16168] FAT-fs (loop2): Directory bread(block 66) failed [ 570.418418][T16168] FAT-fs (loop2): Directory bread(block 67) failed [ 570.418520][T16168] FAT-fs (loop2): Directory bread(block 68) failed [ 570.418547][T16168] FAT-fs (loop2): Directory bread(block 69) failed [ 570.418647][T16168] FAT-fs (loop2): Directory bread(block 70) failed [ 570.418672][T16168] FAT-fs (loop2): Directory bread(block 71) failed [ 570.418790][T16168] FAT-fs (loop2): Directory bread(block 72) failed [ 570.418816][T16168] FAT-fs (loop2): Directory bread(block 73) failed [ 570.900585][T16183] netlink: 'syz.3.4352': attribute type 5 has an invalid length. [ 570.900609][T16183] netlink: 'syz.3.4352': attribute type 5 has an invalid length. [ 570.900625][T16183] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4352'. [ 570.902720][T16181] comedi comedi0: Cannot bond this driver to itself! [ 571.013456][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.320680][T16193] loop5: detected capacity change from 0 to 64 [ 572.032326][T16212] loop4: detected capacity change from 0 to 4096 [ 572.050527][T16212] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 572.078430][T16212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 572.245724][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.278822][T16226] netlink: 'syz.2.4373': attribute type 5 has an invalid length. [ 572.370423][T16219] loop0: detected capacity change from 0 to 8192 [ 572.495036][T16219] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 572.730142][T16239] netlink: 'syz.2.4380': attribute type 1 has an invalid length. [ 573.138783][T16251] loop3: detected capacity change from 0 to 64 [ 573.383568][T16256] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 573.658811][T16269] netlink: 'syz.0.4395': attribute type 5 has an invalid length. [ 573.819835][T16275] netlink: 'syz.0.4399': attribute type 4 has an invalid length. [ 573.960107][T16281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.041512][T16285] netlink: 'syz.5.4402': attribute type 1 has an invalid length. [ 574.260762][T16292] loop4: detected capacity change from 0 to 2048 [ 574.294319][T16292] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 574.319186][T16292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 575.060633][T16316] loop5: detected capacity change from 0 to 256 [ 575.071307][T16316] exfat: Deprecated parameter 'utf8' [ 575.071330][T16316] exfat: Deprecated parameter 'utf8' [ 575.219278][T16316] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 575.613920][T16300] loop2: detected capacity change from 0 to 32768 [ 575.669235][T16300] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 575.786128][T16300] XFS (loop2): Ending clean mount [ 575.880333][T16300] XFS (loop2): Quotacheck needed: Please wait. [ 576.339126][T16358] trusted_key: encrypted_key: hex blob is missing [ 576.455158][ T5911] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 576.512048][T16364] loop4: detected capacity change from 0 to 64 [ 576.617209][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.617236][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 576.617295][ T5911] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 576.617336][ T5911] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 576.617370][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.675784][T16356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 576.679193][ T5911] hub 4-1:1.0: bad descriptor, ignoring hub [ 576.679229][ T5911] hub 4-1:1.0: probe with driver hub failed with error -5 [ 576.680194][ T5911] cdc_wdm 4-1:1.0: skipping garbage [ 576.680212][ T5911] cdc_wdm 4-1:1.0: skipping garbage [ 576.741473][ T5911] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 576.741498][ T5911] cdc_wdm 4-1:1.0: Unknown control protocol [ 577.006573][ T5911] usb 4-1: USB disconnect, device number 15 [ 577.089105][T16374] loop4: detected capacity change from 0 to 1024 [ 577.416111][T16300] XFS (loop2): Quotacheck: Done. [ 577.422663][T16374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.466097][T16374] EXT4-fs: Ignoring sb option on remount [ 577.514336][T16374] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 577.603729][ T5829] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 577.729579][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.787162][T16385] bond3: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 577.871955][T16385] bond3 (unregistering): Released all slaves [ 578.107495][T16396] loop3: detected capacity change from 0 to 512 [ 578.479281][T16396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.845928][T16396] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.4450: bg 0: bad block bitmap checksum [ 578.865488][T16396] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 578.957692][T16409] m1: entered promiscuous mode [ 579.156620][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.505710][ T6051] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 579.527753][T16421] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4458'. [ 579.527779][T16421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4458'. [ 579.527800][T16421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4458'. [ 579.527816][T16421] netlink: 'syz.2.4458': attribute type 6 has an invalid length. [ 579.528563][T16419] loop3: detected capacity change from 0 to 1024 [ 579.667087][ T6051] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.667116][ T6051] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 579.667167][ T6051] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 579.667211][ T6051] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 579.667236][ T6051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.725696][T16417] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 579.729224][ T6051] hub 1-1:1.0: bad descriptor, ignoring hub [ 579.729262][ T6051] hub 1-1:1.0: probe with driver hub failed with error -5 [ 579.730125][ T6051] cdc_wdm 1-1:1.0: skipping garbage [ 579.730140][ T6051] cdc_wdm 1-1:1.0: skipping garbage [ 579.809280][ T6051] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 579.809302][ T6051] cdc_wdm 1-1:1.0: Unknown control protocol [ 579.830187][T16419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.849487][T16419] EXT4-fs: Ignoring sb option on remount [ 579.974479][T16419] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 580.054914][ T5910] usb 1-1: USB disconnect, device number 18 [ 580.116578][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.222940][T16402] loop4: detected capacity change from 0 to 32768 [ 580.292619][T16402] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 580.469187][T16402] XFS (loop4): Ending clean mount [ 580.705632][ T5831] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 580.893939][T16413] loop5: detected capacity change from 0 to 32768 [ 581.162956][T16413] JBD2: Ignoring recovery information on journal [ 581.287016][T16461] loop2: detected capacity change from 0 to 1024 [ 581.353198][T16461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.428658][T16461] EXT4-fs: Ignoring sb option on remount [ 581.466921][T16413] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 581.520016][T16459] loop0: detected capacity change from 0 to 4096 [ 581.548242][T16459] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 581.663226][T16461] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 581.824482][ T5910] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 581.953698][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.024651][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 582.032374][ T5910] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 582.054497][ T5910] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 582.054526][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.054548][ T5910] usb 4-1: Product: syz [ 582.054564][ T5910] usb 4-1: Manufacturer: syz [ 582.054579][ T5910] usb 4-1: SerialNumber: syz [ 582.120160][ T5910] r8152-cfgselector 4-1: Unknown version 0x0000 [ 582.120186][ T5910] r8152-cfgselector 4-1: config 0 descriptor?? [ 582.287866][T16413] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 582.352291][T16413] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 582.352307][T16413] OCFS2: File system is now read-only. [ 582.352324][T16413] (syz.5.4456,16413,1):ocfs2_search_chain:1948 ERROR: status = -30 [ 582.352350][T16413] (syz.5.4456,16413,1):ocfs2_search_chain:2036 ERROR: status = -30 [ 582.352372][T16413] (syz.5.4456,16413,1):ocfs2_claim_suballoc_bits:2123 ERROR: status = -30 [ 582.352392][T16413] (syz.5.4456,16413,1):ocfs2_claim_suballoc_bits:2176 ERROR: status = -30 [ 582.352413][T16413] (syz.5.4456,16413,1):ocfs2_claim_new_inode:2417 ERROR: status = -30 [ 582.352434][T16413] (syz.5.4456,16413,1):ocfs2_claim_new_inode:2432 ERROR: status = -30 [ 582.352454][T16413] (syz.5.4456,16413,1):ocfs2_mknod_locked:642 ERROR: status = -30 [ 582.352475][T16413] (syz.5.4456,16413,1):ocfs2_mknod:389 ERROR: status = -30 [ 582.536819][T16413] (syz.5.4456,16413,0):ocfs2_mknod:506 ERROR: status = -30 [ 582.536853][T16413] (syz.5.4456,16413,0):ocfs2_mkdir:662 ERROR: status = -30 [ 582.733659][T16481] loop4: detected capacity change from 0 to 64 [ 582.782987][ T5910] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 583.062923][ T9356] ocfs2: Unmounting device (7,5) on (node local) [ 583.446085][T16479] loop2: detected capacity change from 0 to 32768 [ 583.499795][T16479] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 583.540219][T16485] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 583.593851][T16485] bond5 (unregistering): Released all slaves [ 583.610538][T16498] netlink: 'syz.3.4487': attribute type 10 has an invalid length. [ 583.780236][T16479] XFS (loop2): Ending clean mount [ 583.849192][T16500] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4488'. [ 583.864991][T16500] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4488'. [ 583.865407][ T5829] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 584.116189][T16502] loop3: detected capacity change from 0 to 2048 [ 584.157647][T16502] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 584.163934][T16502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 585.271621][T16531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4500'. [ 585.935822][T16551] loop2: detected capacity change from 0 to 1024 [ 585.940850][T16551] EXT4-fs: Ignoring removed oldalloc option [ 585.940881][T16551] EXT4-fs: Ignoring removed bh option [ 585.971083][T16549] m1: entered promiscuous mode [ 585.990225][T16551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 586.174091][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.350685][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4513'. [ 586.569465][T16567] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4512'. [ 586.701102][T16574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4522'. [ 586.701132][T16574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4522'. [ 587.120737][T16589] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 587.407045][T16600] loop0: detected capacity change from 0 to 164 [ 587.585274][T16602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4534'. [ 587.585311][T16602] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4534'. [ 587.677134][T16604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4535'. [ 588.062111][T16580] loop2: detected capacity change from 0 to 32768 [ 588.132210][T16580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4523 (16580) [ 588.174613][T16580] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 588.174651][T16580] BTRFS info (device loop2): using sha256 checksum algorithm [ 588.520135][T16580] BTRFS info (device loop2): enabling ssd optimizations [ 588.520166][T16580] BTRFS info (device loop2): turning on async discard [ 588.520186][T16580] BTRFS info (device loop2): enabling free space tree [ 588.546068][T16633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4542'. [ 588.683079][T16580] BTRFS info (device loop2): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 588.816907][T16643] loop0: detected capacity change from 0 to 128 [ 588.818565][T16642] loop3: detected capacity change from 0 to 512 [ 588.821231][T16642] EXT4-fs: Ignoring removed orlov option [ 588.823295][T16642] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 588.978722][T16642] EXT4-fs (loop3): 1 orphan inode deleted [ 588.978775][T16642] EXT4-fs (loop3): 1 truncate cleaned up [ 589.020548][T16642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.345016][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.412509][T16649] loop4: detected capacity change from 0 to 4096 [ 589.423467][T16649] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 589.540730][T16656] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4554'. [ 589.602755][T16649] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 589.718465][ T5829] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 589.875252][T16657] loop5: detected capacity change from 0 to 256 [ 589.881446][T16657] exfat: Deprecated parameter 'utf8' [ 590.133390][T16657] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 590.263656][T16665] loop0: detected capacity change from 0 to 8 [ 590.331316][T16665] SQUASHFS error: lzo decompression failed, data probably corrupt [ 590.331350][T16665] SQUASHFS error: Failed to read block 0x91: -5 [ 590.331369][T16665] SQUASHFS error: Unable to read metadata cache entry [8f] [ 590.331386][T16665] SQUASHFS error: Unable to read inode 0x11f [ 590.363220][T16665] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 590.363220][T16665] SȘȞZ6' [ 590.402885][T16668] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4559'. [ 590.634261][T16671] openvswitch: netlink: Missing key (keys=2200040, expected=100) [ 590.768869][T16675] loop0: detected capacity change from 0 to 512 [ 590.769942][T16675] EXT4-fs: Ignoring removed orlov option [ 590.788430][T16675] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 590.991120][T16675] EXT4-fs (loop0): 1 orphan inode deleted [ 590.991148][T16675] EXT4-fs (loop0): 1 truncate cleaned up [ 591.021823][T16675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.066020][T16681] ieee802154 phy1 wpan1: encryption failed: -22 [ 591.369304][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.401782][T16669] loop4: detected capacity change from 0 to 40427 [ 592.569423][T16669] F2FS-fs (loop4): Corrupted extension count (33554469 + 1 > 64) [ 592.569452][T16669] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 592.653653][ T38] audit: type=1326 audit(1776121639.583:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16717 comm="syz.3.4582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c756bc819 code=0x0 [ 592.726288][T16669] F2FS-fs (loop4): invalid crc value [ 592.792280][T16722] loop5: detected capacity change from 0 to 4096 [ 592.803517][T16722] EXT4-fs (loop5): Test dummy encryption mode enabled [ 592.819488][T16722] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 592.819649][T16722] System zones: 0-5 [ 592.842443][T16722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.866065][T16722] tmpfs: User quota inode hardlimit too large. [ 592.989273][ T9356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.221200][T16727] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4585'. [ 593.314848][ T6051] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 593.471254][ T6051] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 593.471316][ T6051] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 593.471344][ T6051] usb 4-1: config 0 interface 0 has no altsetting 0 [ 593.477430][ T6051] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 593.477461][ T6051] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 593.477484][ T6051] usb 4-1: Product: syz [ 593.477499][ T6051] usb 4-1: Manufacturer: syz [ 593.477514][ T6051] usb 4-1: SerialNumber: syz [ 593.537394][ T6051] usb 4-1: config 0 descriptor?? [ 593.620998][ T6051] hub 4-1:0.0: bad descriptor, ignoring hub [ 593.621027][ T6051] hub 4-1:0.0: probe with driver hub failed with error -5 [ 593.643556][ T6051] usb 4-1: selecting invalid altsetting 0 [ 593.697623][T16669] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 593.917544][T16709] loop0: detected capacity change from 0 to 32768 [ 593.970657][T16709] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 594.002271][T16669] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 594.002303][T16669] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 594.063979][T16709] XFS (loop0): Ending clean mount [ 594.352299][ T5827] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 594.558092][T16745] bridge0: port 1(team_slave_0) entered blocking state [ 594.558207][T16745] bridge0: port 1(team_slave_0) entered disabled state [ 594.558443][T16745] team_slave_0: entered allmulticast mode [ 594.595749][T16745] team_slave_0: entered promiscuous mode [ 594.929919][T16751] sock: sock_timestamping_bind_phc: sock not bind to device [ 595.510305][ T6051] usb 4-1: USB disconnect, device number 17 [ 595.705325][T16767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4601'. [ 596.284708][T16778] netlink: 'syz.3.4606': attribute type 13 has an invalid length. [ 596.659621][ T7274] udevd[7274]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.412652][T16814] usb usb9: usbfs: process 16814 (syz.2.4624) did not claim interface 0 before use [ 597.624648][ T6051] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 597.729025][T16827] loop0: detected capacity change from 0 to 2048 [ 597.814081][ T6051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 597.814184][ T6051] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 597.814212][ T6051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 597.814235][ T6051] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 597.866587][ T6051] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 597.866619][ T6051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.866651][ T6051] usb 4-1: Product: syz [ 597.866667][ T6051] usb 4-1: Manufacturer: syz [ 597.866681][ T6051] usb 4-1: SerialNumber: syz [ 597.905774][ T6051] usb 4-1: config 0 descriptor?? [ 597.924011][ T6051] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 597.970690][T16829] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.4631'. [ 598.030195][T16832] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 598.082597][T16834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4632'. [ 598.217976][ T6051] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 598.364320][ T6051] usb 4-1: USB disconnect, device number 18 [ 598.586880][T16844] loop5: detected capacity change from 0 to 16 [ 598.589895][T16844] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 598.636373][ T5969] udevd[5969]: incorrect cramfs checksum on /dev/loop5 [ 598.995829][T16821] loop4: detected capacity change from 0 to 32768 [ 599.056816][T16821] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 599.188468][T16862] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4642'. [ 599.229291][T16864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.356531][T16821] XFS (loop4): Ending clean mount [ 599.650560][ T5831] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 599.897788][T16874] loop0: detected capacity change from 0 to 4096 [ 600.753759][T16897] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4661'. [ 601.259801][T16894] loop3: detected capacity change from 0 to 32768 [ 601.311093][T16894] ea_get: invalid extended attribute [ 601.311110][T16894] ffff888061f53388: 04 00 00 00 .... [ 601.501594][T16907] loop0: detected capacity change from 0 to 512 [ 601.517440][T16907] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 601.550095][T16907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 601.550232][T16907] System zones: 1-12 [ 601.550557][T16907] EXT4-fs (loop0): orphan cleanup on readonly fs [ 601.815070][T16907] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.4672: attempt to clear invalid blocks 1024 len 1 [ 601.815108][T16907] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 601.824433][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 601.824455][ C0] EXT4-fs (loop0): initial error at time 1776121648: ext4_clear_blocks:876: inode 11 [ 601.824483][ C0] EXT4-fs (loop0): last error at time 1776121648: ext4_clear_blocks:876: inode 11 [ 602.059773][T16907] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4672: bg 0: block 361: padding at end of block bitmap is not set [ 602.059810][T16907] fserror_report: 1 callbacks suppressed [ 602.059823][T16907] loop0: lost filesystem error report for type 5 error -117 [ 602.072544][T16907] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 602.072627][T16907] loop0: lost filesystem error report for type 5 error -117 [ 602.150194][T16907] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4672: invalid indirect mapped block 1811939328 (level 0) [ 602.150252][T16907] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 602.229270][T16922] netlink: 'syz.2.4671': attribute type 1 has an invalid length. [ 602.229295][T16922] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4671'. [ 602.270514][T16907] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4672: invalid indirect mapped block 2 (level 2) [ 602.270556][T16907] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 602.363365][T16907] EXT4-fs (loop0): 1 truncate cleaned up [ 602.381642][T16907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 602.493898][T16907] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 602.669523][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 602.700031][T16935] loop2: detected capacity change from 0 to 4096 [ 602.743714][T16935] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 602.811374][T16935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 602.932842][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.104897][T16949] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4679'. [ 603.174245][T16951] loop3: detected capacity change from 0 to 256 [ 603.298015][ T38] audit: type=1326 audit(1776121650.233:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16954 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebf88c819 code=0x7ffc0000 [ 603.299851][ T38] audit: type=1326 audit(1776121650.233:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16954 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebf88c819 code=0x7ffc0000 [ 603.301831][ T38] audit: type=1326 audit(1776121650.233:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16954 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5ebf88c819 code=0x7ffc0000 [ 603.399539][ T38] audit: type=1326 audit(1776121682.326:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16954 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebf88c819 code=0x7ffc0000 [ 603.399582][ T38] audit: type=1326 audit(1776121682.326:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16954 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebf88c819 code=0x7ffc0000 [ 604.143090][T16974] loop2: detected capacity change from 0 to 1024 [ 604.330795][T16974] hfsplus: bad catalog entry type [ 604.503602][T13146] hfsplus: b-tree write err: -5, ino 25 [ 604.503793][T13146] hfsplus: b-tree write err: -5, ino 4 [ 604.503923][T13146] hfsplus: b-tree write err: -5, ino 2 [ 604.678995][T16945] loop4: detected capacity change from 0 to 32768 [ 604.683585][ T38] audit: type=1326 audit(1776121683.635:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 604.684060][ T38] audit: type=1326 audit(1776121683.635:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 604.775098][ T38] audit: type=1326 audit(1776121683.738:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 604.887120][ T38] audit: type=1326 audit(1776121683.748:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 604.887179][ T38] audit: type=1326 audit(1776121683.748:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16989 comm="syz.3.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f2c756bc819 code=0x7ffc0000 [ 605.016370][T16998] openvswitch: netlink: IPv4 tun info is not correct [ 605.499403][T17009] netlink: 'syz.2.4714': attribute type 1 has an invalid length. [ 605.527009][T17010] netlink: 'syz.5.4713': attribute type 11 has an invalid length. [ 605.527031][T17010] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.4713'. [ 605.811848][T17020] netlink: 'syz.3.4719': attribute type 10 has an invalid length. [ 605.811874][T17020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4719'. [ 605.917321][T17022] loop5: detected capacity change from 0 to 4096 [ 605.925679][T17020] bridge0: port 3(ipvlan1) entered blocking state [ 605.925813][T17020] bridge0: port 3(ipvlan1) entered disabled state [ 605.926019][T17020] ipvlan1: entered allmulticast mode [ 605.926036][T17020] veth0_vlan: entered allmulticast mode [ 605.926292][T17022] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 605.959883][T17022] ntfs3(loop5): ino=3, mi_enum_attr [ 605.987300][T17020] ipvlan1: left allmulticast mode [ 605.987326][T17020] veth0_vlan: left allmulticast mode [ 606.001277][T17020] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 606.084262][T17024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4732'. [ 606.177461][T17028] loop3: detected capacity change from 0 to 4096 [ 606.297924][T17028] ntfs3(loop3): Failed to load $Extend (-22). [ 606.297951][T17028] ntfs3(loop3): Failed to initialize $Extend. [ 606.559747][T17028] ntfs3(loop3): ino=5, "/" indx_read_ra [ 607.575634][T17058] loop2: detected capacity change from 0 to 16 [ 607.644523][T17058] erofs (device loop2): mounted with root inode @ nid 36. [ 607.666321][T17058] erofs (device loop2): not enough plain data on disk @ la 1024 of nid 36 [ 607.695197][T17058] erofs (device loop2): read error -117 @ 0 of nid 36 [ 608.575377][T17044] loop3: detected capacity change from 0 to 32768 [ 608.795452][T17078] loop0: detected capacity change from 0 to 64 [ 609.453506][T17085] loop3: detected capacity change from 0 to 1024 [ 609.482252][T17070] loop4: detected capacity change from 0 to 32768 [ 609.500183][T17070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4744 (17070) [ 609.600569][T17070] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 609.600607][T17070] BTRFS info (device loop4): using sha256 checksum algorithm [ 609.877147][T17069] loop5: detected capacity change from 0 to 32768 [ 609.985010][ T57] hfsplus: b-tree write err: -5, ino 25 [ 609.985188][ T57] hfsplus: b-tree write err: -5, ino 4 [ 609.985312][ T57] hfsplus: b-tree write err: -5, ino 2 [ 610.089842][T17069] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 610.143667][T17070] BTRFS info (device loop4): enabling ssd optimizations [ 610.143696][T17070] BTRFS info (device loop4): turning on async discard [ 610.143714][T17070] BTRFS info (device loop4): enabling free space tree [ 610.270652][T17069] XFS (loop5): Ending clean mount [ 610.335671][ T9356] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 610.370696][ T5831] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 610.565975][T17119] loop3: detected capacity change from 0 to 4096 [ 610.685327][T17119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.807477][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.873068][T17124] netlink: 'syz.3.4760': attribute type 64 has an invalid length. [ 611.265552][T17128] comedi comedi0: Cannot bond this driver to itself! [ 611.821755][T17102] loop0: detected capacity change from 0 to 32768 [ 612.079461][T17152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.615042][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 613.279445][T17183] loop0: detected capacity change from 0 to 256 [ 613.384507][ T6051] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 613.490119][T17190] syz.4.4790 (17190): /proc/17189/oom_adj is deprecated, please use /proc/17189/oom_score_adj instead. [ 613.616981][ T6051] usb 6-1: Using ep0 maxpacket: 16 [ 613.671621][ T6051] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 613.671654][ T6051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.671678][ T6051] usb 6-1: Product: syz [ 613.671693][ T6051] usb 6-1: Manufacturer: syz [ 613.671710][ T6051] usb 6-1: SerialNumber: syz [ 613.707396][ T6051] usb 6-1: config 0 descriptor?? [ 613.870269][ T6051] gspca_main: spca508-2.14.0 probing 041e:4018 [ 614.281374][ T6051] gspca_spca508: reg_read err -71 [ 614.281815][ T6051] gspca_spca508: reg_read err -71 [ 614.282227][ T6051] gspca_spca508: reg_read err -71 [ 614.282919][ T6051] gspca_spca508: reg_read err -71 [ 614.283812][ T6051] gspca_spca508: reg write: error -71 [ 614.284040][ T6051] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 614.375197][ T6051] usb 6-1: USB disconnect, device number 18 [ 615.030602][T17232] netlink: 'syz.0.4812': attribute type 10 has an invalid length. [ 615.074277][T17232] hsr0: entered promiscuous mode [ 615.098949][T17232] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 615.113533][T17232] bond0: (slave hsr0): Error -95 calling set_mac_address [ 615.201145][ T6051] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 615.346415][T17238] loop0: detected capacity change from 0 to 512 [ 615.365116][ T6065] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 615.391123][ T6051] usb 5-1: unable to get BOS descriptor or descriptor too short [ 615.408529][ T6051] usb 5-1: config 4 has an invalid interface number: 138 but max is 0 [ 615.408556][ T6051] usb 5-1: config 4 has no interface number 0 [ 615.408591][ T6051] usb 5-1: config 4 interface 138 has no altsetting 0 [ 615.468719][ T6051] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 615.468753][ T6051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.468776][ T6051] usb 5-1: Product: syz [ 615.468792][ T6051] usb 5-1: Manufacturer: syz [ 615.468807][ T6051] usb 5-1: SerialNumber: syz [ 615.616401][T17236] loop3: detected capacity change from 0 to 32768 [ 615.633457][T17236] (syz.3.4814,17236,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 615.647772][T17236] (syz.3.4814,17236,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 615.682183][ T6065] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 615.682212][ T6065] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 615.682236][ T6065] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 615.682295][ T6065] usb 6-1: config 220 has no interface number 2 [ 615.682344][ T6065] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 615.682364][ T6065] usb 6-1: config 220 interface 0 has no altsetting 0 [ 615.682378][ T6065] usb 6-1: config 220 interface 76 has no altsetting 0 [ 615.682391][ T6065] usb 6-1: config 220 interface 1 has no altsetting 0 [ 615.761761][ T6065] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 615.761854][ T6065] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.761878][ T6065] usb 6-1: Product: syz [ 615.761893][ T6065] usb 6-1: Manufacturer: syz [ 615.761910][ T6065] usb 6-1: SerialNumber: syz [ 615.868385][T17242] loop2: detected capacity change from 0 to 512 [ 615.951181][T17242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.951300][T17242] ext4 filesystem being mounted at /950/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.013492][ T6051] catc 5-1:4.138: Can't set altsetting 1. [ 616.013929][ T6051] catc 5-1:4.138: probe with driver catc failed with error -5 [ 616.073317][T17238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.201649][T17236] JBD2: Ignoring recovery information on journal [ 616.288332][ T6065] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 616.288371][ T6065] uvcvideo 6-1:220.0: No valid video chain found. [ 616.288436][ T6065] usb 6-1: selecting invalid altsetting 0 [ 616.290710][ T6051] usb 5-1: USB disconnect, device number 20 [ 616.390822][ T38] kauditd_printk_skb: 18 callbacks suppressed [ 616.390843][ T38] audit: type=1800 audit(1776121695.587:392): pid=17238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4813" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 616.457331][ T6065] usb 6-1: selecting invalid altsetting 0 [ 616.457366][ T6065] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 616.503359][T17238] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.4813: bg 0: bad block bitmap checksum [ 616.531467][ T6065] usb 6-1: USB disconnect, device number 19 [ 616.644328][T17238] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 616.816243][T17236] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 616.862069][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.273032][T17242] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #12: comm syz.2.4816: invalid size [ 617.421323][T17242] EXT4-fs (loop2): Remounting filesystem read-only [ 617.610958][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.675558][ T88] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 617.675597][ T88] Quota error (device loop2): write_blk: dquota write failed [ 617.675613][ T88] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 617.675834][ T88] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 617.675856][ T88] Quota error (device loop2): write_blk: dquota write failed [ 617.675872][ T88] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 618.383773][T17281] team0: entered promiscuous mode [ 618.383798][T17281] team_slave_0: entered promiscuous mode [ 618.383956][T17281] team_slave_1: entered promiscuous mode [ 618.384661][T17281] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 618.716369][ T5828] ocfs2: Unmounting device (7,3) on (node local) [ 619.015827][T17273] loop5: detected capacity change from 0 to 32768 [ 619.052655][T17273] (syz.5.4830,17273,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 619.053056][T17273] (syz.5.4830,17273,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 619.151335][T17273] JBD2: Ignoring recovery information on journal [ 619.243110][T17296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 619.349873][T17273] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 619.502468][ T37] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 619.751981][ T37] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 619.752043][ T37] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 619.756469][ T37] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 619.756496][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.756516][ T37] usb 3-1: Product: syz [ 619.756529][ T37] usb 3-1: Manufacturer: syz [ 619.756543][ T37] usb 3-1: SerialNumber: syz [ 619.848482][ T37] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 619.890918][ T6051] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 620.357594][ T9] usb 3-1: USB disconnect, device number 22 [ 620.422823][ T37] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 620.598306][ T9356] ocfs2: Unmounting device (7,5) on (node local) [ 620.648733][ T37] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 620.648766][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.648789][ T37] usb 4-1: Product: syz [ 620.648806][ T37] usb 4-1: Manufacturer: syz [ 620.648822][ T37] usb 4-1: SerialNumber: syz [ 620.701916][ T37] usb 4-1: config 0 descriptor?? [ 620.721291][ T37] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now attached [ 620.934736][ T37] usb 4-1: USB disconnect, device number 19 [ 620.955481][ T37] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now disconnected [ 620.966231][ T6051] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 620.966418][ T6051] ath9k_htc: Failed to initialize the device [ 621.006435][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 622.426810][T17325] loop5: detected capacity change from 0 to 32768 [ 622.428770][T17325] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4846 (17325) [ 622.474769][T17325] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 622.474806][T17325] BTRFS info (device loop5): using sha256 checksum algorithm [ 622.748490][T17372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4872'. [ 622.915320][T17325] BTRFS info (device loop5): enabling ssd optimizations [ 622.915345][T17325] BTRFS info (device loop5): turning on async discard [ 622.915360][T17325] BTRFS info (device loop5): enabling free space tree [ 623.139554][ T9356] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 623.197877][T17386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4876'. [ 623.474532][T17393] loop3: detected capacity change from 0 to 256 [ 623.643936][T17393] FAT-fs (loop3): Directory bread(block 64) failed [ 623.643979][T17393] FAT-fs (loop3): Directory bread(block 65) failed [ 623.644078][T17393] FAT-fs (loop3): Directory bread(block 66) failed [ 623.644101][T17393] FAT-fs (loop3): Directory bread(block 67) failed [ 623.644193][T17393] FAT-fs (loop3): Directory bread(block 68) failed [ 623.644231][T17393] FAT-fs (loop3): Directory bread(block 69) failed [ 623.644322][T17393] FAT-fs (loop3): Directory bread(block 70) failed [ 623.644345][T17393] FAT-fs (loop3): Directory bread(block 71) failed [ 623.644434][T17393] FAT-fs (loop3): Directory bread(block 72) failed [ 623.644457][T17393] FAT-fs (loop3): Directory bread(block 73) failed [ 623.796991][T17390] bond3: option downdelay: invalid value (18446744073709551615) [ 623.797021][T17390] bond3: option downdelay: allowed values 0 - 2147483647 [ 623.884937][T17390] bond3 (unregistering): Released all slaves [ 623.887115][T17395] Unsupported ieee802154 address type: 0 [ 624.157788][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.184329][T17437] program syz.4.4901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 625.205053][T17438] loop0: detected capacity change from 0 to 512 [ 625.337132][T17438] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4900: bg 0: block 5: invalid block bitmap [ 625.337171][T17438] loop0: lost filesystem error report for type 5 error -117 [ 625.345926][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 625.345949][ C1] EXT4-fs (loop0): initial error at time 1776121704: ext4_validate_block_bitmap:432 [ 625.345974][ C1] EXT4-fs (loop0): last error at time 1776121704: ext4_validate_block_bitmap:432 [ 625.391181][T17438] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 625.391208][T17438] loop0: lost filesystem error report for type 5 error -117 [ 625.402370][T17438] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4900: invalid indirect mapped block 3 (level 2) [ 625.402411][T17438] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 625.534588][T17438] EXT4-fs (loop0): 1 orphan inode deleted [ 625.534616][T17438] EXT4-fs (loop0): 1 truncate cleaned up [ 625.574665][T17438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.762890][T17451] loop5: detected capacity change from 0 to 512 [ 625.800500][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.858370][T17448] bond5: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 626.107750][T17448] bond5 (unregistering): Released all slaves [ 626.220731][T17424] loop3: detected capacity change from 0 to 32768 [ 626.245572][T17424] (syz.3.4893,17424,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 626.246032][T17424] (syz.3.4893,17424,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 626.465737][T17424] JBD2: Ignoring recovery information on journal [ 626.477140][T17462] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.761846][T17424] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 627.256961][T17473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.327484][T17471] loop4: detected capacity change from 0 to 4096 [ 627.356708][T17471] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 627.535441][T17471] ntfs3(loop4): ino=19, mi_enum_attr [ 627.535474][T17471] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 627.587228][T17479] netlink: 'syz.5.4917': attribute type 5 has an invalid length. [ 627.643011][T17471] ntfs3(loop4): failed to convert "c46c" to cp865 [ 627.662762][T17471] ntfs3(loop4): ino=20, mi_enum_attr [ 627.983295][T17485] loop5: detected capacity change from 0 to 1024 [ 628.191814][T17485] hfsplus: invalid extended attribute record [ 628.192262][T17485] hfsplus: b-tree write err: -5, ino 2 [ 628.393472][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 628.457597][ T6039] hfsplus: b-tree write err: -5, ino 25 [ 628.457886][ T6039] hfsplus: b-tree write err: -5, ino 4 [ 628.458008][ T6039] hfsplus: b-tree write err: -5, ino 2 [ 628.592522][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 628.596859][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.596886][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.600707][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 628.600738][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.600761][ T10] usb 1-1: Product: syz [ 628.600777][ T10] usb 1-1: Manufacturer: syz [ 628.600793][ T10] usb 1-1: SerialNumber: syz [ 628.678421][ T10] usb 1-1: 0:2 : does not exist [ 628.776689][ T5828] ocfs2: Unmounting device (7,3) on (node local) [ 629.114538][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 629.379170][ T10] usb 1-1: USB disconnect, device number 19 [ 629.563190][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.563562][T17513] ip6tnl2: entered promiscuous mode [ 629.767352][T17522] loop2: detected capacity change from 0 to 16 [ 630.049706][T17522] erofs (device loop2): mounted with root inode @ nid 36. [ 630.052504][T17530] loop3: detected capacity change from 0 to 64 [ 630.095252][ T60] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 630.431317][T17522] erofs (device loop2): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 630.431464][T17522] erofs (device loop2): read error -117 @ 1 of nid 89 [ 630.431791][ T38] audit: type=1800 audit(1776121709.769:393): pid=17522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4940" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 630.656727][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4952'. [ 630.727154][T17551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.040188][T17565] usb usb8: usbfs: process 17565 (syz.2.4960) did not claim interface 2 before use [ 631.119512][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 631.270858][ T9] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 631.270891][ T9] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 631.270914][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.270935][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 631.270957][ T9] usb 4-1: config 1 has no interface number 0 [ 631.271003][ T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 631.271027][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.356058][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 631.582668][ T9] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 631.583049][ T9] snd_usb_pod 4-1:1.1: invalid control EP [ 631.583064][ T9] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 631.583351][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 631.583880][ T9] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 631.825047][ T10] usb 4-1: USB disconnect, device number 20 [ 632.179229][T17595] loop5: detected capacity change from 0 to 4096 [ 632.201905][T17595] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 632.668753][T17575] loop0: detected capacity change from 0 to 32768 [ 632.685095][T17575] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4965 (17575) [ 632.751596][T17575] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 632.751631][T17575] BTRFS info (device loop0): using crc32c checksum algorithm [ 633.119011][T17575] BTRFS info (device loop0): enabling ssd optimizations [ 633.119039][T17575] BTRFS info (device loop0): turning on flush-on-commit [ 633.119057][T17575] BTRFS info (device loop0): enabling free space tree [ 633.119075][T17575] BTRFS info (device loop0): enabling auto defrag [ 633.119093][T17575] BTRFS info (device loop0): use lzo compression, level 1 [ 633.119115][T17575] BTRFS info (device loop0): max_inline set to 4096 [ 633.388228][T17623] loop2: detected capacity change from 0 to 4096 [ 633.400220][T17623] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 633.499986][ T5827] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 633.656415][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 633.691699][T17638] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4989'. [ 633.845553][ T10] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 633.845608][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 633.845637][ T10] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.845678][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 633.845702][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.975695][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.979768][ T10] usb 4-1: invalid MIDI out EP 0 [ 634.058592][T17645] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4991'. [ 634.376590][T17649] loop2: detected capacity change from 0 to 16 [ 634.418131][T17652] openvswitch: netlink: IP tunnel dst address not specified [ 634.508743][T17649] erofs (device loop2): mounted with root inode @ nid 36. [ 635.143548][T17659] geneve4: entered promiscuous mode [ 635.460284][T17667] netlink: 'syz.5.5014': attribute type 3 has an invalid length. [ 635.460319][T17667] netlink: 'syz.5.5014': attribute type 1 has an invalid length. [ 635.460335][T17667] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5014'. [ 635.460366][T17667] NCSI netlink: No device for ifindex 0 [ 635.531518][T17669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5004'. [ 635.531547][T17669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5004'. [ 636.043059][T17678] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5019'. [ 636.399126][T17679] loop4: detected capacity change from 0 to 4096 [ 636.400644][T17685] loop0: detected capacity change from 0 to 1024 [ 636.412320][T17685] EXT4-fs: Ignoring removed oldalloc option [ 636.418459][T17685] EXT4-fs: Ignoring removed bh option [ 636.419117][T17679] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 636.486245][T17663] loop3: detected capacity change from 0 to 32768 [ 636.491696][T17685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.566164][ T10] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 636.577361][T17663] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5002 (17663) [ 636.599542][ T10] usb 4-1: USB disconnect, device number 21 [ 636.635170][T17663] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 636.635204][T17663] BTRFS info (device loop3): using sha256 checksum algorithm [ 636.790257][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.150962][T17663] BTRFS info (device loop3): enabling ssd optimizations [ 637.150991][T17663] BTRFS info (device loop3): turning on async discard [ 637.151010][T17663] BTRFS info (device loop3): enabling free space tree [ 637.505053][ T5828] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 637.566609][T17722] netlink: 324 bytes leftover after parsing attributes in process `syz.2.5017'. [ 637.889200][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5023'. [ 637.990211][T17735] loop4: detected capacity change from 0 to 1024 [ 638.022009][T17735] EXT4-fs: Ignoring removed oldalloc option [ 638.022044][T17735] EXT4-fs: Ignoring removed bh option [ 638.080624][T17735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 638.171641][T17738] loop0: detected capacity change from 0 to 256 [ 638.172558][T17738] exfat: Deprecated parameter 'utf8' [ 638.183807][T17738] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 638.485526][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.570794][T17748] loop0: detected capacity change from 0 to 512 [ 638.850450][T17748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.850585][T17748] ext4 filesystem being mounted at /1115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.308110][T17748] EXT4-fs error (device loop0): ext4_empty_dir:3091: inode #12: block 32: comm syz.0.5034: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 639.321683][T17748] EXT4-fs (loop0): Remounting filesystem read-only [ 639.321705][T17748] EXT4-fs warning (device loop0): ext4_empty_dir:3094: inode #12: comm syz.0.5034: directory missing '.' [ 639.454181][T17761] loop2: detected capacity change from 0 to 4096 [ 639.504417][T17761] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 639.635004][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.756590][T17761] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 640.107737][T17776] loop5: detected capacity change from 0 to 1024 [ 640.108955][T17776] EXT4-fs: Ignoring removed oldalloc option [ 640.126252][T17776] EXT4-fs: Ignoring removed bh option [ 640.128214][T17778] netlink: 'syz.4.5047': attribute type 61 has an invalid length. [ 640.128236][T17778] netlink: 'syz.4.5047': attribute type 62 has an invalid length. [ 640.158484][T17781] loop3: detected capacity change from 0 to 64 [ 640.203786][T17776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 640.362811][T17785] loop4: detected capacity change from 0 to 256 [ 640.453845][T17783] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 640.453873][T17783] openvswitch: netlink: Message has 16 unknown bytes. [ 640.492635][T17781] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 640.518221][ T9356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.557015][T17781] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 640.731153][T17785] FAT-fs (loop4): Directory bread(block 64) failed [ 640.731185][T17785] FAT-fs (loop4): Directory bread(block 65) failed [ 640.731305][T17785] FAT-fs (loop4): Directory bread(block 66) failed [ 640.731328][T17785] FAT-fs (loop4): Directory bread(block 67) failed [ 640.731442][T17785] FAT-fs (loop4): Directory bread(block 68) failed [ 640.731466][T17785] FAT-fs (loop4): Directory bread(block 69) failed [ 640.731592][T17785] FAT-fs (loop4): Directory bread(block 70) failed [ 640.731616][T17785] FAT-fs (loop4): Directory bread(block 71) failed [ 640.731716][T17785] FAT-fs (loop4): Directory bread(block 72) failed [ 640.731742][T17785] FAT-fs (loop4): Directory bread(block 73) failed [ 640.943146][T17790] autofs4:pid:17790:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32.1), cmd(0xc0189379) [ 640.943180][T17790] autofs4:pid:17790:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 640.995840][T17793] loop3: detected capacity change from 0 to 1024 [ 641.888059][T17817] tunl0: entered promiscuous mode [ 641.923684][T17817] netlink: 'syz.3.5064': attribute type 4 has an invalid length. [ 641.923709][T17817] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5064'. [ 642.639952][T17802] loop0: detected capacity change from 0 to 32768 [ 642.655418][T17802] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5056 (17802) [ 642.729490][T17802] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 642.729516][T17802] BTRFS info (device loop0): using sha256 checksum algorithm [ 642.733571][T17841] loop3: detected capacity change from 0 to 128 [ 642.801025][T17841] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 642.828268][T17841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 643.216738][T17802] BTRFS info (device loop0): enabling ssd optimizations [ 643.216768][T17802] BTRFS info (device loop0): turning on async discard [ 643.216787][T17802] BTRFS info (device loop0): enabling free space tree [ 643.266235][T17874] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5084'. [ 643.527296][T17880] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.578119][T17883] loop4: detected capacity change from 0 to 128 [ 643.630168][ T6051] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 643.699966][T17802] BTRFS info (device loop0): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 643.782106][ T6051] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 643.782138][ T6051] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 643.797558][ T6051] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 643.797597][ T6051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.797620][ T6051] usb 4-1: Product: syz [ 643.797636][ T6051] usb 4-1: Manufacturer: syz [ 643.797653][ T6051] usb 4-1: SerialNumber: syz [ 643.849663][ T6051] usb 4-1: config 0 descriptor?? [ 643.874351][ T6051] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 643.911175][T17887] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5093'. [ 643.964473][T17890] openvswitch: netlink: Missing key (keys=2200040, expected=100) [ 644.549517][ T6051] usb 4-1: USB disconnect, device number 22 [ 644.556179][ T38] audit: type=1326 audit(1776121723.942:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17899 comm="syz.2.5098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ebf88c819 code=0x0 [ 644.792959][ T5827] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 645.396486][T17914] ieee802154 phy1 wpan1: encryption failed: -22 [ 645.783843][T17891] loop5: detected capacity change from 0 to 32768 [ 646.392907][T17925] wg1 speed is unknown, defaulting to 1000 [ 646.392988][T17925] wg1 speed is unknown, defaulting to 1000 [ 646.409250][T17925] wg1 speed is unknown, defaulting to 1000 [ 646.412030][T17925] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 646.412064][T17925] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 646.412105][T17925] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 646.499507][T17927] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5106'. [ 646.503364][T13146] ================================================================== [ 646.503380][T13146] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 646.503423][T13146] Read of size 4096 at addr ffff8880632c8000 by task kworker/u8:14/13146 [ 646.503443][T13146] [ 646.503470][T13146] CPU: 1 UID: 0 PID: 13146 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 646.503516][T13146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 646.503537][T13146] Workqueue: loop5 loop_workfn [ 646.503569][T13146] Call Trace: [ 646.503582][T13146] [ 646.503591][T13146] dump_stack_lvl+0xe8/0x150 [ 646.503617][T13146] print_address_description+0x55/0x1e0 [ 646.503639][T13146] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 646.503671][T13146] print_report+0x58/0x70 [ 646.503692][T13146] kasan_report+0x117/0x150 [ 646.503725][T13146] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 646.503763][T13146] kasan_check_range+0x264/0x2c0 [ 646.503795][T13146] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 646.503829][T13146] __asan_memcpy+0x29/0x70 [ 646.503856][T13146] copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 646.503901][T13146] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 646.503934][T13146] ? rcu_is_watching+0x15/0xb0 [ 646.503970][T13146] ? shmem_write_begin+0x1ce/0x320 [ 646.504004][T13146] generic_perform_write+0x5b1/0x8b0 [ 646.504037][T13146] ? __pfx_generic_perform_write+0x10/0x10 [ 646.504071][T13146] ? __mark_inode_dirty+0x4cf/0x13b0 [ 646.504105][T13146] ? preempt_count_add+0x91/0x190 [ 646.504128][T13146] ? mnt_put_write_access_file+0xbf/0x100 [ 646.504163][T13146] ? file_update_time_flags+0x406/0x4b0 [ 646.504198][T13146] shmem_file_write_iter+0xfb/0x120 [ 646.504224][T13146] lo_rw_aio+0xc80/0xf00 [ 646.504256][T13146] ? __pfx_lo_rw_aio+0x10/0x10 [ 646.504285][T13146] ? kthread_associate_blkcg+0x490/0x600 [ 646.504317][T13146] ? rt_spin_unlock+0x160/0x200 [ 646.504345][T13146] loop_process_work+0x637/0x11b0 [ 646.504380][T13146] ? __pfx_loop_process_work+0x10/0x10 [ 646.504405][T13146] ? __lock_acquire+0x6b5/0x2cf0 [ 646.504432][T13146] ? look_up_lock_class+0x57/0x110 [ 646.504464][T13146] ? register_lock_class+0x31/0x2e0 [ 646.504495][T13146] ? __lock_acquire+0x6b5/0x2cf0 [ 646.504525][T13146] ? do_raw_spin_lock+0x12b/0x2f0 [ 646.504554][T13146] ? do_raw_spin_lock+0x12b/0x2f0 [ 646.504577][T13146] ? lock_acquire+0x106/0x350 [ 646.504606][T13146] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 646.504632][T13146] ? process_scheduled_works+0xa69/0x1910 [ 646.504656][T13146] ? process_scheduled_works+0xa69/0x1910 [ 646.504684][T13146] ? process_scheduled_works+0xa69/0x1910 [ 646.504706][T13146] ? process_scheduled_works+0xa69/0x1910 [ 646.504730][T13146] process_scheduled_works+0xb68/0x1910 [ 646.504770][T13146] ? __pfx_process_scheduled_works+0x10/0x10 [ 646.504796][T13146] ? assign_work+0x3d5/0x5e0 [ 646.504832][T13146] worker_thread+0xa90/0x1040 [ 646.504869][T13146] kthread+0x388/0x470 [ 646.504896][T13146] ? __pfx_worker_thread+0x10/0x10 [ 646.504918][T13146] ? __pfx_kthread+0x10/0x10 [ 646.504943][T13146] ret_from_fork+0x514/0xb70 [ 646.504967][T13146] ? __pfx_ret_from_fork+0x10/0x10 [ 646.504989][T13146] ? __switch_to+0xc79/0x1410 [ 646.505021][T13146] ? __pfx_kthread+0x10/0x10 [ 646.505048][T13146] ret_from_fork_asm+0x1a/0x30 [ 646.505089][T13146] [ 646.505097][T13146] [ 646.505102][T13146] The buggy address belongs to the physical page: [ 646.505121][T13146] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x632c8 [ 646.505142][T13146] flags: 0x80000000000000(node=0|zone=1) [ 646.505171][T13146] raw: 0080000000000000 ffffea0001e6ccc8 ffffea000087ccc8 0000000000000000 [ 646.505189][T13146] raw: ffff888000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 646.505200][T13146] page dumped because: kasan: bad access detected [ 646.505215][T13146] page_owner tracks the page as freed [ 646.505223][T13146] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 17891, tgid 17888 (syz.5.5091), ts 645929693208, free_ts 646499149681 [ 646.505274][T13146] post_alloc_hook+0x231/0x280 [ 646.505307][T13146] get_page_from_freelist+0x27d6/0x2850 [ 646.505340][T13146] __alloc_frozen_pages_noprof+0x18d/0x380 [ 646.505371][T13146] alloc_pages_mpol+0xd1/0x380 [ 646.505402][T13146] alloc_pages_noprof+0xd2/0x2f0 [ 646.505431][T13146] lmLogInit+0x357/0x1a00 [ 646.505461][T13146] lmLogOpen+0x4e1/0xfa0 [ 646.505488][T13146] jfs_mount_rw+0xee/0x670 [ 646.505516][T13146] jfs_fill_super+0x754/0xd80 [ 646.505537][T13146] get_tree_bdev_flags+0x431/0x4f0 [ 646.505565][T13146] vfs_get_tree+0x92/0x2a0 [ 646.505592][T13146] do_new_mount+0x341/0xd30 [ 646.505614][T13146] __se_sys_mount+0x31d/0x420 [ 646.505636][T13146] do_syscall_64+0x15f/0xf80 [ 646.505665][T13146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.505685][T13146] page last free pid 9356 tgid 9356 stack trace: [ 646.505697][T13146] __free_frozen_pages+0xf9b/0x10f0 [ 646.505727][T13146] lmLogShutdown+0x44e/0x850 [ 646.505755][T13146] lmLogClose+0x28a/0x520 [ 646.505784][T13146] jfs_umount+0x2fb/0x3d0 [ 646.505811][T13146] jfs_put_super+0x8c/0x190 [ 646.505832][T13146] generic_shutdown_super+0x13d/0x2d0 [ 646.505857][T13146] kill_block_super+0x44/0x90 [ 646.505885][T13146] deactivate_locked_super+0xbc/0x130 [ 646.505910][T13146] cleanup_mnt+0x437/0x4d0 [ 646.505936][T13146] task_work_run+0x1d9/0x270 [ 646.505963][T13146] exit_to_user_mode_loop+0xed/0x480 [ 646.505987][T13146] do_syscall_64+0x33e/0xf80 [ 646.506015][T13146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.506035][T13146] [ 646.506040][T13146] Memory state around the buggy address: [ 646.506051][T13146] ffff8880632c7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 646.506073][T13146] ffff8880632c7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 646.506088][T13146] >ffff8880632c8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 646.506099][T13146] ^ [ 646.506110][T13146] ffff8880632c8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 646.506126][T13146] ffff8880632c8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 646.506138][T13146] ================================================================== [ 647.008424][T13146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 647.008490][T13146] CPU: 0 UID: 0 PID: 13146 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 647.008566][T13146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 647.008603][T13146] Workqueue: loop5 loop_workfn [ 647.008689][T13146] Call Trace: [ 647.008711][T13146] [ 647.008734][T13146] vpanic+0x56c/0xa60 [ 647.008820][T13146] ? __pfx_vpanic+0x10/0x10 [ 647.008905][T13146] panic+0xc5/0xd0 [ 647.008978][T13146] ? __pfx_panic+0x10/0x10 [ 647.009065][T13146] ? preempt_schedule_thunk+0x16/0x30 [ 647.009161][T13146] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 647.009266][T13146] ? preempt_schedule_thunk+0x16/0x30 [ 647.009371][T13146] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 647.009470][T13146] check_panic_on_warn+0x89/0xb0 [ 647.009554][T13146] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 647.009638][T13146] end_report+0x73/0x170 [ 647.009728][T13146] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 647.009815][T13146] kasan_report+0x128/0x150 [ 647.009904][T13146] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 647.010028][T13146] kasan_check_range+0x264/0x2c0 [ 647.010116][T13146] ? copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 647.010205][T13146] __asan_memcpy+0x29/0x70 [ 647.010292][T13146] copy_folio_from_iter_atomic+0xbb5/0x1ad0 [ 647.010438][T13146] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 647.010541][T13146] ? rcu_is_watching+0x15/0xb0 [ 647.010633][T13146] ? shmem_write_begin+0x1ce/0x320 [ 647.010732][T13146] generic_perform_write+0x5b1/0x8b0 [ 647.010822][T13146] ? __pfx_generic_perform_write+0x10/0x10 [ 647.010897][T13146] ? __mark_inode_dirty+0x4cf/0x13b0 [ 647.010989][T13146] ? preempt_count_add+0x91/0x190 [ 647.011030][T13146] ? mnt_put_write_access_file+0xbf/0x100 [ 647.011064][T13146] ? file_update_time_flags+0x406/0x4b0 [ 647.011099][T13146] shmem_file_write_iter+0xfb/0x120 [ 647.011117][T13146] lo_rw_aio+0xc80/0xf00 [ 647.011141][T13146] ? __pfx_lo_rw_aio+0x10/0x10 [ 647.011162][T13146] ? kthread_associate_blkcg+0x490/0x600 [ 647.011184][T13146] ? rt_spin_unlock+0x160/0x200 [ 647.011204][T13146] loop_process_work+0x637/0x11b0 [ 647.011234][T13146] ? __pfx_loop_process_work+0x10/0x10 [ 647.011252][T13146] ? __lock_acquire+0x6b5/0x2cf0 [ 647.011272][T13146] ? look_up_lock_class+0x57/0x110 [ 647.011294][T13146] ? register_lock_class+0x31/0x2e0 [ 647.011316][T13146] ? __lock_acquire+0x6b5/0x2cf0 [ 647.011338][T13146] ? do_raw_spin_lock+0x12b/0x2f0 [ 647.011357][T13146] ? do_raw_spin_lock+0x12b/0x2f0 [ 647.011373][T13146] ? lock_acquire+0x106/0x350 [ 647.011394][T13146] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 647.011411][T13146] ? process_scheduled_works+0xa69/0x1910 [ 647.011428][T13146] ? process_scheduled_works+0xa69/0x1910 [ 647.011447][T13146] ? process_scheduled_works+0xa69/0x1910 [ 647.011462][T13146] ? process_scheduled_works+0xa69/0x1910 [ 647.011478][T13146] process_scheduled_works+0xb68/0x1910 [ 647.011507][T13146] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.011525][T13146] ? assign_work+0x3d5/0x5e0 [ 647.011542][T13146] worker_thread+0xa90/0x1040 [ 647.011570][T13146] kthread+0x388/0x470 [ 647.011590][T13146] ? __pfx_worker_thread+0x10/0x10 [ 647.011605][T13146] ? __pfx_kthread+0x10/0x10 [ 647.011626][T13146] ret_from_fork+0x514/0xb70 [ 647.011644][T13146] ? __pfx_ret_from_fork+0x10/0x10 [ 647.011660][T13146] ? __switch_to+0xc79/0x1410 [ 647.011685][T13146] ? __pfx_kthread+0x10/0x10 [ 647.011706][T13146] ret_from_fork_asm+0x1a/0x30 [ 647.011731][T13146] [ 647.012442][T13146] Kernel Offset: disabled