last executing test programs: 4m35.14217563s ago: executing program 1 (id=3686): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x40004, 0x4) 4m34.902684188s ago: executing program 1 (id=3690): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') preadv(r0, &(0x7f00000018c0)=[{&(0x7f00000004c0)=""/73, 0x49}], 0x1, 0x8081f3, 0x0) 4m34.742160153s ago: executing program 1 (id=3694): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) 4m34.553244139s ago: executing program 1 (id=3699): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10002, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f000001fb40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m33.063750807s ago: executing program 1 (id=3720): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x3, 0x980914, 0x3}) 4m32.190702515s ago: executing program 1 (id=3734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 4m31.7440098s ago: executing program 32 (id=3734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 3m5.942866149s ago: executing program 2 (id=4975): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 3m5.495936304s ago: executing program 2 (id=4984): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) 3m5.243602952s ago: executing program 2 (id=4989): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) 3m4.9773268s ago: executing program 2 (id=4994): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x10001}}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}, {@fat=@quiet}, {@shortname_mixed}, {@uni_xlate}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 3m4.638822392s ago: executing program 2 (id=4998): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) 3m4.122753368s ago: executing program 2 (id=5002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x11}}, @RTA_DST={0x8, 0x1, @multicast2}]}, 0x30}}, 0x0) 3m3.636160534s ago: executing program 33 (id=5002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x11}}, @RTA_DST={0x8, 0x1, @multicast2}]}, 0x30}}, 0x0) 3.836063687s ago: executing program 3 (id=7870): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file1\x00', 0x2000884, &(0x7f0000000080)={[{@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_winnt}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@utf8no}]}, 0x1, 0x289, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 3.563596336s ago: executing program 3 (id=7874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b2a3f781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x47) 2.366241184s ago: executing program 3 (id=7894): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x4, 0x8, 0x6}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.16365479s ago: executing program 3 (id=7898): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x178, 0x20000810, 0x0, 0x0) 1.985164786s ago: executing program 3 (id=7901): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="c56961", 0x3}], 0x1) 1.776687913s ago: executing program 5 (id=7905): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x2, 0xfffff03c}, {0x6, 0x4, 0x0, 0xfffffffe}]}, 0x10) 1.775787853s ago: executing program 3 (id=7906): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005c40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC], 0x1, 0x550f, &(0x7f00000001c0)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000302, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.597964569s ago: executing program 5 (id=7909): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="c1ec58ec7c820f6e1b2515", 0xb}], 0x1) 1.483174223s ago: executing program 0 (id=7910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x20000000, 0x80800001, 0x8001}, 0x81}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x0) 1.399370695s ago: executing program 5 (id=7911): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @broadcast}], 0x10) 1.321229908s ago: executing program 6 (id=7912): r0 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1ffffc, 0x0, 0xffffffff, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1, 0xfdff}, 0x20) 1.25076555s ago: executing program 0 (id=7914): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x6, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0405602, &(0x7f0000000480)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0xe, 0xfe, 0x0, 0x0, "023d2134"}, 0x0, 0x2, {0x0}}) 1.184510862s ago: executing program 5 (id=7915): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2014000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x23, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) 1.169781073s ago: executing program 6 (id=7916): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, 0x0) 1.145844443s ago: executing program 4 (id=7917): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0xfb, 0x7fff0000}]}) fstat(0xffffffffffffffff, 0x0) 1.075840736s ago: executing program 0 (id=7918): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee1768810006c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) 995.214268ms ago: executing program 4 (id=7919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x4000844) 950.78766ms ago: executing program 6 (id=7920): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800000000004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000880)={0x2, @vbi={0x3, 0x6, 0x6, 0x19066b77, [0x2, 0x5], [0x5, 0xfb], 0x108}}) 905.808481ms ago: executing program 0 (id=7921): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200000000000000a, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0xca3d, 0x2, 0x3132564e, 0x1, 0xd8a8, 0x2, 0xa, 0x1, 0x1, 0x0, 0x0, 0x6}}) 834.022414ms ago: executing program 4 (id=7922): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_simple={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x2, ':\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) 766.764916ms ago: executing program 6 (id=7923): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)="7449b6", 0x3}, 0x1, 0x0, 0x0, 0x4000010}, 0x8850) 683.529138ms ago: executing program 0 (id=7924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 601.229591ms ago: executing program 4 (id=7925): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x44b, 0x3, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc604}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x3}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x48}}, 0x0) 494.766165ms ago: executing program 6 (id=7926): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8000000000000005, 0x20400) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000140)={0x4, 0x0, '\x00', {0x0, @reserved}}) 434.062277ms ago: executing program 0 (id=7927): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@quota}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x9}}, {@barrier}]}, 0x1, 0x558, &(0x7f0000000680)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) 416.215047ms ago: executing program 6 (id=7928): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa1000c, &(0x7f00000000c0)={[{@grpquota}, {@gid}, {@nodiscard}, {@errors_continue}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@usrquota}, {@grpquota}, {@discard}]}, 0x1, 0x6303, &(0x7f0000000340)="$eJzs3UuPHFfZB/Cn+jYXv3GsLKK8FkKTxFxCiK/BGAIkWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmj5nXNOZdo/Hma4en99Pmql6+lRNn/K/qy+uqj4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Djc1VEXPlVuuFExP9FP6IXsdLUaxGxsnYiLz+IiBdiuzmej4jhUkSz/vavZyNej4iPj0fcf3Bnvbn5/D778f0//+MPPzn2o7//aXjmv3+51X9j2nK3b//2P3+9+2TbDAAAAKWp67qu0sf8k+nzfa/rTgEAc5Ff/+sk365euHpzwfqjVqvV6iNYt9V7u9suImKzvU7znsHheAA4Yjbjk667QIfkX7RBRBzruhPAQqu67gCH4v6DO+tVyrdqvx6sjdvzuSC78t+sdq7vmDadZfIck3k9vraiH89N6c/KnPqwSHL+vcn8r4zbR2m5w85/XqblPxpf+lScnH9/Mv8JKf/l7d9HOv/envmXKuc/2F/+Y5t9+QMAAAAAwALL//9/ouPjv0sH6fwBDiI86vjv2kH6AAAAAAAAAAAL4EnH/9th/D8AAABYWM1n9cbvjj+8bdp3sTW3X64inplYHihMulhmtet+AAAAAAAAAAAAAEBJBuNzeC9XEcOIeGZ1ta7r5qdtsn5cT7r+UVf69kPJun6SBwCAsY+PT1zLX0UsR8Tl9F1/w9XV1bpeXlmtV+uVpfx+drS0XK+0PtfmaXPb0mgfb4gHo7r5Y8ut9dpmfV6e1T7595r7GtX9fXRsPjoMHAAiYvxqdN8r0lOmrp+Nrt/lcDTY/58+9n/2o+vHKQAAAHD46rquq/R13ifTMf9e150CAOYiv/5PHhdQq9VqtVr99NVt9d7utouI2Gyv07xnMBw/ABwxm/FJ112gQ/Iv2iAiXui6E8BCq7ruAIfi/oM761XKt2q/HqTx3fO5ILvy36y218vr7zWdZfIck3k9vraiH89N6c/zc+rDIsn59ybzvzJuH6XlDpr/tFy7OsdoWv7Ndp7ooD9dy/n3J/OfcNj7/7xsRW/P/EuV8x88Vv59+QMAAAAAwALL//9/YqGO/44OujkzPer479qh3SsAAAAAAAAAHK77D+6s5+te8/H/L+yxnOs/n045/0r+Rcr59yby/+rEcv3W/L23H+b/7wd31v9461//n6f7zX8pz1TpkVWlR0SV7qkapOmTbN1nbQ37o+aehlWv39zD2s7fvx4bcXbXsr3071EP341r2+3ndrU3PR1ut9f9cfv5Xe2Dnfa8/oVd7cN0plO9kttPx3r8PK7HO9vtTdvSjO1fntFez2jP+fft/0XK+Q9aP03+q6m9mpg27n3U+8x+357udT9vXfvib84e/ubMtBX9nW1ra7bvpQ76s/1vcmwUv7y5ceP07au3bt04F2my69bzkSafs5z/MP3sPP+/PG7Pz/vt/fXeR6PHzn9RbMVgav4vt+ab7X1lzn3rQs5/lH5y/u+k9r33/6Oc//T9/9UO+gMAAAAAAAAAAAAAAACPUtf19iWib0XExXT9T1fXZgIA85Vf/+sk3z6vuj/n+1Orj3hdLVh/5lp/Wi9Wf9Tqo1i31Xt7s11ExN/a6zTvGX691x8DABbZpxHxz647QWfkX7D8fX/N9NSub/kFnnY3P/jwp1evX9+4cbPrngAAAAAAAAAAB5XH/1xrjf98qq7ruxPL7Rr/9e1Ye9LxPwd5ZmeA0SkDVX/OpyRt9Ub9Xmu48RejPT53e4Ti4c7co8b/Hsy4v+GM9tGM9qUZ7csz2ve80GPX6uP8X2yNd34qIk5ODL9ewvivk2PelyDv/y+1Hs9N/l+ZWK6df/37o5x/b1f+Z269/4szNz/48LVr7199b+O9jZ9dOHfu7IWLFy9dunTm3WvXN86Of3fY48OV889jX+f8KUPOP2cu/7Lk/L+UavmXJef/5VTLvyw5//x+T/5lyfnnzz7yL0vO/5VUy78sOf+vpVr+Zcn5v5pq+Zcl5//1VMu/LDn/11It/7Lk/E+nWv5lyfmfSfU+81857H4xHzn/fITL/l+WnH8+s0H+Zcn5n0+1/MuS87+QavmXJef/eqrlX5ac/zdSLf+y5Pwvplr+Zcn5fzPV8i9Lzv9SquVflpz/t1It/7Lk/L+davmXJef/RqrlX5ac/3dSLf+y5Py/m2r5lyXn/71Uy78sOf83Uy3/sjz8/v9FncmX2C9Kf8yYKWGm62cmAAAAAAAAAAAAAGDSPE4n7nobAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe3cbI8dd3wF87tFnBxIDIXVSQy6OCSFxcmc78QNtigmPDU8lEAp9iO36zubAsR2fXQKNZEeBEgmjIkTb8KItINRGqiqsihe0ApQXqFWlStC+oG8QFSpSoyqggFSprYCrdub//9/u3tzunW/vvDvz+Uj2z7c7O/Of2f/O7e/O3x0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaHbLG2Y/OZRlWeNP/tfWLHtR49+bJ7fmt732ao8QAAAAWKuf53+/cF264dAKHtS0zD++8ttfXVhYWMjeP/LHY59bWEh3TGbZ2KYsy++LLv/gA0PNywRPZhNDw01fD3fZ/EiX+0e73D/W5f7xLvdv6nL/RJf7lxyAJTYXP4/JV7Yz/+fW4pBm12dj+X07Sx715NCm4eH4s5zcUP6YhbHj2Vx2MpvNpluWL5Ydypf/+i2Nbb01i9sabtrW9sYM+cnjx+IYhsIx3tmyrcV1Rj96fTb50588fuwvzz1/Y1ntehha1leM8/YdjXF+PNxSjHUo25SOSRzncNM4t5c8JyMt4xzKH9f4d/s4X1jhOEcWh7mh2p/ziWw4//d38uM02vxjvXSctofb/ufWLMsuLg67fZkl28qGsy0ttwwvPj8TxYxsrKMxlV6aja5qnt6ygnnaqDM7W+dp+2siPv+3hMeNLjOG5qfpR0+MNz3vP1u4knkaNfZ6uddK+xzs9WulX+ZgnBffyXf6qdI5uDPs/+O3LT8HS+dOyRxM+900B3d0m4PD4yP5mNOTMJQ/ZnEO7m5ZfiTf0lBen7ut8xycOvfIman5j37srrlHjp6YPTF7au/u3dN79+07cODA1PG5k7PTxd9XeLT735ZsOL0GdoRjF18Dr25btnmqLnxxfMn590pfhxMdXodb25bt9etwtH3nhjbmBbl0Thevjfc2DvrEpeFsmddY/vzcsfbXYdrvptfhaNPrsPR7SsnrcHQFr8PGMmfuWNl7ltGmP2VjWP57wdrm4NamOdj+fqR9Dvb6/Ui/zMGJMC++d8fy3wu2h/E+tWu170dGlszBtLvh3NO4Jb3fnziQl7J5eVPjjmvGs/Pzs2fvfuzouXNnd2ehbIiXNc2V9vm6pWmfsiXzdXjV8/XQ3Cufuqnk9q3hWE3c1fhrYtnnqrHMPXd3fq7y727lx7Pl1j1ZKD220cez7Lt543iOZ9nnv/XEg994/PNvWPZ4NvrNj0+t/b146kubzr9jy5x/Y9//i2J7aVVPjoyNFq/fkXR0xlrOx61P1Wh+7hrKt/3C1MrOx2Phz0afj6/vcD7e1rZsr8/HY+07F8/HQ91+2rE27c/nRJgnJ6c7n48by2zbs9o5OdrxfHxrqEPh+L8mdAqpL2qaO8vN27St0dGxsF+jcQut83Rvy/JjoTdrbOuZPVc2T2+/tVjXSNq7RRs1Tyfblu31PE0/+1pung51++nblWl/PifCvLh+b+d52ljm2XvWfu7cHP/ZdO4c7zYHx0bGG2MeS5MwP99nC5vjHLw7O5adzk5mM/m94/l8Gsq3tevelc3B8fBno8+V2zrMwdvblu31HEzfx5abe0OjS3e+B9qfz4kwL56+t/McbCzzxv29fe96e7glLdP03rX952vL/czrprbDtF5zZTSM81v7O/9strHMyQOr7TM7H6c7wy3XlByn9tfvcq+pmWxjjtO2MM7nDyx/nBrjaSzzuYMrnE+Hsiy78Oj9+c97w+9X/vb8d7/a8nuXst/pXHj0/h+/+Pg/rGb8AAy+XxRlS/G9ruk3Uyv5/T8AAAAwEGLfPxxqov8HAACAyoh9f/xf4Yn+HwAAACoj9v2joSY16f+3vfH5uV9cyFIyfyGI96fD8ECxXMy4ToevJxcWNW6//8uz//33F1a27eEsy372wB+ULr/tgTiuwmQY5+U3td6+xFfvWtG2jzx0IW23Ob/+hbD+uD8rnQZlEdzpLMu+ft2n8+1MfuBSXp994EheH7z41JONZV44WHwdH//cy4rl/yyEfw8dP9ry+OfCcfhhqNNvKz8e8XFfufSa7fvft7i9+LihHdfmu/30w8V64+fkfObJYvl4nJcb/zc+9cxXGss/9qry8V8YLh//M2G9Xw71f19RLN/8HDS+jo/7RBh/Y3uNGRofd/eXvlk6/sufLJY/8+ZiuSOhxu3fHr7e+ebn55qP12NDR1v2K3tLsVzc/vR3/yi/P64vrr99/BOHL7Ucj/b58ey/FuuZals+3h63E/1d2/Yb62men3H7z/zhkZbj3G37lx987hWN9bZv/8625c48eke+/cX1tX5i059/4tOl24vjOfQ3Z1r259C7w+s4bP/ph8N8DPf/3+Vife2frnDk3a3nn7j8F7ZeaNmf6K0/LbZ/+XUn8rppYvOWa1704msv3tw4dln2nU3F+rpt/8RfnG4Z/xdvKI5HvD9m9Nu3v5y4/bMf2XXq9Pz5uZl0VB+/Lv/snLcX44njvS6cW9u/Pnz63Adnz05OT05n2WR1P0Lvin0p1B8X5WLnpReWnEHveCg8nzf96de33PYvn4q3/9t7i9svva34vvXqsNxnwu1bw/O3uu0v9fQtN+Sv76FnwwgXln5e8Fps3/lfB1a0YNj/9vcFcb6fefkH8+PQuC//vhFf12sc//dnivV8LRzXhfDJzDtuWNxe8/LxsxEuvad4va/5+IXTXHxe/yo83+/4YbH+OK64v98P72O+ua31fBfnx9cuDLevP/8Uj4vhfJJdLO6PS8XjfemFG0qHFz+HJLt4Y/71Z9N6blzVbi5n/qPzUyfnTp1/bOrc7Py5qfmPfuzwI6fPnzp3OP8sz8Mf6vb4xfPTlvz8NDO7754sP1udLso6u9rjP/PQsZn907fNzB4/ev74uYfOzJ49cWx+/tjszPxtR48fn/1It8fPzdy3e8/Bvfv37DoxN3PfgYMH9x7cNXfqdGMYxaC62Df94V2nzh7OHzJ/3z0Hd9977z3Tux45PTN73/7p6V3nuz0+/960q/Ho3991dvbk0XNzj8zump/72Ox9uw/u27en66cBPnLm+Pzk1Nnzp6bOz8+enSr2ZfJcfnPje1+3x1NN8/9evJ9tN1R8EF/2rjv3pc9nbfjyE8uuqlik7QNEnw+fRfNPLzlzYCVfx75/LNSkJv0/AAAA1EHs+8dDTfT/AAAAUBmx798UaqL/BwAAgMqIff9EqElN+v/K5f+3XVjR9uX/By//n8n/y/+37c8V5//f02/5/+J8If/fG2vN38v/B/L/8v/y//L/8v/0QL/l/2PfvznLatn/AwAAQB3Evn9LqIn+HwAAACoj9v3XhJro/wEAAKAyYt//olCTmvT/8v/y//L/8v/y/+XbX0X+f1O2AvL/G0P+v7Oa5/+Huw5A/n8qq1f+/2Ivx1/f/H/RQ8n/U6bf8v+x739xqElN+n8AAAColP8svzn2/deGmuj/AQAAoDJi339dqIn+HwAAACoj9v1bQ01q0v/L/8v/y//L/8v/l2/f9f8Hk/x/ZzXP/3cn/+/6//L/rv9PT/Vb/j/2/S8JNalJ/w8AAAB1EPv+l4aa6P8BAACg/4xe2cNi3/+yUJMl/f8VbgAAAAC46mLff33WFgSvye//5f/l/+X/5f/l/8u3v/L8/0gm/98/5P87k//vQv5f/l/+X/6fnuq3/H/e92cT2ctDTWrS/wMAAEAdxL7/hlAT/T8AAABURuz7fynURP8PAAAAlRH7/m2hJjXp/+X/K5n/bzxN8v/y/8tuvwL5//xk3T/5/3W9/v9sCGzK/6+Q/H9n8v9dyP/L/8v/y//TU/2W/499/42hJjXp/wEAAKAOYt9/U6iJ/h8AAAAqI/b9vxxqov8HAACAyoh9//ZQk5r0//L/fZ7/j8lR1/+X/1/M/z8q/1+oSf7f9f9XSf6/M/n/LuT/5f/l/+X/6al+y//Hvv8VoSY16f8BAACgDmLf/8pQE/0/AAAAVEbs+28ONdH/AwAAQGXEvn8y1KQm/b/8f5/n/6/s+v/y/9XO/6/q+v83y//L/9eM/H9n8v9dyP/L/8v/y//TU/2W/499/y2hJjXp/wEAAKAOYt+/I9RE/w8AAACVEfv+W0NN9P8AAABQGbHv3xlqUpP+X/5f/l/+v9r5/7Lty//L/1eZ/H9n8v9dyP/L/8v/y//TU/2W/499/6tCTWrS/wMAAEAdxL7/tlAT/T8AAABURuz7Xx1qov8HAACAyoh9/+2hJjXp/+X/5f/l/+X/a57/vyD/Xy3y/53J/3ch/9+L/Pw75P/l/+X/ifot/x/7/teEmtSk/wcAAIA6iH3/HaEm+n8AAACojNj33xlqov8HAACAyoh9/65Qk5r0//L/8v/y//L/Nc//u/5/xfRB/n9iLduX/5f/r0D+3/X/5f/l/0muVv4/y8rz/7HvvyvUpCb9PwAAANRB7PvvDjXR/wMAAMAA2lx6a+z7p0JN9P8AAABQGbHvnw41qUn/L/8v/y//X+v8/8VV5/9vXlyv/H9B/r+/rFv+fzhz/X/5f/n/LgYt/9/+28H+yP+Pyf9TKVeU//9K6ap6cv3/2PfvDjWpSf8PAAAAdRD7/j2hJvp/AAAAqIzY9+8NNdH/AwAAQGXEvv+eUJOa9P/y/xuX/x/N5P/l//su/+/6//L/ldMH1/9f0/YHL/8fd1H+X/5/8PL/vR6/6//L/7PUFeX/y/Uk/x/7/ntDTWrS/wMAAEAdxL5/X6iJ/h8AAAAqI/b9+0NN9P8AAABQGbHvPxBqUpP+X/7f9f/l/+X/5f/Lty//P5jk/ztz/f8u5P/l/+X/5f/pqX7L/8e+/2CoSU36fwAAAKiD2Pe/NtRE/w8AAACVEfv+Xwk10f8DAABAZcS+/1dDTWrS/8v/y//L/8v/y/+Xb1/+fzDJ/3cm/9+F/L/8v/y//D891W/5/9j33xdqUpP+HwAAAOog9v2/Fmqi/wcAAIDKiH3/60JN9P8AAABQGbHvPxRqUpP+X/5/hfn/zZ3XJ//fOn75//L5If8v/y//v/7k/zuT/+9C/l/+v4L5/yfk/7mK+i3/H/v+14ea1KT/BwAAgDqIff/9oSb6fwAAAKiM2Pe/IdRE/w8AAACVEfv+N4aa1KT/l/93/X/5f/l/+f/y7cv/Dyb5/87k/7uQ/5f/r2D+fwOu/z8eqvw/S6w0/x/fV613/j/2/W8KNalJ/w8AAAB1EPv+N4ea6P8BAACgMmLf/5ZQE/0/AAAAVEbs+98aalKT/l/+X/5f/l/+X/6/fPvy/4NJ/r8z+f8u5P/l/wck///dksdfxfx/zvX/KdNv1/+Pff+vh5rUpP8HAACAOoh9/wOhJvp/AAAAqIzY978t1ET/DwAAAJUR+/63h5rUpP/vXf5/XP6/jfy//H/7/JD/l/+X/19/8v+dDVj+/+fXhtvl/wvy/+s0/snPFgd+gPL/ZUrz/z9YLv+/sKn98fL/rId+y//Hvv8doSY16f8BAACgDmLf/85QE/0/AAAAVEbs+98VaqL/BwAAgMG3UMQHYt//G6EmNen/Xf+/MY7F9PI65///Wv5f/l/+X/5f/n99yf93NmD5f9f/byP/39/j78v8v+v/c5X1W/4/9v3vDjWpSf8PAAAAdRD7/gdDTfT/AAAAUBmx739PqIn+HwAAACoj9v3vDTWpSf8v/+/6//L/A57/n8yyTP5f/p9E/r8z+f8u5P/l//st//8f8v8Mtn7L/8e+/6FQk5r0/wAAAFAHse9/X6iJ/h8AAAAqI/b9vxlqov8HAACAyoh9//tDTWrS/8v/D0r+f1L+X/7f9f/b9kf+X/6/jPx/Zxuf/1/dGyr5f/n/QR6/6//L/7NUv+X/Y9//gVCTlX+7mljxkgAAAMBVEfv+3wo1qcnv/wEAAKAOYt//26Em+n8AAACojNj3/06oSU36f/n/Qcn/u/5/Jv8v/9+2P/L/8v9lNi7/H8888v+u/y//H8n/y//L/9Ou3/L/se//3VCTmvT/AAAAUAex73841ET/DwAAAAOh7P9kt4t9/+FQk+79/6r/Tx8AAABwdcS+/0ioSU1+/y//L/8v/9+n+f8/2fHP3/v2O4/slv+X/5f/X5UNvf5/48Xv+v9t+f+HWzLK8v/y//L/8v9nNsn/19k65P/Hmm9cbf4/9v1HQ01q0v8DAABAHcS+//dCTfT/AAAAUBmx7z8WaqL/BwAAgMqIff9MqElN+v+U/w/xOPl/+X/5/z7J/6/y+v9DYTv9kP+Px0P+v1XP8v/xpCv/X2pD8//vW8yJy/+v9vr/46W3yv+vOP+f51/l//tr/PL/rv/PUr3K/48s5v9brDb/H/v+2VCTmvT/AAAAUAeh7x8+XtTFO/T/AAAAUBmx7z8RaqL/BwAAgMqIff8HQ01q0v+7/r/8v/x/NfL/rv+/uHzl8/+u/9+R/H9n/ZP/Lyf/7/r/gzx++X/5f5Zah+v/t1ht/j/2/XOhJjXp/wEAAKAOYt//oVAT/T8AAABURuz7Pxxqov8HAACAyvh/9u7k2fL6rOP4uXi76C4WllVWuXAhVS4t/wFZwFpXrly4cWMVZSkO4AAO3TiPOE84gLOoOIAiTjgCCk4omUNGkpA5ISQhJKlO0f08T5977xnu7Xtu39/5Pq/XIo+0IeembbvzSfe7vrn7vzFuabL/9f/6f/2//l//v/jzL/X/u1f+dfX/20H/v5r+fw39v/5f/6//Z6Om1v/n7v+muKXJ/gcAAIAOcvffFrfY/wAAADCM3P3fHLfY/wAAADCM3P3fErc02f/6f/3/sP3/zfr/ZZ+v//f+/8j0/6vp/9fYov7/C8/q/6f29ev/9f8cNLX+P3f/t8YtTfY/AAAAdJC7/9viFvsfAAAAhpG7//a4xf4HAACAYeTuvyNuabL/9/X/O7Oe/X9mvPr/kfp/7/8v/Xz9v/5/ZNe2/7/71Z/59P/6f+//B/2//l//z35T6/9z93973NJk/wMAAEAHufu/I26x/wEAAGAYufu/M26x/wEAAGAYufu/K25psv+P9/7/7ij9f9lA/7+TLbr+X/+//8eH/l//r/8/ed7/X61T/3/7szfc9uIjX/zoUT5f/6//1//r/9msqfX/ufvvjFua7H8AAADoIHf/XXGL/Q8AAADDyN3/3XGL/Q8AAABDeOHLZ7X7vyduabL/j9f/D/P+f/H+v/7/0jfo//X/+v+tpf9frVP/fzWfr//X/1/F11+/DOr/9f8cNLX+P3f/98YtTfY/AAAAdJC7//viFvsfAAAAhpG7/3zcYv8DAADAMHL3X4hbmux//f/J9/+f1f9vff9/Zqb/v0z/r/+fPv3/avr/NfT/+n/v/+v/2aip9f+5+++OW5rsfwAAAOggd//3xy32PwAAAAwjd/8PxC32PwAAAAwjd/8Pxi1N9r/+3/v/+n/v/+v/F3++/n876f9X0/+vof8/bj9/Rv+v/9f/M++I/f8rK37a3kj/n7v/h+KWJvsfAAAAOsjd/8Nxi/0PAAAAw8jd/yNxi/0PAAAAw8jd/6NxS5P9r//X/+v/9f/6/8Wfr//fTvr/1SbT/+/sLvxm/f/W9//e/9f/6//ZY2rv/+fu/7G4pcn+BwAAgA5y9/943GL/AwAAwDBy9/9E3GL/AwAAwDBy9/9k3NJk/+v/9f/6f/2//n/x56/q/x+d+/r0/9Oy0f5/R//v/X/9v/5f/6//5zim1v/n7v+puKXJ/gcAAIAOcvffE7fY/wAAADCM3P0/HbfM7f/9fxYVAAAA2C65+38mbmny+/+L+/8r/3v9/+Fco/5/V/+v/7/8f+/L/4r6/5X9/y3e/+/J+/+rre//82dU/b/+X/+/kf5/tjNK/39u3d+v/2eRqfX/uft/Nm5psv8BAACgg9z9Pxe32P8AAAAwjNz9Px+32P8AAAAwjNz9vxC3NNn/3v/fqv7f+/+9+v/7z3j//5Ipvv8/u+b9/67+/5D0/6t5/38N/b/+f1Lv/3/pdbPZZPp/7/9zVabW/+fu/8W4pcn+BwAAgA5y9/9S3GL/AwAAwHaY/7MDSx7xz93/y3GL/Q8AAADDyN3/K3FLk/0/eP9/87J/mv5f/z///TXR/n/p+//6/8t69f/e/z8s/f9q+v819P8n0c/vDtb/37fs7998/3/09//P6/+ZmD39/2NXvv20+v/c/b8atzTZ/wAAANBB7v574xb7HwAAAIaRu//X4hb7HwAAAIaRu//X45Ym+//E+/9zyz/b+//6f/2//l//r//fNP3/avr/Nfb3/6/+R0P9v/f/T+39/6P3/97/Z2r29P9zTqv/z93/G3FLk/0PAAAAHeTu/824xf4HAACAYeTuvy9usf8BAABgGLn7749bmuz/wd//X0r/r/+f//7S/+v/F32+/n876f9X0/+v4f1//f9p9P/xA0D/z4im1v/n7v+tuKXJ/gcAAIAOcvf/dtxi/wMAAMAwcvf/Ttxi/wMAAMAwcvf/btzSZP/r/0+2/89v1//r/2f6f/2//v+aaNv/7yz6leigJf3/07de+Kq936L/1/8P2f8/f6Jfv/f/9f8cNIn+/+KV/3SZu//34pYm+x8AAAA6yN3/+3GL/Q8AAADDyN3/B3GL/Q8AAADDyN3/h3FLk/0/1/9ncqH/9/6//l//r//X/2+ttv3/IXn/f7WX49+v/n/U/v9kv379v/6fgybR/8/9de7+B+KWJvsfAAAAOsjd/0dxi/0PAAAAw8jd/8dxi/0PAAAAw8jd/ydxS5P97/3/Hv3/9TP9v/5f/6//70H/v5r+fw3v/+v/9f/6fzZqav1/7v4H45Ym+x8AAAA6yN3/p3GL/Q8AAADDyN3/Z3GL/Q8AAADDyN3/53FLk/2v/1/S/8/G6v+9/6//n+n/9f9N6P9XO+3+f9Gvl/OuSf//0IovYFH/f/F6/f+W9/9nD/n36//1/2ze1Pr/3P1/Ebc02f8AAADQQe7+h+IW+x8AAACGkbv/4bjF/gcAAIBh5O7/y7ilyf7X//d4/1//r/+f6f/1/03o/1db3P9fd/CbvP/v/f+B+n/v/+v/OT1T6/9z9/9V3NJk/wMAAEAHufsfiVvsfwAAABhG7v6/jlvsfwAAABhG7v5H45Ym+1//r//X/+v/9f+LP1//v51Orv+fDdz/L6D/1//r//X/+n82YGr9f+7+v4lbmux/AAAA6CB3/9/GLfY/AAAADCN3/9/FLfY/AAAADCN3/9/HLU32/2n1/7fo//X/+n/9v/6/vlf1/5vj/f/V9P9r6P/1//p//T8bNbX+P3f/P8QtTfY/AAAAdJC7/7G4xf4HAACAYeTu/8e4Zcn+P7/hP4cHAAAAnLzc/f8UtzT5/X/v/+v/9/b/s9nE+//8f1L9v/5/hP7/7Ez/v3H6/9X0/2vo/8fs/6+bDdT/n1v69+v/maKp9f+5+/85bmmy/wEAAKCD3P3/ErfY/wAAADCM3P3/GrfY/wAAADCM3P3/Frc02f/6f/2/9//H6f8ff2nxj0f9/2T7//pe1f9vjv5/Nf3/Gvr/Mfv/0d7/X/KjWv/PFE2t/8/d/3jc0mT/AwAAQAe5+5/Y/3uo9j8AAAAM44lL/3h29mTcYv8DAADAMHL3/3vc0mT/6//1//r/cfp/7/9fpv/v7ZT6/51Nfb7+X/+v/9/er/+a9f9L6P+Zoqn1/7n7/yNuabL/AQAAoIPc/U/FLfY/AAAADCN3/9Nxi/0PAAAAw8jd/59xS5P9r//X/+v/t7P/P6v/H77/z69M/380U3n//6abvvKZfZ//wJ1PfsXaz9f/6//1/9v79ev/9f8cNLX+P3f/f8UtTfY/AAAAdJC7/7/jFvsfAAAAhpG7/3/iFvsfAAAAhpG7/3/jlib7/2D/f2Z2uVC9bFH/H42a/n+O/n/v16//X/zjw/v/+n/v/5+8qfT/3v+/uq9/av3/Hfp//f9J9f83Hvz79f+MaGr9f+7+Z+KWJvsfAAAAOsjd/39xi/0PAAAAE7boT2Ivl7v//+MW+x8AAACGkbv/2bilyf73/r/+X/+v/9f/L/78df1/0v9Pi/5/Nf3/Gt7/1/83ev8/fv2rn6eq//88/T+bM7X+P3f/a+KWJvsfAAAAOsjd/9q4xf4HAACAYeTuf13cYv8DAADAMHL3vz5uabL/9f8b7f93579N/6//3/fjQ/8/WP/v/f9p0v+vpv9fQ/+v/2/U/+/n/X9OwtT6/9z9b4hbmux/AAAA6CB3/xvjlkPt/3Mn9FUBAAAAm5S7/01xi9//BwAAgGHk7n9z3NJk/0+1/z+/nf3/Hvr/qfT/X6f/3/f5+n/9/8j0//kr+mL6/zX0/0ft51+e/wv9v/5f/89+U+v/c/c/F7c02f8AAADQQe7+t8Qt9j8AAAAMI3f/W+MW+x8AAACGkbv/bXFLk/0/1f5/S9//32OK/f/OrGP/7/3/S3+9s6P/1/+3oP9fTf+/xmb7/7sb9P976P/1//r/Zu5a/1Ps1Pr/3P1vj1ua7H8AAADYVl/zZd/w3GH/ubn73xG32P8AAAAwjNz974xb7H8AAAAYRu7+5+OWJvtf/9+r/+/5/r/+3/v/+v9O9P+r6f/X8P6//l//r/9no6bW/+fuf1fcMjf8do/87xIAAACYktz9745bmvz+PwAAAHSQu/89ccuB/X/xkH+qHQAAAJia3P0vxC1Nfv//2P3/bEf/f5L9/0z/r//X/+v/9f9Hof9f7Zj9/8Ud/f9o/f+Z+b847X7+uE7769f/6//Z69wE+//c/e+NW5rsfwAAABjUnv9GIXf/++IW+x8AAACGkbv//XGL/Q8AAADDyN3/gbilyf73/v/E+/+rev//XP1P+v/m/f89Zxd+vv5f/z8y/f9SXxC30/v/Fz9f/38kp93Pb/vXr//X/3PQ1Pr/3P0fjFua7H8AAADoIHf/h+IW+x8AAACGkbv/w3GL/Q8AAADDyN3/kbilyf7X/4/Y/3v/X/+/+vPH6f+/6IYLT33t1z/8oP6fK65l/58/Frak/7/kmO//b1v/f5TPv/fSP+r/9f+n1/9/9e6W9v83xtX/s8jU+v/c/R+NW5rsfwAAAOggd/+LcYv9DwAAAMPI3f+xuMX+BwAAgGHk7n8pbmmy/7eq//8S/f/I/X9+X59C/39h+/r/bIq79//e/9f/H+T9/9X0/2vo//X/3v/3/j8bNbX+P3f/x+OWJvsfAAAAOsjd/4m4xf4HAACAYeTu/2TcYv8DAADAMHL3vxy3NNn/W9X/e/9/6P4/XU3/n5/v/X/9/0z/357+f87uwW/S/6+h/9f/6//1/2zU1Pr/3P2filua7H8AAADoIHf/K3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNzSZP/r//X/I/T/x3z//3T6/1d/utH/6//1/xun/19N/7+G/l//377/v1X/z0ZNrf/P3f+5AAAA//8L9mN4") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 326.74874ms ago: executing program 5 (id=7929): prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) 325.18634ms ago: executing program 4 (id=7930): setreuid(0xee00, 0x0) setpriority(0x2, 0x0, 0xd2f4) 17.61268ms ago: executing program 4 (id=7931): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0) 0s ago: executing program 5 (id=7932): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) kernel console output (not intermixed with test programs): rite err: -5, ino 4 [ 473.173269][T18249] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.185103][ T9] hfsplus: b-tree write err: -5, ino 2 [ 473.285074][T18249] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 473.324535][T12713] XFS (loop5): Unmounting Filesystem [ 473.498880][T18261] loop6: detected capacity change from 0 to 256 [ 473.815414][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 473.815430][ T26] audit: type=1400 audit(1781282606.362:365): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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loop0: detected capacity change from 0 to 512 [ 474.170827][T18276] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 474.223132][ T4315] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 474.256179][T18276] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.6005: bg 0: block 5: invalid block bitmap [ 474.278964][T18276] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 474.293113][T18276] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.6005: invalid indirect mapped block 3 (level 2) [ 474.310868][T18276] EXT4-fs (loop0): 2 truncates cleaned up [ 474.317061][T18276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 474.371617][T18286] netlink: 'syz.3.6009': attribute type 10 has an invalid length. [ 474.426148][ T4315] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 474.451478][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.466605][T18292] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6012'. [ 474.489399][ T4315] usb 5-1: config 0 descriptor?? [ 474.499110][ T4315] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 474.619639][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 474.902684][T18310] loop5: detected capacity change from 0 to 128 [ 474.910341][ T4315] gspca_cpia1: usb_control_msg 03, error -71 [ 474.933408][ T4315] gspca_cpia1: usb_control_msg 01, error -71 [ 474.939456][ T4315] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 474.995477][ T4315] usb 5-1: USB disconnect, device number 22 [ 475.129245][T18315] ALSA: mixer_oss: invalid OSS volume ' €' [ 475.369220][T18330] netlink: 'syz.5.6028': attribute type 1 has an invalid length. [ 475.370313][T18329] netlink: 'syz.6.6030': attribute type 8 has an invalid length. [ 475.536930][T18324] loop3: detected capacity change from 0 to 4096 [ 475.624415][T18324] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 475.710917][T18324] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 475.819700][ T5188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.994269][T18346] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6038'. [ 476.022520][T18348] loop4: detected capacity change from 0 to 256 [ 476.057826][T18348] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 476.058180][T18346] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6038'. [ 476.141498][T18346] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6038'. [ 476.874354][T18349] loop3: detected capacity change from 0 to 32768 [ 476.988023][T18373] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 477.012877][ T4319] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 477.079812][T18373] ntfs3: loop5: failed to convert "c46c" to macceltic [ 477.093663][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.192884][ T4319] usb 7-1: Using ep0 maxpacket: 32 [ 477.199916][ T4319] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 477.236943][ T4319] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.277786][ T4319] usb 7-1: config 0 has no interface number 0 [ 477.298063][ T4319] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.359441][ T4319] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 477.396089][ T4319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.432168][ T4319] usb 7-1: Product: syz [ 477.457866][ T4319] usb 7-1: Manufacturer: syz [ 477.462532][ T4319] usb 7-1: SerialNumber: syz [ 477.508566][ T4319] usb 7-1: config 0 descriptor?? [ 477.509853][T18381] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 477.543338][ T4319] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 477.591550][ T4319] radio-si470x: probe of 7-1:0.35 failed with error -5 [ 477.600815][T18381] ntfs3: loop0: Failed to load $Extend. [ 477.746181][ T4319] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 477.754233][T18372] jfs_lookup: dtSearch returned -5 [ 477.764161][T18388] [U]  [ 477.764356][ T4319] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 477.873359][T18391] netlink: 'syz.3.6060': attribute type 8 has an invalid length. [ 478.019427][ T4315] usb 7-1: USB disconnect, device number 6 [ 478.019835][T18396] netlink: 'syz.5.6063': attribute type 21 has an invalid length. [ 478.380476][T18403] set_capacity_and_notify: 3 callbacks suppressed [ 478.380492][T18403] loop0: detected capacity change from 0 to 4096 [ 478.431981][T18403] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 478.740895][T18416] loop5: detected capacity change from 0 to 1024 [ 478.926855][T18432] netlink: 288 bytes leftover after parsing attributes in process `syz.6.6078'. [ 478.931889][T18416] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 479.165900][ T26] audit: type=1326 audit(1781282611.712:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.3.6083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1253f9ce59 code=0x7ffc0000 [ 479.267508][ T26] audit: type=1326 audit(1781282611.712:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.3.6083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f1253f9ce59 code=0x7ffc0000 [ 479.348814][T12713] EXT4-fs (loop5): unmounting filesystem. [ 479.386901][ T26] audit: type=1326 audit(1781282611.712:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.3.6083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1253f9ce59 code=0x7ffc0000 [ 479.470679][ T26] audit: type=1326 audit(1781282611.712:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18440 comm="syz.3.6083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1253f9ce59 code=0x7ffc0000 [ 479.592111][T18456] loop0: detected capacity change from 0 to 512 [ 479.614822][T18456] EXT4-fs: Ignoring removed nobh option [ 479.620440][T18456] EXT4-fs: inline encryption not supported [ 479.689484][T18456] EXT4-fs (loop0): orphan cleanup on readonly fs [ 479.707680][T18456] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.6090: casefold flag without casefold feature [ 479.780465][T18456] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.6090: error while reading EA inode 11 err=-117 [ 479.812776][T18456] EXT4-fs (loop0): 1 orphan inode deleted [ 479.821893][T18456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 480.047470][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 480.122693][ T5868] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 480.161465][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6100'. [ 480.270924][T18480] loop4: detected capacity change from 0 to 512 [ 480.294117][T18484] Cannot find map_set index 65503 as target [ 480.314167][T18480] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 480.324424][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.333615][T18480] EXT4-fs (loop4): orphan cleanup on readonly fs [ 480.358134][ T5868] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 480.363070][T18480] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 480.386352][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.402654][ T5868] usb 4-1: Product: syz [ 480.407111][ T5868] usb 4-1: Manufacturer: syz [ 480.411727][ T5868] usb 4-1: SerialNumber: syz [ 480.419199][ T5868] usb 4-1: config 0 descriptor?? [ 480.427182][ T5868] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 480.433826][ T5868] usb 4-1: No valid video chain found. [ 480.510588][T18480] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 480.541936][T18480] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 480.561984][T18480] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.6101: bg 0: block 15: invalid block bitmap [ 480.585264][T18480] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 480.602906][T18480] EXT4-fs (loop4): 1 truncate cleaned up [ 480.608618][T18480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 480.679665][ T5868] usb 4-1: USB disconnect, device number 33 [ 480.700854][T18480] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.6101: bad symlink. [ 480.804669][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 480.878376][T18495] loop6: detected capacity change from 0 to 4096 [ 480.903195][T18495] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 480.935277][ T5188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.002936][T18482] loop5: detected capacity change from 0 to 32768 [ 481.324724][T18502] loop0: detected capacity change from 0 to 4096 [ 481.389939][T18502] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 481.499658][T18502] ntfs3: loop0: ino=5, "/" directory corrupted [ 481.513496][T18510] loop4: detected capacity change from 0 to 256 [ 481.546676][ T5868] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 481.734506][ T5868] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 481.770039][ T5868] usb 7-1: config 0 has no interface number 0 [ 481.782669][ T5868] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 22765, setting to 64 [ 481.826189][ T5868] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 481.862152][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 481.900959][ T5868] usb 7-1: Manufacturer: syz [ 481.918227][ T5868] usb 7-1: SerialNumber: syz [ 481.953538][ T5868] usb 7-1: config 0 descriptor?? [ 481.959218][T18506] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 482.177572][T18534] xt_HMARK: spi-set and port-set can't be combined [ 482.190896][ T5868] usbtouchscreen 7-1:0.214: Failed to read FW rev: -71 [ 482.209489][ T5868] usbtouchscreen: probe of 7-1:0.214 failed with error -71 [ 482.225058][ T5868] usb 7-1: USB disconnect, device number 7 [ 482.302550][ T4315] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 482.324114][T18538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 482.331442][T18538] IPv6: NLM_F_CREATE should be set when creating new route [ 482.338760][T18538] IPv6: NLM_F_CREATE should be set when creating new route [ 482.522546][ T4315] usb 4-1: Using ep0 maxpacket: 16 [ 482.529530][ T4315] usb 4-1: config 3 has an invalid interface number: 231 but max is 0 [ 482.562584][ T4315] usb 4-1: config 3 has no interface number 0 [ 482.568737][ T4315] usb 4-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 482.606560][ T4315] usb 4-1: config 3 interface 231 has no altsetting 0 [ 482.633142][ T4315] usb 4-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 482.661974][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.682227][T18554] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6136'. [ 482.690715][ T4315] usb 4-1: Product: syz [ 482.700313][ T4315] usb 4-1: Manufacturer: syz [ 482.722602][ T4315] usb 4-1: SerialNumber: syz [ 482.853363][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.965973][ T4315] kvaser_usb 4-1:3.231: Cannot get usb endpoint(s) [ 483.007427][ T4315] usb 4-1: USB disconnect, device number 34 [ 483.020867][T18564] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6143'. [ 483.341592][T18578] loop6: detected capacity change from 0 to 512 [ 483.352802][T18578] EXT4-fs: inline encryption not supported [ 483.382197][T18578] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 483.426731][T18578] EXT4-fs (loop6): orphan cleanup on readonly fs [ 483.440870][T18578] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.6149: inode #15: comm syz.6.6149: iget: illegal inode # [ 483.454568][T18578] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.6149: couldn't read orphan inode 15 (err -117) [ 483.470727][T18578] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 483.487875][T18578] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 483.517831][T18578] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 483.563443][T15843] EXT4-fs (loop6): unmounting filesystem. [ 484.052640][T18603] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 484.262124][T18576] loop0: detected capacity change from 0 to 32768 [ 484.287486][T18576] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.6148 (18576) [ 484.388799][T18576] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 484.401948][T18618] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.6167'. [ 484.414944][T18576] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 484.482910][T18576] BTRFS info (device loop0): enabling auto defrag [ 484.489419][T18576] BTRFS info (device loop0): force clearing of disk cache [ 484.528759][T18576] BTRFS info (device loop0): ignoring data csums [ 484.583087][T18576] BTRFS info (device loop0): turning on async discard [ 484.590713][T18576] BTRFS info (device loop0): setting nodatacow, compression disabled [ 484.685776][T18576] BTRFS info (device loop0): turning off async discard [ 484.746199][T18576] BTRFS info (device loop0): disabling free space tree [ 485.071231][T18650] SET target dimension over the limit! [ 485.423873][T18678] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 485.458208][ T4286] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 485.658812][T18683] loop3: detected capacity change from 0 to 764 [ 485.704120][ T4267] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (4267) [ 485.751391][T18683] Symlink component flag not implemented [ 485.774137][T18683] Symlink component flag not implemented [ 485.780972][T18683] Symlink component flag not implemented (128) [ 485.832604][T18683] Symlink component flag not implemented (122) [ 486.054773][ T5188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.589104][T18713] loop4: detected capacity change from 0 to 4096 [ 486.696979][T18713] ntfs: volume version 3.1. [ 486.944173][T18727] loop3: detected capacity change from 0 to 256 [ 487.024472][T18727] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 487.071326][T18727] FAT-fs (loop3): Filesystem has been set read-only [ 487.111932][T18727] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 487.658824][T18760] loop5: detected capacity change from 0 to 256 [ 487.697960][T18760] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 488.123532][T18773] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.391393][T18782] loop5: detected capacity change from 0 to 4096 [ 488.440055][T18782] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 488.616214][ T5188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.978446][T18780] loop0: detected capacity change from 0 to 32768 [ 489.106680][T18812] loop5: detected capacity change from 0 to 512 [ 489.139932][T18780] XFS (loop0): Mounting V5 Filesystem [ 489.266522][T18812] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 489.296641][T18780] XFS (loop0): Ending clean mount [ 489.332615][ T5867] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 489.337869][T18812] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.404035][T12713] EXT4-fs (loop5): unmounting filesystem. [ 489.507700][T18831] loop4: detected capacity change from 0 to 512 [ 489.521490][ T4286] XFS (loop0): Unmounting Filesystem [ 489.545304][T18835] netlink: 300 bytes leftover after parsing attributes in process `syz.5.6256'. [ 489.550024][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.573586][ T5867] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 489.585728][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.601796][ T5867] usb 4-1: config 0 descriptor?? [ 489.628035][T18831] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 489.652750][T18831] ext4 filesystem being mounted at /1268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.015943][ T5867] ath6kl: Failed to read usb control message: -71 [ 490.016380][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 490.032445][ T5867] ath6kl: Unable to read the bmi data from the device: -71 [ 490.060154][ T5867] ath6kl: Unable to recv target info: -71 [ 490.092763][ T5867] ath6kl: Failed to init ath6kl core: -71 [ 490.169574][ T5867] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 490.199024][ T5867] usb 4-1: USB disconnect, device number 35 [ 490.279785][ T26] audit: type=1326 audit(1781282622.823:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.0.6266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 490.352227][ T26] audit: type=1326 audit(1781282622.823:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.0.6266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 490.376232][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.409322][T18860] netlink: 45 bytes leftover after parsing attributes in process `syz.6.6268'. [ 490.446380][ T26] audit: type=1326 audit(1781282622.823:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.0.6266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 490.500446][ T26] audit: type=1326 audit(1781282622.823:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18855 comm="syz.0.6266" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 490.524607][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.542179][ T2190] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 490.569150][T18866] netlink: 'syz.6.6271': attribute type 4 has an invalid length. [ 490.752377][ T2190] usb 6-1: unable to get BOS descriptor or descriptor too short [ 490.778539][ T2190] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 490.812112][ T2190] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 490.843726][T18875] loop3: detected capacity change from 0 to 2048 [ 490.860395][ T2190] usb 6-1: config 1 interface 0 has no altsetting 0 [ 490.868595][ T2190] usb 6-1: config 1 interface 0 has no altsetting 1 [ 490.902065][ T2190] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 490.911797][T18879] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 490.929983][T18875] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 490.962872][ T2190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.989071][ T2190] usb 6-1: Product: syz [ 491.013836][T18875] Remounting filesystem read-only [ 491.019771][ T2190] usb 6-1: Manufacturer: syz [ 491.058110][ T2190] usb 6-1: SerialNumber: syz [ 491.172789][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.293600][ T2190] smsusb:smsusb_probe: board id=8, interface number 0 [ 491.300550][ T2190] usb 6-1: selecting invalid altsetting 0 [ 491.332072][ T2190] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 491.339136][ T2190] smsusb: probe of 6-1:1.0 failed with error -22 [ 491.374435][ T2190] usb 6-1: USB disconnect, device number 7 [ 491.486501][T18893] loop4: detected capacity change from 0 to 2048 [ 491.607695][T18901] loop0: detected capacity change from 0 to 64 [ 491.738672][T18893] hpfs: filesystem error: improperly stopped; already mounted read-only [ 491.764420][T18893] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 491.790124][T18893] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000 [ 491.912944][T18907] loop6: detected capacity change from 0 to 512 [ 492.011185][T18907] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 492.032170][T18907] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.300134][T18921] netlink: 8192 bytes leftover after parsing attributes in process `syz.5.6298'. [ 492.328901][T15843] EXT4-fs (loop6): unmounting filesystem. [ 492.345625][T18899] loop3: detected capacity change from 0 to 32768 [ 492.466107][T18925] loop4: detected capacity change from 0 to 16 [ 492.512787][T18925] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 493.005444][T18945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6303'. [ 493.081598][T18945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6303'. [ 493.096877][T18949] loop5: detected capacity change from 0 to 512 [ 493.167837][T18949] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 493.759309][T18973] loop5: detected capacity change from 0 to 24 [ 493.780043][T18973] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 493.827906][T18973] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 493.883780][T18981] openvswitch: netlink: Key type 316 is out of range max 32 [ 493.915302][T18973] cifs: Unknown parameter 'ªº¾qiÎÓg½ªÉýæ³ÖÞÆ¿íT^°Œ'¡é)' [ 494.372800][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.563094][T19009] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6341'. [ 495.615299][T19058] loop0: detected capacity change from 0 to 64 [ 495.699153][T19059] loop6: detected capacity change from 0 to 4096 [ 495.802151][T19063] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.809550][T19059] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 496.032073][T19069] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6371'. [ 496.099368][T19077] nfs: Unknown parameter 'ntext' [ 496.192135][T19081] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6376'. [ 496.246211][T19083] loop5: detected capacity change from 0 to 8192 [ 496.461538][T19088] netlink: 'syz.4.6380': attribute type 39 has an invalid length. [ 496.932206][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.081834][ T2190] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 497.271889][ T2190] usb 6-1: Using ep0 maxpacket: 16 [ 497.293738][ T2190] usb 6-1: unable to get BOS descriptor or descriptor too short [ 497.329565][ T2190] usb 6-1: config 4 has an invalid interface number: 40 but max is 0 [ 497.371010][ T2190] usb 6-1: config 4 has no interface number 0 [ 497.397674][ T2190] usb 6-1: config 4 interface 40 altsetting 129 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 497.411990][ T2190] usb 6-1: config 4 interface 40 altsetting 129 endpoint 0xD has invalid maxpacket 503, setting to 64 [ 497.463608][ T2190] usb 6-1: config 4 interface 40 has no altsetting 0 [ 497.473736][ T2190] usb 6-1: New USB device found, idVendor=134c, idProduct=0003, bcdDevice= 6.24 [ 497.513855][T19133] netlink: 'syz.6.6402': attribute type 21 has an invalid length. [ 497.518177][ T2190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.530205][ T2190] usb 6-1: Product: syz [ 497.540533][ T2190] usb 6-1: Manufacturer: syz [ 497.545477][T19133] IPv6: NLM_F_CREATE should be specified when creating new route [ 497.561869][ T2190] usb 6-1: SerialNumber: syz [ 497.567488][T19138] loop0: detected capacity change from 0 to 256 [ 497.596861][T19138] exfat: Deprecated parameter 'namecase' [ 497.634767][ T5867] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 497.667375][T19138] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 497.748830][T19142] loop6: detected capacity change from 0 to 2048 [ 497.808222][ T2190] usb 6-1: USB disconnect, device number 8 [ 497.828162][ T5867] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.859103][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 497.963623][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 498.008924][ T5867] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 498.037700][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 498.076765][ T5867] usb 4-1: Product: syz [ 498.087918][ T5867] usb 4-1: Manufacturer: syz [ 498.098852][ T5867] usb 4-1: SerialNumber: syz [ 498.108228][ T5867] usb 4-1: config 0 descriptor?? [ 498.123426][ T5867] usb 4-1: no audio or video endpoints found [ 498.230382][ T26] audit: type=1326 audit(1781282630.774:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19157 comm="syz.0.6413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 498.301786][ T26] audit: type=1326 audit(1781282630.784:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19157 comm="syz.0.6413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 498.325903][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.385123][ T5867] usb 4-1: USB disconnect, device number 36 [ 498.480883][ T26] audit: type=1326 audit(1781282630.784:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19157 comm="syz.0.6413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 498.505059][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.564570][ T26] audit: type=1326 audit(1781282630.784:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19157 comm="syz.0.6413" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 498.588662][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.755299][T19178] kAFS: unable to lookup cell '.,' [ 499.120369][ T26] audit: type=1400 audit(1781282631.664:378): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=19192 comm="syz.3.6429" [ 499.139169][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.492041][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.099657][T19243] loop0: detected capacity change from 0 to 512 [ 500.186666][T19243] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 500.198789][T19243] ext4 filesystem being mounted at /1244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.262089][T19250] loop6: detected capacity change from 0 to 1024 [ 500.337604][T19243] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #15: comm syz.0.6452: corrupted xattr block 33 [ 500.414239][T19243] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -74) [ 500.595475][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 500.821754][ T5867] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 501.014205][ T5867] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.037905][ T5867] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 501.091208][ T5867] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.137576][ T5867] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.157275][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.192358][ T5867] usb 7-1: Product: syz [ 501.196583][ T5867] usb 7-1: Manufacturer: syz [ 501.219053][ T5867] usb 7-1: SerialNumber: syz [ 501.226128][T19287] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 501.261310][ T5867] cdc_mbim 7-1:1.0: MBIM functional descriptor missing [ 501.290755][ T5867] cdc_mbim 7-1:1.0: bind() failure [ 501.415430][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.422376][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.625302][T19305] loop3: detected capacity change from 0 to 256 [ 501.664093][T19305] exfat: Deprecated parameter 'utf8' [ 501.669515][T19305] exfat: Deprecated parameter 'namecase' [ 501.718935][T19305] exfat: Deprecated parameter 'namecase' [ 501.786038][T19305] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 501.889573][T19305] overlayfs: filesystem on './file0' not supported [ 501.988636][ T2190] usb 7-1: USB disconnect, device number 8 [ 502.290410][T19331] netlink: 'syz.3.6494': attribute type 21 has an invalid length. [ 502.329212][T19331] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6494'. [ 502.369959][T19331] netlink: 'syz.3.6494': attribute type 4 has an invalid length. [ 502.404642][T19331] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6494'. [ 502.521489][ T5867] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 502.653375][T19347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6510'. [ 502.687980][T19347] netlink: 7 bytes leftover after parsing attributes in process `syz.4.6510'. [ 502.692198][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.751408][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 502.758399][ T5867] usb 6-1: config 254 has an invalid interface number: 235 but max is 0 [ 502.771414][ T5867] usb 6-1: config 254 has no interface number 0 [ 502.782199][ T5867] usb 6-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 502.800306][ T5867] usb 6-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.811748][ T5867] usb 6-1: config 254 interface 235 has no altsetting 0 [ 502.833168][ T5867] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 502.861384][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 502.870112][ T5867] usb 6-1: Product: syz [ 502.880244][ T5867] usb 6-1: Manufacturer: syz [ 502.910637][ T5867] usb 6-1: SerialNumber: syz [ 502.919581][T19328] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 502.930401][T19356] device ipip0 entered promiscuous mode [ 502.935246][T19358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6506'. [ 502.942856][T19352] loop3: detected capacity change from 0 to 8192 [ 502.975181][T19352] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 502.984995][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6506'. [ 503.007614][T19352] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 503.021801][T19352] REISERFS (device loop3): using ordered data mode [ 503.038192][T19352] reiserfs: using flush barriers [ 503.043581][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6506'. [ 503.055557][T19352] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 503.153529][T19328] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 503.161853][T19352] REISERFS (device loop3): checking transaction log (loop3) [ 503.162319][ T5867] usbtest 6-1:254.235: Linux gadget zero [ 503.175727][ T5867] usbtest 6-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 503.444653][ T5867] usb 6-1: USB disconnect, device number 9 [ 503.480904][T19352] REISERFS (device loop3): Using tea hash to sort names [ 503.507838][T19352] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 505.254112][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 505.421485][T19452] netlink: 'syz.5.6554': attribute type 27 has an invalid length. [ 505.422337][T19454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6553'. [ 505.651550][T19465] netlink: 'syz.0.6559': attribute type 1 has an invalid length. [ 505.739645][T19466] loop3: detected capacity change from 0 to 2048 [ 505.809127][T19466] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 505.911385][T19476] netlink: 'syz.4.6565': attribute type 32 has an invalid length. [ 506.039107][T19478] netlink: 'syz.5.6568': attribute type 1 has an invalid length. [ 506.092625][T19478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6568'. [ 506.380281][T19495] loop4: detected capacity change from 0 to 1764 [ 506.391602][T19488] loop6: detected capacity change from 0 to 4096 [ 506.420219][T19488] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 506.511797][T19495] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 506.607361][T19488] ntfs3: loop6: ino=1f, "file2" failed to open parent directory r=5 to update [ 506.782629][ T11] ntfs3: loop6: ino=1f, failed to open parent directory r=5 to update [ 506.961069][T19511] overlayfs: conflicting options: userxattr,redirect_dir=off [ 506.989716][T19514] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 507.014955][T19514] FAT-fs (loop4): unable to read boot sector [ 507.092642][T19515] loop3: detected capacity change from 0 to 2048 [ 507.169783][T19515] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.598486][T19531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6592'. [ 507.637210][T19533] netlink: 'syz.5.6593': attribute type 10 has an invalid length. [ 507.691340][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.705291][T19533] team0: Device wg1 is of different type [ 507.789216][T19509] loop0: detected capacity change from 0 to 32768 [ 507.889494][T19549] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6599'. [ 507.952070][T19509] XFS (loop0): Mounting V5 Filesystem [ 508.100417][T19509] XFS (loop0): Ending clean mount [ 508.210002][ T4286] XFS (loop0): Unmounting Filesystem [ 508.210544][T19562] loop5: detected capacity change from 0 to 16 [ 508.296761][T19562] erofs: (device loop5): mounted with root inode @ nid 36. [ 508.452017][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.591275][ T2190] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 508.791769][ T2190] usb 7-1: Using ep0 maxpacket: 8 [ 508.805396][ T2190] usb 7-1: unable to get BOS descriptor or descriptor too short [ 508.832414][ T2190] usb 7-1: config 4 interface 0 has no altsetting 0 [ 508.860342][ T2190] usb 7-1: string descriptor 0 read error: -22 [ 508.869674][ T2190] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 508.901936][ T2190] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 508.934301][ T2190] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 508.999458][ T2190] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 509.041583][ T2190] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 509.055295][ T2190] usb 7-1: media controller created [ 509.133452][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6616'. [ 509.149447][ T2190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.177521][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6616'. [ 509.411337][T19599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6621'. [ 509.503237][ T2190] usb 7-1: USB disconnect, device number 9 [ 509.610239][T19605] binder: 19604:19605 ioctl c00c620f 200000000100 returned -22 [ 509.749808][T19607] xt_CT: No such helper "snmp_trap" [ 510.241276][T19635] netlink: 'syz.5.6639': attribute type 1 has an invalid length. [ 510.249065][T19635] netlink: 'syz.5.6639': attribute type 2 has an invalid length. [ 510.501852][T19646] ip6t_srh: unknown srh invflags 4000 [ 510.513371][T19648] program syz.0.6645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.641049][ T2190] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 510.753139][T19658] loop5: detected capacity change from 0 to 1764 [ 510.841033][ T2190] usb 7-1: Using ep0 maxpacket: 16 [ 510.848518][ T2190] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.878472][ T2190] usb 7-1: config 0 has no interface number 0 [ 510.909262][ T2190] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 510.945427][ T2190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.984090][ T2190] usb 7-1: Product: syz [ 510.988366][ T2190] usb 7-1: Manufacturer: syz [ 511.014461][ T2190] usb 7-1: SerialNumber: syz [ 511.035602][ T2190] usb 7-1: config 0 descriptor?? [ 511.061589][ T2190] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 511.449981][ T2190] gspca_spca1528: reg_w err -71 [ 511.481003][ T2190] spca1528: probe of 7-1:0.1 failed with error -71 [ 511.499441][ T2190] usb 7-1: USB disconnect, device number 10 [ 512.207247][T19682] loop0: detected capacity change from 0 to 32768 [ 512.823535][ T5867] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 513.021086][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 513.028116][ T5867] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 513.069888][ T5867] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 513.099549][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.129941][ T5867] usb 7-1: Product: syz [ 513.140436][ T5867] usb 7-1: Manufacturer: syz [ 513.151501][ T5867] usb 7-1: SerialNumber: syz [ 513.177895][ T5867] r8152-cfgselector 7-1: config 0 descriptor?? [ 513.341003][ T5868] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 513.516534][T19746] trusted_key: encrypted_key: master key parameter is missing [ 513.534789][ T5868] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 513.561183][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.569290][ T5868] usb 4-1: Product: syz [ 513.605202][ T5867] r8152-cfgselector 7-1: Unknown version 0x0000 [ 513.626382][ T5867] r8152-cfgselector 7-1: USB disconnect, device number 11 [ 513.633850][ T5868] usb 4-1: Manufacturer: syz [ 513.638481][ T5868] usb 4-1: SerialNumber: syz [ 513.668704][ T5868] usb 4-1: config 0 descriptor?? [ 513.816631][T19754] netlink: 'syz.0.6698': attribute type 2 has an invalid length. [ 513.889991][ T5868] int51x1: probe of 4-1:0.0 failed with error -22 [ 513.906339][T19758] netlink: 'syz.5.6699': attribute type 10 has an invalid length. [ 513.941203][T19758] team0: Device hsr_slave_0 failed to register rx_handler [ 514.099462][ T5868] usb 4-1: USB disconnect, device number 37 [ 514.213424][ T5188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.714323][T19792] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6717'. [ 514.865416][T19798] loop6: detected capacity change from 0 to 256 [ 514.954793][T19798] FAT-fs (loop6): Directory bread(block 64) failed [ 514.986133][T19798] FAT-fs (loop6): Directory bread(block 65) failed [ 515.012151][T19798] FAT-fs (loop6): Directory bread(block 66) failed [ 515.051513][T19798] FAT-fs (loop6): Directory bread(block 67) failed [ 515.058391][T19798] FAT-fs (loop6): Directory bread(block 68) failed [ 515.114401][T19798] FAT-fs (loop6): Directory bread(block 69) failed [ 515.140921][T19798] FAT-fs (loop6): Directory bread(block 70) failed [ 515.147507][T19798] FAT-fs (loop6): Directory bread(block 71) failed [ 515.215837][T19798] FAT-fs (loop6): Directory bread(block 72) failed [ 515.240829][T19798] FAT-fs (loop6): Directory bread(block 73) failed [ 516.036407][T19842] loop0: detected capacity change from 0 to 1024 [ 516.063179][T19842] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 516.063179][T19842] [ 516.063236][T19842] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 516.351530][ T2190] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 516.517062][T19859] loop3: detected capacity change from 0 to 8 [ 516.519491][T19832] loop4: detected capacity change from 0 to 32768 [ 516.560703][ T2190] usb 1-1: Using ep0 maxpacket: 8 [ 516.581795][ T2190] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 516.608804][ T2190] usb 1-1: config 135 has an invalid descriptor of length 128, skipping remainder of the config [ 516.637798][ T2190] usb 1-1: config 135 has no interface number 0 [ 516.646902][ T2190] usb 1-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 516.659611][T19832] ea_get: invalid extended attribute [ 516.711549][ T2190] usb 1-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 516.715282][T19859] SQUASHFS error: lzo decompression failed, data probably corrupt [ 516.726160][ T2190] usb 1-1: config 135 interface 230 has no altsetting 0 [ 516.768318][T19859] SQUASHFS error: Failed to read block 0x1c0: -5 [ 516.779305][ T2190] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 516.787707][T19859] SQUASHFS error: Unable to read metadata cache entry [1be] [ 516.819160][ T2190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.839393][ T2190] usb 1-1: Product: syz [ 516.860803][ T2190] usb 1-1: Manufacturer: syz [ 516.865499][ T2190] usb 1-1: SerialNumber: syz [ 517.105662][ T2190] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 517.128726][ T2190] usb 1-1: No valid video chain found. [ 517.150753][ T2190] usb 1-1: USB disconnect, device number 23 [ 517.281196][T19879] netlink: 'syz.6.6760': attribute type 6 has an invalid length. [ 517.308192][ T26] audit: type=1326 audit(1781282649.855:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19880 comm="syz.3.6761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1253f9ce59 code=0x7ffc0000 [ 517.416321][ T26] audit: type=1326 audit(1781282649.865:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19880 comm="syz.3.6761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1253f9ce59 code=0x7ffc0000 [ 517.439444][T19885] netlink: 755 bytes leftover after parsing attributes in process `syz.3.6764'. [ 517.460628][ T26] audit: type=1326 audit(1781282649.865:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19880 comm="syz.3.6761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1253f9ce59 code=0x7ffc0000 [ 517.538259][ T26] audit: type=1326 audit(1781282649.865:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19880 comm="syz.3.6761" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1253f9ce59 code=0x7ffc0000 [ 517.572378][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6766'. [ 517.581606][T19889] netlink: 'syz.5.6766': attribute type 1 has an invalid length. [ 517.589364][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6766'. [ 518.040372][T19909] loop3: detected capacity change from 0 to 512 [ 518.129789][T19909] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.6776: bad orphan inode 15 [ 518.157177][T19909] ext4_test_bit(bit=14, block=5) = 0 [ 518.183160][T19909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 518.264545][T19909] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.6776: reserved inode found cleared - inode=1 [ 518.383643][ T2190] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 518.425375][ T2190] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 518.476774][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 518.563854][T19931] loop5: detected capacity change from 0 to 1024 [ 518.621385][T19931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.628080][T19931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 518.675928][T19931] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 518.720420][T19935] loop4: detected capacity change from 0 to 2048 [ 518.727545][T19931] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 518.791738][T19935] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=301129, location=301129 [ 518.804671][T19929] fido_id[19929]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 518.860993][T19931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 518.972057][T12713] EXT4-fs (loop5): unmounting filesystem. [ 518.995675][T19935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.308488][T19955] sctp: [Deprecated]: syz.6.6796 (pid 19955) Use of int in maxseg socket option. [ 519.308488][T19955] Use struct sctp_assoc_value instead [ 519.433859][T19960] loop4: detected capacity change from 0 to 256 [ 519.459466][T19960] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.521437][T19960] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 519.563168][T19960] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 519.971066][T17027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.052763][T19948] loop5: detected capacity change from 0 to 32768 [ 520.661080][T19992] loop5: detected capacity change from 0 to 8192 [ 520.723605][T19992] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 520.790207][T19992] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 520.821069][T19992] REISERFS (device loop5): using ordered data mode [ 520.863752][T20007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6821'. [ 520.873234][T20007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6821'. [ 520.921411][T19992] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 520.997879][T20011] loop4: detected capacity change from 0 to 512 [ 521.018099][T19992] REISERFS (device loop5): checking transaction log (loop5) [ 521.067763][T20011] EXT4-fs (loop4): orphan cleanup on readonly fs [ 521.091151][T19992] REISERFS (device loop5): Using r5 hash to sort names [ 521.099034][T19980] loop6: detected capacity change from 0 to 32768 [ 521.110478][T20011] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 521.148240][T19980] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 521.148240][T19980] [ 521.158672][T19980] xtLookup: xtSearch returned -5 [ 521.163806][T19980] free_index: error reading directory table [ 521.169871][T19980] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 521.169871][T19980] [ 521.180470][T19980] xtLookup: xtSearch returned -5 [ 521.185467][T19980] free_index: error reading directory table [ 521.201006][T20011] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 521.210989][T19992] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 521.234060][T20011] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.6823: attempt to clear invalid blocks 2 len 1 [ 521.243251][T19980] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 521.243251][T19980] [ 521.266587][T20011] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6823: invalid indirect mapped block 1819239214 (level 0) [ 521.310535][T19992] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 521.347310][T19980] xtLookup: xtSearch returned -5 [ 521.357617][T20016] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 521.367969][T20011] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6823: invalid indirect mapped block 1819239214 (level 1) [ 521.369224][T19980] free_index: error reading directory table [ 521.422339][T20011] EXT4-fs (loop4): 1 truncate cleaned up [ 521.440503][T20011] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 521.454652][T19980] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 521.454652][T19980] [ 521.509572][T19980] xtLookup: xtSearch returned -5 [ 521.529549][T20011] EXT4-fs error (device loop4): __ext4_remount:6650: comm syz.4.6823: Abort forced by user [ 521.554452][T19980] free_index: error reading directory table [ 521.597228][T19980] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 521.597228][T19980] [ 521.618864][T19980] xtLookup: xtSearch returned -5 [ 521.624214][T20011] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 521.641585][T19980] free_index: error reading directory table [ 521.647515][T19980] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 521.647515][T19980] [ 521.708482][T19980] xtLookup: xtSearch returned -5 [ 521.723896][T19980] add_index: get/read_metapage failed! [ 521.729434][T19980] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 521.729434][T19980] [ 521.761847][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 521.779454][T19980] xtLookup: xtSearch returned -5 [ 521.829123][T19980] free_index: error reading directory table [ 521.868251][T19980] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 521.868251][T19980] [ 521.908229][T19980] xtLookup: xtSearch returned -5 [ 521.914424][T19980] free_index: error reading directory table [ 521.921770][T19980] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 521.921770][T19980] [ 521.932025][T19980] xtLookup: xtSearch returned -5 [ 521.936983][T19980] free_index: error reading directory table [ 521.943156][T19980] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 521.943156][T19980] [ 521.953472][T19980] xtLookup: xtSearch returned -5 [ 521.958997][T19980] free_index: error reading directory table [ 521.965303][T19980] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 521.965303][T19980] [ 521.976161][T19980] xtLookup: xtSearch returned -5 [ 521.981251][T19980] free_index: error reading directory table [ 522.000805][ T5868] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 522.138424][T20033] loop3: detected capacity change from 0 to 1024 [ 522.155999][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6834'. [ 522.166836][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6834'. [ 522.201935][ T5868] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 522.227289][ T5868] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 522.284094][ T5868] usb 1-1: config 220 has no interface number 2 [ 522.314041][ T5868] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 522.341036][ T5868] usb 1-1: config 220 interface 0 has no altsetting 0 [ 522.368568][ T5868] usb 1-1: config 220 interface 76 has no altsetting 0 [ 522.406187][ T5868] usb 1-1: config 220 interface 1 has no altsetting 0 [ 522.414889][T20042] loop5: detected capacity change from 0 to 1024 [ 522.443259][ T5868] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 522.469141][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.482590][T20042] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 522.498856][ T5868] usb 1-1: Product: syz [ 522.520741][ T5868] usb 1-1: Manufacturer: syz [ 522.525398][ T5868] usb 1-1: SerialNumber: syz [ 522.572283][T20045] xt_cgroup: path and classid specified [ 522.780630][ T5868] usb 1-1: selecting invalid altsetting 0 [ 522.786967][ T5868] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 522.820563][ T5868] usb 1-1: No valid video chain found. [ 522.869212][ T5868] usb 1-1: selecting invalid altsetting 0 [ 522.880495][ T5868] usbtest: probe of 1-1:220.1 failed with error -22 [ 522.928022][ T5868] usb 1-1: USB disconnect, device number 24 [ 523.208110][ T26] audit: type=1326 audit(1781282655.755:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.4.6851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac9b9ce59 code=0x7ffc0000 [ 523.270361][ T26] audit: type=1326 audit(1781282655.805:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.4.6851" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdac9b9ce59 code=0x7ffc0000 [ 524.221056][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6869'. [ 524.697751][T20128] wg1 speed is unknown, defaulting to 1000 [ 524.729912][T20128] wg1 speed is unknown, defaulting to 1000 [ 524.753812][T20128] wg1 speed is unknown, defaulting to 1000 [ 524.803250][T20128] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 524.879311][T20128] wg1 speed is unknown, defaulting to 1000 [ 524.914168][T20128] wg1 speed is unknown, defaulting to 1000 [ 524.934355][T20128] wg1 speed is unknown, defaulting to 1000 [ 524.965482][T20128] wg1 speed is unknown, defaulting to 1000 [ 524.992486][T20128] wg1 speed is unknown, defaulting to 1000 [ 525.011737][T20136] overlayfs: missing 'lowerdir' [ 525.110415][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.283394][T20147] loop5: detected capacity change from 0 to 16 [ 525.336080][T20147] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 526.006199][T20175] loop0: detected capacity change from 0 to 16 [ 526.047843][T20175] erofs: (device loop0): mounted with root inode @ nid 36. [ 526.101757][T20175] syz.0.6903: attempt to access beyond end of device [ 526.101757][T20175] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 526.159154][T20175] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 526.175755][T20175] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 526.199685][T20175] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 526.216771][T20175] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 526.226757][T20175] syz.0.6903: attempt to access beyond end of device [ 526.226757][T20175] loop0: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 526.265413][T20175] syz.0.6903: attempt to access beyond end of device [ 526.265413][T20175] loop0: rw=524288, sector=32, nr_sectors = 24 limit=16 [ 526.299944][T20175] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -35 in[46, 4050] out[8192] [ 526.354076][ T26] audit: type=1800 audit(1781282658.905:385): pid=20175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6903" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 526.651491][T20167] loop4: detected capacity change from 0 to 32768 [ 526.705098][T20167] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 526.705098][T20167] [ 526.758030][T20196] netlink: 'syz.6.6913': attribute type 1 has an invalid length. [ 526.765923][T20196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6913'. [ 526.782141][T20167] ERROR: (device loop4): remounting filesystem as read-only [ 526.800160][T20167] ERROR: (device loop4): jfs_unlink: [ 526.800160][T20167] [ 526.959069][ T4277] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 526.959069][ T4277] [ 527.796375][T20228] loop5: detected capacity change from 0 to 4096 [ 527.838196][T20228] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 527.878094][T20228] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 527.941703][T20228] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 527.980477][T20228] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 528.030076][T20228] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 528.177573][T20228] ntfs: volume version 3.1. [ 528.222471][T20228] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 528.254889][T20228] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 528.305408][T20228] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 528.348033][T20228] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 528.390073][T20228] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 528.435583][T20220] loop6: detected capacity change from 0 to 32768 [ 528.514974][T20220] ea_get: invalid extended attribute [ 528.566560][T20228] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 528.578814][T20220] ffff88806f891ef0: 04 00 00 00 .... [ 528.613931][T20228] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 528.754282][T20249] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.6939'. [ 528.832969][T20249] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.6939'. [ 528.870766][T20249] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.6939'. [ 529.090091][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 529.356842][T20263] loop5: detected capacity change from 0 to 4096 [ 529.520573][T20263] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 529.587584][T12713] EXT4-fs (loop5): unmounting filesystem. [ 529.789339][T20283] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6956'. [ 530.065987][T20293] loop4: detected capacity change from 0 to 8 [ 530.129205][T20293] SQUASHFS error: Failed to read block 0x1ec: -5 [ 530.151371][T20293] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 530.451749][T20309] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 530.470769][T20310] loop4: detected capacity change from 0 to 1024 [ 530.487493][T20314] delete_channel: no stack [ 530.850593][T17027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 530.923990][T20327] loop6: detected capacity change from 0 to 4096 [ 530.961303][T20327] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 530.999551][T20327] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 531.050065][ T5867] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 531.050553][T20327] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 531.253631][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 531.260325][T20327] ntfs: volume version 3.1. [ 531.265020][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.300000][ T5867] usb 5-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 531.329508][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.370723][ T5867] usb 5-1: config 0 descriptor?? [ 531.530063][T20324] loop3: detected capacity change from 0 to 32768 [ 531.597021][ T5867] usb 5-1: USB disconnect, device number 23 [ 531.646334][T20324] JBD2: Unknown checksum type [ 531.661066][T20324] (syz.3.6976,20324,0):ocfs2_journal_wipe:1183 ERROR: status = -22 [ 531.699560][T20324] (syz.3.6976,20324,0):ocfs2_check_volume:2420 ERROR: status = -22 [ 531.729642][T20324] (syz.3.6976,20324,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 531.759941][T20324] (syz.3.6976,20324,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 531.865078][T20324] (syz.3.6976,20324,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 531.946016][ T4267] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 532.310845][T20324] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 532.375211][T20324] exFAT-fs (loop3): unable to read boot sector [ 532.402972][T20324] exFAT-fs (loop3): failed to read boot sector [ 532.409548][T20324] exFAT-fs (loop3): failed to recognize exfat type [ 532.775018][T20381] loop0: detected capacity change from 0 to 1024 [ 533.143235][T20391] loop5: detected capacity change from 0 to 4096 [ 533.188615][T20391] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 533.369781][ T2190] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 533.506000][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 533.506016][ T26] audit: type=1326 audit(1781282666.056:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.6.7015" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2019ce59 code=0x7ffc0000 [ 533.569740][ T2190] usb 1-1: Using ep0 maxpacket: 16 [ 533.576534][ T2190] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 533.611843][ T2190] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 533.649794][ T26] audit: type=1326 audit(1781282666.056:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.6.7015" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2019ce59 code=0x7ffc0000 [ 533.678645][ T2190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.717510][ T2190] usb 1-1: Product: syz [ 533.730287][ T2190] usb 1-1: Manufacturer: syz [ 533.747912][ T2190] usb 1-1: SerialNumber: syz [ 533.770361][ T2190] r8152-cfgselector 1-1: config 0 descriptor?? [ 533.776711][ T26] audit: type=1326 audit(1781282666.066:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.6.7015" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f7c2019ce59 code=0x7ffc0000 [ 533.831745][ T26] audit: type=1326 audit(1781282666.066:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.6.7015" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2019ce59 code=0x7ffc0000 [ 533.887673][ T26] audit: type=1326 audit(1781282666.066:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.6.7015" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2019ce59 code=0x7ffc0000 [ 533.969913][ T26] audit: type=1326 audit(1781282666.406:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.5.7021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd211f9ce59 code=0x7ffc0000 [ 534.033595][T20425] tmpfs: Bad value for 'mpol' [ 534.085122][ T26] audit: type=1326 audit(1781282666.406:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.5.7021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd211f9ce59 code=0x7ffc0000 [ 534.159644][ T26] audit: type=1326 audit(1781282666.416:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.5.7021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd211f9ce59 code=0x7ffc0000 [ 534.198355][T20427] loop4: detected capacity change from 0 to 2048 [ 534.228576][ T2190] r8152-cfgselector 1-1: Unknown version 0x0000 [ 534.242534][ T2190] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 534.250733][ T26] audit: type=1326 audit(1781282666.416:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.5.7021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fd211f9ce59 code=0x7ffc0000 [ 534.308116][T20427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.359779][ T26] audit: type=1326 audit(1781282666.416:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20418 comm="syz.5.7021" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd211f9ce59 code=0x7ffc0000 [ 535.152409][T20459] loop3: detected capacity change from 0 to 64 [ 535.198874][T20459] MINIX-fs: mounting file system with errors, running fsck is recommended [ 535.468914][T20445] loop4: detected capacity change from 0 to 32768 [ 535.962671][T20492] loop4: detected capacity change from 0 to 136 [ 535.972672][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.008004][T20492] Attempt to read inode for relocated directory [ 536.059629][T20492] syz.4.7057: attempt to access beyond end of device [ 536.059629][T20492] loop4: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 536.130465][T20492] syz.4.7057: attempt to access beyond end of device [ 536.130465][T20492] loop4: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 536.429895][T20510] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7066'. [ 536.548358][T20505] loop5: detected capacity change from 0 to 4096 [ 536.630172][T20505] ntfs: volume version 3.1. [ 536.649559][ T5867] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 536.837074][T20520] SET target dimension over the limit! [ 536.842938][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 536.859806][ T5867] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.899628][ T5867] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.942378][ T5867] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 536.969641][ T5867] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 536.998430][ T5867] usb 7-1: Product: syz [ 537.018670][ T5867] usb 7-1: Manufacturer: syz [ 537.031926][ T5867] hub 7-1:4.0: USB hub found [ 537.100962][T20528] loop3: detected capacity change from 0 to 16 [ 537.144111][T20528] erofs: (device loop3): mounted with root inode @ nid 36. [ 537.200190][T20528] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 537.236351][ T5867] hub 7-1:4.0: 2 ports detected [ 537.416171][T20514] loop0: detected capacity change from 0 to 32768 [ 537.445932][ T5867] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 537.466573][ T5867] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 537.520165][ T5867] usb 7-1: USB disconnect, device number 12 [ 537.790668][T20549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7083'. [ 538.043967][T20556] xt_bpf: check failed: parse error [ 538.367232][T20571] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7095'. [ 538.413792][ T5867] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 538.547083][T20580] loop4: detected capacity change from 0 to 256 [ 538.621157][ T5867] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 538.626406][T20582] tmpfs: Bad value for 'mpol' [ 538.653470][T20580] FAT-fs (loop4): Directory bread(block 64) failed [ 538.660410][ T5867] usb 7-1: config 2 interface 0 has no altsetting 0 [ 538.677233][T20580] FAT-fs (loop4): Directory bread(block 65) failed [ 538.687330][ T5867] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 538.709523][T20580] FAT-fs (loop4): Directory bread(block 66) failed [ 538.716121][T20580] FAT-fs (loop4): Directory bread(block 67) failed [ 538.724859][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.740698][T20586] netlink: 'syz.0.7103': attribute type 26 has an invalid length. [ 538.748770][ T5867] usb 7-1: Product: syz [ 538.753440][T20580] FAT-fs (loop4): Directory bread(block 68) failed [ 538.760376][ T5867] usb 7-1: Manufacturer: syz [ 538.765008][ T5867] usb 7-1: SerialNumber: syz [ 538.771124][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7103'. [ 538.780378][T20580] FAT-fs (loop4): Directory bread(block 69) failed [ 538.791755][ T5867] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 538.800991][T20580] FAT-fs (loop4): Directory bread(block 70) failed [ 538.807820][T20580] FAT-fs (loop4): Directory bread(block 71) failed [ 538.845614][ T5867] usb 7-1: selecting invalid altsetting 0 [ 538.859505][T20580] FAT-fs (loop4): Directory bread(block 72) failed [ 538.871050][ T5867] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 538.892538][T20580] FAT-fs (loop4): Directory bread(block 73) failed [ 539.015743][ T5867] usb 7-1: USB disconnect, device number 13 [ 539.153477][T20594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7107'. [ 539.203545][T20594] netlink: 'syz.3.7107': attribute type 2 has an invalid length. [ 539.443692][T20608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7114'. [ 539.736580][T20620] device batadv0 entered promiscuous mode [ 539.819513][T14104] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 539.972045][T20628] loop5: detected capacity change from 0 to 8 [ 540.006538][T20630] x_tables: duplicate underflow at hook 3 [ 540.029493][T14104] usb 1-1: Using ep0 maxpacket: 16 [ 540.038452][T14104] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 540.068975][T14104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.087617][T14104] usb 1-1: Product: syz [ 540.092236][T14104] usb 1-1: Manufacturer: syz [ 540.099388][T14104] usb 1-1: SerialNumber: syz [ 540.118315][T14104] usb 1-1: config 0 descriptor?? [ 540.134573][T20632] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 540.172205][T14104] gspca_main: spca508-2.14.0 probing 041e:4018 [ 540.415905][T20645] netlink: 'syz.5.7133': attribute type 7 has an invalid length. [ 540.451562][T20645] netlink: 'syz.5.7133': attribute type 8 has an invalid length. [ 540.582385][T14104] gspca_spca508: reg_read err -71 [ 540.589502][T14104] gspca_spca508: reg_read err -71 [ 540.619699][T14104] gspca_spca508: reg_read err -71 [ 540.629012][T14104] gspca_spca508: reg_read err -71 [ 540.646804][T20653] loop5: detected capacity change from 0 to 64 [ 540.660183][T14104] gspca_spca508: reg write: error -71 [ 540.665676][T14104] spca508: probe of 1-1:0.0 failed with error -71 [ 540.716263][T14104] usb 1-1: USB disconnect, device number 26 [ 540.948692][T20663] loop5: detected capacity change from 0 to 512 [ 541.061357][T20663] __quota_error: 25 callbacks suppressed [ 541.061374][T20663] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 541.186084][T20663] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 541.249505][T20663] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.7141: Failed to acquire dquot type 1 [ 541.318484][T20663] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.7141: corrupted inode contents [ 541.347363][T20663] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #16: comm syz.5.7141: mark_inode_dirty error [ 541.367609][T20663] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.7141: corrupted inode contents [ 541.382443][T20663] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.7141: mark_inode_dirty error [ 541.407271][T20663] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.7141: corrupted inode contents [ 541.453745][T20663] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 541.479522][T20663] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #16: comm syz.5.7141: corrupted inode contents [ 541.514745][T20663] EXT4-fs error (device loop5): ext4_truncate:4325: inode #16: comm syz.5.7141: mark_inode_dirty error [ 541.549956][T20663] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 541.566913][T20692] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 541.594228][T20663] EXT4-fs (loop5): 1 truncate cleaned up [ 541.602568][T20663] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 541.621410][T20663] ext4 filesystem being mounted at /686/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.649020][T20694] IPv6: sit2: Disabled Multicast RS [ 541.729717][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.818607][T20698] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7158'. [ 541.861807][T20698] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7158'. [ 541.878483][T12713] EXT4-fs (loop5): unmounting filesystem. [ 542.217896][T20709] loop5: detected capacity change from 0 to 4096 [ 542.233846][T20714] loop0: detected capacity change from 0 to 128 [ 542.252949][T20709] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 542.647582][T20728] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 542.687268][T20728] overlayfs: overlapping lowerdir path [ 542.806946][T20724] loop4: detected capacity change from 0 to 4096 [ 543.434976][T20747] loop5: detected capacity change from 0 to 8192 [ 543.477664][T20747] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 543.559474][T20747] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 543.631113][T20747] REISERFS (device loop5): using ordered data mode [ 543.637702][T20747] reiserfs: using flush barriers [ 543.690720][T20747] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 543.749566][T20747] REISERFS (device loop5): checking transaction log (loop5) [ 543.805041][T20747] REISERFS (device loop5): Using r5 hash to sort names [ 543.820133][T20747] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 543.923778][T20732] loop3: detected capacity change from 0 to 32768 [ 543.964705][T20732] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.7174 (20732) [ 544.003279][T20732] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 544.040391][T20732] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 544.084083][T20732] BTRFS info (device loop3): turning on async discard [ 544.150507][T20732] BTRFS info (device loop3): metadata ratio 0 [ 544.156668][T20732] BTRFS info (device loop3): enabling ssd optimizations [ 544.209375][T20732] BTRFS info (device loop3): using spread ssd allocation scheme [ 544.247551][T20732] BTRFS info (device loop3): using free space tree [ 544.326193][T20781] loop4: detected capacity change from 0 to 65 [ 544.360463][T20781] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 544.726839][ T4273] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 544.893263][T20765] loop0: detected capacity change from 0 to 32768 [ 545.043513][ T4267] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4267) [ 545.237103][T20765] XFS (loop0): Mounting V5 Filesystem [ 545.493516][T20765] XFS (loop0): Ending clean mount [ 545.510061][T20765] XFS (loop0): Quotacheck needed: Please wait. [ 545.675566][T20765] XFS (loop0): Quotacheck: Done. [ 545.684070][ T26] audit: type=1326 audit(1781282678.236:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.4.7211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac9b9ce59 code=0x7ffc0000 [ 545.799283][ T4286] XFS (loop0): Unmounting Filesystem [ 545.823849][ T26] audit: type=1326 audit(1781282678.256:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.4.7211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac9b9ce59 code=0x7ffc0000 [ 545.948670][ T26] audit: type=1326 audit(1781282678.266:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.4.7211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fdac9b9ce59 code=0x7ffc0000 [ 546.063124][ T26] audit: type=1326 audit(1781282678.266:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.4.7211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac9b9ce59 code=0x7ffc0000 [ 546.088617][ T26] audit: type=1326 audit(1781282678.266:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.4.7211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac9b9ce59 code=0x7ffc0000 [ 546.410779][T20860] netlink: 'syz.3.7223': attribute type 3 has an invalid length. [ 546.779076][T14104] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 546.928426][T20884] tmpfs: Bad value for 'mpol' [ 546.981760][T14104] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 547.005290][T14104] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 547.040176][T14104] usb 6-1: Product: syz [ 547.054622][T14104] usb 6-1: config 0 descriptor?? [ 547.059822][ T4319] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 547.076367][T14104] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 547.095064][T14104] usb 6-1: Detected FT232H [ 547.249042][ T4319] usb 4-1: Using ep0 maxpacket: 8 [ 547.258758][ T4319] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 547.282086][T14104] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 547.301662][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 547.311770][T14104] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 547.329323][T14104] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 547.349016][ T4319] usb 4-1: Product: syz [ 547.354758][T14104] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 547.375331][ T4319] usb 4-1: Manufacturer: syz [ 547.390060][ T4319] usb 4-1: SerialNumber: syz [ 547.404521][T14104] usb 6-1: USB disconnect, device number 10 [ 547.433383][ T4319] usb 4-1: config 0 descriptor?? [ 547.447127][ T4319] gspca_main: sq905-2.14.0 probing 2770:9120 [ 547.466873][T14104] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 547.492135][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.524416][T14104] ftdi_sio 6-1:0.0: device disconnected [ 547.639100][T20908] netlink: 'syz.4.7245': attribute type 3 has an invalid length. [ 547.813212][T20916] netlink: 'syz.4.7250': attribute type 3 has an invalid length. [ 547.857373][ T4319] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 547.871513][ T4319] sq905: probe of 4-1:0.0 failed with error -71 [ 547.890035][T20916] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7250'. [ 547.910160][ T4319] usb 4-1: USB disconnect, device number 38 [ 548.382494][T20933] netlink: 'syz.0.7257': attribute type 9 has an invalid length. [ 548.432513][T20933] netlink: 'syz.0.7257': attribute type 7 has an invalid length. [ 548.449355][T20933] netlink: 'syz.0.7257': attribute type 8 has an invalid length. [ 548.574161][T20941] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.7261'. [ 548.643999][T20937] xt_CT: No such helper "syz0" [ 549.523956][ T26] audit: type=1107 audit(1781282682.066:420): pid=20977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 549.535693][T20945] loop5: detected capacity change from 0 to 32768 [ 549.763578][T20982] loop0: detected capacity change from 0 to 4096 [ 549.805056][T20945] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 549.858041][T20945] JBD2: Ignoring recovery information on journal [ 550.039144][T20945] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 550.281348][T12713] ocfs2: Unmounting device (7,5) on (node local) [ 550.515895][T20996] loop6: detected capacity change from 0 to 8192 [ 550.574112][T20996] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 550.680320][T20989] loop3: detected capacity change from 0 to 32768 [ 550.688227][T20996] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 550.768531][T20996] REISERFS (device loop6): using ordered data mode [ 550.794605][T20996] reiserfs: using flush barriers [ 550.831186][T20996] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 550.878541][T20996] REISERFS (device loop6): checking transaction log (loop6) [ 550.955075][T20996] REISERFS (device loop6): Using r5 hash to sort names [ 551.002282][T20996] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 551.239551][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7300'. [ 551.415832][T21023] loop4: detected capacity change from 0 to 4096 [ 551.509937][T21029] loop0: detected capacity change from 0 to 256 [ 551.516835][T21023] ntfs3: loop4: ino=5, "/" directory corrupted [ 551.578317][T21029] FAT-fs (loop0): Directory bread(block 64) failed [ 551.623256][T21029] FAT-fs (loop0): Directory bread(block 65) failed [ 551.640403][T21029] FAT-fs (loop0): Directory bread(block 66) failed [ 551.650452][T21029] FAT-fs (loop0): Directory bread(block 67) failed [ 551.692110][T21029] FAT-fs (loop0): Directory bread(block 68) failed [ 551.728788][T21029] FAT-fs (loop0): Directory bread(block 69) failed [ 551.752487][T21029] FAT-fs (loop0): Directory bread(block 70) failed [ 551.808814][T21029] FAT-fs (loop0): Directory bread(block 71) failed [ 551.839028][T21029] FAT-fs (loop0): Directory bread(block 72) failed [ 551.845632][T21029] FAT-fs (loop0): Directory bread(block 73) failed [ 552.265474][T21051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7313'. [ 552.407955][T21058] netlink: 'syz.6.7316': attribute type 8 has an invalid length. [ 552.888955][T20822] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 552.957657][T21085] x_tables: duplicate entry at hook 3 [ 553.078624][T20822] usb 1-1: Using ep0 maxpacket: 16 [ 553.089123][T20822] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 553.117668][T20822] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 553.148711][T20822] usb 1-1: Product: syz [ 553.173317][T20822] usb 1-1: Manufacturer: syz [ 553.177972][T20822] usb 1-1: SerialNumber: syz [ 553.231614][T20822] usb 1-1: config 0 descriptor?? [ 553.256745][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.260594][T21098] netlink: 'syz.3.7336': attribute type 41 has an invalid length. [ 553.408641][T14104] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 553.438206][T21105] netlink: 'syz.3.7340': attribute type 1 has an invalid length. [ 553.487570][T20822] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 553.600696][T14104] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 553.628564][T14104] usb 5-1: config 1 has no interface number 0 [ 553.645013][T14104] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 553.667006][T14104] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 553.695081][T14104] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 553.697846][T20822] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 553.714848][T14104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.737455][T14104] usb 5-1: Product: syz [ 553.742621][T20822] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 553.764482][T14104] usb 5-1: Manufacturer: syz [ 553.793064][T14104] usb 5-1: SerialNumber: syz [ 553.798868][T21119] loop3: detected capacity change from 0 to 1764 [ 553.820044][T21094] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 553.838998][T21094] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 553.889014][T20822] peak_usb: probe of 1-1:0.0 failed with error -71 [ 553.909236][T21119] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 553.949143][T20822] usb 1-1: USB disconnect, device number 27 [ 554.036510][T21121] loop5: detected capacity change from 0 to 1024 [ 554.086972][T21094] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 554.100218][T21094] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 554.110012][T14104] usb 5-1: No status endpoint found [ 554.320483][T14104] usb 5-1: USB disconnect, device number 24 [ 554.381386][T21127] loop6: detected capacity change from 0 to 4096 [ 554.481149][T21127] ntfs: volume version 3.1. [ 554.587607][T21127] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 554.637884][T21127] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 554.777350][T21127] overlayfs: failed to resolve './bus': -2 [ 555.347598][T21167] netlink: 'syz.5.7371': attribute type 4 has an invalid length. [ 555.374115][T21167] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7371'. [ 555.454795][T21167] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 555.706049][T21149] loop0: detected capacity change from 0 to 32768 [ 555.797364][T21177] loop6: detected capacity change from 0 to 2048 [ 555.902181][T21177] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.688731][T21213] netlink: 'syz.4.7395': attribute type 21 has an invalid length. [ 556.696680][T21213] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7395'. [ 556.771749][T21219] netlink: 'syz.3.7398': attribute type 2 has an invalid length. [ 557.075090][T21233] tmpfs: Bad value for 'mpol' [ 557.260424][T21242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7409'. [ 557.318407][T21242] openvswitch: netlink: Flow key attr not present in new flow. [ 557.539823][T21254] device netdevsim0 left promiscuous mode [ 558.135244][T21281] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7428'. [ 558.198510][T21281] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7428'. [ 558.230070][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7430'. [ 558.917969][ T26] audit: type=1326 audit(1781282691.467:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21316 comm="syz.4.7447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac9b9ce59 code=0x7ffc0000 [ 558.978332][T14104] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 559.007516][ T26] audit: type=1326 audit(1781282691.507:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21316 comm="syz.4.7447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fdac9b9ce59 code=0x7ffc0000 [ 559.008692][ T5188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.102829][ T26] audit: type=1326 audit(1781282691.507:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21316 comm="syz.4.7447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac9b9ce59 code=0x7ffc0000 [ 559.168482][T14104] usb 4-1: Using ep0 maxpacket: 16 [ 559.175687][T14104] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 559.202820][T14104] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 559.226089][ T26] audit: type=1326 audit(1781282691.507:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21316 comm="syz.4.7447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac9b9ce59 code=0x7ffc0000 [ 559.258278][T14104] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 559.282764][T14104] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 559.298267][T14104] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 559.317491][T14104] usb 4-1: config 0 has no interface number 0 [ 559.337749][T14104] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 559.395724][T14104] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 559.428266][T14104] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 559.459056][T14104] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.502934][T14104] usb 4-1: config 0 interface 125 has no altsetting 0 [ 559.537210][T14104] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 559.570908][T14104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.597265][T14104] usb 4-1: Product: syz [ 559.606535][T14104] usb 4-1: Manufacturer: syz [ 559.618253][T14104] usb 4-1: SerialNumber: syz [ 559.635522][T14104] usb 4-1: config 0 descriptor?? [ 559.875761][ C1] usb 4-1: async_complete: urb error -71 [ 559.881991][ C1] usb 4-1: async_complete: urb error -71 [ 559.888747][ C1] usb 4-1: async_complete: urb error -71 [ 559.894508][ C1] usb 4-1: async_complete: urb error -71 [ 559.900803][T14104] get_1284_register: usb error -71 [ 559.938385][T14104] usb 4-1: USB disconnect, device number 39 [ 560.274130][T21374] loop4: detected capacity change from 0 to 1024 [ 560.349467][T21374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 560.368798][T21374] System zones: 0-1, 3-12 [ 560.398271][T21374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 560.471543][T21385] xt_ecn: cannot match TCP bits for non-tcp packets [ 560.515428][T21374] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 623: comm syz.4.7474: Attempting to read directory block (623) that is past i_size (638464) [ 560.709072][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 561.000087][T21402] sctp: [Deprecated]: syz.5.7486 (pid 21402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.000087][T21402] Use struct sctp_sack_info instead [ 561.108208][T21408] IPVS: set_ctl: invalid protocol: 115 10.1.1.1:20001 [ 561.446089][T21420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7495'. [ 561.566658][T21392] loop6: detected capacity change from 0 to 32768 [ 561.769039][T21426] loop0: detected capacity change from 0 to 64 [ 562.391769][T21449] netlink: 'syz.5.7507': attribute type 1 has an invalid length. [ 562.446756][T21449] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7507'. [ 562.735890][T21464] tmpfs: Bad value for 'mpol' [ 562.850489][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.856894][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.098476][ T4319] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 563.308282][ T4319] usb 5-1: Using ep0 maxpacket: 32 [ 563.331020][ T4319] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 563.379944][ T4319] usb 5-1: config 0 has no interface number 0 [ 563.386533][ T4319] usb 5-1: config 0 interface 231 altsetting 64 bulk endpoint 0x6 has invalid maxpacket 1023 [ 563.451343][ T4319] usb 5-1: config 0 interface 231 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 8 [ 563.468541][ T4319] usb 5-1: config 0 interface 231 has no altsetting 0 [ 563.492020][ T4319] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 563.507075][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.536397][ T4319] usb 5-1: Product: syz [ 563.556174][ T4319] usb 5-1: Manufacturer: syz [ 563.578261][ T4319] usb 5-1: SerialNumber: syz [ 563.613735][ T4319] usb 5-1: config 0 descriptor?? [ 563.634667][T21467] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 563.648369][T21467] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 563.739862][T21505] netlink: 'syz.6.7534': attribute type 27 has an invalid length. [ 563.755919][T21505] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 563.886312][T21467] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 563.901548][T21467] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 563.977394][ T4319] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 76:79:d2:dd:b2:49 [ 564.199197][T21519] dlm: Unknown command passed to DLM device : 8 [ 564.199197][T21519] [ 564.219579][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.234332][ T4319] usb 5-1: USB disconnect, device number 25 [ 564.248871][ T4319] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 564.590639][T21499] loop5: detected capacity change from 0 to 32768 [ 564.689095][T21499] read_mapping_page failed! [ 564.708220][T21499] ERROR: (device loop5): txCommit: [ 564.708220][T21499] [ 565.235654][T21549] loop5: detected capacity change from 0 to 4096 [ 565.271286][ T4319] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 565.273329][T21549] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 565.414131][T21549] ntfs: volume version 3.1. [ 565.489648][ T4319] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.513600][ T4319] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x77, skipping [ 565.557922][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 565.608169][ T4319] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.648959][ T4319] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 565.669376][ T4319] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 565.677425][ T4319] usb 1-1: Manufacturer: syz [ 565.726436][ T4319] usb 1-1: config 0 descriptor?? [ 565.944397][ T4319] usb 1-1: USB disconnect, device number 28 [ 566.038516][T21580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.118023][T21580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.410606][T21593] loop6: detected capacity change from 0 to 2048 [ 566.466081][T21593] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 566.578193][T21593] syz.6.7569: attempt to access beyond end of device [ 566.578193][T21593] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 566.594638][T21599] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 566.662984][T21593] syz.6.7569: attempt to access beyond end of device [ 566.662984][T21593] loop6: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 566.712037][T21593] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=0) [ 566.892998][T21612] loop4: detected capacity change from 0 to 512 [ 567.031487][T21612] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 567.077579][T21612] ext4 filesystem being mounted at /1554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.274627][ T26] audit: type=1326 audit(1781282699.827:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21626 comm="syz.0.7579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 567.335214][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 567.415749][ T26] audit: type=1326 audit(1781282699.877:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21626 comm="syz.0.7579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 567.575329][ T26] audit: type=1326 audit(1781282699.877:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21626 comm="syz.0.7579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 567.715033][ T26] audit: type=1326 audit(1781282699.877:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21626 comm="syz.0.7579" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 568.325594][T21663] loop6: detected capacity change from 0 to 128 [ 568.377577][T21663] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 568.431342][T21663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 568.459128][T21666] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7596'. [ 568.652452][T21636] loop0: detected capacity change from 0 to 32768 [ 568.703449][T21636] jfs_strtoUCS: char2uni returned -22. [ 568.727689][T21636] charset = euc-jp, char = 0xd4 [ 568.799281][T21647] loop3: detected capacity change from 0 to 32768 [ 568.860239][T21677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7601'. [ 568.956347][T21647] XFS (loop3): Mounting V5 Filesystem [ 569.080208][T21647] XFS (loop3): Ending clean mount [ 569.144046][T21691] loop5: detected capacity change from 0 to 2048 [ 569.153240][T21691] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 569.195735][T21693] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 569.209391][ T4273] XFS (loop3): Unmounting Filesystem [ 569.264000][T21691] NILFS error (device loop5): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 569.287748][T21697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7607'. [ 569.298372][T21696] loop6: detected capacity change from 0 to 512 [ 569.335180][T21691] Remounting filesystem read-only [ 569.603867][T21696] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 569.665800][T21696] ext4 filesystem being mounted at /498/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 569.774543][T21712] xt_hashlimit: overflow, try lower: 1024/0 [ 569.888077][ T5188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.028769][T15843] EXT4-fs (loop6): unmounting filesystem. [ 570.058129][T21720] loop3: detected capacity change from 0 to 256 [ 570.127518][T21720] FAT-fs (loop3): Directory bread(block 64) failed [ 570.137926][T21720] FAT-fs (loop3): Directory bread(block 65) failed [ 570.147981][T21720] FAT-fs (loop3): Directory bread(block 66) failed [ 570.154562][T21720] FAT-fs (loop3): Directory bread(block 67) failed [ 570.219798][T21720] FAT-fs (loop3): Directory bread(block 68) failed [ 570.247922][T21720] FAT-fs (loop3): Directory bread(block 69) failed [ 570.254642][T21720] FAT-fs (loop3): Directory bread(block 70) failed [ 570.278541][T21729] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 570.309851][T21728] loop5: detected capacity change from 0 to 2048 [ 570.317450][T21720] FAT-fs (loop3): Directory bread(block 71) failed [ 570.349115][T21720] FAT-fs (loop3): Directory bread(block 72) failed [ 570.355699][T21720] FAT-fs (loop3): Directory bread(block 73) failed [ 570.447126][T21728] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 570.573278][T21728] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #12: block 2: comm syz.5.7621: lblock 0 mapped to illegal pblock 2 (length 1) [ 570.635445][T21742] loop4: detected capacity change from 0 to 8 [ 570.765262][T12713] EXT4-fs (loop5): unmounting filesystem. [ 571.277264][T21762] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 571.655408][T21770] loop0: detected capacity change from 0 to 4096 [ 571.697011][T21770] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 571.745198][T21783] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7647'. [ 572.109023][T21793] loop3: detected capacity change from 0 to 1024 [ 572.164049][T21799] loop6: detected capacity change from 0 to 512 [ 572.194474][T21801] netlink: 'syz.0.7655': attribute type 32 has an invalid length. [ 572.219879][T21799] EXT4-fs: inline encryption not supported [ 572.266483][T21799] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 572.350000][T21799] EXT4-fs (loop6): orphan cleanup on readonly fs [ 572.392102][ T26] audit: type=1400 audit(1781282704.948:429): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=21803 comm="syz.4.7657" [ 572.480291][T21799] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 572.560283][T21799] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.7654: corrupted inode contents [ 572.613647][T21799] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #12: comm syz.6.7654: mark_inode_dirty error [ 572.665911][T21799] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.7654: corrupted inode contents [ 572.716279][T21799] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #12: comm syz.6.7654: mark_inode_dirty error [ 572.749249][T21799] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.7654: corrupted inode contents [ 572.801284][T21814] loop0: detected capacity change from 0 to 4096 [ 572.811823][T21799] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 572.830607][T21799] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #12: comm syz.6.7654: corrupted inode contents [ 572.844711][T21814] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 572.855423][T21799] EXT4-fs error (device loop6): ext4_truncate:4325: inode #12: comm syz.6.7654: mark_inode_dirty error [ 572.900002][T21799] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 572.936173][T21799] EXT4-fs (loop6): 1 truncate cleaned up [ 572.969758][ T46] Quota error (device loop6): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 573.008900][ T46] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1 [ 573.065516][T21799] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 573.072840][T21829] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7668'. [ 573.208588][T21799] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 573.318127][T21799] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 573.456069][T15843] EXT4-fs (loop6): unmounting filesystem. [ 573.653764][T21842] loop4: detected capacity change from 0 to 2048 [ 573.727279][T21842] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 573.782452][T21842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.863919][T21851] cgroup: none used incorrectly [ 573.907638][T21842] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 573.997936][T21826] loop3: detected capacity change from 0 to 32768 [ 574.202128][T21826] XFS (loop3): Mounting V5 Filesystem [ 574.431573][T21826] XFS (loop3): Ending clean mount [ 574.656088][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7690'. [ 574.699201][ T4273] XFS (loop3): Unmounting Filesystem [ 574.978057][T21893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 575.017659][T21893] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 575.027022][T21893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 575.073808][T21895] loop4: detected capacity change from 0 to 2048 [ 575.114311][T21895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 575.127683][T21893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 575.281589][T21903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7699'. [ 575.652028][T21918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7706'. [ 575.665423][T21919] loop4: detected capacity change from 0 to 512 [ 575.667912][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.724247][T21919] EXT4-fs: inline encryption not supported [ 575.790596][T21919] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 575.851837][T21919] EXT4-fs (loop4): orphan cleanup on readonly fs [ 575.929766][ T26] audit: type=1326 audit(1781282708.488:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21928 comm="syz.0.7712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 575.954957][ T26] audit: type=1326 audit(1781282708.508:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21928 comm="syz.0.7712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 575.978949][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.985901][ T26] audit: type=1326 audit(1781282708.508:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21928 comm="syz.0.7712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 576.010005][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.014568][T21919] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 576.021887][ T26] audit: type=1326 audit(1781282708.508:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21928 comm="syz.0.7712" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd346d9ce59 code=0x7ffc0000 [ 576.065387][T21919] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.7707: corrupted inode contents [ 576.065982][T21919] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #12: comm syz.4.7707: mark_inode_dirty error [ 576.082598][T21919] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.7707: corrupted inode contents [ 576.231835][T21919] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.7707: mark_inode_dirty error [ 576.289471][T21919] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.7707: corrupted inode contents [ 576.332456][T21944] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 576.345902][T21919] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 576.362100][T21946] loop5: detected capacity change from 0 to 256 [ 576.363780][T21919] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.7707: corrupted inode contents [ 576.423359][T21919] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.7707: mark_inode_dirty error [ 576.483684][T21919] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 576.501137][T21919] EXT4-fs (loop4): 1 truncate cleaned up [ 576.535431][ T9] Quota error (device loop4): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 576.601949][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 1 [ 576.643506][T21919] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 576.701503][T21957] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7722'. [ 576.756658][T21919] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 576.848083][T21919] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 576.889285][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 577.074252][T21969] loop6: detected capacity change from 0 to 764 [ 577.090749][T21968] xt_TCPMSS: Only works on TCP SYN packets [ 577.143014][T21969] Symlink component flag not implemented [ 577.167364][T21969] Symlink component flag not implemented [ 577.173164][T21969] Symlink component flag not implemented (128) [ 577.202438][T21969] Symlink component flag not implemented (122) [ 577.280218][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7733'. [ 577.745694][T22000] loop3: detected capacity change from 0 to 256 [ 577.864389][T22000] FAT-fs (loop3): Directory bread(block 64) failed [ 577.884454][T22000] FAT-fs (loop3): Directory bread(block 65) failed [ 577.915862][T22000] FAT-fs (loop3): Directory bread(block 66) failed [ 577.940275][T22000] FAT-fs (loop3): Directory bread(block 67) failed [ 577.967923][T22000] FAT-fs (loop3): Directory bread(block 68) failed [ 577.992319][T22000] FAT-fs (loop3): Directory bread(block 69) failed [ 578.050272][T22000] FAT-fs (loop3): Directory bread(block 70) failed [ 578.077279][T22000] FAT-fs (loop3): Directory bread(block 71) failed [ 578.102114][T22000] FAT-fs (loop3): Directory bread(block 72) failed [ 578.117194][T22000] FAT-fs (loop3): Directory bread(block 73) failed [ 578.152204][T22000] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 578.794553][T22039] loop0: detected capacity change from 0 to 1764 [ 578.931111][T22045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7765'. [ 579.153845][T22052] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 579.486903][T22025] loop6: detected capacity change from 0 to 40427 [ 579.543332][T22025] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x3ffff [ 579.567287][ T2190] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 579.595551][T22025] F2FS-fs (loop6): invalid crc value [ 579.611796][T22025] F2FS-fs (loop6): Found nat_bits in checkpoint [ 579.789287][ T2190] usb 5-1: unable to get BOS descriptor or descriptor too short [ 579.808165][ T2190] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 579.808196][T22025] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 579.839442][ T2190] usb 5-1: string descriptor 0 read error: -22 [ 579.858393][ T2190] usb 5-1: New USB device found, idVendor=245f, idProduct=931c, bcdDevice= 0.40 [ 579.912674][ T2190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.992899][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7781'. [ 580.165592][ T2190] snd-usb-hiface: probe of 5-1:1.1 failed with error -22 [ 580.362576][ T2190] usb 5-1: can't set first interface for hiFace device. [ 580.375384][ T2190] snd-usb-hiface: probe of 5-1:1.2 failed with error -5 [ 580.391217][T22093] loop0: detected capacity change from 0 to 256 [ 580.413295][T22093] exfat: Deprecated parameter 'utf8' [ 580.419570][T22093] exfat: Deprecated parameter 'namecase' [ 580.437964][ T2190] usb 5-1: USB disconnect, device number 26 [ 580.477512][T22093] exfat: Deprecated parameter 'namecase' [ 580.512529][T22093] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 580.682281][T22104] loop5: detected capacity change from 0 to 512 [ 580.690566][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.256228][T22119] xt_CT: No such helper "pptp" [ 581.257007][ T2190] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 581.270932][T22129] erofs: (device loop13): erofs_read_superblock: cannot find valid erofs superblock [ 581.411502][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.493005][ T2190] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.527031][ T2190] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.568944][ T2190] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 581.588729][ T2190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.596811][ T2190] usb 1-1: Product: syz [ 581.646755][ T2190] usb 1-1: Manufacturer: syz [ 581.659155][ T2190] usb 1-1: SerialNumber: syz [ 581.747515][T22144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7811'. [ 581.787562][T22144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7811'. [ 581.897799][ T2190] usb 1-1: unit 4 not found! [ 581.928301][T22153] x_tables: duplicate underflow at hook 2 [ 581.959132][ T2190] usb 1-1: USB disconnect, device number 29 [ 582.197133][ T5539] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 582.219568][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.399116][ T5539] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 582.427134][ T5539] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 582.466984][ T5539] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 582.497296][T22171] loop4: detected capacity change from 0 to 2048 [ 582.503777][ T5539] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 582.528790][T22171] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 582.548619][ T5539] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 582.564146][T22171] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 582.577058][ T5539] usb 6-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 582.590382][T22175] ieee802154 phy0 wpan0: encryption failed: -22 [ 582.607065][ T5539] usb 6-1: Product: syz [ 582.623498][ T5539] usb 6-1: Manufacturer: syz [ 582.647153][ T5539] usb 6-1: SerialNumber: syz [ 582.668169][ T5539] usb 6-1: config 0 descriptor?? [ 582.695327][ T5539] kvaser_usb 6-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 582.738650][ T5539] kvaser_usb 6-1:0.0: Failed to initialize card, error -90 [ 582.774332][ T5539] kvaser_usb: probe of 6-1:0.0 failed with error -90 [ 582.810262][T22182] netlink: 'syz.0.7830': attribute type 11 has an invalid length. [ 582.940566][ T5539] usb 6-1: USB disconnect, device number 11 [ 583.133118][T22197] loop3: detected capacity change from 0 to 1764 [ 583.176913][ T2190] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 583.236538][T22197] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 583.367157][ T2190] usb 5-1: Using ep0 maxpacket: 32 [ 583.381651][ T2190] usb 5-1: unable to get BOS descriptor or descriptor too short [ 583.427993][ T2190] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 583.474355][ T2190] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 583.507350][ T2190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.538102][ T2190] usb 5-1: Product: syz [ 583.542389][ T2190] usb 5-1: Manufacturer: syz [ 583.576434][ T2190] usb 5-1: SerialNumber: syz [ 583.815837][ T2190] usb 5-1: Invalid number of CPorts: 0 [ 583.821793][ T2190] es2_ap_driver: probe of 5-1:7.0 failed with error -22 [ 583.988027][T20822] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 584.032498][ T2190] usb 5-1: USB disconnect, device number 27 [ 584.192826][T20822] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 584.220031][T20822] usb 7-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 584.230630][T22234] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7856'. [ 584.246884][T20822] usb 7-1: Product: syz [ 584.251619][T20822] usb 7-1: Manufacturer: syz [ 584.256242][T20822] usb 7-1: SerialNumber: syz [ 584.283098][T20822] r8152-cfgselector 7-1: config 0 descriptor?? [ 584.380074][ T26] audit: type=1400 audit(1781282716.938:434): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=22240 comm="syz.5.7859" [ 584.486856][ T4319] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 584.687176][ T4319] usb 1-1: Using ep0 maxpacket: 32 [ 584.695013][ T4319] usb 1-1: unable to get BOS descriptor or descriptor too short [ 584.707415][ T4319] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7 [ 584.736466][T20822] r8152-cfgselector 7-1: Unknown version 0x0000 [ 584.747541][ T4319] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 584.755738][T20822] r8152-cfgselector 7-1: USB disconnect, device number 14 [ 584.789239][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.818071][ T4319] usb 1-1: Product: syz [ 584.822293][ T4319] usb 1-1: Manufacturer: syz [ 584.843252][ T4319] usb 1-1: SerialNumber: syz [ 584.860510][T22257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.044825][T22263] loop3: detected capacity change from 0 to 256 [ 585.079224][ T4319] usb 1-1: BAAD GENERIC IO: no channels? [ 585.121379][ T4319] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 585.197972][ T4319] usb 1-1: USB disconnect, device number 30 [ 585.210061][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.816922][T22289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7883'. [ 585.830385][T22291] loop5: detected capacity change from 0 to 8 [ 586.046804][T20822] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 586.099044][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7888'. [ 586.226835][T20822] usb 7-1: Using ep0 maxpacket: 16 [ 586.234397][T20822] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 586.275589][T20822] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 586.288846][T22303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 586.302772][T20822] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 586.328267][T22305] netlink: 'syz.5.7890': attribute type 2 has an invalid length. [ 586.366972][T20822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 586.375031][T20822] usb 7-1: SerialNumber: syz [ 586.419243][T20822] usb 7-1: 0:2 : does not exist [ 586.689244][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7897'. [ 586.817982][T20822] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 586.850971][T20822] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 586.876454][T20822] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 586.913459][T20822] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 586.938274][T20822] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 586.989950][T20822] usb 7-1: USB disconnect, device number 15 [ 587.058925][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.784996][T22357] loop5: detected capacity change from 0 to 256 [ 587.887277][T22357] FAT-fs (loop5): Directory bread(block 64) failed [ 587.893902][T22357] FAT-fs (loop5): Directory bread(block 65) failed [ 587.994266][T22357] FAT-fs (loop5): Directory bread(block 66) failed [ 588.004323][T22357] FAT-fs (loop5): Directory bread(block 67) failed [ 588.036800][T22357] FAT-fs (loop5): Directory bread(block 68) failed [ 588.053700][T22357] FAT-fs (loop5): Directory bread(block 69) failed [ 588.081113][T22368] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.094772][T22357] FAT-fs (loop5): Directory bread(block 70) failed [ 588.125863][T22357] FAT-fs (loop5): Directory bread(block 71) failed [ 588.140842][T22357] FAT-fs (loop5): Directory bread(block 72) failed [ 588.174548][T22357] FAT-fs (loop5): Directory bread(block 73) failed [ 588.317608][T22335] loop3: detected capacity change from 0 to 40427 [ 588.436691][T22335] F2FS-fs (loop3): invalid crc value [ 588.489352][T22378] loop0: detected capacity change from 0 to 512 [ 588.508211][T22335] F2FS-fs (loop3): Found nat_bits in checkpoint [ 588.605875][T22378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 588.663678][T22378] ext4 filesystem being mounted at /1535/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 588.747012][T22335] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 588.796853][T22335] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 588.822561][T22378] [ 588.824945][T22378] ====================================================== [ 588.831976][T22378] WARNING: possible circular locking dependency detected [ 588.839030][T22378] syzkaller #0 Not tainted [ 588.843461][T22378] ------------------------------------------------------ [ 588.850490][T22378] syz.0.7927/22378 is trying to acquire lock: [ 588.856602][T22378] ffff8880701c13e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 588.865559][T22378] [ 588.865559][T22378] but task is already holding lock: [ 588.872938][T22378] ffff88806fb13eb8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 588.882582][T22378] [ 588.882582][T22378] which lock already depends on the new lock. [ 588.882582][T22378] [ 588.893001][T22378] [ 588.893001][T22378] the existing dependency chain (in reverse order) is: [ 588.898821][T22382] loop6: detected capacity change from 0 to 32768 [ 588.902049][T22378] [ 588.902049][T22378] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 588.916328][T22378] down_read+0x42/0x2d0 [ 588.921130][T22378] ext4_map_blocks+0x323/0x1b70 [ 588.926801][T22378] ext4_getblk+0x1cc/0x6f0 [ 588.931760][T22378] ext4_bread+0x26/0x170 [ 588.936583][T22378] ext4_quota_read+0x180/0x380 [ 588.941977][T22378] find_tree_dqentry+0x1cd/0xf30 [ 588.947502][T22378] find_tree_dqentry+0x6b0/0xf30 [ 588.952990][T22378] qtree_read_dquot+0x57b/0x820 [ 588.958392][T22378] v2_read_dquot+0xc0/0x110 [ 588.963418][T22378] dquot_acquire+0x152/0x520 [ 588.968534][T22378] ext4_acquire_dquot+0x2d9/0x4a0 [ 588.974105][T22378] dqget+0x72b/0xc30 [ 588.978540][T22378] __dquot_initialize+0x333/0xcd0 [ 588.984105][T22378] ext4_process_orphan+0x54/0x300 [ 588.989733][T22378] ext4_orphan_cleanup+0xbeb/0x1420 [ 588.995471][T22378] ext4_fill_super+0x6ee3/0x78c0 [ 589.000923][T22378] get_tree_bdev+0x3f1/0x610 [ 589.006099][T22378] vfs_get_tree+0x88/0x270 [ 589.011040][T22378] do_new_mount+0x24a/0xa40 [ 589.016120][T22378] __se_sys_mount+0x2e3/0x3d0 [ 589.021355][T22378] do_syscall_64+0x4c/0xa0 [ 589.026373][T22378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.032905][T22378] [ 589.032905][T22378] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 589.041010][T22378] down_read+0x42/0x2d0 [ 589.045722][T22378] v2_read_dquot+0x4a/0x110 [ 589.050770][T22378] dquot_acquire+0x152/0x520 [ 589.055903][T22378] ext4_acquire_dquot+0x2d9/0x4a0 [ 589.061475][T22378] dqget+0x72b/0xc30 [ 589.065911][T22378] __dquot_initialize+0x333/0xcd0 [ 589.071481][T22378] ext4_process_orphan+0x54/0x300 [ 589.077049][T22378] ext4_orphan_cleanup+0xbeb/0x1420 [ 589.082767][T22378] ext4_fill_super+0x6ee3/0x78c0 [ 589.088216][T22378] get_tree_bdev+0x3f1/0x610 [ 589.093381][T22378] vfs_get_tree+0x88/0x270 [ 589.098309][T22378] do_new_mount+0x24a/0xa40 [ 589.103368][T22378] __se_sys_mount+0x2e3/0x3d0 [ 589.108561][T22378] do_syscall_64+0x4c/0xa0 [ 589.113513][T22378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.119951][T22378] [ 589.119951][T22378] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 589.127610][T22378] __lock_acquire+0x2d07/0x7d10 [ 589.133063][T22378] lock_acquire+0x1bb/0x4a0 [ 589.138080][T22378] __mutex_lock+0x12d/0xaf0 [ 589.143091][T22378] dquot_commit+0x5a/0x410 [ 589.148018][T22378] ext4_write_dquot+0x1f0/0x360 [ 589.153394][T22378] mark_all_dquot_dirty+0xf9/0x400 [ 589.159020][T22378] __dquot_alloc_space+0x5fc/0xe60 [ 589.164650][T22378] ext4_mb_new_blocks+0xfc4/0x4610 [ 589.170284][T22378] ext4_ext_map_blocks+0x195b/0x6810 [ 589.176104][T22378] ext4_map_blocks+0x9de/0x1b70 [ 589.181476][T22378] ext4_getblk+0x1cc/0x6f0 [ 589.186404][T22378] ext4_bread+0x26/0x170 [ 589.191166][T22378] ext4_append+0x2be/0x560 [ 589.196121][T22378] ext4_add_entry+0x8eb/0xdb0 [ 589.201366][T22378] ext4_add_nondir+0x93/0x270 [ 589.206581][T22378] ext4_mknod+0x2ff/0x4b0 [ 589.211456][T22378] vfs_mknod+0x424/0x4c0 [ 589.216233][T22378] do_mknodat+0x356/0x4d0 [ 589.221075][T22378] __x64_sys_mknodat+0xa5/0xc0 [ 589.226367][T22378] do_syscall_64+0x4c/0xa0 [ 589.231301][T22378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.237715][T22378] [ 589.237715][T22378] other info that might help us debug this: [ 589.237715][T22378] [ 589.247934][T22378] Chain exists of: [ 589.247934][T22378] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 589.247934][T22378] [ 589.261576][T22378] Possible unsafe locking scenario: [ 589.261576][T22378] [ 589.269047][T22378] CPU0 CPU1 [ 589.274398][T22378] ---- ---- [ 589.279749][T22378] lock(&ei->i_data_sem/2); [ 589.284332][T22378] lock(&s->s_dquot.dqio_sem); [ 589.291688][T22378] lock(&ei->i_data_sem/2); [ 589.298790][T22378] lock(&dquot->dq_lock); [ 589.303197][T22378] [ 589.303197][T22378] *** DEADLOCK *** [ 589.303197][T22378] [ 589.311370][T22378] 4 locks held by syz.0.7927/22378: [ 589.316568][T22378] #0: ffff88807d426460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 589.325701][T22378] #1: ffff88806fb14030 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 589.336396][T22378] #2: ffff88806fb13eb8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 589.346311][T22378] #3: ffffffff8cc75248 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x173/0xe60 [ 589.355874][T22378] [ 589.355874][T22378] stack backtrace: [ 589.361748][T22378] CPU: 1 PID: 22378 Comm: syz.0.7927 Not tainted syzkaller #0 [ 589.369194][T22378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.379265][T22378] Call Trace: [ 589.382538][T22378] [ 589.385457][T22378] dump_stack_lvl+0x188/0x24e [ 589.390128][T22378] ? load_image+0x400/0x400 [ 589.394653][T22378] ? show_regs_print_info+0x12/0x12 [ 589.399842][T22378] ? print_circular_bug+0x12b/0x1a0 [ 589.405036][T22378] check_noncircular+0x296/0x330 [ 589.410005][T22378] ? add_chain_block+0x940/0x940 [ 589.414945][T22378] ? lockdep_lock+0xf1/0x1f0 [ 589.419535][T22378] ? _find_first_zero_bit+0xcf/0x100 [ 589.424847][T22378] __lock_acquire+0x2d07/0x7d10 [ 589.429697][T22378] ? verify_lock_unused+0x140/0x140 [ 589.434887][T22378] ? mark_lock+0x94/0x320 [ 589.439208][T22378] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 589.445182][T22378] lock_acquire+0x1bb/0x4a0 [ 589.449684][T22378] ? dquot_commit+0x5a/0x410 [ 589.454276][T22378] ? __might_sleep+0xd0/0xd0 [ 589.458932][T22378] ? read_lock_is_recursive+0x10/0x10 [ 589.464299][T22378] __mutex_lock+0x12d/0xaf0 [ 589.468801][T22378] ? dquot_commit+0x5a/0x410 [ 589.473384][T22378] ? __might_sleep+0xd0/0xd0 [ 589.477965][T22378] ? dquot_commit+0x5a/0x410 [ 589.482545][T22378] ? __sched_text_start+0x8/0x8 [ 589.487386][T22378] ? mutex_lock_nested+0x10/0x10 [ 589.492349][T22378] ? ext4_journal_check_start+0x17e/0x240 [ 589.498071][T22378] dquot_commit+0x5a/0x410 [ 589.502488][T22378] ext4_write_dquot+0x1f0/0x360 [ 589.507337][T22378] mark_all_dquot_dirty+0xf9/0x400 [ 589.512452][T22378] __dquot_alloc_space+0x5fc/0xe60 [ 589.517570][T22378] ? __dquot_alloc_space+0x173/0xe60 [ 589.522880][T22378] ext4_mb_new_blocks+0xfc4/0x4610 [ 589.527989][T22378] ? __es_insert_extent+0x1790/0x1790 [ 589.533353][T22378] ? ext4_find_extent+0x367/0xe00 [ 589.538365][T22378] ? rcu_is_watching+0x11/0xa0 [ 589.543230][T22378] ? ext4_ext_search_right+0x380/0x830 [ 589.548687][T22378] ? memcpy+0x3c/0x60 [ 589.552726][T22378] ? ext4_mb_pa_callback+0xd0/0xd0 [ 589.557849][T22378] ? ext4_ext_check_overlap+0x401/0x560 [ 589.563388][T22378] ? ext4_ext_find_goal+0xed/0x1d0 [ 589.568524][T22378] ext4_ext_map_blocks+0x195b/0x6810 [ 589.573814][T22378] ? ext4_ext_release+0x10/0x10 [ 589.578705][T22378] ? rwsem_write_trylock+0x135/0x1c0 [ 589.583992][T22378] ? ext4_es_lookup_extent+0x645/0xb10 [ 589.589480][T22378] ext4_map_blocks+0x9de/0x1b70 [ 589.594359][T22378] ? ext4_issue_zeroout+0x250/0x250 [ 589.599559][T22378] ext4_getblk+0x1cc/0x6f0 [ 589.603994][T22378] ? ext4_get_block_unwritten+0x100/0x100 [ 589.609709][T22378] ? memset+0x1e/0x40 [ 589.613687][T22378] ? fscrypt_setup_filename+0x94/0xa40 [ 589.619234][T22378] ext4_bread+0x26/0x170 [ 589.623472][T22378] ext4_append+0x2be/0x560 [ 589.627890][T22378] ? ext4_init_new_dir+0x570/0x570 [ 589.632998][T22378] ext4_add_entry+0x8eb/0xdb0 [ 589.637673][T22378] ? ext4_inc_count+0x1b0/0x1b0 [ 589.642520][T22378] ? dquot_initialize+0x20/0x20 [ 589.647371][T22378] ext4_add_nondir+0x93/0x270 [ 589.652041][T22378] ext4_mknod+0x2ff/0x4b0 [ 589.656363][T22378] ? ext4_rmdir+0xb10/0xb10 [ 589.660861][T22378] ? bpf_lsm_inode_mknod+0x5/0x10 [ 589.665984][T22378] ? security_inode_mknod+0xc3/0x110 [ 589.671344][T22378] vfs_mknod+0x424/0x4c0 [ 589.675582][T22378] do_mknodat+0x356/0x4d0 [ 589.679905][T22378] ? __check_object_size+0x500/0xa40 [ 589.685244][T22378] ? do_o_path+0x200/0x200 [ 589.689657][T22378] ? getname_flags+0x206/0x500 [ 589.694418][T22378] __x64_sys_mknodat+0xa5/0xc0 [ 589.699186][T22378] do_syscall_64+0x4c/0xa0 [ 589.703596][T22378] ? clear_bhb_loop+0x60/0xb0 [ 589.708273][T22378] ? clear_bhb_loop+0x60/0xb0 [ 589.713029][T22378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.718916][T22378] RIP: 0033:0x7fd346d9ce59 [ 589.723347][T22378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.742965][T22378] RSP: 002b:00007fd347c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 589.751371][T22378] RAX: ffffffffffffffda RBX: 00007fd347015fa0 RCX: 00007fd346d9ce59 [ 589.759336][T22378] RDX: 0000000000001000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 589.767318][T22378] RBP: 00007fd346e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 589.775289][T22378] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 589.783275][T22378] R13: 00007fd347016038 R14: 00007fd347015fa0 R15: 00007ffcac477ca8 [ 589.791275][T22378] [ 589.794326][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.804915][T22378] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.7927: corrupted inode contents [ 589.822279][T22378] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.7927: mark_inode_dirty error [ 589.842418][T22378] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.7927: corrupted inode contents [ 589.865749][T22378] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.7927: mark_inode_dirty error [ 589.936683][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 598.687364][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration