last executing test programs: 2m54.15583504s ago: executing program 1 (id=2576): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 2m53.626122892s ago: executing program 1 (id=2581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) 2m53.390029975s ago: executing program 1 (id=2586): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x5, 0x0, 0x9, 0x4000}) 2m53.1382581s ago: executing program 1 (id=2590): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000000)={[{@map_off}, {@check_strict}, {@cruft}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x551, &(0x7f00000003c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 2m52.743009273s ago: executing program 1 (id=2595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 2m52.140168409s ago: executing program 1 (id=2602): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000340)=0x6, 0x12) 2m51.717439063s ago: executing program 32 (id=2602): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000340)=0x6, 0x12) 4.831851746s ago: executing program 3 (id=4475): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 4.59139427s ago: executing program 3 (id=4477): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f048, 0x100000}) 4.207484783s ago: executing program 3 (id=4480): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x5, "504aa57f4f8d37386dce37ae7b09c7329b881ccd27113bceefb560cb277f7192", 0x2, 0x1}) 3.709971732s ago: executing program 3 (id=4485): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x4455, &(0x7f0000004480)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1bd14c2e453842c3, 0x0, 0x8, 0x0, &(0x7f0000000000)) 2.592183738s ago: executing program 4 (id=4495): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.110021616s ago: executing program 3 (id=4502): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120150028aadef087c0500221fe901020301090224000308ab400509043d0802c45abe40090509000000010309090505"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 2.055036529s ago: executing program 2 (id=4503): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x2d, 0x0, 0x1}]}, 0x10) 1.827397852s ago: executing program 2 (id=4505): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x57}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.602508816s ago: executing program 0 (id=4507): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) 1.602261075s ago: executing program 2 (id=4508): r0 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) write$cgroup_int(r0, 0x0, 0x0) 1.405960717s ago: executing program 0 (id=4509): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000001180)=[0x18, 0x810, 0x8, 0x899d, 0x7fffffff, 0x825, 0x7, 0xd, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x6, 0x0], 0x1, 0x4000005}) 1.402031167s ago: executing program 2 (id=4510): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_netdev_private(r0, 0x8920, &(0x7f0000000000)="963a") 1.209628979s ago: executing program 2 (id=4511): symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') acct(&(0x7f0000000140)='./file1\x00') 1.19267495s ago: executing program 0 (id=4512): r0 = syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@fat=@dos1xfloppy}, {@fat=@nocase}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x2}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@nodots}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@nodots}, {@dots}, {@nodots}, {@fat=@quiet}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@dots}]}, 0x0, 0x1fb, &(0x7f0000000440)="$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") getdents64(r0, &(0x7f00000002c0)=""/189, 0xbd) 1.058267317s ago: executing program 2 (id=4513): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 973.030502ms ago: executing program 0 (id=4514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 870.333309ms ago: executing program 4 (id=4515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/74, 0x4a}, {0x0}], 0x2) 794.992763ms ago: executing program 0 (id=4516): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000000)) 701.175238ms ago: executing program 4 (id=4517): setresuid(0xee00, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1, &(0x7f0000000840)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 627.430893ms ago: executing program 0 (id=4518): syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x4004000, &(0x7f0000000380)={[{@qnoenforce}, {@nodiscard}, {@nouuid}, {@uqnoenforce}, {@pquota}, {@gquota}, {@nolargeio}, {@usrquota}, {@gqnoenforce}, {}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000ac0)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x24, 0x3) 595.945635ms ago: executing program 4 (id=4519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x116245af0baa48c7}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x58}}, 0x0) 425.695345ms ago: executing program 4 (id=4520): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) clock_adjtime(0x6, 0x0) 226.210127ms ago: executing program 3 (id=4521): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) execve(0x0, 0x0, 0x0) 0s ago: executing program 4 (id=4522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): t=0064, bcdDevice=40.6e [ 421.908232][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.011015][ T5859] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 422.105776][T12820] loop4: detected capacity change from 0 to 8 [ 422.151744][T12818] loop0: detected capacity change from 0 to 512 [ 422.159214][T12820] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 422.170032][T12818] EXT4-fs: Ignoring removed nobh option [ 422.218988][T12818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.234588][T12818] ext4 filesystem being mounted at /755/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 422.268220][ T5891] udevd[5891]: incorrect cramfs checksum on /dev/loop4 [ 422.405777][ T5813] usb 4-1: USB disconnect, device number 31 [ 422.484630][ T5780] udevd[5780]: incorrect cramfs checksum on /dev/loop4 [ 422.525162][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.782830][T12838] loop0: detected capacity change from 0 to 32768 [ 423.830493][T12843] loop2: detected capacity change from 0 to 32768 [ 423.885308][T12838] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 423.925779][T12843] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 423.975634][T12843] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 424.015445][T12872] loop4: detected capacity change from 0 to 4096 [ 424.027197][T12843] (syz.2.2962,12843,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 424.108227][T12838] XFS (loop0): Ending clean mount [ 424.126449][T12872] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 424.152944][T12880] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2971'. [ 424.170705][T12872] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 424.300930][T12872] ntfs: volume version 3.1. [ 424.305596][T12872] ntfs: (device loop4): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 424.345511][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 424.354630][T12872] ntfs: (device loop4): map_mft_record(): Failed with error code 5. [ 424.354658][T12872] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 424.450087][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 425.819164][T12927] loop4: detected capacity change from 0 to 512 [ 425.954990][T12927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.081260][T12927] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.265357][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2994'. [ 426.367838][T11895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.404334][T12947] loop3: detected capacity change from 0 to 256 [ 426.447286][T12947] exfat: Deprecated parameter 'utf8' [ 426.522834][T12947] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 426.690842][T12947] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 426.937421][T12959] loop0: detected capacity change from 0 to 4096 [ 427.020430][T12959] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 427.250627][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'. [ 427.277259][T12959] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 427.293814][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'. [ 427.326547][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3006'. [ 427.340372][T12959] ntfs3: loop0: ino=1f, "file2" failed to open parent directory r=5 to update [ 427.576298][ T3445] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update [ 428.054619][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3015'. [ 428.086662][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3015'. [ 428.143963][T12999] tc_dump_action: action bad kind [ 428.387414][T13009] netlink: 'syz.3.3020': attribute type 64 has an invalid length. [ 428.447994][T13017] comedi comedi2: aio_aio12_8: I/O port conflict (0x4000cf5,32) [ 428.643499][T13024] netlink: 'syz.2.3025': attribute type 10 has an invalid length. [ 428.691293][T13024] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3025'. [ 429.427449][T13047] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 429.450117][T13047] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 429.522109][T13049] loop2: detected capacity change from 0 to 2048 [ 429.551112][T13049] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 429.583126][T13054] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.584367][T13025] loop4: detected capacity change from 0 to 32768 [ 429.595957][T13049] syz.2.3034: attempt to access beyond end of device [ 429.595957][T13049] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 429.679109][T13025] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3026 (13025) [ 429.771549][T13025] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 429.815952][T13049] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 429.833836][T13025] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 429.870332][T13025] BTRFS info (device loop4): turning on flush-on-commit [ 429.880023][T13025] BTRFS info (device loop4): enabling disk space caching [ 429.896268][T13025] BTRFS info (device loop4): disabling tree log [ 429.918276][T13049] Remounting filesystem read-only [ 429.936641][T13049] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 429.946463][T13025] BTRFS info (device loop4): enabling ssd optimizations [ 429.972459][T13025] BTRFS info (device loop4): enabling auto defrag [ 429.986448][T13049] NILFS (loop2): error -5 truncating bmap (ino=16) [ 430.007473][T13025] BTRFS info (device loop4): force clearing of disk cache [ 430.014712][T13025] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 430.088143][T13025] BTRFS info (device loop4): use zstd compression, level 3 [ 430.117907][T13025] BTRFS info (device loop4): turning off barriers [ 430.124471][T13025] BTRFS info (device loop4): max_inline at 0 [ 430.151499][ T5773] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 430.158545][ T5773] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 430.178853][T13025] BTRFS info (device loop4): disk space caching is enabled [ 430.208325][ T5773] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 430.229291][ T5773] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 430.249518][ T5773] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 430.279555][ T5773] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 430.462847][T13025] BTRFS info (device loop4): auto enabling async discard [ 430.522787][T13025] BTRFS info (device loop4): rebuilding free space tree [ 430.582152][T13025] BTRFS info (device loop4): disabling free space tree [ 430.599559][T13025] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 430.621264][T13025] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 430.685874][T13025] BTRFS info (device loop4): checking UUID tree [ 430.939792][T13025] BTRFS info (device loop4: state M): force clearing of disk cache [ 430.976106][T13025] BTRFS info (device loop4: state M): max_inline at 0 [ 431.073837][T13101] x_tables: duplicate underflow at hook 3 [ 431.268320][T11895] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 431.411883][T13086] loop3: detected capacity change from 0 to 32768 [ 431.527013][T13115] Cannot find add_set index 65532 as target [ 431.605454][T13086] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 431.714057][T13120] loop2: detected capacity change from 0 to 1764 [ 431.941261][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 432.428147][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3057'. [ 432.976979][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 432.976997][ T28] audit: type=1326 audit(1769423622.238:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13157 comm=162E44A480DB682108B49543019E91 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff37c99aeb9 code=0x0 [ 432.986697][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3066'. [ 433.124867][T13167] netlink: 344 bytes leftover after parsing attributes in process `syz.2.3068'. [ 433.507735][T13179] loop3: detected capacity change from 0 to 256 [ 433.615570][T13179] FAT-fs (loop3): Directory bread(block 64) failed [ 433.658325][T13179] FAT-fs (loop3): Directory bread(block 65) failed [ 433.689382][T13179] FAT-fs (loop3): Directory bread(block 66) failed [ 433.711958][T13179] FAT-fs (loop3): Directory bread(block 67) failed [ 433.737791][T13179] FAT-fs (loop3): Directory bread(block 68) failed [ 433.766319][T13179] FAT-fs (loop3): Directory bread(block 69) failed [ 433.789634][T13179] FAT-fs (loop3): Directory bread(block 70) failed [ 433.817449][T13179] FAT-fs (loop3): Directory bread(block 71) failed [ 433.827216][T13179] FAT-fs (loop3): Directory bread(block 72) failed [ 433.861370][T13179] FAT-fs (loop3): Directory bread(block 73) failed [ 433.891651][T13189] loop2: detected capacity change from 0 to 256 [ 434.342866][T13203] x_tables: unsorted entry at hook 3 [ 434.574221][T13210] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3083'. [ 434.625191][T13213] kernel profiling enabled (shift: 63) [ 434.631570][T13213] profiling shift: 63 too large [ 435.011204][T13229] netlink: 'syz.3.3092': attribute type 5 has an invalid length. [ 435.032437][T13229] netlink: 'syz.3.3092': attribute type 11 has an invalid length. [ 435.135051][T13232] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3093'. [ 435.161462][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3094'. [ 435.391700][T13243] netlink: 'syz.2.3098': attribute type 4 has an invalid length. [ 435.437237][T13243] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3098'. [ 435.939168][T13265] loop4: detected capacity change from 0 to 164 [ 435.981605][T13260] bond1: entered allmulticast mode [ 436.038448][T13265] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 436.197370][T13271] xt_ecn: cannot match TCP bits for non-tcp packets [ 436.250278][ T5823] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 436.365797][T13279] netlink: 'syz.0.3116': attribute type 5 has an invalid length. [ 436.466799][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 436.482305][ T5823] usb 3-1: config 0 has an invalid interface number: 169 but max is 0 [ 436.506594][ T5823] usb 3-1: config 0 has no interface number 0 [ 436.521300][ T5823] usb 3-1: config 0 interface 169 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.542631][ T5823] usb 3-1: config 0 interface 169 has no altsetting 0 [ 436.567193][ T5823] usb 3-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 436.597036][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.618876][ T5823] usb 3-1: Product: syz [ 436.623128][ T5823] usb 3-1: Manufacturer: syz [ 436.650988][ T5823] usb 3-1: SerialNumber: syz [ 436.673578][ T5823] usb 3-1: config 0 descriptor?? [ 436.704132][ T5823] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 436.761769][ T5823] snd-usb-audio: probe of 3-1:0.169 failed with error -2 [ 436.873923][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.021725][ T5813] usb 3-1: USB disconnect, device number 16 [ 437.466697][T13311] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3132'. [ 437.625953][T13313] netlink: 'syz.0.3133': attribute type 5 has an invalid length. [ 437.652373][T13313] ip6erspan0: entered promiscuous mode [ 437.692288][T13315] netlink: 'syz.4.3134': attribute type 12 has an invalid length. [ 437.787060][T13317] loop2: detected capacity change from 0 to 1024 [ 437.910536][ T11] hfsplus: b-tree write err: -5, ino 4 [ 438.143649][T13307] loop3: detected capacity change from 0 to 32768 [ 438.293627][T13307] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 438.439616][T13307] (syz.3.3130,13307,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 438.461010][T13307] (syz.3.3130,13307,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 438.482634][T13307] (syz.3.3130,13307,1):ocfs2_mknod:298 ERROR: status = -2 [ 438.489867][T13307] (syz.3.3130,13307,1):ocfs2_mknod:502 ERROR: status = -2 [ 438.542211][T13307] (syz.3.3130,13307,1):ocfs2_create:676 ERROR: status = -2 [ 438.572160][T13321] loop0: detected capacity change from 0 to 32768 [ 438.620780][T13321] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 438.748624][T13336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3143'. [ 438.774983][T13321] JBD2: Ignoring recovery information on journal [ 438.814454][ T5823] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 438.862612][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 438.909745][T13321] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 439.047115][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 439.071038][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 439.103362][ T5823] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 439.113305][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.121380][ T5823] usb 3-1: Product: syz [ 439.143039][ T5823] usb 3-1: Manufacturer: syz [ 439.148223][ T5823] usb 3-1: SerialNumber: syz [ 439.204059][ T5823] usb 3-1: config 0 descriptor?? [ 439.234564][ T5823] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 439.262313][T13321] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 439.330611][T13321] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 439.360415][T13321] OCFS2: File system is now read-only. [ 439.365997][T13321] (syz.0.3137,13321,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 439.403878][T13321] (syz.0.3137,13321,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 439.447107][T13321] (syz.0.3137,13321,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 439.455722][T13321] (syz.0.3137,13321,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 439.476856][T13321] (syz.0.3137,13321,1):ocfs2_claim_metadata:2018 ERROR: status = -30 [ 439.485370][T13321] (syz.0.3137,13321,1):ocfs2_claim_metadata:2031 ERROR: status = -30 [ 439.499293][T13321] (syz.0.3137,13321,1):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30 [ 439.523359][T13321] (syz.0.3137,13321,1):ocfs2_expand_inline_dir:3023 ERROR: status = -30 [ 439.532413][T13321] (syz.0.3137,13321,1):ocfs2_extend_dir:3205 ERROR: status = -30 [ 439.575422][T13321] (syz.0.3137,13321,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 439.591992][T13321] (syz.0.3137,13321,1):ocfs2_mknod:298 ERROR: status = -30 [ 439.604473][ T27] usb 3-1: USB disconnect, device number 17 [ 439.632029][T13321] (syz.0.3137,13321,1):ocfs2_mknod:502 ERROR: status = -30 [ 439.634997][ T28] audit: type=1326 audit(1769423628.383:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.4.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7af9aeb9 code=0x7ffc0000 [ 439.639329][T13321] (syz.0.3137,13321,1):ocfs2_mkdir:659 ERROR: status = -30 [ 439.723311][ T28] audit: type=1326 audit(1769423628.411:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.4.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7af9aeb9 code=0x7ffc0000 [ 439.830980][ T28] audit: type=1326 audit(1769423628.430:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.4.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fce7af9aeb9 code=0x7ffc0000 [ 439.882702][ T28] audit: type=1326 audit(1769423628.430:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.4.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7af9aeb9 code=0x7ffc0000 [ 439.911709][ T28] audit: type=1326 audit(1769423628.430:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.4.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7af9aeb9 code=0x7ffc0000 [ 439.944959][T13351] libceph: resolve '. [ 439.944959][T13351] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 439.944959][T13351] ' (ret=-3): failed [ 440.006391][T13321] syz.0.3137 (13321) used greatest stack depth: 18704 bytes left [ 440.047197][ T5771] (syz-executor,5771,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 440.086589][ T5771] (syz-executor,5771,0):_ocfs2_free_suballoc_bits:2489 ERROR: status = -12 [ 440.114010][ T5771] (syz-executor,5771,0):_ocfs2_free_clusters:2583 ERROR: status = -12 [ 440.130072][ T5771] (syz-executor,5771,0):ocfs2_sync_local_to_main:1001 ERROR: status = -12 [ 440.139828][ T5771] (syz-executor,5771,0):ocfs2_sync_local_to_main:1013 ERROR: status = -12 [ 440.160899][ T5771] (syz-executor,5771,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -12 [ 440.220401][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 440.561145][T13368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3159'. [ 440.876329][T13378] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.3163'. [ 440.892257][T13378] bridge: RTM_NEWNEIGH with invalid state 0x1d25 [ 441.284659][T13390] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 441.332891][ T28] audit: type=1400 audit(1769423629.943:116): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=13391 comm="syz.2.3170" [ 441.568015][T13373] loop4: detected capacity change from 0 to 32768 [ 441.652006][T13373] JBD2: Ignoring recovery information on journal [ 441.753905][T13373] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 441.963264][T13373] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 442.002698][T13373] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 442.037487][T13373] OCFS2: File system is now read-only. [ 442.043067][T13373] (syz.4.3160,13373,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 442.080942][T13373] (syz.4.3160,13373,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 442.092981][T13373] (syz.4.3160,13373,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 442.101619][T13373] (syz.4.3160,13373,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 442.112841][T13412] loop3: detected capacity change from 0 to 64 [ 442.148158][T13373] (syz.4.3160,13373,0):ocfs2_claim_metadata:2018 ERROR: status = -30 [ 442.156375][T13373] (syz.4.3160,13373,0):ocfs2_claim_metadata:2031 ERROR: status = -30 [ 442.206702][T13373] (syz.4.3160,13373,0):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30 [ 442.239686][T13373] (syz.4.3160,13373,0):ocfs2_expand_inline_dir:3023 ERROR: status = -30 [ 442.250774][T13373] (syz.4.3160,13373,0):ocfs2_extend_dir:3205 ERROR: status = -30 [ 442.262029][T13373] (syz.4.3160,13373,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30 [ 442.295669][T13373] (syz.4.3160,13373,0):ocfs2_mknod:298 ERROR: status = -30 [ 442.320079][T13373] (syz.4.3160,13373,0):ocfs2_mknod:502 ERROR: status = -30 [ 442.340834][T13373] (syz.4.3160,13373,0):ocfs2_mkdir:659 ERROR: status = -30 [ 442.465235][T11895] (syz-executor,11895,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 442.491880][T11895] (syz-executor,11895,1):_ocfs2_free_suballoc_bits:2489 ERROR: status = -12 [ 442.529094][T11895] (syz-executor,11895,0):_ocfs2_free_clusters:2583 ERROR: status = -12 [ 442.579460][T11895] (syz-executor,11895,1):ocfs2_sync_local_to_main:1001 ERROR: status = -12 [ 442.628149][T11895] (syz-executor,11895,1):ocfs2_sync_local_to_main:1013 ERROR: status = -12 [ 442.649602][T11895] (syz-executor,11895,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -12 [ 442.677397][T13420] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 442.749592][T13424] loop0: detected capacity change from 0 to 256 [ 442.757424][T13424] exfat: Deprecated parameter 'namecase' [ 442.777606][T13402] loop2: detected capacity change from 0 to 32768 [ 442.804985][T11895] ocfs2: Unmounting device (7,4) on (node local) [ 442.824046][T13402] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 442.838230][T13424] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 442.982787][T13402] XFS (loop2): Ending clean mount [ 443.012315][T13402] XFS (loop2): Quotacheck needed: Please wait. [ 443.203869][T13402] XFS (loop2): Quotacheck: Done. [ 443.425288][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 443.543253][T13446] netlink: 'syz.4.3193': attribute type 9 has an invalid length. [ 443.565534][T13446] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3193'. [ 444.574197][T13473] loop3: detected capacity change from 0 to 1764 [ 444.670128][T13473] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 445.220756][T13467] loop2: detected capacity change from 0 to 32768 [ 445.325208][T13467] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 445.444340][T13501] netlink: 'syz.3.3215': attribute type 32 has an invalid length. [ 445.646718][T13467] XFS (loop2): Ending clean mount [ 445.713975][T13507] loop3: detected capacity change from 0 to 64 [ 445.753522][T13507] hfs: uid requires an argument [ 445.760477][T13507] hfs: unable to parse mount options [ 445.893502][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 446.114351][ T5858] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 446.332928][ T5858] usb 5-1: unable to get BOS descriptor or descriptor too short [ 446.342709][ T5858] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 446.370081][ T5858] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 446.381501][ T5858] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 446.401868][ T5858] usb 5-1: config 129 has no interface number 0 [ 446.418090][ T5858] usb 5-1: config 129 has no interface number 1 [ 446.435585][ T5858] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 446.469341][ T5858] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 446.500529][ T5858] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 446.524651][ T5858] usb 5-1: config 129 interface 135 has no altsetting 0 [ 446.539775][ T5858] usb 5-1: config 129 interface 5 has no altsetting 0 [ 446.566216][ T5858] usb 5-1: string descriptor 0 read error: -22 [ 446.572813][ T5858] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 446.602110][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.652150][ T5858] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 446.663704][T13524] binder: 13523:13524 ioctl c00c620f 2000000000c0 returned -22 [ 446.668522][ T5858] usb 5-1: MIDIStreaming interface descriptor not found [ 447.036305][ T5859] usb 5-1: USB disconnect, device number 3 [ 448.106569][ T5813] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 448.312191][T13574] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 448.323745][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 448.339602][ T5778] Bluetooth: hci2: Dropping invalid advertising data [ 448.343346][ T5813] usb 3-1: unable to get BOS descriptor or descriptor too short [ 448.401083][ T5813] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 448.408769][ T5813] usb 3-1: can't read configurations, error -71 [ 449.060608][ T27] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 449.386045][T13597] nfs: Deprecated parameter 'nointr' [ 449.493747][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 449.507381][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.532214][T13606] netlink: 'syz.4.3263': attribute type 32 has an invalid length. [ 449.543592][ T27] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 449.564744][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.580493][ T27] usb 1-1: Product: syz [ 449.590845][ T27] usb 1-1: Manufacturer: syz [ 449.603525][ T27] usb 1-1: SerialNumber: syz [ 449.622841][ T27] usb 1-1: config 0 descriptor?? [ 449.665739][ T27] usb 1-1: bad CDC descriptors [ 449.686639][ T27] usb 1-1: unsupported MDLM descriptors [ 449.952774][ T5829] usb 1-1: USB disconnect, device number 33 [ 450.487647][T13634] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 450.695283][T13620] loop3: detected capacity change from 0 to 32768 [ 450.787503][T13620] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 450.828575][ T5858] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 450.868785][T13620] XFS (loop3): Ending clean mount [ 450.877713][T13620] XFS (loop3): Quotacheck needed: Please wait. [ 451.004328][T13620] XFS (loop3): Quotacheck: Done. [ 451.040483][ T5858] usb 3-1: unable to get BOS descriptor or descriptor too short [ 451.059828][ T5858] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 451.092187][ T5858] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 451.122942][ T5858] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 451.158166][ T5858] usb 3-1: config 129 has no interface number 0 [ 451.180117][ T5858] usb 3-1: config 129 has no interface number 1 [ 451.210218][ T5858] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 451.239016][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 451.258788][ T5858] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 451.271934][ T5858] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 451.285509][ T5858] usb 3-1: config 129 interface 135 has no altsetting 0 [ 451.293305][ T5858] usb 3-1: config 129 interface 5 has no altsetting 0 [ 451.305271][ T5858] usb 3-1: string descriptor 0 read error: -22 [ 451.311892][ T5858] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 451.330915][T13654] loop0: detected capacity change from 0 to 2048 [ 451.337948][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.375575][T13654] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.410608][ T5858] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 451.446724][ T5858] usb 3-1: MIDIStreaming interface descriptor not found [ 451.671522][T13638] loop4: detected capacity change from 0 to 32768 [ 451.745950][ T9] usb 3-1: USB disconnect, device number 20 [ 451.853544][T13638] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 452.153999][T13638] XFS (loop4): Ending clean mount [ 452.377350][T11895] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 452.738122][T13688] loop0: detected capacity change from 0 to 512 [ 452.814850][T13693] overlayfs: conflicting options: userxattr,metacopy=on [ 452.836036][T13688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.946495][T13688] ext4 filesystem being mounted at /841/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.066063][T13688] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 453.077458][T13688] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 453.097551][T13688] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.3295: Failed to acquire dquot type 0 [ 453.130365][T13688] EXT4-fs (loop0): Remounting filesystem read-only [ 453.180236][T13702] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 453.257288][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.257710][T13704] loop4: detected capacity change from 0 to 64 [ 453.442745][T13710] loop3: detected capacity change from 0 to 512 [ 453.518948][T13710] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 453.542176][T13710] FAT-fs (loop3): Filesystem has been set read-only [ 454.150903][ T28] audit: type=1326 audit(1769423641.772:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.3.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 454.173352][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.233475][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'. [ 454.245381][ T28] audit: type=1326 audit(1769423641.809:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.3.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 454.306845][ T28] audit: type=1326 audit(1769423641.818:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.3.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 454.364495][ T28] audit: type=1326 audit(1769423641.818:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.3.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 454.431741][ T28] audit: type=1326 audit(1769423641.818:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.3.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 454.577678][T13715] loop0: detected capacity change from 0 to 32768 [ 455.073696][T13752] loop4: detected capacity change from 0 to 4096 [ 455.091507][ T27] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 455.113792][T13752] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 455.270543][T13752] ntfs3: loop4: Failed to initialize $Secure (-22). [ 455.303304][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 455.311133][ T27] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 455.338470][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.379599][ T27] usb 4-1: config 0 descriptor?? [ 455.420394][ T27] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 455.508691][ T28] audit: type=1326 audit(1769423643.027:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 455.531099][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.555899][ T28] audit: type=1326 audit(1769423643.036:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 455.633869][ T28] audit: type=1326 audit(1769423643.036:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13763 comm="syz.0.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 455.682797][ T27] usb 4-1: Detected FT232B [ 455.793541][T13770] loop4: detected capacity change from 0 to 1024 [ 455.920785][ T27] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 455.935462][ T27] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 455.983301][ T27] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 456.063188][ T27] usb 4-1: USB disconnect, device number 32 [ 456.086707][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 456.122425][ T27] ftdi_sio 4-1:0.0: device disconnected [ 456.539137][ T5813] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 456.776358][T13805] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3351'. [ 456.778737][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 456.793261][ T5813] usb 5-1: config 0 has an invalid interface number: 66 but max is 1 [ 456.812860][ T5813] usb 5-1: config 0 has no interface number 1 [ 456.819080][ T5813] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 456.841177][ T5813] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 456.880655][ T5813] usb 5-1: too many endpoints for config 0 interface 66 altsetting 107: 137, using maximum allowed: 30 [ 456.918218][ T5813] usb 5-1: config 0 interface 66 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 456.949174][ T5813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.960432][ T5813] usb 5-1: config 0 interface 66 has no altsetting 0 [ 456.979941][ T5813] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 456.993991][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 457.009547][ T5813] usb 5-1: SerialNumber: syz [ 457.030561][ T5813] usb 5-1: config 0 descriptor?? [ 457.050445][ T5813] usb-storage 5-1:0.0: USB Mass Storage device detected [ 457.077012][ T5813] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 457.159321][T13815] loop0: detected capacity change from 0 to 64 [ 457.303884][ T5813] usb-storage 5-1:0.66: USB Mass Storage device detected [ 457.343687][ T5813] usb-storage 5-1:0.66: Quirks match for vid 152d pid 0539: 4000000 [ 457.400285][ T5813] usb 5-1: USB disconnect, device number 4 [ 458.334204][T13853] xt_hashlimit: size too large, truncated to 1048576 [ 458.528412][T13862] loop0: detected capacity change from 0 to 512 [ 458.538280][T13862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 458.547173][T13862] EXT4-fs: Ignoring removed bh option [ 458.611342][T13862] EXT4-fs error (device loop0): mb_free_blocks:1954: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 458.638638][T13862] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #11: comm syz.0.3378: corrupted inode contents [ 458.657432][T13862] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #11: comm syz.0.3378: mark_inode_dirty error [ 458.672413][T13862] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3378: invalid indirect mapped block 1 (level 1) [ 458.688212][T13862] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #11: comm syz.0.3378: corrupted inode contents [ 458.716430][T13862] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 458.741007][T13862] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #11: comm syz.0.3378: corrupted inode contents [ 458.813155][T13862] EXT4-fs error (device loop0): ext4_truncate:4294: inode #11: comm syz.0.3378: mark_inode_dirty error [ 458.857855][T13862] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 458.911869][T13862] EXT4-fs (loop0): 1 truncate cleaned up [ 458.919164][T13862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.986827][T13862] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.3378: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 459.040533][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3384'. [ 459.040695][T13877] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 459.178239][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.571509][T13893] netlink: 'syz.3.3391': attribute type 1 has an invalid length. [ 459.586110][T13893] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3391'. [ 459.974271][T13909] netlink: 'syz.0.3399': attribute type 2 has an invalid length. [ 460.184492][T13916] ipt_REJECT: ECHOREPLY no longer supported. [ 460.667799][T13935] bridge3: entered promiscuous mode [ 460.689427][T13935] bridge3: entered allmulticast mode [ 460.988669][T13949] IPv6: Can't replace route, no match found [ 461.568288][T13974] loop3: detected capacity change from 0 to 512 [ 461.684243][T13974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.697880][T13974] ext4 filesystem being mounted at /855/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.834026][T13974] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.3427: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 461.889712][T13974] EXT4-fs (loop3): Remounting filesystem read-only [ 462.011654][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.296174][T13969] loop4: detected capacity change from 0 to 32768 [ 462.329498][T13969] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3425 (13969) [ 462.378632][T13969] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 462.414231][T13969] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 462.430481][T13969] BTRFS info (device loop4): using free space tree [ 462.621325][T13969] BTRFS info (device loop4): enabling ssd optimizations [ 462.628382][T13969] BTRFS info (device loop4): auto enabling async discard [ 462.799944][T14015] loop2: detected capacity change from 0 to 4096 [ 462.836008][T11895] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 462.878921][T14015] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 463.024178][T14019] bond2: entered promiscuous mode [ 463.029600][T14019] bond2: entered allmulticast mode [ 463.035812][T14015] ntfs3: loop2: Failed to initialize $Secure (-22). [ 463.063139][T14019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.202230][T13993] loop0: detected capacity change from 0 to 32768 [ 463.325380][T13993] JBD2: Ignoring recovery information on journal [ 463.531096][T13993] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 463.915466][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 464.130394][ T5859] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 464.197634][T14040] (null): rxe_set_mtu: Set mtu to 1024 [ 464.293629][T14044] netlink: 1964 bytes leftover after parsing attributes in process `syz.0.3447'. [ 464.308178][T14042] loop4: detected capacity change from 0 to 4096 [ 464.346266][ T5859] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 464.389440][ T5859] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 464.402338][T14042] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 464.434453][ T5859] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 464.443414][T14042] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 464.465027][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.511720][T14036] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 464.541597][ T5859] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 464.905462][ T5813] usb 4-1: USB disconnect, device number 33 [ 465.037417][T14040] infiniband syz2: set active [ 465.048411][T14040] infiniband syz2: added veth0_vlan [ 465.294369][T14040] RDS/IB: syz2: added [ 465.301454][T14040] smc: adding ib device syz2 with port count 1 [ 465.308800][T14040] smc: ib device syz2 port 1 has pnetid [ 465.443310][T14062] xt_TCPMSS: Only works on TCP SYN packets [ 465.667097][T14068] xt_nfacct: accounting object `syz1' does not exist [ 467.454091][T14100] loop3: detected capacity change from 0 to 32768 [ 467.728451][T14120] loop4: detected capacity change from 0 to 2048 [ 467.831566][T14127] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.263254][T14136] loop4: detected capacity change from 0 to 256 [ 468.301961][T14136] exfat: Deprecated parameter 'utf8' [ 468.349568][T14136] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 468.438909][T14136] overlay: filesystem on ./file0 not supported [ 468.511199][T14139] loop0: detected capacity change from 0 to 4096 [ 468.521796][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 468.528286][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 469.177278][T14151] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 469.278314][T14137] loop2: detected capacity change from 0 to 32768 [ 469.429794][T14162] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 469.594012][T14166] loop0: detected capacity change from 0 to 512 [ 469.618769][T14166] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 469.685924][T14166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.742143][T14166] ext4 filesystem being mounted at /898/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.768407][T14166] EXT4-fs error (device loop0): ext4_xattr_block_list:766: inode #15: comm syz.0.3511: corrupted xattr block 32: bad e_name length [ 469.796695][T14166] EXT4-fs (loop0): Remounting filesystem read-only [ 469.931221][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.053772][T14174] loop3: detected capacity change from 0 to 4096 [ 470.087914][T14177] netlink: 'syz.0.3514': attribute type 3 has an invalid length. [ 470.117495][T14177] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3514'. [ 470.182221][T14174] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 470.196704][T14174] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 470.712236][T14175] loop4: detected capacity change from 0 to 32768 [ 470.831399][T14175] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 470.863251][T14199] loop3: detected capacity change from 0 to 64 [ 471.058670][T14175] XFS (loop4): Ending clean mount [ 471.091668][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 471.091685][ T28] audit: type=1800 audit(1769423657.402:127): pid=14199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3520" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 471.155336][T14175] XFS (loop4): Quotacheck needed: Please wait. [ 471.266843][T14175] XFS (loop4): Quotacheck: Done. [ 471.634427][T11895] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 471.667384][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.685539][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.693786][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.725058][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.739223][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.754972][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.763009][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.804249][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.841425][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.849267][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.906937][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.923165][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.948172][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 471.966840][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.000825][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.019952][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.052563][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.069223][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.112200][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.124276][T14228] loop3: detected capacity change from 0 to 16 [ 472.141434][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.182012][T14228] erofs: (device loop3): mounted with root inode @ nid 36. [ 472.198891][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.231512][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.248148][T14228] syz.3.3533: attempt to access beyond end of device [ 472.248148][T14228] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 472.270784][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.282456][T14230] ..0: renamed from veth0_to_hsr (while UP) [ 472.294870][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.310712][T14232] loop2: detected capacity change from 0 to 512 [ 472.317249][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.327824][T14228] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[46, 4050] out[4096] [ 472.340003][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.340084][ T5859] hid-generic 0001:2043D8E7:05F6.0001: unknown main item tag 0x0 [ 472.388506][ T28] audit: type=1800 audit(1769423658.602:128): pid=14228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3533" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 472.443602][ T5859] hid-generic 0001:2043D8E7:05F6.0001: hidraw0: HID ved.d9 Device [syz0] on syz0 [ 472.749196][T14233] fido_id[14233]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 473.356819][T14262] loop4: detected capacity change from 0 to 2048 [ 473.416146][T14262] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.701266][T14270] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 474.730891][T14302] tmpfs: Bad value for 'mpol' [ 474.861981][T14284] loop4: detected capacity change from 0 to 32768 [ 474.977178][T14285] loop2: detected capacity change from 0 to 32768 [ 475.022254][T14285] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 475.373887][T14285] XFS (loop2): Ending clean mount [ 475.645095][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 476.534406][ T5859] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 476.587204][T14362] usb usb8: usbfs: process 14362 (syz.3.3592) did not claim interface 0 before use [ 476.609826][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 476.740165][ T5823] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 476.748061][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 476.771780][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.797449][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.810532][ T5859] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 476.824325][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.836021][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 476.847723][ T9] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 476.862327][ T5859] usb 3-1: config 0 descriptor?? [ 476.868482][ T9] usb 5-1: config 0 has no interface number 0 [ 476.878649][ T5859] hub 3-1:0.0: USB hub found [ 476.895481][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 476.913678][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.928269][ T9] usb 5-1: Product: syz [ 476.932611][ T9] usb 5-1: Manufacturer: syz [ 476.938140][ T9] usb 5-1: SerialNumber: syz [ 476.961141][ T9] usb 5-1: config 0 descriptor?? [ 476.969221][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 476.988147][ T5823] usb 1-1: config 0 has an invalid interface number: 223 but max is 0 [ 477.010871][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.031816][ T5823] usb 1-1: config 0 has no interface number 0 [ 477.043389][ T5823] usb 1-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 477.065987][ T5823] usb 1-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 477.081775][ T5823] usb 1-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.106315][ T5823] usb 1-1: config 0 interface 223 has no altsetting 0 [ 477.114453][ T5859] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 477.128409][ T5823] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 477.141758][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.150153][ T5823] usb 1-1: Product: syz [ 477.156925][ T5823] usb 1-1: Manufacturer: syz [ 477.161731][ T5823] usb 1-1: SerialNumber: syz [ 477.171428][ T5823] usb 1-1: config 0 descriptor?? [ 477.221599][T14372] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3597'. [ 477.231862][T14372] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 477.339688][ T5859] usbhid 3-1:0.0: can't add hid device: -71 [ 477.352461][ T5859] usbhid: probe of 3-1:0.0 failed with error -71 [ 477.392595][ T5859] usb 3-1: USB disconnect, device number 21 [ 477.418061][ T9] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 477.430034][T14374] loop3: detected capacity change from 0 to 4096 [ 477.437147][ T9] usb 5-1: No valid video chain found. [ 477.445199][ T9] usb 5-1: USB disconnect, device number 5 [ 477.465118][T14374] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 477.575556][T14374] ntfs3: loop3: failed to convert "c46c" to default [ 477.669012][ T5823] usb 1-1: USB disconnect, device number 34 [ 477.722370][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3599'. [ 478.517395][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3612'. [ 478.576016][T14404] netlink: 'syz.2.3613': attribute type 4 has an invalid length. [ 478.824876][T14415] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3618'. [ 478.939635][T14419] netlink: 'syz.3.3620': attribute type 1 has an invalid length. [ 478.960551][T14419] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3620'. [ 480.139637][T14432] loop0: detected capacity change from 0 to 32768 [ 480.249921][ T5891] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.703149][T14432] loop0: detected capacity change from 0 to 16 [ 480.729841][T14432] erofs: Unknown parameter 'nossd' [ 480.796608][ T5780] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 481.006950][T14486] Cannot find del_set index 4 as target [ 481.681013][T14504] loop0: detected capacity change from 0 to 1764 [ 481.735457][T14481] loop4: detected capacity change from 0 to 32768 [ 481.868782][T14481] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 481.888703][T14496] loop2: detected capacity change from 0 to 32768 [ 481.956411][T14496] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 482.025886][T14481] XFS (loop4): Ending clean mount [ 482.118837][T14481] XFS (loop4): Quotacheck needed: Please wait. [ 482.212280][T14496] XFS (loop2): Ending clean mount [ 482.277061][T14481] XFS (loop4): Quotacheck: Done. [ 482.286434][T14496] XFS (loop2): Quotacheck needed: Please wait. [ 482.494717][T14496] XFS (loop2): Quotacheck: Done. [ 482.566058][T11895] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 482.841588][ T28] audit: type=1326 audit(1769423668.244:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14539 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 482.906976][ T28] audit: type=1326 audit(1769423668.244:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14539 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 482.929584][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.962345][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 483.006115][ T28] audit: type=1326 audit(1769423668.336:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 483.106235][ T28] audit: type=1326 audit(1769423668.336:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 483.128629][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.199192][ T28] audit: type=1326 audit(1769423668.336:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14539 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 483.265428][ T28] audit: type=1326 audit(1769423668.336:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 483.287915][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.334978][T14551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3670'. [ 483.353933][ T28] audit: type=1326 audit(1769423668.336:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 483.453533][ T28] audit: type=1326 audit(1769423668.373:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14539 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 483.560722][ T28] audit: type=1326 audit(1769423668.373:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14539 comm="syz.3.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 484.409580][T14586] loop0: detected capacity change from 0 to 22 [ 484.425094][T14586] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 484.460725][T14586] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 484.759888][T14592] loop4: detected capacity change from 0 to 256 [ 484.895964][T14592] FAT-fs (loop4): Directory bread(block 64) failed [ 484.928617][T14592] FAT-fs (loop4): Directory bread(block 65) failed [ 484.950578][T14592] FAT-fs (loop4): Directory bread(block 66) failed [ 484.958819][T14572] loop3: detected capacity change from 0 to 32768 [ 484.978996][T14592] FAT-fs (loop4): Directory bread(block 67) failed [ 485.002820][T14592] FAT-fs (loop4): Directory bread(block 68) failed [ 485.017773][T14572] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 485.029314][T14592] FAT-fs (loop4): Directory bread(block 69) failed [ 485.048812][T14592] FAT-fs (loop4): Directory bread(block 70) failed [ 485.090319][T14592] FAT-fs (loop4): Directory bread(block 71) failed [ 485.133056][T14592] FAT-fs (loop4): Directory bread(block 72) failed [ 485.178027][T14592] FAT-fs (loop4): Directory bread(block 73) failed [ 485.195218][T14585] loop2: detected capacity change from 0 to 32768 [ 485.265310][T14572] XFS (loop3): Ending clean mount [ 485.307008][T14585] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 485.351349][T14572] XFS (loop3): Quotacheck needed: Please wait. [ 485.605171][T14572] XFS (loop3): Quotacheck: Done. [ 485.665432][T14585] XFS (loop2): Ending clean mount [ 485.879398][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 485.904319][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 486.441153][T14628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.611862][T14634] loop0: detected capacity change from 0 to 164 [ 486.662630][T14634] Unsupported NM flag settings (240) [ 486.754283][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 487.008712][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 487.025400][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.033505][ T9] usb 5-1: Product: syz [ 487.046652][ T9] usb 5-1: Manufacturer: syz [ 487.051341][ T9] usb 5-1: SerialNumber: syz [ 487.061005][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 487.572304][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 487.587495][ T9] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 487.616985][T14656] loop3: detected capacity change from 0 to 8 [ 487.692899][T14656] SQUASHFS error: Failed to read block 0x6fc: -5 [ 487.714201][T14656] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 488.270322][T14670] loop3: detected capacity change from 0 to 4096 [ 488.313510][T14670] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 488.343985][T14676] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 488.404277][T14670] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 488.505881][T14670] ntfs3: loop3: failed to convert "c46c" to cp874 [ 488.897634][T14682] loop3: detected capacity change from 0 to 4096 [ 488.999872][T14682] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 489.023532][T14682] ntfs3: loop3: Failed to load $Extend (-22). [ 489.033324][T14682] ntfs3: loop3: Failed to initialize $Extend. [ 489.312387][T14674] loop0: detected capacity change from 0 to 32768 [ 489.526607][T14693] loop2: detected capacity change from 0 to 4096 [ 489.572038][T14693] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 489.767009][T14693] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 490.218625][T14710] ip6erspan0: entered promiscuous mode [ 490.526208][T14702] loop4: detected capacity change from 0 to 32768 [ 490.582016][T14702] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 490.612384][ T5859] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 490.641979][T14702] XFS (loop4): Ending clean mount [ 490.680554][T14725] loop0: detected capacity change from 0 to 2048 [ 490.712648][T14725] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 490.739049][T11895] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 490.757781][T14725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.842138][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 490.881934][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 490.927006][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.950277][ T5859] usb 4-1: language id specifier not provided by device, defaulting to English [ 490.967462][ T5859] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 491.006203][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.033029][ T5859] usb 4-1: Manufacturer: ‰ [ 491.049827][ T5859] usb 4-1: SerialNumber: syz [ 491.073057][ T5859] usb 4-1: config 0 descriptor?? [ 491.113008][ T5859] em28xx 4-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 491.128233][ T5859] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 491.447135][ T5859] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 491.467402][ T5859] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 491.491687][ T5859] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 491.498741][ T5859] em28xx 4-1:0.0: No AC97 audio processor [ 491.533675][ T5859] usb 4-1: USB disconnect, device number 34 [ 491.554107][ T5859] em28xx 4-1:0.0: Disconnecting em28xx [ 491.588394][ T5859] em28xx 4-1:0.0: Freeing device [ 491.927594][T14748] netlink: 'syz.2.3754': attribute type 64 has an invalid length. [ 491.967108][T14748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3754'. [ 491.993621][T14748] netlink: 'syz.2.3754': attribute type 64 has an invalid length. [ 492.021267][T14748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3754'. [ 492.109359][T14734] loop4: detected capacity change from 0 to 32768 [ 492.141321][T14734] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 492.141321][T14734] [ 492.154990][T14750] loop0: detected capacity change from 0 to 4096 [ 492.161621][T14734] ERROR: (device loop4): remounting filesystem as read-only [ 492.174839][T14734] ERROR: (device loop4): jfs_unlink: [ 492.174839][T14734] [ 492.202420][T14750] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 492.237381][T11895] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 492.237381][T11895] [ 492.339753][T14750] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 492.489071][T14750] ntfs3: loop0: ino=1b, "file0" attr_set_size [ 492.496171][T14750] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 492.691800][T14764] netlink: 'syz.3.3762': attribute type 8 has an invalid length. [ 492.713576][T14764] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3762'. [ 492.851614][T14766] overlayfs: conflicting options: nfs_export=on,index=off [ 492.943015][ T5859] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 493.161398][ T5859] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.192116][ T5859] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 493.220346][ T5859] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 493.252749][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.301207][T14762] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.325054][ T5859] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 493.880653][ T27] usb 5-1: USB disconnect, device number 7 [ 494.229117][T14810] loop2: detected capacity change from 0 to 16 [ 494.258252][T14810] erofs: (device loop2): mounted with root inode @ nid 36. [ 494.627767][ T28] audit: type=1326 audit(1769423679.113:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.0.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 494.697655][ T28] audit: type=1326 audit(1769423679.113:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.0.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 494.752224][ T28] audit: type=1326 audit(1769423679.123:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.0.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 494.830460][ T28] audit: type=1326 audit(1769423679.123:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.0.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 494.904021][ T28] audit: type=1326 audit(1769423679.123:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.0.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 495.000666][T14828] No such timeout policy "syz1" [ 495.045795][T14808] loop3: detected capacity change from 0 to 32768 [ 495.134083][T14808] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 495.190232][T14808] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 495.234299][ T12] (kworker/u4:1,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 495.387199][T14808] syz.3.3783 (14808) used greatest stack depth: 18224 bytes left [ 495.539060][T14840] loop2: detected capacity change from 0 to 4096 [ 495.587642][T14840] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 495.615475][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 495.782720][T14840] ntfs3: loop2: failed to convert "c46c" to cp866 [ 495.855697][T14846] loop4: detected capacity change from 0 to 4096 [ 495.875260][T14846] EXT4-fs: Ignoring removed mblk_io_submit option [ 495.926640][T14846] EXT4-fs (loop4): Test dummy encryption mode enabled [ 496.008440][T14846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.283364][T11895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.462584][T14864] program syz.2.3811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.509664][T14866] ubi0: attaching mtd0 [ 496.517807][T14866] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042) [ 496.600514][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 496.844048][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 496.885053][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 496.898138][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.919209][ T9] usb 1-1: Product: syz [ 496.928189][ T9] usb 1-1: Manufacturer: syz [ 496.939128][ T9] usb 1-1: SerialNumber: syz [ 496.952918][ T9] usb 1-1: config 0 descriptor?? [ 497.025240][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3820'. [ 497.209845][ T9] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 497.229638][ T9] eb aa 3b 80 9b e4 7a f0 [ 497.241800][ T9] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 497.339385][T14894] loop2: detected capacity change from 0 to 1764 [ 497.485826][ T5859] usb 1-1: USB disconnect, device number 35 [ 497.702755][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 497.810822][T14908] loop4: detected capacity change from 0 to 164 [ 497.930696][ T9] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 497.953526][ T9] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid maxpacket 65278, setting to 1024 [ 497.981190][ T9] usb 3-1: config 0 interface 0 altsetting 60 bulk endpoint 0xD has invalid maxpacket 1024 [ 498.010380][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 498.025330][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 498.045820][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.082706][ T9] usb 3-1: config 0 descriptor?? [ 498.088733][T14894] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 498.165262][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3834'. [ 498.313677][T14904] loop3: detected capacity change from 0 to 32768 [ 498.337226][ T9] usb 3-1: string descriptor 0 read error: -71 [ 498.351696][ T9] usb 3-1: ucan: probing device on interface #0 [ 498.353167][T14916] loop4: detected capacity change from 0 to 512 [ 498.358024][ T9] usb 3-1: ucan: invalid endpoint configuration [ 498.415008][T14916] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 498.433530][ T9] usb 3-1: ucan: probe failed; try to update the device firmware [ 498.455707][T14916] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 498.491450][T14916] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.3836: Invalid block bitmap block 0 in block_group 0 [ 498.536059][ T9] usb 3-1: USB disconnect, device number 22 [ 498.555477][T14916] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 498.580333][T14916] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.3836: attempt to clear invalid blocks 983261 len 1 [ 498.661568][T14916] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.3836: Invalid inode table block 0 in block_group 0 [ 498.702607][T14916] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 498.733035][T14916] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 498.752218][T14916] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.3836: Invalid inode table block 0 in block_group 0 [ 498.807444][T14916] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 498.830744][T14916] EXT4-fs error (device loop4): ext4_truncate:4294: inode #11: comm syz.4.3836: mark_inode_dirty error [ 498.852593][T14916] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 498.901816][T14916] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.3836: Invalid inode table block 0 in block_group 0 [ 498.929600][T14916] EXT4-fs (loop4): 1 truncate cleaned up [ 498.948905][T14916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.095649][T14916] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.3836: Invalid inode table block 0 in block_group 0 [ 499.166811][T14916] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 499.315978][T11895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.737286][T14950] netlink: 'syz.4.3852': attribute type 13 has an invalid length. [ 500.224991][T14972] loop3: detected capacity change from 0 to 256 [ 500.278275][T14974] loop0: detected capacity change from 0 to 64 [ 500.576815][T14977] raw_sendmsg: syz.3.3864 forgot to set AF_INET. Fix it! [ 500.948010][T14985] Process accounting resumed [ 501.062509][T14968] loop4: detected capacity change from 0 to 32768 [ 501.092696][T14968] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 501.119265][T14988] loop3: detected capacity change from 0 to 4096 [ 501.138173][T14968] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 501.162329][ T12] (kworker/u4:1,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 501.229756][T14988] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 501.280828][T14988] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 501.320015][T14988] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 501.363278][T14988] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 501.413371][T14988] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 501.473501][T14988] ntfs: volume version 3.1. [ 501.483517][T14988] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 501.526184][T14988] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 501.580073][T14988] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 501.612589][T14988] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 501.643129][T14984] loop2: detected capacity change from 0 to 32768 [ 501.661241][T14988] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 501.726916][T14984] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 501.726916][T14984] [ 501.738211][T11895] ocfs2: Unmounting device (7,4) on (node local) [ 501.793935][T14984] xtLookup: xtSearch returned -5 [ 501.840054][T14984] add_index: get/read_metapage failed! [ 502.787764][T15018] bond3: entered promiscuous mode [ 502.814905][T15018] bond3: entered allmulticast mode [ 502.825432][T15018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 503.416514][T15039] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 503.879935][T15060] loop3: detected capacity change from 0 to 1764 [ 503.941858][T15060] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 504.094506][T15067] netlink: 'syz.4.3907': attribute type 1 has an invalid length. [ 504.394372][T15074] loop0: detected capacity change from 0 to 512 [ 504.414409][T15077] loop3: detected capacity change from 0 to 64 [ 504.453261][T15074] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 504.581336][T15074] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 504.626900][T15074] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3911: bg 0: block 248: padding at end of block bitmap is not set [ 504.695220][T15074] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.3911: Failed to acquire dquot type 1 [ 504.728939][T15074] EXT4-fs (loop0): 1 truncate cleaned up [ 504.748337][T15074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 504.775867][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3917'. [ 504.826511][T15086] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3917'. [ 505.087484][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 505.106760][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6985: comm kworker/u4:1: Failed to release dquot type 1 [ 505.302476][T15100] loop0: detected capacity change from 0 to 64 [ 505.583833][T15104] loop4: detected capacity change from 0 to 4096 [ 506.084947][T15118] sctp: [Deprecated]: syz.3.3932 (pid 15118) Use of int in maxseg socket option. [ 506.084947][T15118] Use struct sctp_assoc_value instead [ 506.141969][T15090] loop2: detected capacity change from 0 to 32768 [ 506.179866][T15090] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 506.201501][T15090] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 506.316615][T15090] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 506.390525][ T5813] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 506.408409][ T5813] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 506.522606][ T5813] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 105ms [ 506.530729][ T5813] gfs2: fsid=syz:syz.0: jid=0: Done [ 506.566727][T15090] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 506.957210][T15139] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 506.998925][T15139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 507.627090][T15136] loop0: detected capacity change from 0 to 32768 [ 507.660308][T15153] loop3: detected capacity change from 0 to 4096 [ 507.686884][T15136] JBD2: Ignoring recovery information on journal [ 507.693725][T15153] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 507.717833][T15162] loop4: detected capacity change from 0 to 512 [ 507.727179][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 507.727194][ T28] audit: type=1107 audit(1769423691.219:144): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ݗ:: [ 507.727194][ T28] ' [ 507.778083][T15162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.853980][T15136] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 507.936450][T15153] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 508.068335][ T28] audit: type=1800 audit(1769423691.524:145): pid=15136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3940" name="file0" dev="loop0" ino=17058 res=0 errno=0 [ 508.101066][T11895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.285485][T15170] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 508.295264][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 508.315508][T15170] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 508.460924][T15173] loop3: detected capacity change from 0 to 1024 [ 508.648515][T15177] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3960'. [ 508.662716][T11861] hfsplus: b-tree write err: -5, ino 4 [ 509.194837][T15197] netlink: 'syz.2.3968': attribute type 3 has an invalid length. [ 509.237303][T15197] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3968'. [ 509.507691][T15205] netlink: 'syz.3.3973': attribute type 32 has an invalid length. [ 509.737895][T15214] set_capacity_and_notify: 1 callbacks suppressed [ 509.737912][T15214] loop3: detected capacity change from 0 to 1024 [ 509.858716][T15214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000006000000 r/w without journal. Quota mode: writeback. [ 510.070679][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000006000000. [ 510.226252][T15230] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 510.259316][T15230] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 511.475342][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 511.590912][T15286] loop2: detected capacity change from 0 to 512 [ 511.598823][T15286] EXT4-fs: Ignoring removed orlov option [ 511.604562][T15286] EXT4-fs: Ignoring removed nobh option [ 511.633277][T15286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 511.660388][T15286] EXT4-fs (loop2): orphan cleanup on readonly fs [ 511.677778][T15286] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.4012: bg 0: block 248: padding at end of block bitmap is not set [ 511.702775][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 511.708755][T15286] Quota error (device loop2): write_blk: dquota write failed [ 511.723063][T15286] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 511.734490][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.744985][T15286] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.4012: Failed to acquire dquot type 1 [ 511.762768][T15286] EXT4-fs (loop2): 1 truncate cleaned up [ 511.771391][T15286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 511.772455][ T27] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 511.794062][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.810633][ T27] usb 5-1: Product: syz [ 511.819816][ T27] usb 5-1: Manufacturer: syz [ 511.829727][T15286] EXT4-fs: Ignoring removed orlov option [ 511.831974][ T27] usb 5-1: SerialNumber: syz [ 511.835973][T15286] EXT4-fs: Ignoring removed nobh option [ 511.846089][T15286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 511.857888][T15286] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 511.873048][T15262] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 511.884262][T15286] EXT4-fs error (device loop2): __ext4_remount:6752: comm syz.2.4012: Abort forced by user [ 511.899131][ T27] usb 5-1: config 0 descriptor?? [ 511.902842][T15286] EXT4-fs (loop2): Remounting filesystem read-only [ 511.915901][T15286] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 511.925258][T15286] ext4 filesystem being remounted at /940/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 511.935977][ T27] usb 5-1: bad CDC descriptors [ 511.964716][ T27] usb 5-1: unsupported MDLM descriptors [ 511.993492][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.157049][ T27] usb 5-1: USB disconnect, device number 8 [ 512.530943][T15306] sctp: [Deprecated]: syz.2.4021 (pid 15306) Use of int in max_burst socket option deprecated. [ 512.530943][T15306] Use struct sctp_assoc_value instead [ 513.035178][T15300] loop3: detected capacity change from 0 to 32768 [ 513.052974][T15300] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.4017 (15300) [ 513.117925][T15300] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 513.130722][ T787] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 513.166621][T15300] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 513.176685][T15300] BTRFS info (device loop3): force zlib compression, level 3 [ 513.184866][T15300] BTRFS info (device loop3): force clearing of disk cache [ 513.192900][T15300] BTRFS info (device loop3): setting nodatasum [ 513.203943][T15300] BTRFS info (device loop3): allowing degraded mounts [ 513.213923][T15300] BTRFS info (device loop3): enabling disk space caching [ 513.222118][T15300] BTRFS info (device loop3): disk space caching is enabled [ 513.363849][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 513.381559][T15300] BTRFS info (device loop3): auto enabling async discard [ 513.392549][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.405363][T15300] BTRFS info (device loop3): rebuilding free space tree [ 513.413930][ T787] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 513.426344][T15342] xt_hashlimit: size too large, truncated to 1048576 [ 513.433824][T15342] xt_hashlimit: max too large, truncated to 1048576 [ 513.436814][ T787] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.454161][ T787] usb 5-1: config 0 interface 0 has no altsetting 0 [ 513.464220][ T787] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 513.473899][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.482238][ T787] usb 5-1: Product: syz [ 513.486548][ T787] usb 5-1: Manufacturer: syz [ 513.491483][ T787] usb 5-1: SerialNumber: syz [ 513.498954][ T787] usb 5-1: config 0 descriptor?? [ 513.515938][ T787] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 513.521876][T15300] BTRFS info (device loop3): disabling free space tree [ 513.543865][T15300] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 513.565760][T15300] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 513.751498][ T787] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 513.759321][ T787] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 513.801047][ T787] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 513.855196][ T5774] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 513.979823][ T787] usb 5-1: USB disconnect, device number 9 [ 514.376950][T15360] netlink: 'syz.2.4041': attribute type 2 has an invalid length. [ 514.813909][T15372] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4046'. [ 515.107502][T15382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4051'. [ 515.281636][T15362] loop3: detected capacity change from 0 to 32768 [ 515.354347][T15362] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 515.450192][T15362] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 515.499747][T15362] XFS (loop3): Starting recovery (logdev: internal) [ 515.579756][T15403] netlink: 'syz.0.4057': attribute type 21 has an invalid length. [ 515.592557][T15362] XFS (loop3): Ending recovery (logdev: internal) [ 515.601164][T15403] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4057'. [ 515.611554][T15403] netlink: 'syz.0.4057': attribute type 5 has an invalid length. [ 515.621110][ T5823] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 515.635910][T15403] netlink: 'syz.0.4057': attribute type 6 has an invalid length. [ 515.644604][T15403] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4057'. [ 515.754943][T15362] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 515.844231][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.866096][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 515.899155][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 515.913044][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 515.922670][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 515.936533][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 515.952402][ T5823] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 515.989421][ T5823] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 516.032550][ T5823] usb 3-1: Manufacturer: syz [ 516.034778][T15407] netlink: 'syz.0.4059': attribute type 30 has an invalid length. [ 516.068948][ T5823] usb 3-1: config 0 descriptor?? [ 516.373991][ T5823] usb 3-1: USB disconnect, device number 23 [ 516.670859][T15425] loop4: detected capacity change from 0 to 64 [ 516.776222][T15425] Trying to free block not in datazone [ 516.782237][T15425] Trying to free block not in datazone [ 516.969396][T15433] netlink: 'syz.4.4071': attribute type 30 has an invalid length. [ 517.439098][T15450] loop0: detected capacity change from 0 to 16 [ 517.822647][T15431] loop3: detected capacity change from 0 to 32768 [ 517.912538][T15431] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 517.941183][T15431] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 517.957698][ T5823] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 518.213555][ T5823] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 518.232734][ T5823] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 518.245942][T15431] XFS (loop3): Ending clean mount [ 518.255067][ T5823] usb 5-1: config 220 has no interface number 2 [ 518.263206][ T5823] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 518.277226][ T5823] usb 5-1: config 220 interface 0 has no altsetting 0 [ 518.288147][ T5823] usb 5-1: config 220 interface 76 has no altsetting 0 [ 518.295179][T15431] XFS (loop3): Quotacheck needed: Please wait. [ 518.331183][ T5823] usb 5-1: config 220 interface 1 has no altsetting 0 [ 518.361502][ T5823] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 518.392007][T15431] XFS (loop3): Quotacheck: Done. [ 518.402734][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.441658][ T5823] usb 5-1: Product: syz [ 518.457239][ T5823] usb 5-1: Manufacturer: syz [ 518.461930][ T5823] usb 5-1: SerialNumber: syz [ 518.494997][T15478] kAFS: unparsable volume name [ 518.678091][ T5774] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 518.750772][ T5823] usb 5-1: selecting invalid altsetting 0 [ 518.757289][ T5823] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 518.786809][ T5823] usb 5-1: No valid video chain found. [ 518.828889][ T5823] usb 5-1: selecting invalid altsetting 0 [ 518.850057][ T5823] usbtest: probe of 5-1:220.1 failed with error -22 [ 518.880634][ T5823] usb 5-1: USB disconnect, device number 10 [ 518.988771][T15467] loop2: detected capacity change from 0 to 32768 [ 519.494074][T15490] loop3: detected capacity change from 0 to 4096 [ 519.787828][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 519.993484][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 520.004776][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 520.015818][ T9] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 520.041962][ T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 520.065072][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.086813][ T9] usb 1-1: Product: syz [ 520.102415][ T9] usb 1-1: Manufacturer: syz [ 520.112890][ T9] usb 1-1: SerialNumber: syz [ 520.385652][ T9] usb 1-1: Not enough endpoints found in device, aborting! [ 520.439776][ T5813] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 520.667741][T15514] usb 1-1: USB disconnect, device number 36 [ 520.687145][ T5813] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 520.719849][ T5813] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64 [ 520.747665][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 520.771520][ T5813] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 520.780896][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.794085][ T5813] usb 4-1: Product: syz [ 520.801708][ T5813] usb 4-1: Manufacturer: syz [ 520.812679][ T5813] usb 4-1: SerialNumber: syz [ 520.833636][ T5813] usb 4-1: config 0 descriptor?? [ 520.862409][ T5813] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 521.119078][ T5813] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 521.137210][ T5813] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 521.300999][T15539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4114'. [ 521.371979][ T5813] usb 4-1: USB disconnect, device number 35 [ 521.461465][T15538] loop4: detected capacity change from 0 to 8192 [ 521.516778][T15538] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 521.570676][T15538] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 521.596756][T15543] loop2: detected capacity change from 0 to 4096 [ 521.612740][T15538] REISERFS (device loop4): using ordered data mode [ 521.614723][T15543] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 521.663514][T15538] reiserfs: using flush barriers [ 521.687529][T15543] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 521.700854][T15543] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 521.716678][T15538] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 521.757563][T15538] REISERFS (device loop4): checking transaction log (loop4) [ 522.007017][T15538] REISERFS (device loop4): Using tea hash to sort names [ 522.028375][T15538] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 522.205715][ T28] audit: type=1326 audit(2000000004.613:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.3.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 522.301977][ T28] audit: type=1326 audit(2000000004.613:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.3.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 522.386434][ T28] audit: type=1326 audit(2000000004.650:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.3.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 522.464957][ T28] audit: type=1326 audit(2000000004.650:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.3.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 522.529713][ T28] audit: type=1326 audit(2000000004.650:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15553 comm="syz.3.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 522.811872][ T28] audit: type=1326 audit(2000000005.176:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.3.4127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 522.876220][ T28] audit: type=1326 audit(2000000005.176:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.3.4127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 522.925506][ T28] audit: type=1326 audit(2000000005.176:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.3.4127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 523.015972][ T28] audit: type=1326 audit(2000000005.176:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.3.4127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 523.086924][ T28] audit: type=1326 audit(2000000005.176:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.3.4127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 523.226803][T15552] loop0: detected capacity change from 0 to 32768 [ 523.321048][T15552] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 523.331731][T15552] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 523.386496][T15576] loop3: detected capacity change from 0 to 8192 [ 523.455948][T15576] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 523.483128][T15513] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 523.541874][T15576] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 523.573861][T15552] XFS (loop0): Ending clean mount [ 523.588590][T15576] REISERFS (device loop3): using ordered data mode [ 523.596808][T15552] XFS (loop0): Quotacheck needed: Please wait. [ 523.620172][T15576] reiserfs: using flush barriers [ 523.648485][T15576] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 523.705838][T15513] usb 5-1: Using ep0 maxpacket: 16 [ 523.711816][T15576] REISERFS (device loop3): checking transaction log (loop3) [ 523.736882][T15552] XFS (loop0): Quotacheck: Done. [ 523.753465][T15513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 523.797413][T15513] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 523.806546][T15513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.849414][T15513] usb 5-1: config 0 descriptor?? [ 523.992967][ T5771] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 524.039842][T15576] REISERFS (device loop3): Using tea hash to sort names [ 524.050471][T15576] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 524.113249][T15513] usb 5-1: string descriptor 0 read error: -71 [ 524.143230][T15513] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 524.170228][ T5124] bcm5974 5-1:0.0: could not read from device [ 524.185600][ T5124] bcm5974 5-1:0.0: could not read from device [ 524.233320][ T5124] bcm5974 5-1:0.0: could not read from device [ 524.271603][T15513] usb 5-1: USB disconnect, device number 11 [ 524.282393][ T5124] bcm5974 5-1:0.0: could not read from device [ 524.507667][T15601] loop2: detected capacity change from 0 to 256 [ 524.896161][T15612] syz.4.4145: attempt to access beyond end of device [ 524.896161][T15612] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 525.276963][T15619] loop3: detected capacity change from 0 to 4096 [ 525.329797][T15619] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 525.496012][T15627] bridge_slave_1: left allmulticast mode [ 525.532465][T15627] bridge_slave_1: left promiscuous mode [ 525.538379][T15627] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.664946][T15627] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 525.732778][T15631] netlink: 800 bytes leftover after parsing attributes in process `syz.4.4155'. [ 525.768352][T15631] netlink: 1301 bytes leftover after parsing attributes in process `syz.4.4155'. [ 526.397993][T15651] loop0: detected capacity change from 0 to 2048 [ 526.436543][T15653] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 526.466921][T15651] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 526.799263][T15665] netlink: 'syz.0.4170': attribute type 5 has an invalid length. [ 527.634138][T15699] fuse: blksize only supported for fuseblk [ 527.646887][T15698] loop4: detected capacity change from 0 to 256 [ 528.003876][T15707] AppArmor: change_hat: Invalid input '' [ 528.161443][T15713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4194'. [ 528.413217][T15695] loop3: detected capacity change from 0 to 40427 [ 528.424782][T15695] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 528.436292][ T5829] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 528.466978][T15695] F2FS-fs (loop3): invalid crc value [ 528.526408][T15695] F2FS-fs (loop3): Found nat_bits in checkpoint [ 528.656476][ T5829] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 528.674864][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.687468][T15695] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 528.710182][ T5829] usb 3-1: config 0 descriptor?? [ 529.148007][ T5774] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 529.161925][ T5774] F2FS-fs (loop3): invalid blkaddr: 1024, type: 10, run fsck to fix. [ 529.185365][T15736] loop0: detected capacity change from 0 to 4096 [ 529.209059][ T5829] usb 3-1: Cannot set MAC address [ 529.230090][ T5829] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 529.258360][ T5829] usb 3-1: USB disconnect, device number 24 [ 529.281279][T15739] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 530.979409][T15790] (null): rxe_set_mtu: Set mtu to 256 [ 530.986872][T15790] rdma_rxe: rxe_newlink: failed to add lo [ 531.114618][T15766] loop0: detected capacity change from 0 to 32768 [ 531.199554][T15766] (syz.0.4218,15766,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 531.254522][T15766] (syz.0.4218,15766,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 531.378633][T15766] (syz.0.4218,15766,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 531.460000][T15766] JBD2: Ignoring recovery information on journal [ 531.572464][T15766] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 531.768244][T15816] SET target dimension over the limit! [ 531.991967][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 532.720191][T15842] IPv6: NLM_F_CREATE should be specified when creating new route [ 532.758361][T15818] loop2: detected capacity change from 0 to 32768 [ 532.789387][T15818] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.4242 (15818) [ 532.834492][T15818] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 532.867562][T15818] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 532.897477][T15818] BTRFS info (device loop2): force zlib compression, level 3 [ 532.917148][T15846] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4256'. [ 532.927088][T15818] BTRFS info (device loop2): force clearing of disk cache [ 532.954985][T15818] BTRFS info (device loop2): setting nodatasum [ 532.975965][T15818] BTRFS info (device loop2): allowing degraded mounts [ 532.999377][T15818] BTRFS info (device loop2): enabling disk space caching [ 533.021428][T15818] BTRFS info (device loop2): disk space caching is enabled [ 533.202601][T15818] BTRFS info (device loop2): auto enabling async discard [ 533.232139][T15818] BTRFS info (device loop2): rebuilding free space tree [ 533.305810][T15818] BTRFS info (device loop2): disabling free space tree [ 533.319892][T15818] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 533.348260][T15818] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 533.566722][T15818] BTRFS info (device loop2): balance: start -sconvert=raid0,soft,usage=10625749090306,limit=51539609600 [ 533.566970][T15818] BTRFS info (device loop2): balance: ended with status: 0 [ 533.650953][T15876] loop4: detected capacity change from 0 to 4096 [ 533.659606][ T5773] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 533.664074][T15876] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 533.767680][T15876] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 533.901135][T15876] ntfs3: loop4: ino=0, attr_set_size [ 533.954706][T15880] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4266'. [ 534.247519][T15884] netlink: 'syz.3.4269': attribute type 2 has an invalid length. [ 534.544600][ T28] audit: type=1326 audit(2000000015.981:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 534.608741][ T28] audit: type=1326 audit(2000000015.981:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 534.667719][ T28] audit: type=1326 audit(2000000015.981:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 534.738637][ T28] audit: type=1326 audit(2000000015.981:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 534.819420][ T28] audit: type=1326 audit(2000000015.981:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15893 comm="syz.0.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 535.097234][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 535.103797][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.224352][T15918] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4284'. [ 535.371859][T15914] loop4: detected capacity change from 0 to 4096 [ 535.428098][T15914] ntfs: volume version 3.1. [ 535.697366][T15926] x_tables: duplicate underflow at hook 3 [ 535.824307][T15930] overlay: Unknown parameter '\' [ 535.832855][T15908] loop2: detected capacity change from 0 to 32768 [ 535.873164][T15908] (syz.2.4278,15908,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 535.916144][T15908] (syz.2.4278,15908,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 536.034164][T15908] (syz.2.4278,15908,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 536.087598][T15908] JBD2: Ignoring recovery information on journal [ 536.158530][T15908] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 536.538047][T15950] loop0: detected capacity change from 0 to 1024 [ 536.598099][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 536.639848][T15949] loop3: detected capacity change from 0 to 4096 [ 536.708382][T15953] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.850215][ T3445] hfsplus: b-tree write err: -5, ino 4 [ 537.032665][T15957] loop0: detected capacity change from 0 to 512 [ 537.094955][T15957] EXT4-fs (loop0): orphan cleanup on readonly fs [ 537.137859][T15957] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #15: comm syz.0.4303: corrupted inode contents [ 537.214292][T15957] EXT4-fs (loop0): Remounting filesystem read-only [ 537.223548][T15957] EXT4-fs (loop0): 1 orphan inode deleted [ 537.233488][T15957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 537.321602][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.560974][T15971] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 537.767909][T15978] loop2: detected capacity change from 0 to 2048 [ 537.845823][T15978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.873338][T15978] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 537.922436][T15987] netlink: 'syz.4.4315': attribute type 10 has an invalid length. [ 537.931120][T15987] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.4315'. [ 538.108087][T15991] netlink: 'syz.0.4318': attribute type 32 has an invalid length. [ 538.123749][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.720596][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4328'. [ 539.147328][T16028] Zero length message leads to an empty skb [ 539.200551][T16031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 539.470008][T16017] loop4: detected capacity change from 0 to 32768 [ 539.528108][T16017] jfs_strtoUCS: char2uni returned -22. [ 539.549183][T16017] charset = iso8859-6, char = 0xfc [ 539.785825][T16045] ieee802154 phy0 wpan0: encryption failed: -22 [ 539.959168][T16050] loop3: detected capacity change from 0 to 1024 [ 540.221244][ T42] hfsplus: b-tree write err: -5, ino 4 [ 540.776806][T16053] loop2: detected capacity change from 0 to 32768 [ 540.829215][T16053] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 540.905208][T16078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4359'. [ 540.915927][T16078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4359'. [ 540.925193][T16078] netlink: 'syz.4.4359': attribute type 6 has an invalid length. [ 541.004476][T16053] OCFS2: ERROR (device loop2): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 541.051065][T16053] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 541.060967][T16053] OCFS2: Returning error to the calling process. [ 541.109540][T16053] (syz.2.4348,16053,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 541.136966][T16053] (syz.2.4348,16053,0):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 541.181357][T16053] (syz.2.4348,16053,0):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 541.189729][T16053] (syz.2.4348,16053,0):ocfs2_mknod:306 ERROR: status = -5 [ 541.241708][T16053] (syz.2.4348,16053,0):ocfs2_mknod:502 ERROR: status = -5 [ 541.250099][T16053] (syz.2.4348,16053,0):ocfs2_mkdir:659 ERROR: status = -5 [ 541.464577][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 542.057248][T16084] loop3: detected capacity change from 0 to 32768 [ 542.121090][T16084] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 542.132645][T16108] loop4: detected capacity change from 0 to 64 [ 542.156178][T16108] syz.4.4371: attempt to access beyond end of device [ 542.156178][T16108] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 542.171283][T16108] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 542.181564][T16091] loop0: detected capacity change from 0 to 32768 [ 542.184272][T16108] syz.4.4371: attempt to access beyond end of device [ 542.184272][T16108] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 542.208142][T16108] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 542.277534][T16091] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 542.372939][T16084] XFS (loop3): Ending clean mount [ 542.451161][T16084] XFS (loop3): Quotacheck needed: Please wait. [ 542.574949][T16084] XFS (loop3): Quotacheck: Done. [ 542.622980][ T23] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 542.655469][T16091] XFS (loop0): Ending clean mount [ 542.670885][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 542.700414][T16091] XFS (loop0): Quotacheck needed: Please wait. [ 542.842447][ T23] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 542.861084][ T23] usb 3-1: config 5 has no interface number 0 [ 542.867296][ T23] usb 3-1: config 5 interface 123 has no altsetting 0 [ 542.901051][T16091] XFS (loop0): Quotacheck: Done. [ 542.947858][ T23] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 542.977296][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.002894][ T23] usb 3-1: Product: syz [ 543.007211][ T23] usb 3-1: Manufacturer: syz [ 543.011979][ T23] usb 3-1: SerialNumber: syz [ 543.154372][ T5771] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 543.295219][ T23] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 543.312210][ T23] usb 3-1: USB disconnect, device number 25 [ 543.367646][T16135] netlink: 'syz.4.4379': attribute type 1 has an invalid length. [ 543.376918][T16133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4375'. [ 543.411739][T16135] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4379'. [ 543.826467][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4383'. [ 544.410909][T16162] xt_ecn: cannot match TCP bits for non-tcp packets [ 544.572740][T16160] loop2: detected capacity change from 0 to 4096 [ 544.592884][T16160] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 544.806358][T16160] ntfs3: loop2: failed to convert "c46c" to cp861 [ 544.857871][T16173] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 545.428262][T16144] loop0: detected capacity change from 0 to 65536 [ 545.532559][T16144] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 545.680264][T16144] XFS (loop0): Ending clean mount [ 545.701137][T16144] XFS (loop0): Quotacheck needed: Please wait. [ 545.775056][T16206] binder: 16205:16206 ioctl c018620c 2000000002c0 returned -1 [ 545.855995][T16144] XFS (loop0): Quotacheck: Done. [ 546.086043][ T5771] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 546.212289][T16216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.470881][T16200] loop4: detected capacity change from 0 to 32768 [ 546.494905][T16200] (syz.4.4406,16200,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 546.545880][T16200] (syz.4.4406,16200,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 546.735767][T16200] JBD2: Ignoring recovery information on journal [ 546.862503][T16200] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 547.175695][T16218] loop2: detected capacity change from 0 to 40427 [ 547.199711][T16218] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 547.221080][T16218] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 547.248780][T16218] F2FS-fs (loop2): invalid crc value [ 547.291569][T16218] F2FS-fs (loop2): Found nat_bits in checkpoint [ 547.353239][T11895] ocfs2: Unmounting device (7,4) on (node local) [ 547.570561][T16218] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 547.592021][T16218] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 547.772279][T16218] syz.2.4415: attempt to access beyond end of device [ 547.772279][T16218] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 548.598735][ T28] audit: type=1326 audit(2000000028.963:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.0.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 548.680909][ T28] audit: type=1326 audit(2000000028.991:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.0.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 548.745969][ T28] audit: type=1326 audit(2000000029.000:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.0.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 548.820328][ T28] audit: type=1326 audit(2000000029.000:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.0.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 548.913056][ T28] audit: type=1326 audit(2000000029.000:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.0.4431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37c99aeb9 code=0x7ffc0000 [ 548.916700][T16264] netlink: 'syz.2.4426': attribute type 1 has an invalid length. [ 548.964500][T16266] loop4: detected capacity change from 0 to 512 [ 548.995553][T16264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4426'. [ 549.050336][T16266] EXT4-fs (loop4): 1 truncate cleaned up [ 549.057607][T16266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.211268][T16273] loop2: detected capacity change from 0 to 256 [ 549.346574][T11895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.534772][T16240] loop3: detected capacity change from 0 to 32768 [ 549.770675][ T28] audit: type=1800 audit(2000000030.043:166): pid=16240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4421" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 550.209393][T16275] loop0: detected capacity change from 0 to 32768 [ 550.243225][T16275] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.4438 (16275) [ 550.303315][T16275] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 550.307208][T15514] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 550.324931][T16275] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 550.340612][T16275] BTRFS info (device loop0): using free space tree [ 550.409348][T16289] loop2: detected capacity change from 0 to 4096 [ 550.495617][T16275] BTRFS info (device loop0): enabling ssd optimizations [ 550.535485][T16275] BTRFS info (device loop0): auto enabling async discard [ 550.559961][T15514] usb 5-1: unable to get BOS descriptor or descriptor too short [ 550.585158][T15514] usb 5-1: not running at top speed; connect to a high speed hub [ 550.593221][T16308] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 550.621072][T15514] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.664164][T15514] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.707281][T15514] usb 5-1: string descriptor 0 read error: -22 [ 550.717368][T15514] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 550.726864][T16289] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=87, name_len=1 [ 550.761802][T15514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.817327][T15514] usb 5-1: 0:2 : does not exist [ 550.826026][T16289] Remounting filesystem read-only [ 550.866299][ T5771] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 550.979601][T16313] loop3: detected capacity change from 0 to 512 [ 551.342713][T15514] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 551.377799][T15514] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 551.416335][T15514] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 551.522643][T15514] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 551.559821][T15514] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 551.611368][T15514] usb 5-1: USB disconnect, device number 12 [ 551.952919][T16327] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562067969) [ 552.044824][T16327] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 552.092020][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4455'. [ 552.118346][T16331] loop0: detected capacity change from 0 to 16 [ 552.182283][T16331] erofs: (device loop0): mounted with root inode @ nid 36. [ 552.366681][T16334] loop2: detected capacity change from 0 to 512 [ 552.486816][T16334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.528598][T16334] ext4 filesystem being mounted at /1048/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.760457][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.093286][T16348] loop0: detected capacity change from 0 to 4096 [ 553.202281][T16348] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 553.259965][T16348] ntfs3: loop0: Failed to load $Extend (-22). [ 553.293436][T16348] ntfs3: loop0: Failed to initialize $Extend. [ 553.352149][T16355] xt_TCPMSS: Only works on TCP SYN packets [ 553.386033][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4467'. [ 553.772415][ T28] audit: type=1326 audit(2000000033.733:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 553.881166][ T28] audit: type=1326 audit(2000000033.733:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 553.969893][ T28] audit: type=1326 audit(2000000033.826:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 554.047717][ T28] audit: type=1326 audit(2000000033.826:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 554.122133][ T28] audit: type=1326 audit(2000000033.826:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16362 comm="syz.3.4471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1d999aeb9 code=0x7ffc0000 [ 554.597571][T16359] loop2: detected capacity change from 0 to 32768 [ 554.717319][T16359] [ 554.717319][T16359] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 554.717319][T16359] [ 554.831702][T16365] loop0: detected capacity change from 0 to 32768 [ 554.881843][T16384] sock: sock_timestamping_bind_phc: sock not bind to device [ 554.895548][ T5773] [ 554.895548][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 554.895548][ T5773] [ 554.916559][ T5773] [ 554.916559][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 554.916559][ T5773] [ 554.988583][T16365] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 555.010816][T16365] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 555.390096][T16365] XFS (loop0): Ending clean mount [ 555.666564][ T5771] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 556.224200][T16419] loop2: detected capacity change from 0 to 64 [ 556.639493][T16400] loop3: detected capacity change from 0 to 32768 [ 556.679266][T15512] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 556.703064][T16400] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 556.876657][T15512] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 556.886091][T15512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.910786][T15512] usb 5-1: config 0 descriptor?? [ 556.926442][T15512] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 556.936963][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 557.318682][ T5829] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 557.375719][T15512] gspca_cpia1: usb_control_msg 03, error -71 [ 557.391830][T15512] gspca_cpia1: usb_control_msg 01, error -71 [ 557.403513][T15512] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 557.427762][T15512] usb 5-1: USB disconnect, device number 13 [ 557.528986][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 557.536907][ T5829] usb 4-1: unable to get BOS descriptor or descriptor too short [ 557.546649][ T5829] usb 4-1: config 8 has an invalid interface number: 61 but max is 2 [ 557.554899][ T5829] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 557.575027][ T5829] usb 4-1: config 8 has no interface number 0 [ 557.585977][ T5829] usb 4-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 557.606555][ T5829] usb 4-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 557.619266][ T5829] usb 4-1: config 8 interface 61 has no altsetting 0 [ 557.632112][ T5829] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 557.647750][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.657026][ T5829] usb 4-1: Product: syz [ 557.661529][ T5829] usb 4-1: Manufacturer: syz [ 557.669751][ T5829] usb 4-1: SerialNumber: syz [ 557.794474][T16458] loop0: detected capacity change from 0 to 256 [ 557.950368][ T5829] bfusb: probe of 4-1:8.61 failed with error -5 [ 557.975536][ T5829] usb 4-1: USB disconnect, device number 36 [ 558.390968][T16471] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 558.560114][T16460] loop2: detected capacity change from 0 to 32768 [ 558.605992][T16460] (syz.2.4513,16460,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 558.641626][T16460] (syz.2.4513,16460,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 558.707306][T16460] JBD2: Ignoring recovery information on journal [ 558.810944][T16460] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 558.934817][T16460] [ 558.937225][T16460] ====================================================== [ 558.944277][T16460] WARNING: possible circular locking dependency detected [ 558.951342][T16460] syzkaller #0 Not tainted [ 558.955797][T16460] ------------------------------------------------------ [ 558.962837][T16460] syz.2.4513/16460 is trying to acquire lock: [ 558.968917][T16460] ffff8880787794a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 558.980560][T16460] [ 558.980560][T16460] but task is already holding lock: [ 558.987957][T16460] ffff888078779538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 558.998822][T16460] [ 558.998822][T16460] which lock already depends on the new lock. [ 558.998822][T16460] [ 559.009256][T16460] [ 559.009256][T16460] the existing dependency chain (in reverse order) is: [ 559.018452][T16460] [ 559.018452][T16460] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 559.026334][T16460] down_read+0x46/0x2e0 [ 559.031078][T16460] ocfs2_init_acl+0x30a/0x770 [ 559.036328][T16460] ocfs2_mknod+0x140f/0x2300 [ 559.041575][T16460] ocfs2_create+0x196/0x430 [ 559.046652][T16460] path_openat+0x12a0/0x3230 [ 559.051816][T16460] do_filp_open+0x1f5/0x430 [ 559.056980][T16460] do_sys_openat2+0x134/0x1d0 [ 559.062232][T16460] __x64_sys_creat+0x90/0xb0 [ 559.067400][T16460] do_syscall_64+0x55/0xa0 [ 559.072395][T16460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.078869][T16460] [ 559.078869][T16460] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 559.087446][T16460] down_read+0x46/0x2e0 [ 559.092193][T16460] ocfs2_start_trans+0x3a8/0x6f0 [ 559.097705][T16460] ocfs2_shutdown_local_alloc+0x1fc/0xaa0 [ 559.104002][T16460] ocfs2_dismount_volume+0x1e5/0x8a0 [ 559.109859][T16460] generic_shutdown_super+0x134/0x2b0 [ 559.115810][T16460] kill_block_super+0x44/0x90 [ 559.121244][T16460] deactivate_locked_super+0x97/0x100 [ 559.127185][T16460] cleanup_mnt+0x43b/0x4d0 [ 559.132172][T16460] task_work_run+0x1d4/0x260 [ 559.137337][T16460] exit_to_user_mode_loop+0xe6/0x110 [ 559.143205][T16460] exit_to_user_mode_prepare+0xee/0x180 [ 559.149327][T16460] syscall_exit_to_user_mode+0x1a/0x50 [ 559.155411][T16460] do_syscall_64+0x61/0xa0 [ 559.160406][T16460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.166869][T16460] [ 559.166869][T16460] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 559.174408][T16460] ocfs2_start_trans+0x2a9/0x6f0 [ 559.179915][T16460] ocfs2_setattr+0x10b6/0x1bc0 [ 559.185269][T16460] notify_change+0xb0d/0xe10 [ 559.190441][T16460] chown_common+0x413/0x5d0 [ 559.195527][T16460] do_fchownat+0x14b/0x240 [ 559.200529][T16460] __x64_sys_lchown+0x85/0x90 [ 559.205776][T16460] do_syscall_64+0x55/0xa0 [ 559.210783][T16460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.217248][T16460] [ 559.217248][T16460] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 559.226083][T16460] __lock_acquire+0x2df1/0x7d40 [ 559.231514][T16460] lock_acquire+0x19e/0x420 [ 559.236592][T16460] down_write+0x97/0x200 [ 559.241421][T16460] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 559.247998][T16460] ocfs2_xattr_set+0x61b/0x13e0 [ 559.253438][T16460] ocfs2_set_acl+0x4e1/0x590 [ 559.258622][T16460] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 559.264166][T16460] vfs_set_acl+0x803/0xa60 [ 559.269165][T16460] path_setxattr+0x41d/0x5d0 [ 559.274338][T16460] __x64_sys_setxattr+0xbb/0xd0 [ 559.279767][T16460] do_syscall_64+0x55/0xa0 [ 559.284770][T16460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.291244][T16460] [ 559.291244][T16460] other info that might help us debug this: [ 559.291244][T16460] [ 559.301521][T16460] Chain exists of: [ 559.301521][T16460] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 559.301521][T16460] [ 559.316819][T16460] Possible unsafe locking scenario: [ 559.316819][T16460] [ 559.324316][T16460] CPU0 CPU1 [ 559.329723][T16460] ---- ---- [ 559.335122][T16460] lock(&oi->ip_xattr_sem); [ 559.339761][T16460] lock(&journal->j_trans_barrier); [ 559.347622][T16460] lock(&oi->ip_xattr_sem); [ 559.354799][T16460] lock(&ocfs2_file_ip_alloc_sem_key); [ 559.360405][T16460] [ 559.360405][T16460] *** DEADLOCK *** [ 559.360405][T16460] [ 559.368594][T16460] 3 locks held by syz.2.4513/16460: [ 559.373837][T16460] #0: ffff888078974418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 559.383154][T16460] #1: ffff888078779818 (&type->i_mutex_dir_key#17){+.+.}-{3:3}, at: vfs_set_acl+0x37a/0xa60 [ 559.393444][T16460] #2: ffff888078779538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 559.404681][T16460] [ 559.404681][T16460] stack backtrace: [ 559.410605][T16460] CPU: 1 PID: 16460 Comm: syz.2.4513 Not tainted syzkaller #0 [ 559.418108][T16460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 559.428218][T16460] Call Trace: [ 559.431551][T16460] [ 559.434540][T16460] dump_stack_lvl+0x18c/0x250 [ 559.439283][T16460] ? load_image+0x400/0x400 [ 559.443841][T16460] ? show_regs_print_info+0x20/0x20 [ 559.449106][T16460] ? print_circular_bug+0x12b/0x1a0 [ 559.454365][T16460] check_noncircular+0x2fc/0x400 [ 559.459388][T16460] ? look_up_lock_class+0x75/0x140 [ 559.464551][T16460] ? print_deadlock_bug+0x5d0/0x5d0 [ 559.469853][T16460] ? lockdep_lock+0xf5/0x230 [ 559.474499][T16460] ? _find_first_zero_bit+0xd3/0x100 [ 559.479840][T16460] __lock_acquire+0x2df1/0x7d40 [ 559.484857][T16460] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 559.490898][T16460] ? verify_lock_unused+0x140/0x140 [ 559.496147][T16460] ? ocfs2_inode_lock_full_nested+0xcdf/0x1b70 [ 559.502356][T16460] ? _raw_spin_unlock+0x40/0x40 [ 559.507272][T16460] ? verify_lock_unused+0x140/0x140 [ 559.512526][T16460] lock_acquire+0x19e/0x420 [ 559.517079][T16460] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 559.523307][T16460] ? __might_sleep+0xe0/0xe0 [ 559.527960][T16460] ? read_lock_is_recursive+0x20/0x20 [ 559.533388][T16460] down_write+0x97/0x200 [ 559.537701][T16460] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 559.543921][T16460] ? down_read_killable+0x340/0x340 [ 559.549177][T16460] ? ocfs2_xattr_set+0x5ef/0x13e0 [ 559.554278][T16460] ? __lock_acquire+0x7d40/0x7d40 [ 559.559347][T16460] ? ocfs2_xattr_block_find+0x15b/0x4d0 [ 559.564945][T16460] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 559.571069][T16460] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 559.577012][T16460] ? up_write+0x1c3/0x410 [ 559.581416][T16460] ocfs2_xattr_set+0x61b/0x13e0 [ 559.586331][T16460] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 559.592098][T16460] ? mark_lock+0x94/0x320 [ 559.596473][T16460] ? __lock_acquire+0x1347/0x7d40 [ 559.601594][T16460] ? __lock_acquire+0x7d40/0x7d40 [ 559.606669][T16460] ? do_raw_spin_lock+0x11f/0x2c0 [ 559.611758][T16460] ? __rwlock_init+0x150/0x150 [ 559.616582][T16460] ? do_raw_spin_unlock+0x121/0x230 [ 559.621846][T16460] ? _raw_spin_unlock+0x28/0x40 [ 559.626754][T16460] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 559.632531][T16460] ? ocfs2_inode_lock_atime+0x530/0x530 [ 559.638129][T16460] ocfs2_set_acl+0x4e1/0x590 [ 559.642877][T16460] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 559.647878][T16460] ? read_lock_is_recursive+0x20/0x20 [ 559.653311][T16460] ? ocfs2_xattr_get+0x260/0x260 [ 559.658313][T16460] ? evm_inode_set_acl+0xbc/0x430 [ 559.663405][T16460] ? down_write+0x16e/0x200 [ 559.668019][T16460] ? evm_revalidate_status+0x4f/0xb0 [ 559.673364][T16460] ? ima_inode_set_acl+0x81/0x170 [ 559.678445][T16460] ? make_vfsuid+0x51/0xb0 [ 559.682917][T16460] ? inode_owner_or_capable+0xf0/0x1c0 [ 559.688434][T16460] vfs_set_acl+0x803/0xa60 [ 559.692917][T16460] ? path_setxattr+0x3a1/0x5d0 [ 559.697747][T16460] path_setxattr+0x41d/0x5d0 [ 559.702397][T16460] ? simple_xattrs_free+0x150/0x150 [ 559.707668][T16460] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 559.713714][T16460] ? lock_chain_count+0x20/0x20 [ 559.718627][T16460] __x64_sys_setxattr+0xbb/0xd0 [ 559.723547][T16460] do_syscall_64+0x55/0xa0 [ 559.728027][T16460] ? clear_bhb_loop+0x40/0x90 [ 559.732767][T16460] ? clear_bhb_loop+0x40/0x90 [ 559.737499][T16460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.743447][T16460] RIP: 0033:0x7f1f7e59aeb9 [ 559.747912][T16460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.767599][T16460] RSP: 002b:00007f1f7f53e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 559.776069][T16460] RAX: ffffffffffffffda RBX: 00007f1f7e815fa0 RCX: 00007f1f7e59aeb9 [ 559.784092][T16460] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 559.791577][T16472] loop0: detected capacity change from 0 to 32768 [ 559.792091][T16460] RBP: 00007f1f7e608c1f R08: 0000000000000000 R09: 0000000000000000 [ 559.806551][T16460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.814650][T16460] R13: 00007f1f7e816038 R14: 00007f1f7e815fa0 R15: 00007ffe42177cf8 [ 559.822781][T16460] [ 559.861326][T16472] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 559.910332][T16472] XFS (loop0): Ending clean mount [ 559.919294][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 559.933331][T16472] XFS (loop0): Quotacheck needed: Please wait. [ 559.996406][T16472] XFS (loop0): Quotacheck: Done. [ 560.117499][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb