last executing test programs: 3.373798946s ago: executing program 1 (id=8469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x3, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 3.301238343s ago: executing program 1 (id=8471): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) 3.049823208s ago: executing program 1 (id=8478): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) 2.988992768s ago: executing program 1 (id=8480): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x80, 0x0) 2.548051568s ago: executing program 1 (id=8489): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 2.384357429s ago: executing program 0 (id=8492): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721f5438b20ffdf0300000008000900", @ANYBLOB="0822803065"], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0) 2.11425973s ago: executing program 0 (id=8494): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b5, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) 1.545933098s ago: executing program 0 (id=8500): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000000000000000000007000000830b040a1c01027f00000100000000001c000000000000000000000008000000", @ANYRESOCT=r0], 0x40}, 0x20000000) 1.506762001s ago: executing program 2 (id=8501): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 1.417493075s ago: executing program 0 (id=8502): r0 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x480, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, &(0x7f0000000100)) 1.341301531s ago: executing program 2 (id=8504): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$getflags(r0, 0x401) 1.233975782s ago: executing program 0 (id=8506): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0xfd, 0x6216, &(0x7f000000cb40)="$eJzs3c2OHFfZB/Cn+ms+/CaxsojyRghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmWhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTT7rGd7uqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6qIuPTztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeCMiPn464t792+vNorMH7Md3/vi33/7w2Pf/+vvhqX//6Ub/zUnr3bz5q3/9+c7j7y8AAACUqK7rukof819In+97XXcKAJiL/PpfJ3m5euHqzQXrj1qtVqsPYd1W7+9Ou4iIzfY2zXsGp+MB4JDZjE+67gIdkn/RBhFxrOtOAAut6roDzMS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PSdJrxa0zm9fzain48O6E/K3PqwyLJ+ffG87+00z5K6806/3mZlP9o59an4uT8++P5jzk6+ff2zb9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LtyIA87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrpx8sm/RdbM3yi1XEU2PrA4VJN8usdt0PAAAAAAAAAAAAACjJYOca3otVxDAinlpdreu6+Wkbrx/Vk25/2JW+/1Cyrv/IAwDAjo+fHruXv4pYjoiL6bv+hqurq3W9vLJar9YrS/n97GhpuV5pfa7N02bZ0ugAb4gHo7r5Zcut7dqmfV6e1j7++5rHGtX9A3RsPjoMHAAiYufV6J5XpCOmrp+Jrt/lcDg4/o8exz8H0fXzFAAAAJi9uq7rKn2d9wvpnH+v604BAHORX//Hzwuo1Wq1Wq0+enVbvb877SIiNtvbNO8ZDMcPAIfMZnzSdRfokPyLNoiI57vuBLDQqq47wEzcu397vUr5Vu3XgzS+e74WZE/+m9X2dnn7/abTjF9jMq/n11b049kJ/XluTn1YJDn/3nj+l3baR2m9Wec/L5Pyb/bzeAf96VrOvz+e/5ijk39v3/xLlfMfPFL+ffkDAAAAAMACy//+f3yhzv+OHnd3pnrY+d+1mT0qAAAAAAAAAMzWvfu31/N9r/n8/+f2Wc/9n0dTzr+Sf5Fy/un+/90Lb14ZW6/fmr/7zoP8/3n/9vrvbvzj//P0oPkv5ZkqPbOq9Iyo0iNVgzR9zB2bYGvYHzWPNKx6/UG65qcevhdX4mpsxOk96/bS8fCg/cye9qanw+32ur/TfnZP+2C3PW9/bk/7MF3pVK/k9pOxHj+Jq/HudnvTtjRl/5entNdT2nP+fcd/kXL+g9ZPk/9qaq/Gpo27H/X+57hvT/d7nLevfP6Xp2e/O1NtRX9339qa/Xupg/5s/z85disiNq6dvHn5xo1rZyJNjo3iZ9fz0rORJp+xnP8w/eT8X3l5pz3/3W8fr3c/Gj1y/otiKwYT83+5Nd/s76tz7lsXcv6j9JPzfze173/8H+b8Jx//r3XQHwAAAAAAAAAAAAAAAHiYuq63bxF9OyLOp/t/uro3EwCYr/z6Xyd5+bzq/uNu/4e9+9FV/9XqOdfVgvVnrvWn9WL1R72Q9X8WrD8LV7fV+3urXUTEX9rbNO8ZfrHfLwMAFtmnEfH3rjtBZ+RfsPx9f830RNedAebq+oe3fnT56tWNa9e77gkAAAAAAAAA8Ljy+J9rrfGfT9R1fWdsvT3jv74Ta086/ucgz+wOMDphoOr+o+/Tw2z1Rv1ea7jxF2PS+N/D3bmHjf89mPJ4wyntoyntS1Pal6e073ujR0vO/8XWeOcnIuKFseHXSxj/dXzM+xLk/F9qPZ+b/L80tl47//o3hzn/3p78T9344Kenrn946/UrH1x+f+P9jR+fO3Pm9Lnz5y9cuHDqvStXN07v/LfDHs9Wzj+Pfe060LLk/HPm8i9Lzv8LqZZ/WXL+X0y1/MuS88/v9+Rflpx//uwj/7Lk/F9NtfzLkvP/cqrlX5ac/2upln9Zcv5fSbX8y5Lzfz3V8i9Lzv9kquVflpz/qVQfMP+VWfeL+cj55zNcjv+y5PzzlQ3yL0vO/2yq5V+WnP+5VMu/LDn/N1It/7Lk/L+aavmXJed/PtXyL0vO/2upln9Zcv4XUi3/suT8v55q+Zcl5/+NVMu/LDn/N1Mt/7Lk/L+ZavmXJef/rVTLvyw5/2+nWv5lyfm/lWr5l+XB9/+bMWNmRjODw3egdf2XCQAAAAAAAAAAAAAYN4/LibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe/cWI9dd3wH8zN68diA2EFInNWHtGGOcTXZ9iS+0LiZcG24lIRR6wXa9a7PgG167BBrVjgIlEkZFFW3DQ1tAqM1LhVXxQKuA8oBaVapE2gf6gqhQeYiqgAJSVVpBtpo5//9/Z2ZnZ3a9483Zcz4fKfllZ87MOXPmP7P7tfPdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2dY3TX+mlmVZrVbLL9iUZS+pz/VjmxqXvP7FPT4AAABg5X7R+PfzG9MFR5Zwo6Zt/umO73x9bm5uLvvA4J8Of2FuLl0xlmXD67KscV107QcfrDVvEzyWjdYGmr4e6LH7wR7XD/W4frjH9SM9rl/X4/rRHtcvOAELrM9q6c62N/5zU35Ks1uy4cZ12zvc6rHauoH6uUu3zWqN28wNn8xmstPZdDbZsn2+ba2x/VNb6/t6exb3NdC0ry31FfKTR07EY6iFc7y9ZV/z9xn96I3Z2E9/8siJv7743G2dZs/T0HJ/+XHu3FY/zk+FS/JjrWXr0jmJxznQdJxbOjwngy3HWWvcrv7f7cf5/BKPc3D+MFdV+3M+mg00/vuZxnkaqmUdztOWcNnP7syy7Mr8Ybdvs2Bf2UC2oeWSgfnnZzRfkfX7qC+ll2dDy1qnW5ewTutzanvrOm1/TcTnf2u43dAix9D8NP3o0ZGm5/3nc9ezTqP6o17stdK+Bvv9WinKGozr4pnGg3684xrcHh7/IzsWX4Md106HNZged9Ma3NZrDQ6MDDaOOT0JtcZt5tfg7pbtBxt7qjXmszu6r8GJi2fOT8x+4pN3z5w5fmr61PTZvbt3T+7dv//gwYMTJ2dOT0/m/77Os118G7KB9BrYFs5dfA28tm3b5qU69+WRBe+/1/s6HO3yOtzUtm2/X4dD7Q+utjovyIVrOn9tvK9+0kevDmSLvMYaz8+ulb8O0+Nueh0ONb0OO35P6fA6HFrC67C+zfldS/uZZajpn07HsPj3gpWtwU1Na7D955H2Ndjvn0eKsgZHw7r43q7FvxdsCcf7+Phyfx4ZXLAG08MN7z31S9LP+6MHG6PTury9fsVNI9ml2ekL9zx8/OLFC7uzMFbFK5rWSvt63dD0mLIF63Vg2ev1yMwdj9/e4fJN4VyN3l3/1+iiz1V9m333dH+uGt/dOp/Plkv3ZGH02Wqfz07fzevncyTLvvjtRx/45iNffNOi57OeNz81sfKfxVMubXr/HV7k/Tfm/hfy/aW7emxweCh//Q6mszPc8n7c+lQNNd67ao19Pz+xtPfj4fDPar8f39Ll/Xhz27b9fj8ebn9w8f241utPO1am/fkcDevk9GT39+P6Npv3LHdNDnV9P74zzFo4/68LSSHloqa1s9i6TfsaGhoOj2so7qF1ne5t2X44ZLP6vp7cc33rdOed+X0Npkc3b7XW6Vjbtv1ep+nPvhZbp7Vef/p2fdqfz9GwLm7Z232d1rd5et/K3zvXx/9seu8c6bUGhwdH6sc8nBZh4/0+m1sf1+A92YnsXHY6m2pcO9JYT7XGvsbvXdoaHAn/rPZ75eYua3Bn27b9XoPp+9hia682tPDB90H78zka1sUT93Zfg/Vt3nygvz+77gyXpG2afnZt//O1xf7M6/a203Sj1spQOM5vH+j+Z7P1bU4fXG7O7H6e7gqX3NThPLW/fhd7TU1lq3OeNofjfO7g4uepfjz1bb5waInr6UiWZZc/dl/jz3vD36/83aXvfr3l7106/Z3O5Y/d9+OXnvzH5Rw/AGvfC/nYkH+va/qbqaX8/T8AAACwJsTcPxBmIv8DAABAacTcH/+v8ET+BwAAgNKIuX8ozKQi+X/zm5+beeFylpr5c0G8Pp2G+/PtYsd1Mnw9Njevfvl9X53+73+4vLR9D2RZ9vP7/6Dj9pvvj8eVGwvHee0trZcv8PW7l7TvYw9dTvtt7q9/Kdx/fDxLXQadKriTWZY9tfFzjf2MffBqYz59/7HGfODK44/Vt3n+UP51vP2zr8i3/4tQ/j1y8njL7Z8N5+GHYU6+o/P5iLf72tXXbTnw/vn9xdvVtt3ceNhPfCi/3/h7cj7/WL59PM+LHf83P/vk1+rbP/yazsd/eaDz8T8Z7verYf7vq/Ltm5+D+tfxdp8Oxx/3F293z1e+1fH4r30m3/78W/PtjoUZ978zfL39rc/NNJ+vh2vHWx5X9rZ8u7j/ye/+ceP6eH/x/tuPf/To1Zbz0b4+nv63/H4m2raPl8f9RH/ftv/6/TSvz7j/J//oWMt57rX/aw88+6r6/bbv/6627c5/bFdj//P31/obm/7y05/ruL94PEf+9nzL4zny3vA6Dvt/4kNhPYbr/+9afn/tv13h2Htb33/i9l/adLnl8URv/2m+/2tvONWY60bXb7jpJS+9+cqr6+cuy55Zl99fr/2f+qtzLcf/5Vvz8xGvjx399v0vJu7/wsfHz56bvTQzlc7qIxsbvzvnnfnxxOPdGN5b278+eu7ih6cvjE2OTWbZWHl/hd51+0qYP87Hle5bzy14B931UHg+b//zpzbs+NfPxsv//X355VffkX/fem3Y7vPh8k3h+Vve/hd6Yuutjdd37elwhHMLf1/wSmzZ/l8Hl7RhePztPxfE9X7+lR9unIf6dY3vG/F1vcLj//5Ufj/fCOd1Lvxm5m23zu+vefv4uxGuPpi/3ld8/sLbXHxe/yY83+/6YX7/8bji4/1++DnmW5tb3+/i+vjG5YH2+2/8Fo8r4f0ku5JfH7eK5/vq87d2PLz4e0iyK7c1vv6TdD+3LethLmb2E7MTp2fOXnp44uL07MWJ2U988uiZc5fOXjza+F2eRz/S6/bz708bGu9PU9P792WNd6tz+bjBXuzjP//QiakDkzumpk8ev3Ty4kPnpy+cOjE7e2J6anbH8ZMnpz/e6/YzU4d37zm098Ce8VMzU4cPHjq099D4zNlz9cPID6qH/ZMfHT974WjjJrOH9x3afe+9+ybHz5ybmj58YHJy/FKv2ze+N43Xb/374xemTx+/OHNmenx25pPTh3cf2r9/T8/fBnjm/MnZsYkLl85OXJqdvjCRP5axi42L69/7et2ecpr9j/zn2Xa1/BfxZe+5a3/6/ax1X3100bvKN2n7BaLPhd9F888vO39wKV/H3D8cZlKR/A8AAABVEHP/SJiJ/A8AAAClEXP/ujAT+R8AAABKI+b+0TCTiuT/0vX/N19e0v71//X/m8+X/n/F+v8PFq3/n79f6P/3x0r79/r/gf6//r/+v/6//j99ULT+f8z967OskvkfAAAAqiDm/g1hJvI/AAAAlEbM/TeFmcj/AAAAUBox978kzKQi+V//X/9f/1//X/+/8/71/9cm/f/u9P970P+fyKrV/7/Sz+PX/9f/Z6Gi9f9j7n9pmElF8j8AAABUQcz9N4eZyP8AAABQGjH3bwwzkf8BAACgNGLu3xRmUpH8r//ftf/fXkNelP5/6/Hr/3deH/r/+v/6/zee/n93+v896P/7/H/9f/1/+qpo/f+Y+18WZlKR/A8AAABVEHP/y8NM5H8AAAAonqHru1nM/a8IM1mQ/69zBwAAAMCLLub+W7K2InhF/v5f/9/n/xe//78uXaf/r/+fFbL/P5jp/xeH/n93+v896P/r/+v/6//TV0Xr/zdyfzaavTLMpCL5HwAAAKog5v5bw0zkfwAAACiNmPt/KcxE/gcAAIDSiLl/c5hJRfK//r/+f/H7/z7/X/+/6P1/n/9fJPr/3en/96D/r/+v/6//T18Vrf8fc/9tYSYVyf8AAABQBTH33x5mIv8DAABAacTc/8thJvI/AAAAlEbM/VvCTCqS//X/C97/j81R/X/9f/1//X/9/yXR/+9O/78H/X/9f/1//X/6qmj9/5j7XxVmUpH8DwAAAFUQc/8dYSbyPwAAAJRGzP2vDjOR/wEAAKA0Yu4fCzOpSP7X/y94/z/vwY/4/H/9f/1//X/9/6XR/+9O/78H/X/9/770/+cu6//r/5MrWv8/5v6tYSYVyf8AAABQBTH3bwszkf8BAACgNGLuvzPMRP4HAACA0oi5f3uYSUXyv/7/muj/Z/r/+v/6//r/+v9Lo//fnf5/D/r/+v8+/1//n74qWv8/5v7XhJlUJP8DAABAFcTcvyPMRP4HAACA0oi5/7VhJvI/AAAAlEbM/TvDTCqS//X/9f/1//X/9f8771//f23S/+9O/78H/X/9f/1//X/6qmj9/5j7XxdmUpH8DwAAAFUQc/+uMBP5HwAAAEoj5v67wkzkfwAAACiNmPvHw0wqkv/1//X/9f/1//X/O+9f/39t0v/vTv+/B/1//X/9f/1/+qpo/f+Y++8OM6lI/gcAAIAqiLn/njAT+R8AAABKI+b+iTAT+R8AAABKI+b+yTCTiuR//X/9f/1//f9l9f9fPX+/+v85/f9i0f/vTv+/B/1//f8Xvf8/rP9PqRSt/x9z/+4wk4rkfwAAAKiCmPv3hJnI/wAAAFAaMffvDTOR/wEAAKA0Yu7fF2ZSkfyv/6//r/+v/+/z/zvvX/9/bdL/767//f/4EPX/9f/1/33+v/4/CxWt/x9z/71hJhXJ/wAAAFAFMffvDzOR/wEAAKA0Yu4/EGYi/wMAAEBpxNx/MMykIvlf/1//X/9f/1//v/P+9f/XJv3/7nz+fw/6//r/+v/6/6zQg3/Y/FXR+v8x9x8KM6lI/gcAAIAqiLn/9WEm8j8AAACURsz9vxJmIv8DAABAacTc/6thJhXJ//r/Ld3z+sPV/9f/1//X/2/Q/1+b9P+70//vQf9f/1//X/+fvlq0/x+i92r3/2PuPxxmUpH8DwAAAFUQc/+vhZnI/wAAAFAaMfe/IcxE/gcAAIDSiLn/SJhJRfK//r/P/9f/1//X/++8/9Xu/4/E+9X/XxH9/+70/3vQ/9f/1//X/6evivb5/zH3vzHMpCL5HwAAAKog5v77wkzkfwAAACiNmPvfFGYi/wMAAEBpxNz/5jCTiuR//X/9f/1//X/9/8779/n/a5P+f3f6/8GdGzsfgP6//r/+v/4/fVW0/n/M/W8JM6lI/gcAAIAqiLn/rWEm8j8AAACURsz9bwszkf8BAACgNGLuf3uYSUXyv/6//r/+v/6//n/n/ev/r036/93p//eg/6//r/+v/09fFa3/H3P/r4eZVCT/AwAAQBXE3H9/mIn8DwAAAKURc/87wkzkfwAAACiNmPvfGWZSkfyv/6//r/+v/6//33n/+v9rk/5/d2us//+Lm8Pl+v85/f9iH/9y+/9DbV/fkP7/Dxbr/8+ta7+9/j83QtH6/zH3vyvMpCL5HwAAAKog5v53h5nI/wAAAFAaMfe/J8xE/gcAAIDSiLn/N8JMKpL/9f/rxzHfXtb/L2v/f0D/X/9f/78i9P+7W2P9f5//30b/v9jH7/P/9f9ZqGj9/5j73xtmUpH8DwAAAFUQc/8DYSbyPwAAAJRGzP0PhpnI/wAAAFAaMfe/L8ykIvlf/9/n/1ej/+/z/zP9f/3/itD/707/vwf9f/3/ovX//1P/n7WtaP3/mPsfCjOpSP4HAACAKoi5//1hJvI/AAAAlEbM/b8ZZiL/AwAAQGnE3P+BMJOK5H/9/7XS/x9bo/3/R/X/b2D//46b8+30//X/maf/353+fw/6//r/Rev/+/x/1rii9f9j7v9gmMnS8//okrcEAAAAXhQx9/9WmElF/v4fAAAAqiDm/t8OM5H/AQAAoDRi7v+dMJOK5H/9/7XS//f5/5n+v8//b3s8+v/6/52sXv8/vvPo/+v/6/9H+v/6//r/tCta/z/m/t8NM6lI/gcAAIAqiLn/Q2Em8j8AAACsCZ3+n+x2MfcfDTOR/wEAAKA0Yu4/FmZSkfyv/6//r/9f0P7/n237l+99593Hduv/6//r/y/Lqn7+f/3F7/P/9f/1/xP9f/1//X/aFa3/H3P/8TCTiuR/AAAAqIKY+38vzET+BwAAgNKIuf9EmIn8DwAAAKURc/9UmElF8r/+v/6//n9B+/9r+PP/4/nQ/2/Vt/5/fNPV/+8o79+nVXRj+//vn++J6/8vt/8/0vFS/X/9/7V8/Pr/+v8sVLT+f8z902EmFcn/AAAAUAUh9w+czOf8FfI/AAAAlEbM/afCTOR/AAAAKI2Y+z8cZlKR/K//r/+v/6//7/P/O++/W/+/NuTz/4sq9e9/1nih6P+3KU7/vzP9f/3/tXz8+v/6/yxUtP5/zP0zYSYVyf8AAABQBTH3fyTMRP4HAACA0oi5/6NhJvI/AAAAlEbM/afDTCqS//X/9f/1//X/9f8777+wn/+v/9/VSvv3+v+B/n+1+///o/+v/6//T38Urf8fc/+ZMJOK5H8AAACogv9n706aLKvLPI7f7C66soJe9K4X3YuO6N71S2DRve5+AS7cuDHCcIEKKs4UziOKirMiOA84gCCigvMATiiKA6g4izNOiBJlkPU8T1Vmnjw3s+pm5jn//+ezqEfSSu6VqKjiV1lfT+7+8+MW+x8AAACakbv/UXGL/Q8AAADNyN3/6Lilk/2v/z+b/v9Upaz/3/z+J9H//4/+f6fX1//r/1um/x+n/19C/+/5//p//T8rNbX+P3f/Y+KWTvY/AAAA9CB3/wVxi/0PAAAAzcjdf2HcYv8DAABAM3L3PzZu6WT/b+n/1xZ99v+Z8Xr+f0v9v+f/7/j6+n/9f8sOtv+/5MGf+fT/+n/9f9D/76r/P7rT5+v/adHU+v/c/Y+LWzrZ/wAAANCD3P2Pj1vsfwAAAGhG7v6L4hb7HwAAAJqRu/8JcUsn+391z/8/tvHxmfb/Rf+v/9/4gP5f/6//ny3P/x/XU/9/4e3nnn/v9f92w15eX/+v//f8f/0/qzW1/j93/xPjlk72PwAAAPQgd/+T4hb7HwAAAJqRu//JcYv9DwAAAM3I3f+UuKWT/b+6/n/Wz/8v+n/9/8YH9P/6f/3/bOn/x/XU/5/J6+v/9f/6f/0/qzW1/j93/1Pjlk72PwAAAPQgd//T4hb7HwAAAJqRu//iuMX+BwAAgGbk7j8et3Sy//X/+9//P6D/1//H1f/r//X/+0//P07/v4T+X/+v/9f/s1JT6/9z918St3Sy/wEAAKAHufufHrfY/wAAANCM3P3PiFvsfwAAAGhG7v5nxi2d7H/9v+f/6/+X9/8X6P+D/l//P336/3H6/yX0/2fbz5+j/9f/6/853R77//tHftpeSf+fu/9ZcUsn+x8AAAB6kLv/2XGL/Q8AAADNyN3/nLjF/gcAAIBm5O5/btzSyf7X/+v/9f+e/3/G/f/2H3ob9P/D9P8HQ/8/bjL9/9qRwQ/r/2ff/3v+v/5f/88mU3v+f+7+58Utnex/AAAA6EHu/ufHLSP7f8+/mQ8AAAAcqtz9L4hbfP0fAAAAZi+rs9z9L4xbOtn/+n/9v/5f/+/5/8OvP9b/33Da+9P/T4v+f9xk+v8d6P/1/3N+//p//T/bTa3/z93/orilk/0PAAAAPcjdf2ncYv8DAABAM3L3vzhusf8BAACgGbn7XxK3dLL/h/v/U/+9/n939P+b37/+f/jHx6r6//w76v9H+///9fz/Pun/xx18/39U/7/576//30eH/f4b7/+PLft8/T9Dptb/5+6/LG7pZP8DAABAD3L3vzRusf8BAACgGbn7Xxa32P8AAADQjNz9L49bOtn/nv+v/9f/z6//9/z/kw7z+f+LA+//j+j/d0n/P87z/5fQ/+v/9f+e/89KTa3/z91/edzSyf4HAACAHlx+32Jj979isbD/AQAAYI5O/7MDW/9Aacjd/8q4xf4HAACAZuTuf1Xc0sn+1//r//X/+n/9//DrT6v/9/z/3dL/j9P/L6H/349+/khj/f8VO33+FPr/i/X/TMym/v+mUx8/rP4/d/+r45ZO9j8AAAD0IHf/a+IW+x8AAACakbv/tXGL/Q8AAADNyN3/urilk/2/7/3/sZ1fe+b9/6byRP+/+f3r/zfT/8ePB/2//v8A6P/H6f+X0P97/r/n/+v/WalT/f/mnw8Pq//P3f/6uKWT/Q8AAAA9yN3/hrjF/gcAAIBm5O6/Im6x/wEAAKAZufvfGLd0sv89/9/z//X/+n/9//Dr6//nSf8/Tv+/hP5f/6//1/+zUpue/3+aw+r/c/dfGbd0sv8BAACgB7n7r4pb7H8AAABoRu7+N8Ut9j8AAAA0I3f/m+OWTva//n9/+//8uP5f/7/Q/+v/9f8Hotv+f23oV6Ltduj/b33E8f/f/BH9v/5f/6//1/+zApPo/0+c+rfL3P1viVs62f8AAADQg9z9b41b7H8AAABoRu7+t8Ut9j8AAAA0I3f/2+OWPe7/f1npuzo4+n/P/9f/6//1/8Ovr/+fp277/13y/P8l9P/6f/2//p+VmkT/f9pf5+5/R9zi6/8AAADQjNz974xb7H8AAABoRu7+d8Ut9j8AAAA0I3f/u+OWTva//l//r/+fZf9/XnwX/f8E+//1xTD9/8HQ/4/T/y+h/9f/6//1/6zU1Pr/3P1Xxy2d7H8AAADoQe7+98Qt9j8AAAA0I3f/e+MW+x8AAACakbv/fXFLJ/tf/6//1//Psv/3/P8J9/870f8fDP3/OP3/YrG4ZuQNDPX/J47q//X/+n/9P2doav1/7v73xy2d7H8AAADoQe7+a+IW+x8AAACakbv/2rjF/gcAAIBm5O7/QNzSyf7X/+v/9f/6f/3/8Ovr/+dJ/z9O/7+E5//r//X/+n9Wamr9f+7+6+KWTvY/AAAA9CB3//Vxi/0PAAAAzcjd/8G4xf4HAACAZuTuvyFu6WT/6//1//p//f++9P/H9f9b6f8Pxv71/wv9v/5f/7+E/l//r/9nq4Pq/++Pn++X9f+5+z8Ut3Sy/wEAAKAHuftvjFvsfwAAAGhG7v4Pxy32PwAAADQjd/9H4pZO9r/+X/+v/9f/e/7/8Ovr/+fJ8//H6f+X0P/r//X/+n9W6qD6/516/61/nbv/o3FLJ/sfAAAAepC7/6a4xf4HAACAZuTuvzlusf8BAACgGbn7Pxa3dLL/9f/6/839/2Kh/9f/6/9POoD+f32h/185/f84/f8S+v82+/9/WDTU/x/b8fP1/0zR1Pr/3P0fj1s62f8AAADQg9z9n4hb7H8AAABoRu7+T8Yt9j8AAAA0I3f/p+KWlvb/Azunb/Pv/49u+UT9/2KxuPMiz//X/4+8vv5/Mv1//VPV/6+O/n/cv//XPXes7+Y76v/1/y31/57/r//n0Eyt/8/d/+m4paX9DwAAAJ3L3f+ZuMX+BwAAgGbk7v9s3GL/AwAAQDNy938ubulk/8+//9/6ifr/xVk9/1//v/EB/b/+X/8/W2fb31+5Hr+mtdv/e/7/GP3/0n5+bYd/71no//X/+n8GTK3/z93/+bilk/0PAAAAPcjdf0vcYv8DAABAM3L33xq32P8AAADQjNz9X4hbOtn/+n/9/5z6/3X9f/X/6/p//b/+f9BUnv9/3nn/d5v+X//fYv8/Rv+v/9f/s9XU+v/c/V+MWzrZ/wAAANCD3P1filvsfwAAAGhG7v4vxy32PwAAADQjd/9X4pZO9v/2/v+cxclC9aSh/j8aNf3/afT/m9+/5/8P//jw/H/9v/5//02l//f8/zN7//p//f+c3/+e+v//2P75+n9aNLX+P3f/bXFLJ/sfAAAAepC7/6txi/0PAAAAzcjd/7W4xf4HAACAZuTuvz1u6WT/e/6//l//r//X/w+/vv5/nvT/4/T/S+j/z76fz59V9f/zff7/P+r/WZ2p9f+5+78et2wMv//85zP8nwkAAABMSO7+b8QtnXz9HwAAAHqQu/+OuMX+BwAAgGbk7v9m3NLJ/tf/6//1//p//f/w6+v/50n/P07/v0Q//f/60AcPu58/W4f9/pvp/z3/nxWaWv+fu/9bcUsn+x8AAADadt/Gt7n7vx232P8AAADQjNz934lb7H8AAABoRu7+O+OWTva//l//337//zD9/5bX1//r/1um/89f0Yfp/5fop/8fdNj9/Nzfv/5f/892U+v/c/ffFbd0sv8BAACgB7n7vxu32P8AAADQjNz934tb7H8AAABoRu7+78ctnex//X9f/f/aosf+3/P/9f/6/57Mp/+/6sjQRz3/X/+v/5/v+9f/6//Zbmr9f+7+u9eOdLn/AQAAYK4e8t+PvGu33/fujW/XFz+IW+x/AAAAaEbu/h/GLfY/AAAANCN3/4/ilk72v/6/r/6/z+f/6//1//r/nsyn/x+m/9f/6//n+/576P//aeTz9f8MmVr/n7v/x3HLacNv8P+gBwAAADg8Y78pNSB3/0/ilk6+/g8AAAA9yN3/07hl2/4/scs/1Q4AAABMTe7+n8UtnXz9X/8/8f5/sU/9f3w//f9J+n/9/9Dr6//nSf8/7iz7/xNr+n/9/wj9f/v9/xj9P0Om1v/n7r/xukWX+x8AAAAatel3FH6+8e364p64xf4HAACAZuTu/0XcYv8DAABAM3L3/zJu6WT/6/8n3v+f0fP/j9V/8vz/zvv/S9cHX1//r/9vmf5/nOf/L6H/1//r//X/rNQe+v+NQbrf/X/u/l/FLZ3sfwAAAOhB7v5fxy32PwAAADQjd/9v4hb7HwAAAJqRu/+3cUsn+1//fwj9/2VHF4t97f938fx//X8f/f8Or99O//+v5x6/5aEPv/Zq/T+nHGT/nz8W9P/6f/3/Sfp//b/+n62m9vz/3P2/i1s62f8AAADQg9z998Yt9j8AAAA0I3f/7+OWB/f/zYf1rgAAAIBVyt3/h7ilk6//6/9bfP7/PPv//Gd9CP3/8fn1/9kU997/e/6//n87z/8fp/9fQv+v/9f/6/9Zqan1/7n7/xi3dLL/AQAAoAe5+/8Ut+T+X9vzb90DAAAAE5O7/89xi6//AwAAQDNy998Xt3Sy//X/+v+p9P/J8/9PfZ7n/5+k/9f/74X+f5z+fwn9v/5f/6//Z6Wm1v/n7v9L3NLJ/gcAAIAe5O6/P26x/wEAAKAZufv/GrfY/wAAANCM3P1/i1s62f/6f/2//l//r/8ffn39/zzp/8fp/5fQ/+v/9f/6f1Zqav1/7v6/BwAA//+l7G5O") lsetxattr$security_ima(&(0x7f0000000240)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x17}, 0x2, 0x0) 1.204955627s ago: executing program 2 (id=8507): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") creat(&(0x7f0000000180)='./file3\x00', 0x200) 1.036151827s ago: executing program 1 (id=8510): syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009f09a00871041303d581010203010902120001000000000904"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 700.505556ms ago: executing program 2 (id=8514): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001080)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x0, 0x0, 0xffffffff, 0x110, 0x110, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x40000, 0x2, 0x0, 0x6}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @gre_key}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x250}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x3, "d596aeacb7ccdc0169c1d865b82ad7084d1c88c6b7cec8c99cc89cb57cda"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 660.049429ms ago: executing program 3 (id=8516): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfe, 0x585, &(0x7f0000001500)="$eJzs3d9rFNceAPDvbLLRGO81gsi99+ES8KEWcWOS/rDQB/tYWqnQvtuQrEGycSW7EZMK1Yf60pcihVIqlP4Bfe9Tkf4D/SssrSBFQluwD1tmM6ubZDfJxtWs2c8HRufMnJ0zZ2e+J+fsmWUD6Ftj6T+5iP9GxBdJxJGmfYOR7Rxby7f66MZMuiRRq334exJJtq2RP8n+H8kS/4mInz6LOJXbXG5leWV+ulQqLmbp8erC1fHK8srpywvTc8W54pXJqamzr09NvvXmG12r66sX/vz6g3vvnv38xOpX3z84eieJc3E429dcjy0d2HLvzebEWIxl70k+zm3IONHJib8Ekr0+AXZlIIvzfKRtwJEYyKIe2P8+jYha5x7v4jVAz0l2E//APtDoBzTG9jseB+8TD99ZGwBtrn+y9tlIHKyPjQ6tJutGRul4d7QL5adl/PDb3TvpEp18DgHwjG7eiogzg4Pt278N/q7t+NhndpBnYxnaP3hx7qX9nx+HIzbFf+5J/yda9H9GWsTubmwf/7kHa5NQTYa6UHAm7f+93bL/+6TI0YEs9a96ny+fXLpcKqZt278j4mTkD6TpreZzzq7eb9toNvf/0iUtv9EXzM7jweCGOafZ6er0s9S52cNbEf/bpv+btLj+6ftxYYdlHC/e/X+7fdvX//mqfRfxSsvr/3RGK9l6fnK8fj+MN+6Kzf64ffznduXvdf3T639o6/qPJs3ztZXOy/j24ONiu31jSTZp2uH9P5R8VG+ZGk3B9elqdXEiYih5v55et33y6Wsb6Ub+tP4nT7SO/63u/+GI+HiH9b997HbbrL1w/Wc7uv6dr9x/75Nv2pW/s/bvtfrayWzLTtq/tqcztH7Ls7x3AAAAAAAA0GtyQxGHI8kVsjn9w5HLFQprz3cci0O5UrlSPXWpvHRlNurflR2NfK4x0z3S9DzERPb6Rnoyez62kZ6KiKMR8eXAcD1dmCmXZve68gAAAAAAAAAAAAAAAAAAANAjRqL19/9Tvw7s9dkBz52f/Ib+tS7+D7TI0I1fegJ6kr//0L/EP/Qv8Q/9S/xD/xL/0L/EP/Qv8Q/9S/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAV104fz5daquPbsxExMG4trw0X752eraYny8sLM0UZsqLVwtz5fJcqViYKS9sd7xSuXx1YjKWro9Xi5XqeGV55eJCeelK9eLlhem54sVi/sVUCwAAAAAAAAAAAAAAAAAAAF4qleWV+elSqbjYmyv5Lh/wlx6p1z5aGeyN07CyWBmOLh5wfTvxV61W26s2CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+CQAA//87lDlV") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200) 558.010631ms ago: executing program 4 (id=8517): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0x10, 0x2, 'client0\x00', 0x5, "e1ecc31c66ab98b9", "0af4b7a48facbc69e2606cef3984d524b83675886f962c1b59034a21a24a37a9", 0x7, 0x9}) 505.472611ms ago: executing program 4 (id=8518): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) acct(0x0) 465.436444ms ago: executing program 3 (id=8519): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xba, &(0x7f0000000580), &(0x7f0000000280)=0x4) 412.474454ms ago: executing program 2 (id=8520): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 388.54046ms ago: executing program 3 (id=8521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000007c0)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x10, 0xbc, 0x2, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @private1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200408f0}, 0x0) 320.737308ms ago: executing program 4 (id=8522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x32, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 305.740555ms ago: executing program 2 (id=8523): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}]}, 0xd8}}, 0x0) 272.028339ms ago: executing program 3 (id=8524): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000003240)=ANY=[], 0x3, 0x33c, &(0x7f00000002c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) 225.857491ms ago: executing program 4 (id=8525): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x27}}) 149.879617ms ago: executing program 3 (id=8526): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) 148.103827ms ago: executing program 0 (id=8527): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5460, 0x0) 109.61234ms ago: executing program 4 (id=8528): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002dc0), 0x101400, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0xffffffffffffffff) 423.14µs ago: executing program 3 (id=8529): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 0s ago: executing program 4 (id=8530): r0 = syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r0, 0x0) kernel console output (not intermixed with test programs): mode: writeback. [ 659.777168][T20004] BTRFS info (device loop1): enabling ssd optimizations [ 660.042956][T20006] BTRFS info (device loop4): enabling ssd optimizations [ 660.396346][T20060] loop3: detected capacity change from 0 to 732 [ 661.127365][T20064] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 661.497992][ T5313] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 661.507302][T20075] set_capacity_and_notify: 3 callbacks suppressed [ 661.507317][T20075] loop3: detected capacity change from 0 to 1156 [ 661.532566][T20077] loop2: detected capacity change from 0 to 1024 [ 661.807410][T20081] loop2: detected capacity change from 0 to 128 [ 661.879263][T20081] hpfs: Bad magic ... probably not HPFS [ 661.893891][ T5313] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 661.918603][T20069] loop4: detected capacity change from 0 to 32768 [ 661.982203][T20069] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop4 scanned by syz.4.6998 (20069) [ 662.068294][T20069] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 662.096809][ T5313] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 662.112770][T20069] BTRFS info (device loop4): using free space tree [ 662.133936][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.155548][T20069] BTRFS info (device loop4): has skinny extents [ 662.155717][T20083] loop2: detected capacity change from 0 to 1768 [ 662.171632][ T5313] usb 2-1: Product: syz [ 662.179019][ T5313] usb 2-1: Manufacturer: syz [ 662.192823][ T5313] usb 2-1: SerialNumber: syz [ 662.256424][ T5313] usb 2-1: config 0 descriptor?? [ 662.312405][ T5313] powermate: probe of 2-1:0.0 failed with error -22 [ 662.404492][T20094] loop2: detected capacity change from 0 to 1164 [ 662.540338][T20069] BTRFS info (device loop4): enabling ssd optimizations [ 662.549521][ T5313] usb 2-1: USB disconnect, device number 46 [ 662.674338][T20108] loop2: detected capacity change from 0 to 2048 [ 662.816191][T20108] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 662.837914][ T4414] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 9 /dev/loop4 scanned by udevd (4414) [ 663.182852][T20104] loop0: detected capacity change from 0 to 32768 [ 663.211907][T20104] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.7006 (20104) [ 663.337003][T20104] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 663.346449][T20104] BTRFS info (device loop0): using free space tree [ 663.414401][T20104] BTRFS info (device loop0): has skinny extents [ 663.416348][T20118] loop2: detected capacity change from 0 to 1764 [ 663.737294][T20104] BTRFS info (device loop0): enabling ssd optimizations [ 663.783175][T20139] loop2: detected capacity change from 0 to 21 [ 663.845643][T20139] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 664.670399][T20145] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 664.864999][T20147] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 665.069370][T20149] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 665.230447][T20151] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 665.315527][T20143] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.7014 (20143) [ 665.432846][T20143] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 665.442301][T20143] BTRFS info (device loop2): using free space tree [ 665.503128][T20143] BTRFS info (device loop2): has skinny extents [ 665.845731][T20143] BTRFS info (device loop2): enabling ssd optimizations [ 667.186596][T20179] set_capacity_and_notify: 6 callbacks suppressed [ 667.186612][T20179] loop4: detected capacity change from 0 to 64 [ 667.245215][T20181] loop1: detected capacity change from 0 to 512 [ 667.419367][T20181] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 667.484136][T20177] loop2: detected capacity change from 0 to 32768 [ 667.608918][T20177] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 667.640239][T20177] dlm: no local IP address has been set [ 667.677078][T20177] dlm: cannot start dlm midcomms -107 [ 667.682491][T20177] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 667.706534][T20186] loop1: detected capacity change from 0 to 2048 [ 668.499681][T20153] loop0: detected capacity change from 0 to 131072 [ 668.550518][T20188] loop2: detected capacity change from 0 to 32768 [ 668.624478][T20188] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop2 scanned by syz.2.7025 (20188) [ 668.658488][T20153] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 668.687187][T20188] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 668.724821][T20188] BTRFS info (device loop2): using free space tree [ 668.731380][T20188] BTRFS info (device loop2): has skinny extents [ 669.088286][T20188] BTRFS info (device loop2): enabling ssd optimizations [ 669.134367][T20190] loop1: detected capacity change from 0 to 32768 [ 669.200604][T20190] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 669.216751][T20190] dlm: no local IP address has been set [ 669.266142][T20190] dlm: cannot start dlm midcomms -107 [ 669.291731][T20190] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 669.503477][T20218] loop3: detected capacity change from 0 to 512 [ 669.530677][T20216] loop1: detected capacity change from 0 to 128 [ 669.555328][T20204] loop0: detected capacity change from 0 to 32768 [ 671.225355][T20221] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 671.254035][T20221] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 671.335397][T20221] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 671.356275][T20249] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 671.399503][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 671.406370][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 671.650981][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 228ms [ 671.678985][T20253] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 671.700389][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 671.705678][T20221] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 672.195856][T20260] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 672.399726][T20259] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 672.714452][T20265] set_capacity_and_notify: 16 callbacks suppressed [ 672.714469][T20265] loop2: detected capacity change from 0 to 128 [ 673.021596][T20272] loop2: detected capacity change from 0 to 512 [ 673.089741][T20270] loop4: detected capacity change from 0 to 4096 [ 673.261427][T20270] ntfs: volume version 3.1. [ 673.683605][T20268] loop3: detected capacity change from 0 to 32768 [ 673.785757][T20276] loop4: detected capacity change from 0 to 8192 [ 673.837776][T20276] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 673.885365][T20276] ntfs: (device loop4): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 673.939818][T20276] ntfs: (device loop4): ntfs_fill_super(): Not an NTFS volume. [ 674.711759][T20280] loop4: detected capacity change from 0 to 32768 [ 674.737331][T20280] (syz.4.7059,20280,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 674.757981][T20280] (syz.4.7059,20280,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 675.762881][T20284] loop4: detected capacity change from 0 to 32768 [ 675.792204][T20286] loop0: detected capacity change from 0 to 4096 [ 675.853796][T20284] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 675.898652][T20287] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 675.924743][T20284] dlm: no local IP address has been set [ 675.964121][T20284] dlm: cannot start dlm midcomms -107 [ 675.969532][T20284] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 676.181727][T20291] loop4: detected capacity change from 0 to 256 [ 676.782310][T20289] loop0: detected capacity change from 0 to 32768 [ 676.818753][T20289] (syz.0.7063,20289,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 676.860668][T20289] (syz.0.7063,20289,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 677.178354][T20293] (syz.4.7065,20293,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 677.233580][T20293] (syz.4.7065,20293,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 677.687779][T20297] (syz.0.7066,20297,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 677.732329][T20297] (syz.0.7066,20297,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 677.907623][T20295] (syz.2.7067,20295,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 677.960865][T20295] (syz.2.7067,20295,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 678.093160][T20301] set_capacity_and_notify: 3 callbacks suppressed [ 678.093175][T20301] loop0: detected capacity change from 0 to 4096 [ 678.181706][T20301] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 678.292225][T20299] loop4: detected capacity change from 0 to 32768 [ 678.451388][T20299] (syz.4.7068,20299,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 678.495817][T20299] (syz.4.7068,20299,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 678.734882][T20303] loop3: detected capacity change from 0 to 32768 [ 678.792801][T20309] loop4: detected capacity change from 0 to 8192 [ 678.854135][T20303] (syz.3.7070,20303,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 678.875193][T20303] (syz.3.7070,20303,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 678.912311][T20309] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 678.933172][T20309] REISERFS (device loop4): using ordered data mode [ 678.954142][T20309] reiserfs: using flush barriers [ 678.977220][T20309] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 679.093013][T20309] REISERFS (device loop4): checking transaction log (loop4) [ 679.414330][T20309] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 679.458210][T20309] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 679.515705][T20309] REISERFS (device loop4): Remounting filesystem read-only [ 679.566283][T20309] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 679.586251][T20309] REISERFS warning (device loop4): reiserfs_fill_super: corrupt root inode, run fsck [ 679.615888][T20312] loop3: detected capacity change from 0 to 16384 [ 679.761017][T20312] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 16, size 4096) [ 679.773602][T20305] loop2: detected capacity change from 0 to 65536 [ 679.792713][T20316] loop4: detected capacity change from 0 to 128 [ 679.831835][T20312] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 679.845522][T20305] (syz.2.7071,20305,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 679.885366][T20316] qnx4: no qnx4 filesystem (no root dir). [ 679.930371][T20305] (syz.2.7071,20305,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 680.348496][T20323] loop3: detected capacity change from 0 to 8192 [ 680.487854][T20323] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 680.514512][T20323] REISERFS (device loop3): using ordered data mode [ 680.587001][T20323] reiserfs: using flush barriers [ 680.634096][T20323] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 680.687897][T20323] REISERFS (device loop3): checking transaction log (loop3) [ 680.908153][T20323] REISERFS (device loop3): Using r5 hash to sort names [ 680.923089][T20323] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 681.151570][T20307] loop0: detected capacity change from 0 to 131072 [ 681.454835][T20327] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 682.618203][T20321] loop2: detected capacity change from 0 to 131072 [ 682.722968][T20321] REISERFS (device loop2): found reiserfs format "3.6" with standard journal [ 682.740234][T20321] REISERFS (device loop2): using ordered data mode [ 682.746765][T20321] reiserfs: using flush barriers [ 682.794670][T20321] REISERFS (device loop2): journal params: device loop2, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 682.820009][T20321] REISERFS (device loop2): checking transaction log (loop2) [ 684.083379][T20326] loop3: detected capacity change from 0 to 131072 [ 684.155204][T20326] REISERFS (device loop3): found reiserfs format "3.5" with standard journal [ 684.174520][T20326] REISERFS (device loop3): using ordered data mode [ 684.216864][T20326] reiserfs: using flush barriers [ 684.238300][T20326] REISERFS (device loop3): journal params: device loop3, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 684.258882][T20326] REISERFS (device loop3): checking transaction log (loop3) [ 684.345055][T20332] loop1: detected capacity change from 0 to 32768 [ 684.782786][T20337] loop1: detected capacity change from 0 to 4096 [ 684.987171][T20337] ntfs: volume version 3.1. [ 685.428739][T20339] loop1: detected capacity change from 0 to 8192 [ 685.437816][T20341] loop0: detected capacity change from 0 to 1 [ 685.499427][T20341] attempt to access beyond end of device [ 685.499427][T20341] loop0: rw=2048, want=8, limit=1 [ 685.523470][T20341] SQUASHFS error: Failed to read block 0x0: -5 [ 685.536555][T20341] unable to read squashfs_super_block [ 685.749132][T20345] loop0: detected capacity change from 0 to 8 [ 686.021861][T20321] REISERFS (device loop2): Using rupasov hash to sort names [ 686.051763][T20351] loop0: detected capacity change from 0 to 2048 [ 686.060035][T20321] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 686.121126][T20351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 686.544224][T20353] loop0: detected capacity change from 0 to 8192 [ 686.599021][T20353] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 686.828600][T20356] loop0: detected capacity change from 0 to 128 [ 686.906537][T20356] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 686.943882][T20356] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 686.998803][T20356] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 687.031195][T20356] UDF-fs: Scanning with blocksize 512 failed [ 687.052006][T20356] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 687.078825][T20356] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 687.113363][T20356] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 687.178755][T20356] UDF-fs: Scanning with blocksize 1024 failed [ 687.199937][T20356] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 687.251265][T20356] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 687.289420][T20356] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 687.328290][T20356] UDF-fs: Scanning with blocksize 2048 failed [ 687.349900][T20356] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 687.391212][T20356] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 687.400842][T20356] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 687.444005][T20356] UDF-fs: Scanning with blocksize 4096 failed [ 687.450104][T20356] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 687.581952][T20358] loop4: detected capacity change from 0 to 256 [ 687.717098][T20358] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 687.745115][T20358] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 687.781216][T20358] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 687.807526][T20358] UDF-fs: Scanning with blocksize 512 failed [ 687.827523][T20326] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 687.850525][T20326] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 8211. Fsck? [ 687.857652][T20358] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 687.861908][T20326] REISERFS (device loop3): Remounting filesystem read-only [ 687.880679][T20326] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 687.894687][T20326] REISERFS warning (device loop3): reiserfs_fill_super: corrupt root inode, run fsck [ 687.895724][T20358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 689.037781][T20362] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 689.058492][T20362] dlm: no local IP address has been set [ 689.064077][T20362] dlm: cannot start dlm midcomms -107 [ 689.103331][T20362] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 689.338089][T20366] ntfs: volume version 3.1. [ 689.480707][T20370] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 689.621566][T20372] set_capacity_and_notify: 3 callbacks suppressed [ 689.621582][T20372] loop4: detected capacity change from 0 to 512 [ 689.723551][T20372] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 689.727894][T20374] loop2: detected capacity change from 0 to 512 [ 689.736105][T20372] UDF-fs: Scanning with blocksize 512 failed [ 689.746225][T20372] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 689.772290][T20372] UDF-fs: Scanning with blocksize 1024 failed [ 689.815336][T20376] loop3: detected capacity change from 0 to 256 [ 689.827406][T20372] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 689.854611][T20374] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 689.870886][T20374] UDF-fs: Scanning with blocksize 512 failed [ 689.878499][T20374] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 689.896104][T20374] UDF-fs: Scanning with blocksize 1024 failed [ 689.896838][T20372] UDF-fs: Scanning with blocksize 2048 failed [ 689.936680][T20376] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 689.952524][T20374] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 689.967030][T20374] UDF-fs: Scanning with blocksize 2048 failed [ 689.988475][T20372] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 690.009269][T20374] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 690.038854][T20376] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 690.060880][T20372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.080606][T20376] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 690.090258][T20376] UDF-fs: Scanning with blocksize 512 failed [ 690.103848][T20378] loop1: detected capacity change from 0 to 512 [ 690.118794][T20376] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 690.124121][T20374] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.179693][T20376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.210014][T20378] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 690.245598][T20378] UDF-fs: Scanning with blocksize 512 failed [ 690.277860][T20378] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 690.285279][T20378] UDF-fs: Scanning with blocksize 1024 failed [ 690.290579][T20381] loop0: detected capacity change from 0 to 512 [ 690.319635][T20378] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 690.359996][T20378] UDF-fs: Scanning with blocksize 2048 failed [ 690.371480][T20384] loop2: detected capacity change from 0 to 512 [ 690.390812][T20381] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 690.416993][T20381] UDF-fs: Scanning with blocksize 512 failed [ 690.425305][T20386] loop3: detected capacity change from 0 to 128 [ 690.431970][T20378] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 690.447574][T20384] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 690.455353][T20381] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 690.465040][T20381] UDF-fs: Scanning with blocksize 1024 failed [ 690.465949][T20378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.485419][T20384] UDF-fs: Scanning with blocksize 512 failed [ 690.501546][T20381] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 690.513244][T20384] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 690.521413][T20381] UDF-fs: Scanning with blocksize 2048 failed [ 690.538820][T20384] UDF-fs: Scanning with blocksize 1024 failed [ 690.556584][T20381] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 690.568270][T20386] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 690.578671][T20384] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 690.580615][T20381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.586058][T20384] UDF-fs: Scanning with blocksize 2048 failed [ 690.630655][T20386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.662629][T20384] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 690.681941][T20389] loop1: detected capacity change from 0 to 256 [ 690.694197][T20384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.801006][T20389] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 690.869188][T20389] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 690.929253][T20389] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 690.936949][T20389] UDF-fs: Scanning with blocksize 512 failed [ 690.991248][T20395] loop2: detected capacity change from 0 to 128 [ 690.991650][T20389] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 691.052569][T20393] loop0: detected capacity change from 0 to 4096 [ 691.091676][T20389] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 691.139080][T20393] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 691.179639][T20393] UDF-fs: Scanning with blocksize 512 failed [ 691.230626][T20393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 692.380953][T20410] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 692.406869][T20410] UDF-fs: Scanning with blocksize 512 failed [ 692.426911][T20410] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 692.434351][T20410] UDF-fs: Scanning with blocksize 1024 failed [ 692.495980][T20410] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 692.517490][T20410] UDF-fs: Scanning with blocksize 2048 failed [ 692.583471][T20410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 693.043003][T20421] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 693.098245][T20421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 694.946475][T20432] (syz.2.7128,20432,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 695.012499][T20432] (syz.2.7128,20432,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 696.198948][T20448] set_capacity_and_notify: 15 callbacks suppressed [ 696.198965][T20448] loop1: detected capacity change from 0 to 32768 [ 696.285034][T20448] loop1: p1 p9 p11 [ 696.747938][T10009] udevd[10009]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 696.748036][ T4414] udevd[4414]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 696.760730][ T4346] udevd[4346]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 696.786043][T20444] loop0: detected capacity change from 0 to 65536 [ 697.924286][T20452] loop0: detected capacity change from 0 to 32768 [ 697.972637][T20442] loop2: detected capacity change from 0 to 131072 [ 698.042758][T20452] XFS (loop0): Mounting V5 Filesystem [ 698.113391][T20442] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 698.122639][T20442] REISERFS (device loop2): using ordered data mode [ 698.133989][T20442] reiserfs: using flush barriers [ 698.177603][T20442] REISERFS (device loop2): journal params: device loop2, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 698.202189][T20442] REISERFS (device loop2): checking transaction log (loop2) [ 698.295186][T20452] XFS (loop0): Ending clean mount [ 698.402968][ T4194] XFS (loop0): Unmounting Filesystem [ 699.597179][T20454] loop3: detected capacity change from 0 to 65536 [ 699.690238][T20465] loop4: detected capacity change from 0 to 32768 [ 699.827918][T20454] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 699.850724][T20465] XFS (loop4): Mounting V5 Filesystem [ 700.008488][T20465] XFS (loop4): Ending clean mount [ 700.044351][ T4184] XFS (loop4): Unmounting Filesystem [ 700.179179][T20467] loop0: detected capacity change from 0 to 65536 [ 700.556251][T20481] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 700.804524][T20485] loop4: detected capacity change from 0 to 2048 [ 701.024554][T20485] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 701.075775][T20485] UDF-fs: Scanning with blocksize 512 failed [ 701.105733][T20485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 703.924187][T20442] REISERFS (device loop2): Using r5 hash to sort names [ 703.942406][T20442] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 704.074906][T20489] loop4: detected capacity change from 0 to 131072 [ 704.242629][T20489] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel. [ 704.707208][T20499] loop3: detected capacity change from 0 to 128 [ 706.395957][T20502] loop3: detected capacity change from 0 to 65536 [ 706.623494][T20502] XFS (loop3): Mounting V5 Filesystem [ 706.676054][T20502] XFS (loop3): Ending clean mount [ 706.837465][ T4187] XFS (loop3): Unmounting Filesystem [ 707.948726][ T4235] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 708.039773][T20517] loop0: detected capacity change from 0 to 131072 [ 708.195695][T20517] XFS (loop0): Mounting V5 Filesystem [ 708.215991][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 708.265833][T20517] XFS (loop0): Ending clean mount [ 708.397836][ T4235] usb 4-1: unable to get BOS descriptor or descriptor too short [ 708.413850][ T4194] XFS (loop0): Unmounting Filesystem [ 708.650510][T20519] loop2: detected capacity change from 0 to 131072 [ 708.665333][ T4235] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 708.681874][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.695191][ T4235] usb 4-1: Product: syz [ 708.709403][ T4235] usb 4-1: Manufacturer: syz [ 708.714063][ T4235] usb 4-1: SerialNumber: syz [ 708.771216][T20539] netlink: 'syz.1.7160': attribute type 2 has an invalid length. [ 708.802325][T20539] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7160'. [ 708.871454][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 708.877828][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 709.051082][T20519] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 709.103569][ T4235] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 709.192634][T20546] loop1: detected capacity change from 0 to 512 [ 709.242336][ T4235] usb 4-1: unit 37 not found! [ 709.247091][ T4235] usb 4-1: unit 0 not found! [ 709.344869][ T4235] usb 4-1: USB disconnect, device number 59 [ 709.661745][ T4191] udevd[4191]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.694251][T20558] xt_CT: You must specify a L4 protocol and not use inversions on it [ 709.720491][T20563] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7168'. [ 710.020556][T20581] netlink: 'syz.2.7177': attribute type 15 has an invalid length. [ 710.059722][T20581] IPv6: NLM_F_CREATE should be specified when creating new route [ 710.115846][T20585] loop0: detected capacity change from 0 to 1024 [ 710.156008][T20585] EXT4-fs (loop0): Test dummy encryption mode enabled [ 710.182622][T20585] EXT4-fs (loop0): inline encryption not supported [ 710.267828][T20585] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 710.346015][T20596] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7184'. [ 710.562256][T20609] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7191'. [ 710.601141][T20611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7193'. [ 710.612590][T20611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7193'. [ 710.656821][T20613] xt_SECMARK: invalid mode: 2 [ 710.768214][T20572] orangefs_mount: mount request failed with -4 [ 710.946655][T20633] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 711.067721][T20646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7208'. [ 711.326142][T20660] netlink: 'syz.2.7214': attribute type 6 has an invalid length. [ 711.369850][T20660] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7214'. [ 711.398048][T20665] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7217'. [ 711.408814][T20665] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7217'. [ 712.185186][T20712] netlink: 'syz.4.7240': attribute type 3 has an invalid length. [ 712.298239][T20718] device gtp0 entered promiscuous mode [ 712.477463][T20729] loop3: detected capacity change from 0 to 16 [ 712.595381][T20729] erofs: (device loop3): mounted with root inode @ nid 36. [ 712.633762][T20729] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 712.924533][T20747] netlink: 'syz.4.7256': attribute type 10 has an invalid length. [ 712.958830][T20747] device team0 entered promiscuous mode [ 712.986304][T20747] device team_slave_0 entered promiscuous mode [ 712.993578][T20682] loop1: detected capacity change from 0 to 65536 [ 713.008321][T20747] device team_slave_1 entered promiscuous mode [ 713.019137][T20747] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 713.122732][T20682] XFS (loop1): Mounting V5 Filesystem [ 713.155704][T20749] device wlan0 entered promiscuous mode [ 713.181705][T20677] loop0: detected capacity change from 0 to 65536 [ 713.214702][T20749] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 713.282793][T20677] XFS (loop0): Mounting V5 Filesystem [ 713.312085][T20682] XFS (loop1): Ending clean mount [ 713.441753][ T4185] XFS (loop1): Unmounting Filesystem [ 713.663242][T20677] XFS (loop0): Ending clean mount [ 713.772030][ T4194] XFS (loop0): Unmounting Filesystem [ 714.381344][T20805] device ip6tnl1 entered promiscuous mode [ 714.582795][T20813] loop1: detected capacity change from 0 to 2048 [ 714.638255][T20813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 714.672300][T20753] loop2: detected capacity change from 0 to 65536 [ 714.947401][T20753] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 714.959667][T20835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.125733][T20841] __nla_validate_parse: 7 callbacks suppressed [ 715.125751][T20841] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7292'. [ 715.173010][T20841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7292'. [ 715.369689][T20853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7298'. [ 715.406641][T20853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7298'. [ 715.488600][T20857] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7300'. [ 715.505153][T20857] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7300'. [ 715.553435][T20855] device xfrm0 entered promiscuous mode [ 715.752149][T20866] syz.3.7305 uses old SIOCAX25GETINFO [ 715.857495][T20870] loop4: detected capacity change from 0 to 2048 [ 715.906344][T20874] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7308'. [ 715.965667][T20870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 715.974848][T20870] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 716.402492][T20906] loop2: detected capacity change from 0 to 2048 [ 716.488204][T20906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 716.548734][T20913] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7327'. [ 717.148144][T20944] loop2: detected capacity change from 0 to 8192 [ 717.259124][T20944] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 717.685400][T20994] loop0: detected capacity change from 0 to 2048 [ 717.765702][T20994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 717.794373][T20998] loop4: detected capacity change from 0 to 8192 [ 717.995264][T21010] device wlan0 entered promiscuous mode [ 718.012731][T21010] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 718.109973][T21014] netlink: 'syz.2.7378': attribute type 21 has an invalid length. [ 718.147547][T21014] netlink: 'syz.2.7378': attribute type 1 has an invalid length. [ 718.263166][T21027] netlink: 'syz.0.7386': attribute type 1 has an invalid length. [ 718.283661][T21021] loop4: detected capacity change from 0 to 2048 [ 718.369082][T21034] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 718.448771][T21021] NILFS error (device loop4): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 718.455074][T21037] xt_limit: Overflow, try lower: 65536/2147483648 [ 718.507575][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7390'. [ 718.563665][T21040] device netdevsim0 entered promiscuous mode [ 718.592064][T21021] Remounting filesystem read-only [ 718.717800][T21051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7396'. [ 718.826013][T21055] device bridge1 entered promiscuous mode [ 719.257864][T21091] netlink: 'syz.2.7416': attribute type 3 has an invalid length. [ 719.303324][T21094] device xfrm0 entered promiscuous mode [ 719.360639][T21096] loop3: detected capacity change from 0 to 1024 [ 719.435666][T21101] IPv6: addrconf: prefix option has invalid lifetime [ 719.444121][T21099] device wlan0 entered promiscuous mode [ 719.457755][T21099] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 719.513625][T21096] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,errors=remount-ro,resgid=0x0000000000000000,barrier,auto_da_alloc,nodelalloc,. Quota mode: none. [ 719.543951][T21111] loop4: detected capacity change from 0 to 512 [ 719.549534][T21096] ext4 filesystem being mounted at /1517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.575816][T21096] EXT4-fs error (device loop3): ext4_free_blocks:6232: comm syz.3.7418: Freeing blocks not in datazone - block = 0, count = 16 [ 719.636745][T21096] EXT4-fs (loop3): Remounting filesystem read-only [ 719.643814][T21111] EXT4-fs (loop4): Test dummy encryption mode enabled [ 719.643888][T21096] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.7418: bg 0: block 112: padding at end of block bitmap is not set [ 719.676689][T21114] device veth1 entered promiscuous mode [ 719.715200][T21111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 719.745559][T21116] loop0: detected capacity change from 0 to 2048 [ 719.761978][T21096] EXT4-fs (loop3): Remounting filesystem read-only [ 719.774183][T21096] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 719.814382][T21111] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.7425: corrupted xattr entries [ 719.866885][T21111] EXT4-fs (loop4): Remounting filesystem read-only [ 719.874813][T21096] EXT4-fs (loop3): Remounting filesystem read-only [ 719.882127][T21122] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 719.908774][T21116] NILFS error (device loop0): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 719.926591][T21116] Remounting filesystem read-only [ 719.933126][T21111] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 719.947046][T21111] EXT4-fs (loop4): 1 orphan inode deleted [ 719.952806][T21111] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,. Quota mode: none. [ 720.119791][T21131] device xfrm0 entered promiscuous mode [ 720.160809][T21134] netlink: 'syz.4.7432': attribute type 7 has an invalid length. [ 720.305761][T21140] loop2: detected capacity change from 0 to 1764 [ 720.422045][T21148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 720.590939][T21157] netlink: 'syz.2.7444': attribute type 1 has an invalid length. [ 720.944181][T21183] ipt_CLUSTERIP: Please specify an interface name [ 721.014150][T21188] netlink: 'syz.1.7461': attribute type 1 has an invalid length. [ 721.023419][ T4440] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 721.173398][T21189] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 721.255210][T21189] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 721.311987][ T4440] usb 5-1: Using ep0 maxpacket: 32 [ 721.327717][T21185] set_capacity_and_notify: 2 callbacks suppressed [ 721.327732][T21185] loop0: detected capacity change from 0 to 32768 [ 721.423367][T21185] (syz.0.7459,21185,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 721.473187][ T4440] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.473401][T21185] (syz.0.7459,21185,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 721.508470][ T4440] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 721.728821][T21185] JBD2: Ignoring recovery information on journal [ 721.782672][ T4440] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 721.795464][ T4440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.810139][T21185] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 721.817502][ T4440] usb 5-1: Product: syz [ 721.823324][ T4440] usb 5-1: Manufacturer: syz [ 721.828073][ T4440] usb 5-1: SerialNumber: syz [ 721.831325][T21185] (syz.0.7459,21185,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 721.834345][ T4440] usb 5-1: config 0 descriptor?? [ 721.890374][ T4440] qmi_wwan 5-1:0.0: bogus CDC Union: master=101, slave=0 [ 721.897538][ T4440] qmi_wwan: probe of 5-1:0.0 failed with error -22 [ 721.987057][T21185] (syz.0.7459,21185,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 722.011977][T21185] (syz.0.7459,21185,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 722.025255][T21185] (syz.0.7459,21185,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 722.029328][ T5223] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 722.041108][T21185] (syz.0.7459,21185,0):ocfs2_quota_read:201 ERROR: status = -5 [ 722.058271][T21185] Quota error (device loop0): find_block_dqentry: Can't read quota tree block 6 [ 722.078219][T21185] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 722.089260][T21185] (syz.0.7459,21185,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 722.152451][ T4440] usb 5-1: USB disconnect, device number 48 [ 722.166373][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 722.444321][T21237] __nla_validate_parse: 5 callbacks suppressed [ 722.444339][T21237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7484'. [ 722.570229][T21247] usb usb8: usbfs: process 21247 (syz.1.7487) did not claim interface 0 before use [ 722.608086][T21251] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7490'. [ 722.675051][ T5223] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 722.693188][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.729950][ T5223] usb 3-1: Product: syz [ 722.747026][ T5223] usb 3-1: Manufacturer: syz [ 722.751647][ T5223] usb 3-1: SerialNumber: syz [ 722.774176][ T5223] usb 3-1: config 0 descriptor?? [ 722.837345][ T5223] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 722.850050][T21258] loop0: detected capacity change from 0 to 4096 [ 722.969446][T21258] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 722.993856][T21258] ntfs3: loop0: Failed to load $Extend. [ 723.076187][ T4440] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 723.268344][ T7] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 723.289742][ T5223] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 723.305666][ T5223] sq905c 3-1:0.0: Reading version command failed [ 723.316008][ T5223] sq905c: probe of 3-1:0.0 failed with error -71 [ 723.324962][ T5223] usb 3-1: USB disconnect, device number 57 [ 723.366200][ T4440] usb 5-1: Using ep0 maxpacket: 32 [ 723.460392][T21298] binder: 21297:21298 ioctl c0306201 2000000001c0 returned -14 [ 723.514498][ T4440] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.535498][ T4440] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.535650][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 723.562901][ T4440] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 723.583202][T21304] device bridge2 entered promiscuous mode [ 723.595971][T21300] loop3: detected capacity change from 0 to 8192 [ 723.760512][ T4440] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 723.770059][ T4440] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 723.779258][ T4440] usb 5-1: Product: syz [ 723.783858][ T4440] usb 5-1: Manufacturer: syz [ 723.791790][ T4440] usb 5-1: SerialNumber: syz [ 723.869663][ T4440] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input47 [ 723.880140][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 723.924275][ T7] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 723.952833][ T7] usb 2-1: Product: syz [ 723.982224][ T7] usb 2-1: Manufacturer: syz [ 724.000073][ T7] usb 2-1: SerialNumber: syz [ 724.017515][ T7] usb 2-1: config 0 descriptor?? [ 724.066661][ T7] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 724.209973][ T5313] usb 5-1: USB disconnect, device number 49 [ 724.214135][T21322] loop3: detected capacity change from 0 to 256 [ 724.229851][ T5313] appletouch 5-1:1.0: input: appletouch disconnected [ 724.452738][T21332] overlayfs: missing 'workdir' [ 724.471613][T21318] loop0: detected capacity change from 0 to 32768 [ 724.519420][ T7] gspca_zc3xx: reg_r err -71 [ 724.524675][ T7] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 724.557424][ T7] usb 2-1: USB disconnect, device number 47 [ 724.686563][T21318] XFS (loop0): Mounting V5 Filesystem [ 724.825424][T21318] XFS (loop0): Ending clean mount [ 724.885436][T21361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7538'. [ 724.905764][ T4194] XFS (loop0): Unmounting Filesystem [ 725.093132][T21369] program syz.3.7544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 725.180447][ T26] audit: type=1400 audit(2000561477.182:38): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=21372 comm="syz.2.7546" [ 725.256780][ T7] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 725.273325][T21379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 725.561050][T21398] loop1: detected capacity change from 0 to 4096 [ 725.617366][T21398] ntfs3: loop1: ino=3, Correct links count -> 2. [ 725.673905][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.722463][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.785241][ T7] usb 5-1: config 1 interface 1 has no altsetting 1 [ 725.983965][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 725.999474][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.043725][ T7] usb 5-1: Product: syz [ 726.075807][ T7] usb 5-1: Manufacturer: syz [ 726.092948][ T7] usb 5-1: SerialNumber: syz [ 726.134414][ T7] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 726.134450][ T7] cdc_ncm 5-1:1.0: bind() failure [ 726.137365][ T7] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 726.137397][ T7] cdc_ncm 5-1:1.1: bind() failure [ 726.349978][T21446] loop3: detected capacity change from 0 to 8192 [ 726.385295][T21452] comedi comedi1: pcl711: I/O port conflict (0x1,16) [ 726.390892][ T4173] usb 5-1: USB disconnect, device number 50 [ 726.397291][T21446] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 726.444480][T21446] REISERFS (device loop3): using ordered data mode [ 726.451208][T21446] reiserfs: using flush barriers [ 726.461172][T21446] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 726.461499][T21446] REISERFS (device loop3): checking transaction log (loop3) [ 726.472362][T21446] REISERFS (device loop3): Using rupasov hash to sort names [ 726.472390][T21446] REISERFS (device loop3): using 3.5.x disk format [ 726.472555][T21446] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 726.472618][T21446] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 726.472692][T21446] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 726.472741][T21446] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 726.514362][T21446] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 726.607687][T21446] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 726.608135][T21446] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 727.422159][T21493] loop3: detected capacity change from 0 to 4096 [ 727.478321][T21493] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 727.523150][T21493] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 727.559123][T21493] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 727.560179][T21517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7614'. [ 727.620134][T21493] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 727.680397][T21493] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 727.738104][T21493] ntfs: volume version 3.1. [ 727.798013][T21493] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 727.858640][T21493] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 727.886593][T21493] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 727.886765][ T7] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 727.950454][T21493] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 728.010371][T21493] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 728.070804][T21539] IPv6: sit1: Disabled Multicast RS [ 728.123360][T21541] loop1: detected capacity change from 0 to 4096 [ 728.175347][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 728.197865][T21541] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 728.219031][T21541] ntfs3: loop1: Failed to load $Extend. [ 728.306964][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 728.328319][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 728.395401][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 728.593424][ T7] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 728.622680][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.649066][ T7] usb 3-1: Product: syz [ 728.653307][ T7] usb 3-1: Manufacturer: syz [ 728.674734][ T7] usb 3-1: SerialNumber: syz [ 728.695997][ T7] usb 3-1: config 0 descriptor?? [ 728.725800][T21575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7644'. [ 728.746034][T21578] loop0: detected capacity change from 0 to 128 [ 728.763238][T21575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7644'. [ 728.805205][T21578] EXT4-fs (loop0): Test dummy encryption mode enabled [ 728.839472][T21578] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 728.850619][T21588] loop4: detected capacity change from 0 to 1024 [ 728.877403][T21590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7650'. [ 728.891857][T21578] ext4 filesystem being mounted at /1550/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 728.911184][T21578] EXT4-fs (loop0): Test dummy encryption mode enabled [ 728.925960][T21578] EXT4-fs (loop0): re-mounted. Opts: test_dummy_encryption=v1. Quota mode: none. [ 729.020234][ T4664] hfsplus: b-tree write err: -5, ino 25 [ 729.026045][ T4664] hfsplus: b-tree write err: -5, ino 4 [ 729.026948][ T4436] usb 3-1: USB disconnect, device number 58 [ 729.040593][T21594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.077849][ T4664] hfsplus: b-tree write err: -5, ino 2 [ 729.088573][T21594] device batadv_slave_0 entered promiscuous mode [ 729.166785][T21594] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 729.192425][T21598] dlm: no locking on control device [ 729.362123][T21604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7657'. [ 729.444496][T21607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.596346][T21615] loop4: detected capacity change from 0 to 1024 [ 729.842603][T21596] loop1: detected capacity change from 0 to 32768 [ 729.881470][T21633] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7671'. [ 729.934802][T21596] (syz.1.7655,21596,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 729.972438][T21640] loop4: detected capacity change from 0 to 64 [ 729.991007][T21596] (syz.1.7655,21596,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 730.070167][T21596] JBD2: Ignoring recovery information on journal [ 730.087502][T21647] netlink: 'syz.2.7676': attribute type 21 has an invalid length. [ 730.113798][T21647] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7676'. [ 730.123041][T21647] netlink: 'syz.2.7676': attribute type 1 has an invalid length. [ 730.210285][T21596] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 730.235998][T21596] (syz.1.7655,21596,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 730.351597][T21658] loop3: detected capacity change from 0 to 256 [ 730.430194][T21596] (syz.1.7655,21596,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 730.490106][T21658] FAT-fs (loop3): Directory bread(block 64) failed [ 730.516684][T21596] (syz.1.7655,21596,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 730.527298][T21658] FAT-fs (loop3): Directory bread(block 65) failed [ 730.546480][T21596] (syz.1.7655,21596,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 730.552606][T21658] FAT-fs (loop3): Directory bread(block 66) failed [ 730.581188][T21596] (syz.1.7655,21596,1):ocfs2_quota_read:201 ERROR: status = -5 [ 730.614337][T21658] FAT-fs (loop3): Directory bread(block 67) failed [ 730.620979][T21658] FAT-fs (loop3): Directory bread(block 68) failed [ 730.640111][T21596] (syz.1.7655,21596,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 730.666232][T21658] FAT-fs (loop3): Directory bread(block 69) failed [ 730.678895][T21658] FAT-fs (loop3): Directory bread(block 70) failed [ 730.714040][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 730.720942][T21658] FAT-fs (loop3): Directory bread(block 71) failed [ 730.750411][T21658] FAT-fs (loop3): Directory bread(block 72) failed [ 730.760089][T21658] FAT-fs (loop3): Directory bread(block 73) failed [ 730.988611][T21658] attempt to access beyond end of device [ 730.988611][T21658] loop3: rw=524288, want=1196, limit=256 [ 731.043544][T21658] attempt to access beyond end of device [ 731.043544][T21658] loop3: rw=0, want=1196, limit=256 [ 731.186392][T21692] loop2: detected capacity change from 0 to 4096 [ 731.315576][T21705] loop3: detected capacity change from 0 to 512 [ 731.336757][T21692] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 731.392043][T21692] ntfs3: loop2: Failed to load $Extend. [ 731.421299][T21705] EXT4-fs (loop3): 1 truncate cleaned up [ 731.449572][T21705] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 731.728094][T21724] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=26504, location=26504 [ 731.802702][T21724] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 731.857028][T21733] dlm: plock device version mismatch: kernel (1.2.0), user (1.32.0) [ 732.064304][T21737] EXT4-fs (loop1): Ignoring removed bh option [ 732.078107][T21737] EXT4-fs (loop1): inline encryption not supported [ 732.117319][T21737] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 732.138205][T21737] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.7717: lblock 2 mapped to illegal pblock 2 (length 1) [ 732.163791][T21737] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.7717: lblock 0 mapped to illegal pblock 48 (length 1) [ 732.184318][T21737] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.7717: Failed to acquire dquot type 0 [ 732.277878][T21737] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 732.298940][T21737] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.7717: mark_inode_dirty error [ 732.365504][T21757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7728'. [ 732.385776][T21737] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 732.424275][T21737] EXT4-fs (loop1): 1 orphan inode deleted [ 732.442051][T21737] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 732.447018][ T400] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 732.592476][ T400] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:3: Failed to release dquot type 0 [ 732.594797][T21737] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm syz.1.7717: lblock 1 mapped to illegal pblock 1 (length 1) [ 732.788080][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7732'. [ 732.829847][ T4185] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 732.843722][T21770] openvswitch: netlink: Actions may not be safe on all matching packets [ 732.898074][ T4185] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 732.906266][T21776] ieee802154 phy0 wpan0: encryption failed: -90 [ 732.937999][ T4185] EXT4-fs error (device loop1): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 733.035315][T21786] netlink: 'syz.0.7742': attribute type 11 has an invalid length. [ 733.119906][T21791] set_capacity_and_notify: 2 callbacks suppressed [ 733.119922][T21791] loop3: detected capacity change from 0 to 1024 [ 733.312477][ T144] hfsplus: b-tree write err: -5, ino 25 [ 733.319135][ T144] hfsplus: b-tree write err: -5, ino 4 [ 733.324054][T21803] QAT: Device 7 not found [ 733.335661][ T144] hfsplus: b-tree write err: -5, ino 2 [ 733.616144][T21826] loop4: detected capacity change from 0 to 64 [ 733.820424][ T4718] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 733.953981][T21837] loop0: detected capacity change from 0 to 2048 [ 733.987873][T21837] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=26504, location=26504 [ 734.078142][T21837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 734.258511][ T4718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 734.370104][ T4718] usb 2-1: config 74 has an invalid interface number: 240 but max is 0 [ 734.390609][T21871] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7783'. [ 734.399935][ T4718] usb 2-1: config 74 has no interface number 0 [ 734.411435][T21872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7782'. [ 734.422686][T21874] loop3: detected capacity change from 0 to 256 [ 734.429059][ T4718] usb 2-1: config 74 interface 240 has no altsetting 0 [ 734.501375][T21877] affs: No valid root block on device nbd2 [ 734.515995][T21874] FAT-fs (loop3): Directory bread(block 64) failed [ 734.536333][T21874] FAT-fs (loop3): Directory bread(block 65) failed [ 734.542979][T21874] FAT-fs (loop3): Directory bread(block 66) failed [ 734.584698][T21874] FAT-fs (loop3): Directory bread(block 67) failed [ 734.593765][T21874] FAT-fs (loop3): Directory bread(block 68) failed [ 734.617978][T21874] FAT-fs (loop3): Directory bread(block 69) failed [ 734.625482][T21874] FAT-fs (loop3): Directory bread(block 70) failed [ 734.632250][T21874] FAT-fs (loop3): Directory bread(block 71) failed [ 734.639374][T21874] FAT-fs (loop3): Directory bread(block 72) failed [ 734.652620][T21874] FAT-fs (loop3): Directory bread(block 73) failed [ 734.686167][ T4718] usb 2-1: string descriptor 0 read error: -22 [ 734.696570][ T4718] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 734.748885][ T4718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.775773][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 734.775787][ T26] audit: type=1800 audit(2000561486.161:40): pid=21874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7784" name="file2" dev="loop3" ino=1048595 res=0 errno=0 [ 734.858742][ T4718] net1080: probe of 2-1:74.240 failed with error -22 [ 735.108522][T21912] loop4: detected capacity change from 0 to 256 [ 735.130067][ T4718] usb 2-1: USB disconnect, device number 48 [ 735.261299][T21912] FAT-fs (loop4): Directory bread(block 64) failed [ 735.281773][T21912] FAT-fs (loop4): Directory bread(block 65) failed [ 735.295652][T21912] FAT-fs (loop4): Directory bread(block 66) failed [ 735.302238][T21912] FAT-fs (loop4): Directory bread(block 67) failed [ 735.346048][T21912] FAT-fs (loop4): Directory bread(block 68) failed [ 735.376223][T21912] FAT-fs (loop4): Directory bread(block 69) failed [ 735.408913][T21912] FAT-fs (loop4): Directory bread(block 70) failed [ 735.437291][T21912] FAT-fs (loop4): Directory bread(block 71) failed [ 735.459578][T21912] FAT-fs (loop4): Directory bread(block 72) failed [ 735.493503][T21912] FAT-fs (loop4): Directory bread(block 73) failed [ 735.611023][T21927] loop2: detected capacity change from 0 to 128 [ 735.623152][T21912] attempt to access beyond end of device [ 735.623152][T21912] loop4: rw=524288, want=1196, limit=256 [ 735.662087][T21912] attempt to access beyond end of device [ 735.662087][T21912] loop4: rw=0, want=1196, limit=256 [ 735.691120][ T26] audit: type=1800 audit(2000561487.022:41): pid=21912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7803" name="file1" dev="loop4" ino=1048596 res=0 errno=0 [ 735.753580][T21931] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 735.766589][T21927] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 735.878665][ T4186] sysv_free_block: flc_count > flc_size [ 735.918219][ T4186] sysv_free_block: flc_count > flc_size [ 735.923805][ T4186] sysv_free_block: flc_count > flc_size [ 735.938853][ T4186] sysv_free_block: flc_count > flc_size [ 735.958205][ T5223] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 735.966703][ T4186] sysv_free_block: flc_count > flc_size [ 735.990450][ T4186] sysv_free_block: flc_count > flc_size [ 736.000974][ T4186] sysv_free_block: flc_count > flc_size [ 736.012083][ T4186] sysv_free_block: flc_count > flc_size [ 736.040472][ T4186] sysv_free_block: flc_count > flc_size [ 736.064402][ T4186] sysv_free_block: flc_count > flc_size [ 736.087920][ T4186] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 736.217604][T21954] loop4: detected capacity change from 0 to 64 [ 736.236432][ T5223] usb 4-1: Using ep0 maxpacket: 8 [ 736.345295][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7827'. [ 736.369630][ T5223] usb 4-1: unable to get BOS descriptor or descriptor too short [ 736.466806][T21972] loop2: detected capacity change from 0 to 256 [ 736.497325][ T5223] usb 4-1: config 1 has an invalid interface number: 6 but max is 2 [ 736.516427][ T5223] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 736.564013][ T5223] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 736.594333][ T5223] usb 4-1: config 1 has no interface number 3 [ 736.597298][T21972] FAT-fs (loop2): Directory bread(block 64) failed [ 736.617658][T21972] FAT-fs (loop2): Directory bread(block 65) failed [ 736.624880][T21972] FAT-fs (loop2): Directory bread(block 66) failed [ 736.637517][T21972] FAT-fs (loop2): Directory bread(block 67) failed [ 736.642748][ T5223] usb 4-1: too many endpoints for config 1 interface 6 altsetting 29: 147, using maximum allowed: 30 [ 736.644597][T21972] FAT-fs (loop2): Directory bread(block 68) failed [ 736.668875][T21972] FAT-fs (loop2): Directory bread(block 69) failed [ 736.677056][T21972] FAT-fs (loop2): Directory bread(block 70) failed [ 736.683770][T21972] FAT-fs (loop2): Directory bread(block 71) failed [ 736.687621][ T5223] usb 4-1: config 1 interface 6 altsetting 29 has an invalid endpoint descriptor of length 4, skipping [ 736.695175][T21972] FAT-fs (loop2): Directory bread(block 72) failed [ 736.704111][T21974] loop0: detected capacity change from 0 to 4096 [ 736.713598][T21972] FAT-fs (loop2): Directory bread(block 73) failed [ 736.714895][ T5223] usb 4-1: config 1 interface 6 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 147 [ 736.750054][ T5223] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 202, changing to 7 [ 736.770612][ T5223] usb 4-1: config 1 interface 6 has no altsetting 0 [ 736.777886][ T5223] usb 4-1: config 1 interface 1 has no altsetting 0 [ 736.813475][T21974] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 736.875540][ T26] audit: type=1800 audit(2000561488.126:42): pid=21972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7832" name="file2" dev="loop2" ino=1048597 res=0 errno=0 [ 736.888116][ T4718] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 737.089889][T21992] loop4: detected capacity change from 0 to 64 [ 737.097914][ T5223] usb 4-1: string descriptor 0 read error: -22 [ 737.118354][ T5223] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 737.155355][ T5223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.184861][T21998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7845'. [ 737.199628][ T4718] usb 2-1: Using ep0 maxpacket: 32 [ 737.201448][T21998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7845'. [ 737.241308][ T5223] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 737.259066][ T5223] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 737.268053][ T5223] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 737.280126][T21998] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7845'. [ 737.326587][ T4718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.476492][T22010] netlink: 'syz.0.7851': attribute type 21 has an invalid length. [ 737.525696][ T4718] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 737.539416][T22010] IPv6: NLM_F_CREATE should be specified when creating new route [ 737.566094][ T4718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.585142][ T4718] usb 2-1: Product: syz [ 737.589988][ T4718] usb 2-1: Manufacturer: syz [ 737.595095][ T4718] usb 2-1: SerialNumber: syz [ 737.624043][T22014] overlayfs: missing 'lowerdir' [ 737.642830][T22012] FAT-fs (loop4): Directory bread(block 64) failed [ 737.649392][ T4718] usb 2-1: config 0 descriptor?? [ 737.684459][T22012] FAT-fs (loop4): Directory bread(block 65) failed [ 737.691739][ T4718] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 737.699398][T22012] FAT-fs (loop4): Directory bread(block 66) failed [ 737.733030][T22012] FAT-fs (loop4): Directory bread(block 67) failed [ 737.739688][T22012] FAT-fs (loop4): Directory bread(block 68) failed [ 737.793217][T22012] FAT-fs (loop4): Directory bread(block 69) failed [ 737.800346][T22012] FAT-fs (loop4): Directory bread(block 70) failed [ 737.814618][ T4436] usb 4-1: USB disconnect, device number 60 [ 737.831481][T22012] FAT-fs (loop4): Directory bread(block 71) failed [ 737.844776][T22012] FAT-fs (loop4): Directory bread(block 72) failed [ 737.853616][T22012] FAT-fs (loop4): Directory bread(block 73) failed [ 737.866069][T22022] ipt_REJECT: TCP_RESET invalid for non-tcp [ 737.925205][ T4718] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 737.933079][ T4718] quatech2: probe of 2-1:0.0 failed with error -8 [ 737.946161][ T26] audit: type=1800 audit(2000561489.127:43): pid=22012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7852" name="file2" dev="loop4" ino=1048598 res=0 errno=0 [ 738.222411][ T4173] usb 2-1: USB disconnect, device number 49 [ 738.498677][T22053] set_capacity_and_notify: 4 callbacks suppressed [ 738.498693][T22053] loop0: detected capacity change from 0 to 256 [ 738.579235][T22048] SQUASHFS error: zstd decompression error: 2 [ 738.589576][T22048] SQUASHFS error: zstd decompression failed, data probably corrupt [ 738.609699][T22048] SQUASHFS error: Failed to read block 0x62b: -5 [ 738.616307][T22048] SQUASHFS error: Unable to read metadata cache entry [629] [ 738.627216][T22060] mip6: mip6_rthdr_init_state: spi is not 0: 655360 [ 738.630689][T22048] SQUASHFS error: Unable to read directory block [629:ff26] [ 738.895089][T22078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7885'. [ 738.948569][T22078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7885'. [ 739.278967][T22114] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 739.368381][ T4718] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 739.433460][T22128] xt_hashlimit: max too large, truncated to 1048576 [ 739.442432][T22128] xt_limit: Overflow, try lower: 0/0 [ 739.732913][T22141] netlink: 'syz.2.7916': attribute type 1 has an invalid length. [ 739.762512][ T4718] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 739.779324][ T4718] usb 1-1: config 0 has no interface number 0 [ 739.796569][T22141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7916'. [ 739.814629][ T4718] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 739.853358][ T4718] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 739.871013][ T5313] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 739.976096][T22147] netlink: 'syz.4.7919': attribute type 2 has an invalid length. [ 739.993900][T22147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7919'. [ 740.023928][T22144] loop3: detected capacity change from 0 to 4096 [ 740.074293][ T4718] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 740.097559][T22144] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 740.128405][ T4718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.138138][ T4718] usb 1-1: Product: syz [ 740.143003][ T4718] usb 1-1: Manufacturer: syz [ 740.147959][ T4718] usb 1-1: SerialNumber: syz [ 740.153546][T22144] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 740.166545][ T5313] usb 2-1: Using ep0 maxpacket: 16 [ 740.190135][T22144] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 740.191351][ T4718] usb 1-1: config 0 descriptor?? [ 740.212983][ T5313] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 740.223110][T22144] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 740.237077][T22096] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 740.245236][T22144] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 740.258349][ T4718] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 740.301574][ T4718] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 740.321393][T22144] ntfs: volume version 3.1. [ 740.351073][T22144] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 740.394250][T22144] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 740.448928][T22144] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 740.485499][T22144] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 740.500171][T22171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7931'. [ 740.516711][T22144] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 740.555853][T22144] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 740.712682][ T4718] usb 1-1: USB disconnect, device number 54 [ 740.733738][ T4718] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 740.745302][ T4718] cyberjack 1-1:0.69: device disconnected [ 740.764166][ T5223] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 740.946329][T22194] loop3: detected capacity change from 0 to 2048 [ 740.968506][T22194] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 741.015329][T22200] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 741.015905][T22194] attempt to access beyond end of device [ 741.015905][T22194] loop3: rw=524288, want=33554432, limit=2048 [ 741.038104][ T5313] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 741.064351][ T5223] usb 5-1: Using ep0 maxpacket: 16 [ 741.068384][ T5313] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 741.082194][ T5313] usb 2-1: Product: syz [ 741.092455][ T5313] usb 2-1: Manufacturer: syz [ 741.098831][ T5313] r8152-cfgselector 2-1: config 0 descriptor?? [ 741.213674][ T5223] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 741.233639][ T5223] usb 5-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 741.257708][ T5223] usb 5-1: config 0 has no interface number 0 [ 741.276660][T22194] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 16777227 [ 741.286406][T22194] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 741.300449][T22194] Remounting filesystem read-only [ 741.323245][T22194] NILFS (loop3): error -5 truncating bmap (ino=16) [ 741.332958][T22215] openvswitch: netlink: Actions may not be safe on all matching packets [ 741.432504][ T4187] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 741.442932][ T5223] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 741.448878][ T5313] r8152-cfgselector 2-1: bad CDC descriptors [ 741.452035][ T5223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.474780][ T5313] r8152-cfgselector 2-1: Unknown version 0x0000 [ 741.481238][ T5223] usb 5-1: Product: syz [ 741.482213][ T5313] r8152-cfgselector 2-1: bad CDC descriptors [ 741.486470][ T5223] usb 5-1: Manufacturer: syz [ 741.505151][ T5223] usb 5-1: SerialNumber: syz [ 741.508713][T22222] loop0: detected capacity change from 0 to 1024 [ 741.517669][ T5223] usb 5-1: config 0 descriptor?? [ 741.518852][ T5313] r8152-cfgselector 2-1: Unknown version 0x0000 [ 741.531284][ T5313] r8152-cfgselector 2-1: USB disconnect, device number 50 [ 741.656186][ T4718] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 741.853848][T22239] loop3: detected capacity change from 0 to 512 [ 741.866454][ T5223] usb 5-1: USB disconnect, device number 51 [ 741.910228][T22244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 741.923756][ T4718] usb 3-1: Using ep0 maxpacket: 16 [ 741.933874][T22239] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 741.970799][T22239] ext4 filesystem being mounted at /1625/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 742.058977][T22253] device wireguard0 entered promiscuous mode [ 742.154766][T22260] Unsupported ieee802154 address type: 0 [ 742.233765][ T4718] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 742.263269][ T4718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.283620][ T4718] usb 3-1: Product: syz [ 742.287971][ T4718] usb 3-1: Manufacturer: syz [ 742.292583][ T4718] usb 3-1: SerialNumber: syz [ 742.330474][ T4718] r8152-cfgselector 3-1: config 0 descriptor?? [ 742.441291][T22278] loop3: detected capacity change from 0 to 4096 [ 742.488579][T22282] loop1: detected capacity change from 0 to 1024 [ 742.517770][T22278] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 742.583207][T22282] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 742.627738][T22282] hfsplus: xattr searching failed [ 742.748114][T22294] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7986'. [ 742.843071][ T4718] r8152-cfgselector 3-1: Unknown version 0x0000 [ 742.860682][T22298] loop1: detected capacity change from 0 to 1024 [ 742.865195][ T4718] r8152-cfgselector 3-1: USB disconnect, device number 59 [ 743.710581][T22362] loop1: detected capacity change from 0 to 64 [ 743.933616][T22371] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 744.189365][T22381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8029'. [ 744.217593][T22348] loop4: detected capacity change from 0 to 32768 [ 744.224818][T22381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8029'. [ 744.318299][ T4718] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 744.335324][T22348] (syz.4.8013,22348,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 744.365902][T22348] (syz.4.8013,22348,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 744.395045][T22348] JBD2: Ignoring recovery information on journal [ 744.442419][T22348] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 744.584030][ T4184] ocfs2: Unmounting device (7,4) on (node local) [ 744.596208][ T7] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 744.649841][T22400] xt_TCPMSS: Only works on TCP SYN packets [ 744.730206][ T4718] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 744.747720][T22402] netlink: 'syz.1.8040': attribute type 1 has an invalid length. [ 744.763249][ T4718] usb 1-1: config 0 has no interface number 0 [ 744.774094][ T4718] usb 1-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 744.787973][ T4718] usb 1-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 744.815413][T22404] loop2: detected capacity change from 0 to 2048 [ 744.837299][ T4718] usb 1-1: config 0 interface 110 has no altsetting 0 [ 744.877467][T22404] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 744.902358][T22406] loop1: detected capacity change from 0 to 4096 [ 744.930736][T22404] attempt to access beyond end of device [ 744.930736][T22404] loop2: rw=524288, want=33554432, limit=2048 [ 744.931858][T22409] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 744.961456][T22406] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 744.980223][T22404] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 16777227 [ 744.991807][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 745.002134][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 745.005808][T22404] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 745.013198][ T4718] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 745.043690][ T4718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.061602][T22404] Remounting filesystem read-only [ 745.080326][ T4718] usb 1-1: Product: syz [ 745.086232][T22404] NILFS (loop2): error -5 truncating bmap (ino=16) [ 745.092825][ T4718] usb 1-1: Manufacturer: syz [ 745.092846][ T4718] usb 1-1: SerialNumber: syz [ 745.096952][ T4718] usb 1-1: config 0 descriptor?? [ 745.120109][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 745.150106][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 745.184039][ T5223] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 745.192321][ T4186] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 745.248423][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 745.263505][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 745.398760][ T4718] cdc_subset: probe of 1-1:0.110 failed with error -22 [ 745.411763][T22419] netlink: 'syz.2.8047': attribute type 1 has an invalid length. [ 745.440981][ T7] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 745.456051][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.479497][ T7] usb 4-1: Product: syz [ 745.489696][ T7] usb 4-1: Manufacturer: syz [ 745.496014][T22424] netlink: 'syz.1.8050': attribute type 1 has an invalid length. [ 745.504150][ T7] usb 4-1: SerialNumber: syz [ 745.512486][ T7] usb 4-1: config 0 descriptor?? [ 745.570956][ T7] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 745.584126][ T7] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 745.634761][T22432] loop1: detected capacity change from 0 to 1024 [ 745.646758][ T5223] usb 5-1: config 5 has an invalid interface number: 182 but max is 0 [ 745.664010][ T5223] usb 5-1: config 5 has no interface number 0 [ 745.678152][ T7] usb 1-1: USB disconnect, device number 55 [ 745.702767][ T5223] usb 5-1: config 5 interface 182 altsetting 1 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 745.714299][ T5223] usb 5-1: config 5 interface 182 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 745.725558][ T5223] usb 5-1: config 5 interface 182 has no altsetting 0 [ 745.784422][ T5313] usb 4-1: USB disconnect, device number 61 [ 745.911120][ T4173] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 745.932722][ T5223] usb 5-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=38.5e [ 745.954158][ T5223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.957117][T22444] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.8059'. [ 745.962183][ T5223] usb 5-1: Product: syz [ 745.962204][ T5223] usb 5-1: Manufacturer: syz [ 745.962218][ T5223] usb 5-1: SerialNumber: syz [ 746.255751][T22452] binder: 22451:22452 unknown command 1077961712 [ 746.262100][T22452] binder: 22451:22452 ioctl c0306201 200000000480 returned -22 [ 746.308598][ T5223] radio-si470x 5-1:5.182: could not find interrupt in endpoint [ 746.316237][ T5223] radio-si470x: probe of 5-1:5.182 failed with error -5 [ 746.338821][ T4173] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 746.358902][ T4173] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 746.376190][ T5223] usbhid 5-1:5.182: couldn't find an input interrupt endpoint [ 746.384441][ T4173] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.407591][ T5223] usb 5-1: USB disconnect, device number 52 [ 746.417087][ T4440] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 746.434991][ T4173] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 746.457430][ T4173] usb 3-1: config 1 has no interface number 0 [ 746.463801][ T4173] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 746.493045][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.565657][ T4173] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 746.634825][T22466] loop3: detected capacity change from 0 to 4096 [ 746.661896][T22472] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8073'. [ 746.691549][T22474] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 746.702224][T22466] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 746.771015][T22466] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 746.800608][ T4173] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 746.817370][ T4173] snd_usb_pod 3-1:1.1: invalid control EP [ 746.831546][ T4173] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 746.849136][ T4173] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 746.873154][ T4440] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 746.882090][ T4440] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 746.903098][ T4173] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 746.917163][ T4440] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 746.917194][ T4440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.985321][ T4440] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 747.023937][ T4718] usb 3-1: USB disconnect, device number 60 [ 747.079926][T22490] netlink: 'syz.0.8082': attribute type 2 has an invalid length. [ 747.079948][T22490] netlink: 'syz.0.8082': attribute type 8 has an invalid length. [ 747.079962][T22490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8082'. [ 747.451176][ T4440] gspca_sn9c2028: read1 error -71 [ 747.482675][ T4440] gspca_sn9c2028: read1 error -71 [ 747.483906][T22506] loop3: detected capacity change from 0 to 4096 [ 747.487783][ T4440] sn9c2028: probe of 2-1:220.0 failed with error -71 [ 747.520229][T22506] __ntfs_error: 5 callbacks suppressed [ 747.520246][T22506] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 747.523351][ T4440] usb 2-1: USB disconnect, device number 51 [ 747.552109][T22506] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 747.567701][T22506] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 747.653700][T22506] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 747.690726][T22506] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 747.708325][T22506] ntfs: volume version 3.1. [ 747.717090][T22506] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 747.726106][ T4173] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 747.734427][T22506] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 747.748285][T22506] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 747.842637][T22506] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 747.882766][T22506] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 747.913486][T22520] dlm: Unknown command passed to DLM device : 132 [ 747.913486][T22520] [ 748.102281][T22528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 748.141085][T22528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 748.160607][T22528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 748.188521][ T4173] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 748.202603][ T4173] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 748.220702][ T4173] usb 5-1: config 220 has no interface number 2 [ 748.224985][T22535] loop2: detected capacity change from 0 to 1024 [ 748.228440][ T4173] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 748.269043][ T4173] usb 5-1: config 220 interface 0 has no altsetting 0 [ 748.281621][ T4173] usb 5-1: config 220 interface 76 has no altsetting 0 [ 748.298921][T22535] EXT4-fs (loop2): inline encryption not supported [ 748.316491][T22535] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 748.343411][ T4173] usb 5-1: config 220 interface 1 has no altsetting 0 [ 748.451368][T22537] loop3: detected capacity change from 0 to 4096 [ 748.459674][T22535] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,debug_want_extra_isize=0x000000000000005c,grpquota,noblock_validity,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback. [ 748.488033][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.516161][T22537] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 748.534371][T22535] EXT4-fs error (device loop2): __ext4_new_inode:1076: comm syz.2.8104: reserved inode found cleared - inode=18 [ 748.552335][ T4173] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 748.598798][T22535] EXT4-fs (loop2): Remounting filesystem read-only [ 748.605561][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.613605][ T4173] usb 5-1: Product: syz [ 748.655409][ T4173] usb 5-1: Manufacturer: syz [ 748.679970][ T4173] usb 5-1: SerialNumber: syz [ 748.713143][T22554] netlink: 'syz.1.8112': attribute type 1 has an invalid length. [ 748.966835][T22564] loop3: detected capacity change from 0 to 764 [ 749.031818][T22564] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 749.075869][ T4173] usb 5-1: selecting invalid altsetting 0 [ 749.082196][ T4173] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 749.099933][ T4173] usb 5-1: No valid video chain found. [ 749.196505][ T4173] usb 5-1: selecting invalid altsetting 0 [ 749.202377][ T4173] usbtest: probe of 5-1:220.1 failed with error -22 [ 749.221017][T22568] loop2: detected capacity change from 0 to 4096 [ 749.261259][ T4173] usb 5-1: USB disconnect, device number 53 [ 749.301866][T22568] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 749.611289][T22556] (syz.0.8114,22556,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 749.647696][T22556] (syz.0.8114,22556,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 749.660472][T22588] set_capacity_and_notify: 1 callbacks suppressed [ 749.660488][T22588] loop1: detected capacity change from 0 to 512 [ 749.750389][T22592] loop2: detected capacity change from 0 to 4096 [ 749.759772][T22556] JBD2: Ignoring recovery information on journal [ 749.832493][T22588] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8130: bg 0: block 473: padding at end of block bitmap is not set [ 749.858029][T22592] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 749.866796][T22556] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 749.913676][T22588] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 749.933457][T22592] ntfs3: loop2: Failed to load $Extend. [ 749.952922][T22588] EXT4-fs (loop1): 1 orphan inode deleted [ 749.958700][T22588] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 749.997043][T22588] ext4 filesystem being mounted at /1418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.053506][T22588] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.8130: Failed to acquire dquot type 1 [ 750.191912][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 750.293858][T22607] netlink: 'syz.4.8137': attribute type 1 has an invalid length. [ 750.337133][T22607] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8137'. [ 750.375127][T22607] NCSI netlink: No device for ifindex 0 [ 750.609679][T22626] loop0: detected capacity change from 0 to 64 [ 750.635609][T22617] loop1: detected capacity change from 0 to 4096 [ 750.712007][T22617] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 750.720706][T22631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8148'. [ 750.775283][ T4173] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 750.812029][T22635] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8150'. [ 750.818041][T22617] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 750.885552][T22635] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 751.053240][ T4173] usb 4-1: Using ep0 maxpacket: 32 [ 751.068916][T22648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8154'. [ 751.084665][T22648] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8154'. [ 751.167872][T22655] loop1: detected capacity change from 0 to 256 [ 751.195998][T22655] exfat: Deprecated parameter 'utf8' [ 751.213773][ T4173] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.230470][T22655] exfat: Deprecated parameter 'namecase' [ 751.243448][ T4173] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.243634][T22655] exfat: Deprecated parameter 'namecase' [ 751.270617][T22659] netlink: 'syz.2.8162': attribute type 15 has an invalid length. [ 751.283972][T22659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8162'. [ 751.298238][T22655] exfat: Deprecated parameter 'utf8' [ 751.302444][T22651] loop0: detected capacity change from 0 to 4096 [ 751.339699][T22655] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 751.404720][T22651] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 751.470343][ T4173] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 751.490338][ T4173] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 751.515504][T22667] loop2: detected capacity change from 0 to 2048 [ 751.532323][ T4173] usb 4-1: Product: syz [ 751.564105][ T4173] usb 4-1: Manufacturer: syz [ 751.571682][T22667] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 751.620219][T22667] NILFS (loop2): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 751.646358][ T4173] hub 4-1:4.0: USB hub found [ 751.656499][T22665] loop4: detected capacity change from 0 to 4096 [ 751.689745][T22671] loop0: detected capacity change from 0 to 4096 [ 751.716860][T22665] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 751.764327][T22671] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 751.870593][T22665] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 751.876468][ T4173] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 751.902128][T22675] netlink: 'syz.2.8170': attribute type 3 has an invalid length. [ 752.046345][T22681] kAFS: No cell specified [ 752.186489][T22689] loop0: detected capacity change from 0 to 256 [ 752.198145][T22691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8177'. [ 752.235943][T22689] exfat: Deprecated parameter 'utf8' [ 752.239975][ T5223] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 752.248863][T22689] exfat: Deprecated parameter 'namecase' [ 752.261046][ T4173] usb 4-1: USB disconnect, device number 62 [ 752.269744][T22689] exfat: Deprecated parameter 'namecase' [ 752.276585][T22691] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 752.309259][T22689] exfat: Deprecated parameter 'utf8' [ 752.318145][T22691] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 752.330623][T22691] device bridge1 entered promiscuous mode [ 752.357750][T22689] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 752.528616][ T5223] usb 2-1: Using ep0 maxpacket: 16 [ 752.690999][T22713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8189'. [ 752.721223][ T5223] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 752.919144][ T5223] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 752.954924][ T5223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.968788][ T5223] usb 2-1: Product: syz [ 752.973504][ T5223] usb 2-1: Manufacturer: syz [ 752.979563][ T5223] usb 2-1: SerialNumber: syz [ 752.986098][ T5223] usb 2-1: config 0 descriptor?? [ 753.010066][T22677] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 753.024712][ T4235] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 753.049792][ T5223] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 753.223493][ T5313] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 753.308925][ T4235] usb 3-1: Using ep0 maxpacket: 8 [ 753.324449][ T5223] usb 2-1: USB disconnect, device number 52 [ 753.330490][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 753.330595][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 753.348552][ T5223] mcba_usb 2-1:0.0 can0: device disconnected [ 753.448775][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 753.475507][ T4235] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 753.677236][ T4235] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 753.697062][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.720200][ T4235] usb 3-1: Product: syz [ 753.724431][ T4235] usb 3-1: Manufacturer: syz [ 753.732190][T22773] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 753.759496][ T4235] usb 3-1: SerialNumber: syz [ 753.780035][ T4235] usb 3-1: config 0 descriptor?? [ 753.790299][ T5313] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 753.799400][ T5313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.843470][ T5313] usb 4-1: Product: syz [ 753.847718][ T5313] usb 4-1: Manufacturer: syz [ 753.873783][ T5313] usb 4-1: SerialNumber: syz [ 753.889431][ T5313] usb 4-1: config 0 descriptor?? [ 753.897497][T22780] exfat: Deprecated parameter 'utf8' [ 753.902889][T22780] exfat: Deprecated parameter 'namecase' [ 753.935437][T22780] exfat: Deprecated parameter 'namecase' [ 753.956972][T22780] exfat: Deprecated parameter 'utf8' [ 754.031996][T22780] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 754.166395][ T5313] mos7840 4-1:0.0: required endpoints missing [ 754.310023][ T4235] usb 3-1: USB disconnect, device number 61 [ 754.384257][ T5223] usb 4-1: USB disconnect, device number 63 [ 754.447494][T22806] netlink: 'syz.0.8223': attribute type 16 has an invalid length. [ 754.459439][T22806] netlink: 'syz.0.8223': attribute type 3 has an invalid length. [ 754.472505][T22806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8223'. [ 754.700255][T22812] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 754.747520][T22813] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 754.758863][T10009] udevd[10009]: incorrect nilfs2 checksum on /dev/loop0 [ 755.083676][T22827] device lo entered promiscuous mode [ 755.126135][T22827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 755.390938][T22845] set_capacity_and_notify: 5 callbacks suppressed [ 755.390955][T22845] loop4: detected capacity change from 0 to 256 [ 755.529439][T22845] FAT-fs (loop4): Directory bread(block 64) failed [ 755.539863][T22854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8245'. [ 755.555039][T22845] FAT-fs (loop4): Directory bread(block 65) failed [ 755.574958][T22845] FAT-fs (loop4): Directory bread(block 66) failed [ 755.638469][T22845] FAT-fs (loop4): Directory bread(block 67) failed [ 755.660858][T22845] FAT-fs (loop4): Directory bread(block 68) failed [ 755.667767][T22845] FAT-fs (loop4): Directory bread(block 69) failed [ 755.746597][T22845] FAT-fs (loop4): Directory bread(block 70) failed [ 755.753200][T22845] FAT-fs (loop4): Directory bread(block 71) failed [ 755.799971][T22845] FAT-fs (loop4): Directory bread(block 72) failed [ 755.809156][T22845] FAT-fs (loop4): Directory bread(block 73) failed [ 755.995143][T22845] attempt to access beyond end of device [ 755.995143][T22845] loop4: rw=2051, want=1256, limit=256 [ 756.094998][T22884] loop3: detected capacity change from 0 to 1024 [ 756.166667][T22884] hfsplus: invalid length 32517 has been corrected to 255 [ 756.210699][T22884] hfsplus: invalid length 32517 has been corrected to 255 [ 756.217046][T22888] loop1: detected capacity change from 0 to 4096 [ 756.269199][T22884] hfsplus: invalid length 32517 has been corrected to 255 [ 756.311726][T22884] hfsplus: invalid length 32517 has been corrected to 255 [ 756.331815][T22888] NILFS (loop1): invalid segment: Checksum error in segment payload [ 756.347535][T22888] NILFS (loop1): trying rollback from an earlier position [ 756.431233][ T4247] hfsplus: b-tree write err: -5, ino 4 [ 756.436841][ T4247] hfsplus: b-tree write err: -5, ino 2 [ 756.442616][T22888] NILFS (loop1): recovery complete [ 756.489672][T22893] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 756.719354][ T5223] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 756.722526][T22886] loop2: detected capacity change from 0 to 32768 [ 756.842986][T22886] (syz.2.8260,22886,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 756.865174][T22886] (syz.2.8260,22886,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 756.953984][T22886] JBD2: Ignoring recovery information on journal [ 757.007909][ T5223] usb 5-1: Using ep0 maxpacket: 8 [ 757.094339][T22886] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 757.111508][T22917] device netdevsim0 entered promiscuous mode [ 757.143270][T22917] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8272'. [ 757.179497][T22917] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 757.211367][ T5223] usb 5-1: unable to get BOS descriptor or descriptor too short [ 757.275294][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 757.484919][T22930] netlink: 'syz.1.8280': attribute type 30 has an invalid length. [ 757.514895][ T5223] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 757.522532][T22932] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 757.532989][ T5223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.590561][ T5223] usb 5-1: Product: syz [ 757.596009][ T5223] usb 5-1: Manufacturer: syz [ 757.600636][ T5223] usb 5-1: SerialNumber: syz [ 757.701821][T22944] loop3: detected capacity change from 0 to 64 [ 757.754450][T22948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8287'. [ 757.769805][T22950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8289'. [ 757.902377][T22954] loop1: detected capacity change from 0 to 4096 [ 758.028773][ T5223] usb 5-1: MIDIStreaming interface descriptor not found [ 758.085169][ T5223] usb 5-1: USB disconnect, device number 54 [ 758.092975][T22970] loop0: detected capacity change from 0 to 64 [ 758.226254][T22977] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 758.295032][T22977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 758.584641][ T4340] udevd[4340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 758.753897][T23004] loop4: detected capacity change from 0 to 2048 [ 758.826843][T23004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 758.871389][T23014] loop0: detected capacity change from 0 to 256 [ 758.906578][T23017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8321'. [ 758.969859][T23014] FAT-fs (loop0): Directory bread(block 64) failed [ 758.995547][T23014] FAT-fs (loop0): Directory bread(block 65) failed [ 759.018338][T23014] FAT-fs (loop0): Directory bread(block 66) failed [ 759.025459][T23014] FAT-fs (loop0): Directory bread(block 67) failed [ 759.068718][T23014] FAT-fs (loop0): Directory bread(block 68) failed [ 759.084215][T23014] FAT-fs (loop0): Directory bread(block 69) failed [ 759.105609][T23014] FAT-fs (loop0): Directory bread(block 70) failed [ 759.156831][T23014] FAT-fs (loop0): Directory bread(block 71) failed [ 759.174366][T23014] FAT-fs (loop0): Directory bread(block 72) failed [ 759.191334][T23032] netlink: 'syz.1.8327': attribute type 13 has an invalid length. [ 759.203407][T23014] FAT-fs (loop0): Directory bread(block 73) failed [ 759.254823][T23014] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 759.438137][T23028] loop4: detected capacity change from 0 to 8192 [ 759.543128][T23028] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 759.577171][T23028] REISERFS (device loop4): using ordered data mode [ 759.583732][T23028] reiserfs: using flush barriers [ 759.604330][T23028] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 759.669056][T23028] REISERFS (device loop4): checking transaction log (loop4) [ 759.677908][T23028] REISERFS (device loop4): Using rupasov hash to sort names [ 759.686060][T23028] REISERFS (device loop4): using 3.5.x disk format [ 759.715571][T23028] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 759.763884][T23028] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 759.813197][T23028] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 759.826643][T23062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8342'. [ 759.864214][T23028] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 759.979416][T23028] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 760.044615][T23078] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8349'. [ 760.085490][T23028] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 760.115816][T23028] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 760.206194][T23080] FAT-fs (loop3): Directory bread(block 64) failed [ 760.235841][T23089] xt_nat: multiple ranges no longer supported [ 760.242193][T23080] FAT-fs (loop3): Directory bread(block 65) failed [ 760.261738][T23080] FAT-fs (loop3): Directory bread(block 66) failed [ 760.289905][T23080] FAT-fs (loop3): Directory bread(block 67) failed [ 760.296549][T23080] FAT-fs (loop3): Directory bread(block 68) failed [ 760.324676][T23092] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 760.347501][T23080] FAT-fs (loop3): Directory bread(block 69) failed [ 760.399095][T23080] FAT-fs (loop3): Directory bread(block 70) failed [ 760.405678][T23080] FAT-fs (loop3): Directory bread(block 71) failed [ 760.412843][T23080] FAT-fs (loop3): Directory bread(block 72) failed [ 760.419526][T23080] FAT-fs (loop3): Directory bread(block 73) failed [ 760.438594][T23092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 760.932191][T23120] xt_HMARK: spi-set and port-set can't be combined [ 760.974303][ T4235] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 761.021736][T23128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8373'. [ 761.062154][T23130] set_capacity_and_notify: 2 callbacks suppressed [ 761.062170][T23130] loop1: detected capacity change from 0 to 16 [ 761.084172][T23130] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 761.120710][T23130] cramfs: empty filesystem [ 761.218022][T23136] device ip6gre1 entered promiscuous mode [ 761.255133][T23138] loop1: detected capacity change from 0 to 256 [ 761.338984][T23138] FAT-fs (loop1): Directory bread(block 64) failed [ 761.362391][T23138] FAT-fs (loop1): Directory bread(block 65) failed [ 761.373783][T23138] FAT-fs (loop1): Directory bread(block 66) failed [ 761.381284][T23138] FAT-fs (loop1): Directory bread(block 67) failed [ 761.387935][T23138] FAT-fs (loop1): Directory bread(block 68) failed [ 761.395733][T23138] FAT-fs (loop1): Directory bread(block 69) failed [ 761.396850][ T4235] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 761.423317][ T4235] usb 1-1: config 0 has no interface number 0 [ 761.429577][ T4235] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 761.433495][T23138] FAT-fs (loop1): Directory bread(block 70) failed [ 761.479834][T23138] FAT-fs (loop1): Directory bread(block 71) failed [ 761.487417][T23149] netlink: 'syz.3.8383': attribute type 3 has an invalid length. [ 761.495426][T23138] FAT-fs (loop1): Directory bread(block 72) failed [ 761.498482][ T4235] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 761.516343][T23138] FAT-fs (loop1): Directory bread(block 73) failed [ 761.588545][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 761.588559][ T26] audit: type=1400 audit(2000561511.240:44): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=23150 comm="syz.3.8384" [ 761.701285][ T4235] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 761.739770][ T4235] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 761.748515][ T4235] usb 1-1: Product: syz [ 761.752701][ T4235] usb 1-1: Manufacturer: syz [ 761.799680][ T4235] usb 1-1: SerialNumber: syz [ 761.825487][ T4235] usb 1-1: config 0 descriptor?? [ 761.878814][ T4235] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 761.901491][ T4235] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 761.902211][T23132] loop2: detected capacity change from 0 to 40427 [ 761.913368][ T4235] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 761.933101][ T4235] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 761.990100][T23132] F2FS-fs (loop2): invalid crc value [ 761.999413][ T4235] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 762.012860][T23132] F2FS-fs (loop2): Found nat_bits in checkpoint [ 762.061622][ T4235] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 762.090727][ T4235] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 762.092641][T23132] F2FS-fs (loop2): Start checkpoint disabled! [ 762.114355][ T4235] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 762.117976][ T5223] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 762.135240][ T4235] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 762.169534][T23170] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8392'. [ 762.184755][T23132] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 762.193559][ T4235] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 762.195252][T23170] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8392'. [ 762.239661][ T4235] usb 1-1: USB disconnect, device number 56 [ 762.334200][ T4235] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 762.363910][ T4173] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 762.363960][ T4235] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 762.442147][ T4235] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 762.475548][ T4235] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 762.494865][T23174] loop3: detected capacity change from 0 to 1024 [ 762.508493][ T4235] keyspan 1-1:0.107: device disconnected [ 762.604581][ T5223] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 762.613395][ T5223] usb 2-1: config 0 has no interface number 0 [ 762.619509][ T5223] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 762.633085][ T7026] hfsplus: b-tree write err: -5, ino 25 [ 762.642192][ T7026] hfsplus: b-tree write err: -5, ino 4 [ 762.651600][ T7026] hfsplus: b-tree write err: -5, ino 2 [ 762.661500][ T5223] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 762.791706][ T4173] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 762.822499][ T4173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 762.888197][ T5223] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 762.897373][ T5223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.920057][ T5223] usb 2-1: Product: syz [ 762.924348][ T5223] usb 2-1: Manufacturer: syz [ 762.928955][ T5223] usb 2-1: SerialNumber: syz [ 762.953652][T23194] netlink: 'syz.3.8405': attribute type 1 has an invalid length. [ 762.974533][ T5223] usb 2-1: config 0 descriptor?? [ 763.005928][T23159] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 763.033535][ T5223] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 763.054684][ T5223] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 763.064872][ T4173] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 763.093961][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.109000][ T4173] usb 5-1: Product: syz [ 763.115627][ T4173] usb 5-1: Manufacturer: syz [ 763.120267][ T4173] usb 5-1: SerialNumber: syz [ 763.130248][ T4173] usb 5-1: config 0 descriptor?? [ 763.442419][ T4173] usb 5-1: USB disconnect, device number 55 [ 763.656019][ T5313] usb 2-1: USB disconnect, device number 53 [ 763.679389][ T5313] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 763.725414][T23238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8427'. [ 763.727341][ T5313] cyberjack 2-1:0.69: device disconnected [ 763.757612][T23238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8427'. [ 763.767523][T23240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8428'. [ 763.778838][T23240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8428'. [ 763.789054][T23212] loop3: detected capacity change from 0 to 32768 [ 763.838988][T23212] *** Log Format Error ! *** [ 763.860770][T23212] lmLogInit: exit(-22) [ 763.864904][T23212] lmLogOpen: exit(-22) [ 763.903955][T23212] jfs_mount_rw failed, return code = -22 [ 764.647848][T23299] loop0: detected capacity change from 0 to 128 [ 764.734671][T23299] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 764.769322][T23299] ext4 filesystem being mounted at /1734/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 764.784379][T23259] loop2: detected capacity change from 0 to 32768 [ 764.833523][T23259] (syz.2.8436,23259,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 764.861317][T23259] (syz.2.8436,23259,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 764.961825][T23259] JBD2: Ignoring recovery information on journal [ 765.084241][T23317] IPv6: NLM_F_CREATE should be specified when creating new route [ 765.094783][T23317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.102840][T23317] IPv6: NLM_F_CREATE should be set when creating new route [ 765.121870][T23259] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 765.168217][T23321] xt_ecn: cannot match TCP bits for non-tcp packets [ 765.243839][T23325] loop4: detected capacity change from 0 to 1024 [ 765.268418][T23328] netlink: 'syz.0.8468': attribute type 1 has an invalid length. [ 765.351998][T23325] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 765.464171][T23325] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 765.494438][T23325] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.8467: Failed to acquire dquot type 0 [ 765.546881][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 765.569140][T23325] EXT4-fs (loop4): 1 truncate cleaned up [ 765.588971][T23346] tipc: Can't bind to reserved service type 0 [ 765.588998][T23325] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 765.751315][T23354] loop1: detected capacity change from 0 to 512 [ 765.758973][T23355] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8482'. [ 765.781592][T23325] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 765.822774][T23355] device vlan0 entered promiscuous mode [ 765.849876][T23325] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 765.889232][T23325] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.8467: Failed to acquire dquot type 0 [ 765.916615][T23354] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 766.010631][T23354] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 766.129237][T23367] loop2: detected capacity change from 0 to 256 [ 766.217720][T23367] FAT-fs (loop2): Directory bread(block 64) failed [ 766.255331][T23367] FAT-fs (loop2): Directory bread(block 65) failed [ 766.287610][T23367] FAT-fs (loop2): Directory bread(block 66) failed [ 766.294242][T23367] FAT-fs (loop2): Directory bread(block 67) failed [ 766.316553][T23377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8492'. [ 766.322778][T23367] FAT-fs (loop2): Directory bread(block 68) failed [ 766.343952][T23367] FAT-fs (loop2): Directory bread(block 69) failed [ 766.361634][T23367] FAT-fs (loop2): Directory bread(block 70) failed [ 766.372396][T23367] FAT-fs (loop2): Directory bread(block 71) failed [ 766.389453][T23367] FAT-fs (loop2): Directory bread(block 72) failed [ 766.404957][T23367] FAT-fs (loop2): Directory bread(block 73) failed [ 766.432705][T23373] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #3: comm syz.1.8489: corrupted inode contents [ 766.492191][T23359] set_capacity_and_notify: 1 callbacks suppressed [ 766.492206][T23359] loop3: detected capacity change from 0 to 32768 [ 766.517501][T23373] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #3: comm syz.1.8489: mark_inode_dirty error [ 766.561890][T23373] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #3: comm syz.1.8489: corrupted inode contents [ 766.588708][T23384] loop0: detected capacity change from 0 to 8 [ 766.594920][T23359] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.8484 (23359) [ 766.622111][T23373] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.8489: mark_inode_dirty error [ 766.674726][T23373] Quota error (device loop1): write_blk: dquota write failed [ 766.678305][T23384] SQUASHFS error: lzo decompression failed, data probably corrupt [ 766.682282][T23373] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 766.694926][T23384] SQUASHFS error: Failed to read block 0x0: -5 [ 766.707549][T23384] SQUASHFS error: Unable to read data cache entry [0] [ 766.723121][T23359] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 766.732246][T23373] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.8489: Failed to acquire dquot type 0 [ 766.775151][T23384] SQUASHFS error: Unable to read page, block 0, size ff [ 766.782474][T23359] BTRFS info (device loop3): using free space tree [ 766.789007][T23359] BTRFS info (device loop3): has skinny extents [ 766.806990][T23384] SQUASHFS error: Unable to read data cache entry [0] [ 766.818777][T23373] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.8489: corrupted inode contents [ 766.836130][T23384] SQUASHFS error: Unable to read page, block 0, size ff [ 766.849157][T23373] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #16: comm syz.1.8489: mark_inode_dirty error [ 766.852052][T23384] SQUASHFS error: lzo decompression failed, data probably corrupt [ 766.868806][T23373] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.8489: corrupted inode contents [ 766.888653][T23373] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.8489: mark_inode_dirty error [ 766.900239][T23384] SQUASHFS error: Failed to read block 0x0: -5 [ 766.947020][T23384] SQUASHFS error: lzo decompression failed, data probably corrupt [ 766.955457][T23384] SQUASHFS error: Failed to read block 0x0: -5 [ 766.966806][T23384] SQUASHFS error: lzo decompression failed, data probably corrupt [ 766.985567][T23384] SQUASHFS error: Failed to read block 0x0: -5 [ 766.993862][ T26] audit: type=1800 audit(2000561516.291:45): pid=23384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8494" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 767.003752][T23373] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.8489: corrupted inode contents [ 767.097243][T23373] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 767.139716][T23373] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #16: comm syz.1.8489: corrupted inode contents [ 767.188852][T23373] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.8489: mark_inode_dirty error [ 767.200156][T23359] BTRFS info (device loop3): enabling ssd optimizations [ 767.223087][T23373] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 767.261017][T23373] EXT4-fs (loop1): 1 truncate cleaned up [ 767.266711][T23373] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 767.349929][T23373] ext4 filesystem being mounted at /1473/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.483726][T23429] loop2: detected capacity change from 0 to 1024 [ 767.771108][T23429] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 767.803049][T23443] netlink: 'syz.3.8513': attribute type 10 has an invalid length. [ 767.815609][T23429] hfsplus: xattr searching failed [ 767.888560][T23443] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 767.929705][ T144] hfsplus: b-tree write err: -5, ino 25 [ 767.972463][ T144] hfsplus: b-tree write err: -5, ino 4 [ 767.972709][T23445] i2c i2c-0: Invalid block write size 33 [ 767.986367][ T144] hfsplus: b-tree write err: -5, ino 2 [ 768.008924][ T144] hfsplus: b-tree write err: -5, ino 23 [ 768.041545][ T4173] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 768.146837][T23451] xt_l2tp: v2 sid > 0xffff: 262144 [ 768.208240][T23426] loop0: detected capacity change from 0 to 32768 [ 768.273775][T23426] [ 768.273775][T23426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 768.273775][T23426] [ 768.318554][ T4173] usb 2-1: Using ep0 maxpacket: 8 [ 768.406480][T23426] __jfs_setxattr: xattr_size = 67, new_size = 161 [ 768.487549][ T9] [ 768.487549][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 768.487549][ T9] [ 768.552539][ T9] [ 768.552539][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 768.552539][ T9] [ 768.587657][ T4194] [ 768.587657][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 768.587657][ T4194] [ 768.602831][ T4194] [ 768.602831][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 768.602831][ T4194] [ 768.617683][ T277] [ 768.617683][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 768.617683][ T277] [ 768.650724][ T277] ================================================================== [ 768.659364][ T277] BUG: KASAN: use-after-free in txEnd+0x329/0x520 [ 768.665805][ T277] Write of size 8 at addr ffff8880202b0040 by task jfsCommit/277 [ 768.673525][ T277] [ 768.675865][ T277] CPU: 0 PID: 277 Comm: jfsCommit Not tainted syzkaller #0 [ 768.683069][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.693134][ T277] Call Trace: [ 768.696419][ T277] [ 768.699355][ T277] dump_stack_lvl+0x188/0x250 [ 768.704045][ T277] ? show_regs_print_info+0x20/0x20 [ 768.709252][ T277] ? _printk+0xda/0x130 [ 768.713429][ T277] ? txEnd+0x329/0x520 [ 768.717517][ T277] ? load_image+0x400/0x400 [ 768.722026][ T277] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 768.727511][ T277] print_address_description+0x60/0x2d0 [ 768.733069][ T277] ? txEnd+0x329/0x520 [ 768.737142][ T277] kasan_report+0xdf/0x130 [ 768.741606][ T277] ? txEnd+0x329/0x520 [ 768.745691][ T277] kasan_check_range+0x235/0x290 [ 768.750649][ T277] txEnd+0x329/0x520 [ 768.754560][ T277] jfs_lazycommit+0x5b8/0xb40 [ 768.759254][ T277] ? txFreelock+0x5a0/0x5a0 [ 768.763766][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 768.768886][ T4173] usb 2-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 768.769665][ T277] ? sched_dynamic_update+0x210/0x210 [ 768.784034][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 768.789943][ T277] ? __kthread_parkme+0x157/0x1b0 [ 768.794980][ T277] kthread+0x436/0x520 [ 768.795435][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.799057][ T277] ? txFreelock+0x5a0/0x5a0 [ 768.799079][ T277] ? kthread_blkcg+0xd0/0xd0 [ 768.799099][ T277] ret_from_fork+0x1f/0x30 [ 768.799130][ T277] [ 768.823549][ T277] [ 768.825873][ T277] Allocated by task 23426: [ 768.828945][ T4173] usb 2-1: Product: syz [ 768.830277][ T277] __kasan_kmalloc+0xb5/0xf0 [ 768.830302][ T277] lmLogOpen+0x2c0/0xf90 [ 768.839745][ T4173] usb 2-1: Manufacturer: syz [ 768.843229][ T277] jfs_mount_rw+0xf8/0x5c0 [ 768.843254][ T277] jfs_fill_super+0x5c1/0xb00 [ 768.843267][ T277] mount_bdev+0x287/0x3c0 [ 768.843284][ T277] legacy_get_tree+0xe6/0x180 [ 768.853072][ T4173] usb 2-1: SerialNumber: syz [ 768.856898][ T277] vfs_get_tree+0x88/0x270 [ 768.856923][ T277] do_new_mount+0x24a/0xa40 [ 768.856940][ T277] __se_sys_mount+0x2e3/0x3d0 [ 768.875068][ T4173] usb 2-1: config 0 descriptor?? [ 768.879435][ T277] do_syscall_64+0x4c/0xa0 [ 768.879461][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 768.879481][ T277] [ 768.901635][ T277] Freed by task 4194: [ 768.905609][ T277] kasan_set_track+0x4b/0x70 [ 768.910212][ T277] kasan_set_free_info+0x1f/0x40 [ 768.915161][ T277] ____kasan_slab_free+0xd5/0x110 [ 768.920199][ T277] slab_free_freelist_hook+0xea/0x170 [ 768.925576][ T277] kfree+0xef/0x2a0 [ 768.929396][ T277] lmLogClose+0x293/0x520 [ 768.933727][ T277] jfs_umount+0x28f/0x360 [ 768.938062][ T277] jfs_put_super+0x88/0x190 [ 768.942574][ T277] generic_shutdown_super+0x130/0x300 [ 768.947961][ T277] kill_block_super+0x7c/0xe0 [ 768.952660][ T277] deactivate_locked_super+0x93/0xf0 [ 768.957955][ T277] cleanup_mnt+0x42d/0x4e0 [ 768.962381][ T277] task_work_run+0x125/0x1a0 [ 768.966983][ T277] exit_to_user_mode_loop+0x10f/0x130 [ 768.972360][ T277] exit_to_user_mode_prepare+0xee/0x180 [ 768.977917][ T277] syscall_exit_to_user_mode+0x16/0x40 [ 768.983390][ T277] do_syscall_64+0x58/0xa0 [ 768.987810][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 768.989272][ T4173] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 768.993707][ T277] [ 768.993715][ T277] Last potentially related work creation: [ 768.993721][ T277] kasan_save_stack+0x35/0x60 [ 768.993742][ T277] kasan_record_aux_stack+0xb8/0x100 [ 768.993758][ T277] call_rcu+0x189/0x950 [ 768.993774][ T277] process_one_work+0x85f/0x1010 [ 769.028027][ T277] worker_thread+0xaa6/0x1290 [ 769.032708][ T277] kthread+0x436/0x520 [ 769.036767][ T277] ret_from_fork+0x1f/0x30 [ 769.041186][ T277] [ 769.043496][ T277] Second to last potentially related work creation: [ 769.050062][ T277] kasan_save_stack+0x35/0x60 [ 769.054719][ T277] kasan_record_aux_stack+0xb8/0x100 [ 769.059988][ T277] kvfree_call_rcu+0x105/0x7d0 [ 769.064753][ T277] neigh_remove_one+0x4e8/0x5f0 [ 769.069615][ T277] ___neigh_create+0x468/0x2250 [ 769.074463][ T277] ip6_finish_output2+0x9f6/0x1510 [ 769.079555][ T277] ip6_xmit+0x109b/0x16d0 [ 769.083865][ T277] tcp_v6_send_synack+0x78d/0xb80 [ 769.088872][ T277] tcp_conn_request+0x1d0a/0x28a0 [ 769.093901][ T277] tcp_rcv_state_process+0x13e7/0x4190 [ 769.099361][ T277] tcp_v6_do_rcv+0x8c9/0x1180 [ 769.104043][ T277] tcp_v6_rcv+0x205a/0x26d0 [ 769.108558][ T277] ip6_protocol_deliver_rcu+0x8f6/0x12c0 [ 769.114204][ T277] ip6_input_finish+0xa2/0x130 [ 769.118975][ T277] NF_HOOK+0x303/0x390 [ 769.123048][ T277] NF_HOOK+0x303/0x390 [ 769.127105][ T277] __netif_receive_skb+0xcc/0x290 [ 769.132111][ T277] netif_receive_skb+0x19e/0x700 [ 769.137024][ T277] tun_rx_batched+0x5fb/0x760 [ 769.141686][ T277] tun_get_user+0x2517/0x3a70 [ 769.146364][ T277] tun_chr_write_iter+0x112/0x1e0 [ 769.151386][ T277] vfs_write+0x745/0xd60 [ 769.155613][ T277] ksys_write+0x152/0x260 [ 769.159922][ T277] do_syscall_64+0x4c/0xa0 [ 769.164325][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 769.170199][ T277] [ 769.172504][ T277] The buggy address belongs to the object at ffff8880202b0000 [ 769.172504][ T277] which belongs to the cache kmalloc-1k of size 1024 [ 769.186535][ T277] The buggy address is located 64 bytes inside of [ 769.186535][ T277] 1024-byte region [ffff8880202b0000, ffff8880202b0400) [ 769.199804][ T277] The buggy address belongs to the page: [ 769.205442][ T277] page:ffffea000080ac00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x202b0 [ 769.215606][ T277] head:ffffea000080ac00 order:3 compound_mapcount:0 compound_pincount:0 [ 769.223935][ T277] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 769.231940][ T277] raw: 00fff00000010200 ffffea0001e98000 0000000400000004 ffff888016c41dc0 [ 769.240532][ T277] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 769.249113][ T277] page dumped because: kasan: bad access detected [ 769.255533][ T277] page_owner tracks the page as allocated [ 769.261249][ T277] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4233, ts 58971653304, free_ts 58962410130 [ 769.278358][ T277] get_page_from_freelist+0x1bbd/0x1ca0 [ 769.283907][ T277] __alloc_pages+0x1ee/0x480 [ 769.288488][ T277] new_slab+0xc0/0x4b0 [ 769.292550][ T277] ___slab_alloc+0x80a/0xdd0 [ 769.297136][ T277] __kmalloc+0x1cd/0x330 [ 769.301373][ T277] ___neigh_create+0x6d2/0x2250 [ 769.306231][ T277] ip6_finish_output2+0x9f6/0x1510 [ 769.311339][ T277] NF_HOOK+0x163/0x460 [ 769.315393][ T277] mld_sendpack+0x6f2/0xc00 [ 769.319886][ T277] mld_ifc_work+0x836/0xb40 [ 769.324379][ T277] process_one_work+0x85f/0x1010 [ 769.329306][ T277] worker_thread+0xaa6/0x1290 [ 769.333968][ T277] kthread+0x436/0x520 [ 769.338019][ T277] ret_from_fork+0x1f/0x30 [ 769.342418][ T277] page last free stack trace: [ 769.347070][ T277] free_unref_page_prepare+0x637/0x6c0 [ 769.352512][ T277] free_unref_page+0x8f/0x2a0 [ 769.357259][ T277] __unfreeze_partials+0x1a5/0x200 [ 769.362349][ T277] put_cpu_partial+0x12d/0x190 [ 769.367092][ T277] qlist_free_all+0x35/0x90 [ 769.371576][ T277] kasan_quarantine_reduce+0x150/0x160 [ 769.377026][ T277] __kasan_slab_alloc+0x2f/0xd0 [ 769.381875][ T277] slab_post_alloc_hook+0x4c/0x380 [ 769.386974][ T277] kmem_cache_alloc+0x100/0x290 [ 769.391819][ T277] __d_alloc+0x2a/0x6f0 [ 769.395956][ T277] d_alloc_parallel+0x7b/0x1330 [ 769.400787][ T277] __lookup_slow+0x134/0x410 [ 769.405359][ T277] lookup_one_len+0x19d/0x2d0 [ 769.410015][ T277] start_creating+0x184/0x310 [ 769.414676][ T277] debugfs_create_dir+0x24/0x4b0 [ 769.419594][ T277] __nsim_dev_port_add+0x3cf/0xab0 [ 769.424690][ T277] [ 769.426996][ T277] Memory state around the buggy address: [ 769.432605][ T277] ffff8880202aff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 769.440646][ T277] ffff8880202aff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 769.448688][ T277] >ffff8880202b0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 769.456724][ T277] ^ [ 769.462857][ T277] ffff8880202b0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 769.470988][ T277] ffff8880202b0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 769.479025][ T277] ================================================================== [ 769.487062][ T277] Disabling lock debugging due to kernel taint [ 769.516025][ T4173] pwc: send_video_command error -71 [ 769.526232][ T4173] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 769.544044][ T4173] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 769.586529][ T4173] usb 2-1: USB disconnect, device number 54 [ 769.636844][ T277] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 769.644074][ T277] CPU: 1 PID: 277 Comm: jfsCommit Tainted: G B syzkaller #0 [ 769.652667][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 769.662823][ T277] Call Trace: [ 769.666115][ T277] [ 769.669047][ T277] dump_stack_lvl+0x188/0x250 [ 769.673731][ T277] ? show_regs_print_info+0x20/0x20 [ 769.678935][ T277] ? load_image+0x400/0x400 [ 769.683445][ T277] panic+0x2e5/0x810 [ 769.687364][ T277] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 769.693540][ T277] ? bpf_jit_dump+0xd0/0xd0 [ 769.698066][ T277] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 769.704061][ T277] ? _raw_spin_unlock+0x40/0x40 [ 769.708922][ T277] ? txEnd+0x329/0x520 [ 769.713006][ T277] check_panic_on_warn+0x80/0xa0 [ 769.717952][ T277] ? txEnd+0x329/0x520 [ 769.722030][ T277] end_report+0x6d/0xf0 [ 769.726197][ T277] kasan_report+0x102/0x130 [ 769.730713][ T277] ? txEnd+0x329/0x520 [ 769.734798][ T277] kasan_check_range+0x235/0x290 [ 769.739741][ T277] txEnd+0x329/0x520 [ 769.743627][ T277] jfs_lazycommit+0x5b8/0xb40 [ 769.748291][ T277] ? txFreelock+0x5a0/0x5a0 [ 769.752774][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 769.758646][ T277] ? sched_dynamic_update+0x210/0x210 [ 769.763998][ T277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 769.769870][ T277] ? __kthread_parkme+0x157/0x1b0 [ 769.774874][ T277] kthread+0x436/0x520 [ 769.778921][ T277] ? txFreelock+0x5a0/0x5a0 [ 769.783400][ T277] ? kthread_blkcg+0xd0/0xd0 [ 769.787970][ T277] ret_from_fork+0x1f/0x30 [ 769.792372][ T277] [ 769.795803][ T277] Kernel Offset: disabled [ 769.800120][ T277] Rebooting in 86400 seconds..