last executing test programs: 11m25.298969395s ago: executing program 32 (id=7088): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) 9m33.636838516s ago: executing program 2 (id=8459): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) 9m33.353785072s ago: executing program 2 (id=8463): unshare(0xa000000) shmget$private(0x0, 0xfffffffffeffffff, 0x0, &(0x7f0000ffc000/0x3000)=nil) 9m33.050231572s ago: executing program 2 (id=8466): r0 = socket(0x22, 0x2, 0x3) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, 0x0, 0x0) 9m32.767768888s ago: executing program 2 (id=8471): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000200)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000680)="$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") mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E']) 9m32.515448969s ago: executing program 2 (id=8475): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r0, 0x100000000) 9m32.048188318s ago: executing program 6 (id=8480): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1b) 9m31.619919739s ago: executing program 2 (id=8483): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f00000002c0)=""/23, 0x17}], 0x2, 0x2, 0x0) 9m31.619745237s ago: executing program 6 (id=8484): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) 9m31.026788527s ago: executing program 33 (id=8483): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f00000002c0)=""/23, 0x17}], 0x2, 0x2, 0x0) 9m31.015983436s ago: executing program 6 (id=8487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c00024000000000000000030c000140000000000000010108000540400000010800044000000001"], 0xc0}}, 0x0) 9m30.747830407s ago: executing program 6 (id=8490): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp932'}}, {@nodecompose}, {@nobarrier}, {@uid}, {@part={'part', 0x3d, 0xff}}, {@gid}, {}, {@nobarrier}]}, 0xff, 0x6b3, &(0x7f0000000780)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 9m30.221565937s ago: executing program 6 (id=8498): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0xee, 0x80008000, 0x4, 0x0, 0x4, 0x0, 0x4006, 0xf, 0x3, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0x2593fffd, 0x9, 0x4e, 0x4, 0x3, 0x807, 0x5, 0x5]}) 9m29.395595337s ago: executing program 6 (id=8507): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x94) 9m28.615276346s ago: executing program 34 (id=8507): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x94) 5m32.749703176s ago: executing program 8 (id=11268): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) 5m30.931102958s ago: executing program 8 (id=11293): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="06ff03076844ba8cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5m30.64988881s ago: executing program 8 (id=11296): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 5m30.399897154s ago: executing program 8 (id=11300): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001600)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@userxattr}], [], 0x2c}) 5m29.664290885s ago: executing program 8 (id=11311): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) close(r0) 5m28.419392466s ago: executing program 8 (id=11319): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef00000000109021200010000000009040001"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5m27.269030128s ago: executing program 35 (id=11319): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef00000000109021200010000000009040001"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m50.929179811s ago: executing program 4 (id=13199): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x24, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 2m50.611448728s ago: executing program 4 (id=13202): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2m50.092254498s ago: executing program 4 (id=13213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m49.052837462s ago: executing program 4 (id=13224): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x1, 0x151b, &(0x7f0000002280)="$eJzs3AuYjtXaOPD7Xms9Y0zS2ySHYa11P7zJYZkkySFJDkmSJElOCUmTbElIDDklDUlIDkNyGEJymJg0zufzISFJmiQJySlZ/0v42+3a3977233bd31z/67ruax7nudez/289/u+zwHzXechNRrVrNqAiODfghf/SAaAWAAYAADXAUAAAGXjy8ZfWJ9TYvK/txP253ok7WpXwK4m7n/2xv3P3rj/2Rv3P3vj/mdv3P/sjfufvXH/GcvONk0rcD0v2Xfh5//ZGZ///w/JKjXmqzWlbuwCEPPPpnD/szfu//9ZwT+zEfc/e+P+Z1exV7sA9r8Af/6zgxx/dw33P3vj/jOWnV3t589Xe4FI9n4Nrvb7jzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZY9nDaX6EA4PL4atfFGGOMMcYYY4yxP4/PcbUrYIwxxhhjjDHG2P88BAESFAQQAzkgFnJCHAgAuBZyw3UQgeshHm6APHAj5IV8kB8KQAIUhEKgwYAFghAKQxGIwk1QFG6GYlAcSkBJcFAKEuEWKA23Qhm4DcrC7VAO7oDyUAEqQiW4EyrDXVAF7oaqcA9Ug+pQA2rCvVAL7oPacD/UgQegLjwI9eAhqA8PQwN4BBrCo9AIHoPG8Dg0gabQDJpDi/9W/kvQHV6GHtATkqEX9IZXoA/0hX7QHwbAqzAQXoNB8DqkwGAYAm/AUHgThsFbMBxGwEh4G0bBOzAaxsBYGAepMB4mwLswEd6DSTAZpsBUSINpMB3ehxkwE2bBBzAbPoQ5MBfmwXxIh49gASyEDPgYFsEnkAmLYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsCnsBM+g12wG/bA57AXvvgX80/9TX4XBAQUKFChwhiMwViMxTiMw1yYC3NjboxgBOMxHvNgHsyLeTE/5scETMBCWAgNGiQkLIyFMYpRLIpFsRgWwxJYAh06TMRELI23Yhksg2WxLJbDclgeK2AFrISVsDJWxipYBatiVayG1bAG1sB78V7shbWxNtbBOlgX615+PIUNsAE2xIbYCBthY2yMTbAJNsNm2AJbYEtsia2wFbbBNtgW22I7bIdJmITtsT12wA7YETtiJ+yEnbEzdsGu2DXrpRyAL+PL2BOriV7YG3tjH0zJ0Q/7Y398FQfia/gavo4pOBiH4Bv4Br6Jw/AkDscROBJHYmXxDo7GMUhiHKZiKk7ACTgRJ+IknIyTcSqm4TScjtNxBs7EmfgBzsYP8UOci3NxPqZjOi7AhZiBGbgIT2EmLsYluBSX4XJchitxFa7ENbgW1+B6XI8bcSNuxs24FbfidtyOn6ICwM9wN+7GFNyLe3Ef7sP9uB8P4AHMwiw8iAfxEB7Cw3gYj+ARPIrH8DgewxN4Ak/iKTyNp/EsnsVz+ELCNw0/Lb46BcQFSigRI2JErIgVcSJO5BK5RG6RW0RERMSLeJFH5BF5RV6RX+QXCSJBFBKFhBFGkAhjAEBERVQUFUVFMVFMlBAlhBNOJIpEUVqUFmVEGVFW3C7KiTtEeVFBtHaVRCVRWbRxVcTdoqqoKqqJ6qKGqClqilqilqgtaos6oo6oK+qKeuIhUV/0wn74iLjQmUZiMDYWQ7CJaCrkpW+wlmIYthKtRRvxlBiBw7GdaOmSxLOivRiNHcRfxBh8XnQS47CzeFF0EV1FN/GS6C5auR6ip5iEvURvMRX7iL6in+gvZmB18QHOzllDvC5SxGAxRLwh5uObYph4SwwXI8RI8bYYJd4Ro8UYMVaME6livJgg3hUTxXtikpgspoipIk1ME9PF+2KGmClmiQ/EbPGhmCPminlivkgXH4kFYqHIEB+LReITkSkWiyViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHeJTsVN8JnaJ3WKP+FzsFV+IfeJLsV98JQ6Ir0WW+EYcFN+KQ+I7cVh8L46IH8RRcUwcFz+KE+IncVKcEqfFGXFW/CzOiV/EeeEFSJRCSqlkIGNkDhkrc8o4eY3MJYNLr+71Ml7eIPPIG2VemU/mlwVkgiwoC0ktjbSSZCgLyyIyKm+SReXNspgsLkvIktLJUjJR3iJLy1tlGXmbLCtvl+XkHbK8rCArykryTllZ3iUhcnEf1WR1WUPWlPfKZLhP1pb3yzryAVlXPijryYdkffmwbCAfkQ3lo7KRfEw2lo/LJrKpbCabyxbyCdlSPilbydayjXxKtpVPy3byGZkkn5Xtpb/0FnledpIvyM7yRdlFdpXd5C/yvPSyh+wpoRfI3vIV2Uf2lf1kfzlAvioHytfkIPm6TJGD5RD5hhwq35TD5FtyuBwhR8q35Sj5jhwtx8ixcpxMlePlBPmunCjfk5PkZDlFTpVpcprsd2mmWVL+w/x3/yB/0K973yg3yc1yi9wqt8ntcof8VO6UO+UuuUvukXvkXrlX7pP75H65Xx6QB2SWzJIH5UF5SB6Sh+VheUQekUflMXlG/ihPyJ/kSXlKnpJn5Fl5Vp679BqAQiWUVEoFKkblULEqp4pT16hc6lqVW12nIup6Fa9uUHnUjSqvyqfyqwIqQRVUhZRWRllFKlSFVREVVTfhpTeMKqFKKqdKqUR1y7+Sr4qqm1UxVfw3+ZfrS/479bVQLVRLBcmtVCvVRrVRbVVb1U61U0kqSbVX7VUH1UF1VB1VJ9VJdVadVRfVRXVT3VR31V31UD1UskpWvdUrqo/qq/qp/mqAelUNVAPVIDVIpagUNUQNUUPVUDVMDVPD1XA1Uo1Uo9QoNVqNVmPVWJWqUtUENUFNVBPVJDVJTVFTVJpKU9PVdDVDzVCz1Cw1W81Wc9QcNU/NU+kqXS1QC1SGylCL1CKVqRarxWqpWqqWq+VqpVqpVqvVaq1aq9ar9SpTbVKb1Ba1RW1T29QOtUPtVDvVLrVL7VF71F61V+1T+9R+tV8dUAdUlspSB9VBdUgdUofVYXVEHVFH1VF1XB1XJ9QJdVKdVKfVaXVWnVXn1Dl1Xp2/cNkXiEAEKlBBTBATxAaxQVwQF+QKcgW5g9xBJIgE8UF8kCe4Mcgb5AvyBwWChKBgUCjQgQlsIC41PRrcFBQNbg6KBcWDEkHJwAWlgsTglqB0cGtQJrgtKBvcHpQL7gjKBxWCikGl4M6gcnBXUCW4O6ga3BNUC6oHNYKawb1BreC+oHZwf1AneCCoGzwY1AseCuoHDwcNgkeChsGjQaPgsaBx8HjQJGgaNAuaBy3+1Pm9P5nvSddD99TJupfurV/RfXRf3U/31wP0q3qgfk0P0q/rFD1YD9Fv6KH6TT1Mv6WH6xF6pH5bj9Lv6NF6jB6rx+lUPV5P0O/qifo9PUlP1lP0VJ2mp+np+n09Q8/Us/QHerb+UM/Rc/U8PV+n64/0Ar1QZ+iP9SL9ic7Ui/USvVQv08v1Cr1Sr9Kr9Rq9Vq/T6/UGvVFv0pv1Fr1Vb9Pb9Q79qd6pP9O79G69R3+u9+ov9D79pd6vv9IH9Nc6S3+jD+pv9SH9nT6sv9dH9A/6qD6mj+sf9Qn9kz6pT+nT+ow+q3/W5/Qv+rz2Fy7uL5zejTLKxJgYE2tiTZyJM7lMLpPb5DYREzHxJt7kMXlMXpPX5Df5TYJJMIVMIXMBGTKFTWETNVFT1BQ1xUwxU8KUMM44k2gSTWlT2pQxZUxZU9aUM+VMeVPeVDQVzZ3mTnOXucvcbe4295h7THVT3dQ0NU0tU8vUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTRPTxDQzzUwL08K0NC1NK9PKtDFtTFvT1rQz7UySSTLtTXvTwXQwHU1H08l0Mp1NZ9PFdDHdTDfT3XQ3PUwPk2ySTW/T2/QxfUw/088MMAPMQDPQDDKDTIpJMUPMEDPUDDXDzDAz3IwwIy9cqJp3zGgzxow140yqSTUTzAQz0Uw0k8wkM8VMMWkmzUw3080MM8PMMrPMbDPbzDFzzDwzz6SbdLPALDAZJsMsMotMpsk0S8wSs8wsMyvMCrPKrDJrzBqzDtaZDWaD2WQ2mS1mi9lmtpkdZofZaXaaXWaX2WP2mL1mr9ln9pn9Zr85YA6YLJNlDpqDl0/o5og5Yo6ao+a4OW5OmBPmpDlpTpvT5qzJd+l86U2szWnj7DU2l73W5rbX2b+N89sCNsEWtIWstnltvt/ExlpbzBa3JWxJ62wpm2hv+V1c3lawFW0le6etbO+yVX4X17L32dr2flvHPmBr2nt/E9e1D9p69jFbHxHANrUNbXPbyD5mG9vHbRPb1DazzW1b+7RtZ5+xSfZZ294+97t4gV1oV9nVdo1da3fZ3fa0PWMP2e/sWfuz7WF72gH2VTvQvmYH2ddtih38u3ikfduOsu/Y0XaMHWvH/S6eYqfaNDvNTrfv2xl25u/idPuRnW0z7Bw7186z83+NL9SUYT+2i+wnNtMGsMQutcvscrvCrvz/tS616+0Gu9HutJ/ZLXar3Wa3447LF8J2t91jP7d77Rf2oP3W7rdf2QP2sM2y3/waXzi+w/Z7e8T+YI/aY/a4/dGesD+py9kXjv1H+4s9b70FQgKSpCigGMpBsZST4ugaykXXUm66jiJ0PcXTDZSHbqS8lI/yUwFKoIJUiDQZskQUUmEqQlG6iS6XV4JKkqNSlEi3UGm6lcrQbVSWbqdydAeVpwpUkSrRnVSZ7qIqdDdVpXuoGlWnGlST7qVadB/VpvupDj1AdelBqkcPUX16mBrQI9SQHqVG9Bg1psepCTWlZtScWtAT1JKepFbUmtrQU9SWnqZ29Awl0bPUnp6jDvQX6kjPUyd6gTrTi9SFulI3eom608vUg3pSMvWi3vQK9aG+1I/60wB6lQbSazSIXqcUGkxD6A0aSm/SMHqLhtMIGklv0yh6h0bTGBpL4yiVxtMEepcm0ns0iSbTFJpKaTSNptP7NINm0iz6gGbThzSH5tI8mk/p9BEtoIWUQR/TIvqEMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqUdtJnahftpj30Oe2lL2gffUn76Ss6QF9TFn1DB+lbOkTf0WH63vekH+goHaPj9COdoJ/oJJ2i03SGztLPdI5+ofPkCUIMRShDFQZhTJgjjA1zhnHhNWGu8Nowd3hdGAmvD+PDG8I84Y1h3jBfmD8sECaEBcNCoQ5NaEMKw7BwWCSMhjeFRcObw2Jh8bBEWDJ0YakwMbwlLB3eGpYJbwvLhreH5cI7wvJhhfCxByqFd4aVw7vCKuHdYdXwnrBaWD2sEdYM7w1rhfeFtcP7wzrhA2GZ8MGwXvhQWD98OGwQPhI2DB8NG4WPhY3Dx8MmYdOwWdg8bBE+EbYMnwxbha3DNuFTYdvw6bBd+EyYFD4btg+f+3X9gwv//vrksFfYO3wlfCX0/n45Lzo/mh79KLogujCaEf04uij6STQzuji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Ibox6n3NHODQCSedcoGLcTlcrMvp4tw1Lpe71uV217mIu97FuxtcHnejy+vyufyugEtwBV0hp51x1pELXWFXxEXdTa6ou9kVc8VdCVfSOVfKJbrmroVr4Vq6J10r19q1cU+5p9zT7mn3jHvGPevau+dcB/cX19E97zq5F9wL7kXXxXV13dxLrrsbn/viZzLZ9Xa9XR/Xx/Vz/dwAN8ANdAPdIDfIpbgUN8QNcUPdUDfMDXPD3XA30o10o9woN9qNdmPdWJfqUt0EN8FNdBPdJDfJTXFTXJpLc9PddDfDzXCVZ17cyxw3x81z81y6S3cL3IVrxgy3yC1ymS7TLXFL3DK3zK1wK9wqt8qtcWvcOrfObXAb3Ca3yW1xW9w2t83tcDvcTrfT7fLXXZzU7XX73D633+13B9zXLst94w66b90h95077L53R9wP7qg75o67H90J95M76U650+6MO+t+dufcL+688y41Mj4yIfJuZGLkvcikyOTIlMjUSFpkWmR65P3IjMjMyKzIB5HZkQ8jcyJzI/Mi8yPpkY8iCyILIxmRjyOLIp9EMiOLI0siSyPLIssj3hfcEvrCvoiP+pt8UX+zL+aL+xK+pHe+lE/0t/jS/lZfxt/my/rbfTl/hy/vK/iK/nHfxDf1zXxz38I/4Vv6J30r39q38U/5tv5p384/45P8s769f8538H/xHf3zvpN/wXf2L/ouvqvv5l/y3f3Lvofv6ZN9L9/bv+L7+L6+n+/vB/hX/UD/mh/kX/cpfrAf4t/wQ/2bfph/yw/3I/zImLf9qMu3yDDOp/rxfoJ/10/07/lJfrKf4qf6ND/NT/fv+xl+pp/lP/Cz/Yd+jp/r5/n5Pt1/5Bf4hT7Df+wX+U98pl98+aGyX+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hP/U7/Wd+l9/t9/jP/V7/hd/nv/T7/Vf+gP/aZ/lv/EH/rT/kv/OH/ff+iP/BH/XH/HH/oz/hf/In/Sl/+vLNh//Fn+f/s8YYY4wx9k8Zf2Uofrvm4uP8Xn+QI/5q494AcO3WAll/vf7CFeW6vBfHfUVC2wgAPNuz8yOXl2rVkpOTL22bKSEoMhfg8t8EXRADV+LF0AaehiRoDaX/sP6+outZ+gfzR28HiPurnFi4El+Z/0sATP6D+Z94auSCcuHp+P9i/rkAxYpcyckJV+LF0ObX5yutoczfqT9fy39Qf86vUgFa/VVOLrgSX6k/EZ6E5yDpN1syxhhjjDHGGGMX9RUVO16+/7z8D0T+6P48QV3JyQFX4n90f84YY4wxxhhjjLGr7/mu3Z55Iimpdcd/fVDlv5X1Tw8aw//UzDz4w4H3AJd/ogDg35wQ4MJA/iePYvN/ZF8plz46f7tq2RkfwP+OVv4Zg6v8xcQYY4wxxhj701256P/tz9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hO/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA///wCvcH") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 2m48.203289397s ago: executing program 4 (id=13235): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_gettime(0xffffffffffffffff, 0x0) 2m47.379846557s ago: executing program 4 (id=13242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 2m46.956756666s ago: executing program 36 (id=13242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 7.998801117s ago: executing program 1 (id=15120): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000300)='./file0\x00', 0x16, &(0x7f0000001440)={[{@barrier}, {@subvolid}, {@acl}, {@noflushoncommit}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@notreelog}]}, 0x15, 0x5102, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)) 5.601925088s ago: executing program 1 (id=15135): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000200)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0xfffffffe}}], 0x30}], 0x1, 0x0) 5.519066395s ago: executing program 9 (id=15136): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xffeffffd, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0xfffff32c, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) 5.08663286s ago: executing program 9 (id=15139): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x440, &(0x7f0000000340), 0x1, 0x58c, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r0, &(0x7f0000000440)="bd4cb9a09efdf529965332179d35", 0xe, 0x800) 4.923836358s ago: executing program 7 (id=15141): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="07000000010001", 0x7) 4.194003594s ago: executing program 9 (id=15146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) 4.007775586s ago: executing program 7 (id=15147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010005000000ac14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 4.006946204s ago: executing program 1 (id=15148): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}}, 0x4000) 3.990418255s ago: executing program 5 (id=15149): bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002100)={0x1, &(0x7f0000000100)=[{0x6, 0xf6, 0x5, 0x50000}]}) getpid() 3.591037746s ago: executing program 7 (id=15150): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000240)='./file2\x00', 0x2200800, &(0x7f0000000080), 0x4, 0x9750, &(0x7f000001c3c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x80000000, 0x2000, 0x7f, 0xadfb, 0xffffffff}) 3.501127051s ago: executing program 9 (id=15151): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000001100)="2fae", 0x2}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) 3.425080465s ago: executing program 1 (id=15152): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fae44140500000054c7beef915d564c90c200", 0x18) 3.374041684s ago: executing program 5 (id=15153): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000580), 0x100) 3.159740702s ago: executing program 9 (id=15154): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) sendmmsg(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}], 0x1, 0x0) 3.093366602s ago: executing program 1 (id=15155): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x61d0, &(0x7f0000016fc0)="$eJzs3c2OHFfZB/Cn+ms+8saxsojyWghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmRhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTd7rGd6eqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6uIuPzztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeD0iPj4Wce/+7fVm0bl99uM7f/zbb3/41Pf/+vvh6X//6Wb/jWnr3br1q3/9+c7j7y8AAACUqK7rukof80+kz/e9rjsFAMxFfv2vk7xcvXD15oL1R61Wq9WHsG6rJ7vTLiJis71N857B6XgAOGQ245Ouu0CH5F+0QUQ81XUngIVWdd0BDsS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PadJbxa0zm9fzain48O6U/K3PqwyLJ+ffG87+80z5K6x10/vMyLf/Rzq1Pxcn598fzH3N08u9NzL9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LuyLw87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrYw+WTfsutmb5pSri6bH1gcKkm2VWu+4HAAAAAAAAAAAAAJRksHMN76UqYhgRT6+u1nXd/LSN14/qSbc/7ErffyhZ13/kAQBgx8fHxu7lryKWI+JS+q6/4erqal0vr6zWq/XKUn4/O1parldan2vztFm2NNrHG+LBqG5+2XJru7ZZn5dntY//vuaxRnV/Hx2bjw4DB4CI2Hk1uucV6Yip62ei63c5HA6O/6PH8c9+dP08BQAAAA5eXdd1lb7O+0Q659/rulMAwFzk1//x8wJqtVqtVquPXt1WT3anXUTEZnub5j2D4fgB4JDZjE+67gIdkn/RBhHxfNedABZa1XUHOBD37t9er1K+Vfv1II3vnq8F2ZP/ZrW9Xd5+0nSW8WtM5vX82op+PDulP8/NqQ+LJOffG8//8k77KK130PnPy7T8m/083kF/upbz74/nP+bo5N+bmH+pcv6DR8q/L38AAAAAAFhg+d//jy/U+d/R4+7OTA87/7t2YI8KAAAAAAAAAAfr3v3b6/m+13z+/3MT1nP/59GU86/kX6Scf7r/f/fCm5fH1uu35u++/SD/f96/vf67m//4/zzdb/5LeaZKz6wqPSOq9EjVIE0fc8em2Br2R80jDatef5Cu+amH78bVuBYbcWbPur10PDxoP7unvenpcLu97u+0n9vTPthtz9uf39M+TFc61Su5/VSsx0/iWryz3d60Lc3Y/+UZ7fWM9px/3/FfpJz/oPXT5L+a2quxaePuR73/Oe7b00mP89bVz//yzMHvzkxb0d/dt7Zm/17soD/b/0+eGsXPbmxcP3Xrys2b189GmuxZei7S5DOW8x+mn5z/yy/ttOe/++3j9e5Ho0fOf1FsxWBq/i+15pv9fWXOfetCzn+UfnL+76T2ycf/Yc5/+vH/agf9AQAAAAAAAAAAAAAAgIep63r7FtG3IuJCuv+nq3szAYD5yq//dZKXz6vuP+72f9i7H131X62ec10tWH/mWn9aL1Z/1AtZ/2fB+rNwdVs92ZvtIiL+0t6mec/wi0m/DABYZJ9GxN+77gSdkX/B8vf9NdOTXXcGmKsbH3z4oyvXrm1cv9F1TwAAAAAAAACAx5XH/1xrjf98sq7rO2Pr7Rn/9e1Ye9LxPwd5ZneA0SkDVfcffZ8eZqs36vdaw42/ENPG/x7uzj1s/O/BjMcbzmgfzWhfmtG+PKN94o0eLTn/F1rjnZ+MiBNjw6+XMP7r+Jj3Jcj5v9h6Pjf5f2lsvXb+9W8Oc/69Pfmfvvn+T0/f+ODD166+f+W9jfc2fnz+7Nkz5y9cuHjx4ul3r17bOLPz3w57fLBy/nnsa9eBliXnnzOXf1ly/l9ItfzLkvP/YqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP+XUy3/suT8X021/MuS8/9KquVflpz/a6mWf1ly/qdSLf+y5PxPp3qf+a8cdL+Yj5x/PsPl+C9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvN/PdXyL0vO/6upln9Zcv4XUi3/suT8v5Zq+Zcl538x1fIvS87/66mWf1ly/t9ItfzLkvN/I9XyL0vO/5upln9Zcv7fSrX8y5Lz/3aq5V+WnP+bqZZ/WR58/78ZM2bM5Jmu/zIBAAAAAAAAAAAAAOPmcTlx1/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4tRq67vgP4mb1540BiIKROasLGMcY4m+z6El9oXUy4NtxKQij0gu1612bBN7x2CTSqHQVKJIyKKtqGh7aAUJuXCqvigVaA8oBaVaoE7QN9QVSoPERVQAGpKq0gW82c//+/M7OzM7ve8ebMOZ+PlPyyM2fmnDnzn9n92vnuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM3ufMPsp2pZltVqtfyCTVn2ovq8YWJT45LXvrDHBwAAAKzdLxr/fu7mdMHhFdyoaZt/uuPbX11YWFjI3jf8p6OfW1hIV0xk2eiGLGtcF139wftrzdsEj2fjtaGmr4d67H64x/UjPa4f7XH9WI/rN/S4frzH9UtOwBI3ZLV0Z9sa/7kpP6XZLdlo47ptHW71eG3DUP3cpdtmtcZtFkZPZHPZqWw2m27ZPt+21tj+63fW9/XWLO5rqGlfW+or5CePHo/HUAvneFvLvhbvM/rR67OJn/7k0eN/feHZ2zrNnqeh5f7y49yxtX6cnwiX5MdayzakcxKPc6jpOLd0eE6GW46z1rhd/b/bj/O5FR7n8OJhrqv253w8G2r893ca52mklnU4T1vCZT+7K8uyy4uH3b7Nkn1lQ9nGlkuGFp+f8XxF1u+jvpRemo2sap3euYJ1Wp8z21rXaftrIj7/d4bbjSxzDM1P048eG2t63n++cC3rNKo/6uVeK+1rsN+vlaKswbguvtN40E90XIPbwuN/dPvya7Dj2umwBtPjblqDW3utwaGx4cYxpyeh1rjN4hrc1bL9cGNPtcZ8Znv3NTh14fS5qfmPffyeudPHTs6enD2zZ9eu6T379h04cGDqxNyp2en839d4totvYzaUXgNbw7mLr4FXt23bvFQXvji25P33Wl+H411eh5vatu3363Ck/cHV1ucFuXRN56+N99RP+viVoWyZ11jj+dm59tdhetxNr8ORptdhx+8pHV6HIyt4Hda3ObdzZT+zjDT90+kYlv9esLY1uKlpDbb/PNK+Bvv980hR1uB4WBff27n894It4XifmFztzyPDS9Zgerjhvad+Sfp5f/xAY3Ral7fXr7hxLLs4P3v+3keOXbhwflcWxrp4WdNaaV+vG5seU7ZkvQ6ter0enrvjids7XL4pnKvxe+r/Gl/2uapvs/fe7s9V47tb5/PZcunuLIw+W+/z2em7ef18jmXZ57/12IPfePTzb1j2fNbz5iem1v6zeMqlTe+/o8u8/8bc/3y+v3RXjw+PjuSv3+F0dkZb3o9bn6qRxntXrbHv56ZW9n48Gv5Z7/fjW7q8H29u27bf78ej7Q8uvh/Xev1px9q0P5/jYZ2cmu7+flzfZvPu1a7Jka7vx3eFWQvn/zUhKaRc1LR2llu3aV8jI6PhcY3EPbSu0z0t24+GbFbf11O7r22d7rgrv6/h9OgWrdc6nWjbtt/rNP3Z13LrtNbrT9+uTfvzOR7WxS17uq/T+jZP7137e+cN8T+b3jvHeq3B0eGx+jGPpkXYeL/PFm6Ia/De7Hh2NjuVzTSuHWusp1pjX5P3rWwNjoV/1vu9cnOXNbijbdt+r8H0fWy5tVcbWfrg+6D9+RwP6+LJ+7qvwfo2b9zf359dd4RL0jZNP7u2//nacn/mdXvbabpea2UkHOe39nf/s9n6NqcOrDZndj9Pd4dLbuxwntpfv8u9pmay9TlPm8NxPntg+fNUP576Np87uML1dDjLsksfub/x573h71f+7uJ3v9ry9y6d/k7n0kfu//GLT/zjao4fgMH3fD425t/rmv5maiV//w8AAAAMhJj7h8JM5H8AAAAojZj74/8Vnsj/AAAAUBox94+EmVQk/29+47Nzz1/KUjN/IYjXp9PwQL5d7LhOh68nFhbVL7//y7P//Q+XVrbvoSzLfv7AH3TcfvMD8bhyE+E4r76p9fIlvnrPivZ99OFLab/N/fUvhPuPj2ely6BTBXc6y7Kv3/yZxn4m3n+lMZ9+4GhjPnj5icfr2zx3MP863v6Zl+Xb/0Uo/x4+cazl9s+E8/DDMKff1vl8xNt95cprtux/7+L+4u1qW29qPOwnP5Dfb/w9OZ99PN8+nufljv8bn37qK/XtH3lV5+O/NNT5+J8K9/vlMP/3Ffn2zc9B/et4u0+G44/7i7e790vf7Hj8Vz+Vb3/uzfl2R8OM+98Rvt725mfnms/XI7VjLY8re0u+Xdz/9Hf/uHF9vL94/+3HP37kSsv5aF8fT/9bfj9TbdvHy+N+or9v23/9fprXZ9z/U390tOU899r/1QefeUX9ftv3f3fbduc+srOx/8X7a/2NTX/5yc903F88nsN/e67l8Rx+d3gdh/0/+YGwHsP1/3c1v7/2365w9N2t7z9x+y9sutTyeKK3/jTf/9XXnWzMDeM3bLzxRS++6fIr6+cuy76zIb+/Xvs/+VdnW47/i7fm5yNeHzv67ftfTtz/+Y9Onjk7f3FuJp3VR29u/O6ct+fHE4/35vDe2v71kbMXPjh7fmJ6YjrLJsr7K/Su2ZfC/HE+LnffemHJO+jOh8Pzefuff33j9n/9dLz839+TX37lbfn3rVeH7T4bLt8Unr/V7X+pJ++8tfH6rj0djnBh6e8LXost2/7rwIo2DI+//eeCuN7PvfyDjfNQv67xfSO+rtd4/N+fye/na+G8LoTfzLz11sX9NW8ffzfClYfy1/uaz194m4vP69+E5/sdP8zvPx5XfLzfDz/HfHNz6/tdXB9fuzTUfv+N3+JxObyfZJfz6+NW8Xxfee7WjocXfw9Jdvm2xtd/ku7ntlU9zOXMf2x+6tTcmYuPTF2Ynb8wNf+xjx85ffbimQtHGr/L88iHet1+8f1pY+P9aWZ2396s8W51Nh/X2Qt9/OcePj6zf3r7zOyJYxdPXHj43Oz5k8fn54/PzsxvP3bixOxHe91+bubQrt0H9+zfPXlybubQgYMH9xycnDtztn4Y+UH1sG/6w5Nnzh9p3GT+0N6Du+67b+/05OmzM7OH9k9PT17sdfvG96bJ+q1/f/L87KljF+ZOz07Oz3189tCug/v27e752wBPnzsxPzF1/uKZqYvzs+en8scycaFxcf17X6/bU07z/5H/PNuulv8ivuxdd+9Lv5+17suPLXtX+SZtv0D02fC7aP75JecOrOTrmPtHw0wqkv8BAACgCmLuHwszkf8BAACgNGLu3xBmIv8DAABAacTcPx5mUpH8X7r+/+ZLK9q//r/+f/P50v+vWP//oaL1//P3C/3//lhr/17/P9D/1//X/9f/1/+nD4rW/4+5/4Ysq2T+BwAAgCqIuX9jmIn8DwAAAKURc/+NYSbyPwAAAJRGzP0vCjOpSP7X/9f/1//X/9f/77x//f/BpP/fnf5/D/r/U1m1+v+X+3n8+v/6/yxVtP5/zP0vDjOpSP4HAACAKoi5/6YwE/kfAAAASiPm/pvDTOR/AAAAKI2Y+zeFmVQk/+v/6//r/+v/6/933r/+/2DS/+9O/78H/X+f/6//r/9PXxWt/x9z/0vCTCqS/wEAAKAKYu5/aZiJ/A8AAADFM3JtN4u5/2VhJkvy/zXuAAAAAHjBxdx/S9ZWBK/I3//r/+v/F7//vyFdp/+v/58Vsv8/nOn/F4f+f3f6/z3o/+v/6//r/9NXRev/N3J/Np69PMykIvkfAAAAqiDm/lvDTOR/AAAAKI2Y+38pzET+BwAAgNKIuX9zmElF8r/+v/5/8fv/Pv9f/7/o/X+f/18k+v/d6f/3oP+v/6//r/9PXxWt/x9z/21hJhXJ/wAAAFAFMfffHmYi/wMAAEBpxNz/y2Em8j8AAACURsz9W8JMKpL/9f8L3v+PzVH9f/1//X/9f/3/FdH/707/vwf9f/1//X/9f/qqaP3/mPtfEWZSkfwPAAAAVRBz/x1hJvI/AAAAlEbM/a8MM5H/AQAAoDRi7p8IM6lI/tf/L3j/P+/Bj/n8f/1//X/9f/3/ldH/707/vwf9f/3/vvT/Fy7p/+v/kyta/z/m/jvDTCqS/wEAAKAKYu7fGmYi/wMAAEBpxNx/V5iJ/A8AAAClEXP/tjCTiuR//f+B6P9n+v/6//r/+v/6/yuj/9+d/n8P+v/6/z7/X/+fvipa/z/m/leFmVQk/wMAAEAVxNy/PcxE/gcAAIDSiLn/1WEm8j8AAACURsz9O8JMKpL/9f/1//X/9f/1/zvvX/9/MOn/d6f/34P+v/6//r/+P31VtP5/zP2vCTOpSP4HAACAKoi5f2eYifwPAAAApRFz/91hJvI/AAAAlEbM/ZNhJhXJ//r/+v/6//r/+v+d96//P5j0/7vT/+9B/1//X/9f/5++Klr/P+b+e8JMKpL/AQAAoApi7r83zET+BwAAgNKIuX8qzET+BwAAgNKIuX86zKQi+V//X/9f/1//f1X9/1cu3q/+f07/v1j0/7vT/+9B/1///wXv/4/q/1MqRev/x9y/K8ykIvkfAAAAqiDm/t1hJvI/AAAAlEbM/XvCTOR/AAAAKI2Y+/eGmVQk/+v/6//r/+v/+/z/zvvX/x9M+v/d9b//Hx+i/r/+v/6/z//X/2epovX/Y+6/L8ykIvkfAAAAqiDm/n1hJvI/AAAAlEbM/fvDTOR/AAAAKI2Y+w+EmVQk/+v/6//r/+v/6/933r/+/2DS/+/O5//3oP+v/6//r//PGj30h81fFa3/H3P/wTCTiuR/AAAAqIKY+18bZiL/AwAAQGnE3P8rYSbyPwAAAJRGzP2/GmZSkfyv/9/SPa8/XP1//X/9f/3/Bv3/waT/353+fw/6//r/+v/6//TVsv3/EL3Xu/8fc/+hMJOK5H8AAACogpj7fy3MRP4HAACA0oi5/3VhJvI/AAAAlEbM/YfDTCqS//X/ff6//r/+v/5/5/2vd/9/LN6v/v+a6P93p//fg/6//r/+v/4/fVW0z/+Puf/1YSYVyf8AAABQBTH33x9mIv8DAABAacTc/4YwE/kfAAAASiPm/jeGmVQk/+v/6//r/+v/6/933r/P/x9M+v/d6f/3oP+v/6//r/9PXxWt/x9z/5vCTCqS/wEAAKAKYu5/c5iJ/A8AAAClEXP/W8JM5H8AAAAojZj73xpmUpH8r/+v/6//r/+v/995//r/g0n/vzv9/x70//X/9f/1/+mrovX/Y+7/9TCTiuR/AAAAqIKY+x8IM5H/AQAAoDRi7n9bmIn8DwAAAKURc//bw0wqkv/1//X/9f/1//X/O+9f/38w6f93N2D9/1/cFC7X/8/p/xf7+Ffb/x9p+/q69P9/sFz/f2FD++31/7keitb/j7n/HWEmFcn/AAAAUAUx978zzET+BwAAgNKIuf9dYSbyPwAAAJRGzP2/EWZSkfyv/18/jsX2sv5/Wfv/Q/r/+v/6/xWh/9/dgPX/ff5/G/3/Yh+/z//X/2epovX/Y+5/d5hJRfI/AAAAVEHM/Q+Gmcj/AAAAUBox9z8UZiL/AwAAQGnE3P+eMJOK5H/9f5//X43+v8//z/T/9f8rQv+/O/3/HvT/9f+L1v//T/1/BlvR+v8x9z8cZlKR/A8AAABVEHP/e8NM5H8AAAAojZj7fzPMRP4HAACA0oi5/31hJhXJ//r/g9L/nxjQ/v9j+v/Xsf9/x035dvr/+v8s0v/vTv+/B/1//f+i9f99/j8Drmj9/5j73x9msvL8P77iLQEAAIAXRMz9vxVmUpG//wcAAIAqiLn/t8NM5H8AAAAojZj7fyfMpCL5X/9/UPr/Pv8/0//3+f9tj0f/X/+/k/Xr/8d3Hv1//X/9/0j/X/9f/592Rev/x9z/u2EmFcn/AAAAUAUx938gzET+BwAAgIHQ6f/Jbhdz/5EwE/kfAAAASiPm/qNhJhXJ//r/+v/6/wXt///Z1n/53rffeXSX/r/+v/7/qqzr5//XX/w+/1//X/8/0f/X/9f/p13R+v8x9x8LM6lI/gcAAIAqiLn/98JM5H8AAAAojZj7j4eZyP8AAABQGjH3z4SZVCT/6//r/+v/F7T/P8Cf/x/Ph/5/q771/+Obrv5/R3n/Pq2i69v/f+9iT1z/f7X9/7GOl+r/6/8P8vHr/+v/s1TR+v8x98+GmVQk/wMAAEAVhNw/dCKfi1fI/wAAAFAaMfefDDOR/wEAAKA0Yu7/YJhJRfK//r/+v/6//r/P/++8/279/9qIz/8vqtS//1njhaL/36Y4/f/O9P/1/wf5+PX/9f9Zqmj9/5j758JMKpL/AQAAoApi7v9QmIn8DwAAAKURc/+Hw0zkfwAAACiNmPtPhZlUJP/r/+v/6//r/+v/d95/YT//X/+/q7X27/X/A/3/avf//0f/X/9f/5/+KFr/P+b+02EmFcn/AAAAUAUx958JM5H/AQD+n707abKzLvs4fvp5wpNO8SzcuXBjlUtfAgtd6wtw4caNVZYLJ1ScCc4jioqzIjgPOIAgooLzAE4ozqDiPA84IUrFonNdV9Ldd9+nOzndfd///+ezyCVtmnOkUgm/dL7eANCM3P2PjVvsfwAAAGhG7v7HxS2d7H/9/9n0/6cqZf3/5vc/if7/Qfr/nV5f/6//b5n+f5z+fwn9v+f/6//1/6zU1Pr/3P2Pj1s62f8AAADQg9z9T4hb7H8AAABoRu7+8+MW+x8AAACakbv/iXFLJ/t/S/+/tuiz/8+M1/P/W+r/Pf9/x9fX/+v/W3aw/f9F9/7Mp//X/+v/g/5/V/3/0Z0+X/9Pi6bW/+fuf1Lc0sn+BwAAgB7k7n9y3GL/AwAAQDNy918Qt9j/AAAA0Izc/U+JWzrZ/6t7/v+xjY/PtP8v+n/9/8YH9P/6f/3/bHn+/7ie+v/zbz33MXdee7/r9vL6+n/9v+f/6/9Zran1/7n7nxq3dLL/AQAAoAe5+58Wt9j/AAAA0Izc/U+PW+x/AAAAaEbu/mfELZ3s/9X1/7N+/n/R/+v/Nz6g/9f/6/9nS/8/rqf+/0xeX/+v/9f/6/9Zran1/7n7nxm3dLL/AQAAoAe5+58Vt9j/AAAA0Izc/RfGLfY/AAAANCN3//G4pZP9r//f//7/Hv2//j+u/l//r//ff/r/cfr/JfT/+n/9v/6flZpa/5+7/6K4pZP9DwAAAD3I3f/suMX+BwAAgGbk7n9O3GL/AwAAQDNy9z83bulk/+v/Pf9f/6//1/8Pv77+f570/+P0/0vo/8+2nz9H/6//1/9zuj32/3eP/LS9kv4/d//z4pZO9j8AAAD0IHf/8+MW+x8AAACakbv/BXGL/Q8AAADNyN3/wrilk/2v/9f/6//1/2fc/2//obdB/z9M/38w9P/jJtP/rx0Z/LD+f/b9v+f/6//1/2wytef/5+5/UdzSyf4HAACAHuTuf3HcMrL/9/yb+QAAAMChyt3/krjF1/8BAABg9rI6y93/0rilk/2v/9f/6//1/57/P/z6Y/3/dae9P/3/tOj/x02m/9+B/l//P+f3r//X/7Pd1Pr/3P0vi1s62f8AAADQg9z9F8ct9j8AAAA0I3f/y+MW+x8AAACakbv/FXFLJ/t/uP8/9d/r/3dH/7/5/ev/h398rKr/z7+j/n+0/3+w5//3Sf8/7uD7/6P6/81/f/3/Pjrs9994/39s2efr/xkytf4/d/8lcUsn+x8AAAB6kLv/lXGL/Q8AAADNyN3/qrjF/gcAAIBm5O5/ddzSyf73/H/9v/5/fv2/5/+fdJjP/18ceP9/RP+/S/r/cZ7/v4T+X/+v//f8f1Zqav1/7v5L45ZO9j8AAAD04NK7Fhu7/zWLhf0PAAAAc3T6nx3Y+gdKQ+7+18Yt9j8AAAA0I3f/6+KWTva//l//r//X/+v/h19/Wv2/5//vlv5/nP5/Cf3/fvTzRxrr/y/b6fOn0P9fqP9nYjb1/zec+vhh9f+5+18ft3Sy/wEAAKAHufvfELfY/wAAANCM3P1vjFvsfwAAAGhG7v43xS2d7P997/+P7fza+n/9v/5f/6//1/+vmv5/nP5/Cf2/5/97/r/+n5U61f9v/vnwsPr/3P1vjls62f8AAADQg9z9b4lb7H8AAABoRu7+y+IW+x8AAACakbv/rXFLJ/vf8//1//p//b/+f/j19f/zpP8fp/9fQv+v/9f/6/9ZqU3P/z/NYfX/ufsvj1s62f8AAADQg9z9V8Qt9j8AAAA0I3f/2+IW+x8AAACakbv/7XFLJ/tf/7+//X9+XP+v/1/o//X/+v8D0W3/vzb0K9F2O/T/Nz/q+EM3f0T/r//X/+v/9f+swCT6/xOn/u0yd/874pZO9j8AAAD0IHf/O+MW+x8AAACakbv/XXGL/Q8AAADNyN3/7rhlj/v/Pit9VwdH/+/5//p//b/+f/j19f/z1G3/v0ue/7+E/l//r//X/7NSk+j/T/vr3P3viVt8/R8AAACakbv/vXGL/Q8AAADNyN3/vrjF/gcAAIBm5O5/f9zSyf7X/+v/9f/6f/3/8Oufaf+/vhim/z8Y+v9x+v8l9P/6f/2//p+Vmlr/n7v/yrilk/0PAAAAPcjd/4G4xf4HAACAZuTu/2DcYv8DAABAM3L3fyhu6WT/6//1//p//b/+f/j1Pf9/nvT/4/T/i8XiqpE3MNT/nziq/9f/6//1/5yhqfX/ufs/HLd0sv8BAACgB7n7r4pb7H8AAABoRu7+q+MW+x8AAACakbv/I3FLJ/tf/6//1//r//X/w6+v/58n/f84/f8Snv+v/9f/6/9Zqan1/7n7r4lbOtn/AAAA0IPc/dfGLfY/AAAANCN3/0fjFvsfAAAAmpG7/7q4pZP9r//X/+v/9f/70v8f1/9vpf8/GPvX/y/0//p//f8S+n/9v/6frQ6q/787fr5f1v/n7v9Y3NLJ/gcAAIAe5O6/Pm6x/wEAAKAZufs/HrfY/wAAANCM3P2fiFs62f/6f/2//l//7/n/w6+v/58nz/8fp/9fQv+v/9f/6/9ZqYPq/3fq/bf+de7+T8Ytnex/AAAA6EHu/hviFvsfAAAAmpG7/8a4xf4HAACAZuTu/1Tc0sn+1//r/zf3/4uF/l//r/8/6QD6//WF/n/l9P/j9P9L6P/b7P//Z9FQ/39sx8/X/zNFU+v/c/d/Om7pZP8DAABAD3L3fyZusf8BAACgGbn7Pxu32P8AAADQjNz9n4tbWtr/9+ycvs2//z+65RP1/4vF4rYLPP9f/z/y+vr/yfT/9U9V/786+v9x+v8l9P9t9v+e/6//59BMrf/P3f/5uKWl/Q8AAACdy93/hbjF/gcAAIBm5O7/Ytxi/wMAAEAzcvd/KW7pZP/Pv//f+on6/8VZPf9f/7/xAf2//l//P1tn299fvh6/pun/9f/6/8F+fm2Hf+9Z6P/1//p/Bkyt/8/d/+W4pZP9DwAAAD3I3X9T3GL/AwAAQDNy998ct9j/AAAA0Izc/V+JWzrZ//p//b/+f579/7r+X/+v/x80lef/n3feQ27R/+v/W+z/x+j/9f/6f7aaWv+fu/+rcUsn+x8AAAB6kLv/a3GL/Q8AAADNyN3/9bjF/gcAAIBm5O7/RtzSyf7f3v+fszhZqJ401P9Ho6b/P43+f/P71/8P//jw/H/9v/5//02l//f8/zN7//p//f+c3/+e+v/7b/98/T8tmlr/n7v/lrilk/0PAAAAPcjd/824xf4HAACAZuTu/1bcYv8DAABAM3L33xq3dLL/Pf9f/6//1//r/4dfX/8/T/r/cfr/JfT/Z9/P58+q+v/5Pv//f/X/rM7U+v/c/d+OWzaG3wP+/wz/ZwIAAAATkrv/O3FLJ1//BwAAgB7k7v9u3GL/AwAAQDNy938vbulk/+v/9f/6f/2//n/49fX/86T/H6f/X6Kf/n996IOH3c+frcN+/830/57/zwpNrf/P3f/9uKWT/Q8AAABtu2vj29z9P4hb7H8AAABoRu7+H8Yt9j8AAAA0I3f/bXFLJ/tf/6//b7//f4T+f8vr6//1/y3T/+ev6MP0/0v00/8POux+fu7vX/+v/2e7qfX/uftvj1s62f8AAADQg9z9P4pb7H8AAABoRu7+H8ct9j8AAAA0I3f/T+KWTva//r+v/n9t0WP/7/n/+n/9f0/m0/9fcWToo57/r//X/8/3/ev/9f9sN7X+P3f/HWtHutz/AAAAMFcPe+Cjb9/t971j49v1xU/jFvsfAAAAmpG7/2dxi/0PAAAAzcjd//O4pZP9r//vq//v8/n/+n/9v/6/J/Pp/4fp//X/+v/5vn/9v/6f7abW/+fu/0XcctrwG/w/6AEAAAAOz//t7bvn7v9l3NLJ1/8BAACgB7n7fxW3bNv/J3b5p9oBAACAqcnd/+u4pZOv/+v/J97/L/ap/4/vp/8/Sf+v/x96ff3/POn/x51l/39iTf+v/x+h/9f/6//Zamr9f+7+669ZdLn/AQAAoFGbfkfhNxvfri9+G7fY/wAAANCM3P2/i1vsfwAAAGhG7v7fxy2d7H/9/8T7/zN6/v+x+k+e/995/3/x+uDr6//1/y3T/4/z/P8l9P/6f/2//p+V2kP/vzFI97v/z93/h7ilk/0PAAAAPcjd/8e4xf4HAACAZuTu/1PcYv8DAABAM3L3/zlu6WT/6/8Pof+/5Ohisa/9/y6e/6//76P/3+H12+n/73vu8Zse/sirr9T/c8pB9v/5Y0H/r//X/5+k/9f/6//ZamrP/8/d/5e4pZP9DwAAAD3I3X9n3GL/AwAAQDNy9/81brl3/994WO8KAAAAWKXc/X+LWzr5+r/+v8Xn/8+z/89/1ofQ/x+fX/+fTXHv/b/n/+v/t/P8/3H6/yX0//p//b/+n5WaWv+fu//vcUsn+x8AAAB6kLv/H3FL7v+1Pf/WPQAAADAxufv/Gbf4+j8AAAA0I3f/XXFLJ/tf/6//n0r/nzz//9Tnef7/Sfp//f9e6P/H6f+X0P/r//X/+n9Wamr9f+7+f8Utnex/AAAA6EHu/rvjFvsfAAAAmpG7/99xi/0PAAAAzcjd/5+4pZP9r//X/+v/9f/6/+HX1//Pk/5/nP5/Cf2//l//r/9npabW/+fu/28AAAD//xDQcaQ=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) 2.995234744s ago: executing program 0 (id=15156): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x10}, 0x1c) 2.900718724s ago: executing program 3 (id=15157): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000003880)=[{{&(0x7f0000003480)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) 2.694011387s ago: executing program 9 (id=15158): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000380)={[{@coherency_buffered}, {@heartbeat_none}, {@user_xattr}, {@err_cont}, {@resv_level={'resv_level', 0x3d, 0x5}}, {@localflocks}, {@localflocks}, {@dir_resv_level}]}, 0x9, 0x4436, &(0x7f0000004480)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) rmdir(&(0x7f0000000280)='./bus\x00') 2.618579477s ago: executing program 3 (id=15159): r0 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x19, 0x0) 2.603971459s ago: executing program 5 (id=15160): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r1], 0x2c}}, 0x20008000) 2.431808409s ago: executing program 0 (id=15161): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.172393623s ago: executing program 5 (id=15162): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.117956992s ago: executing program 0 (id=15163): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) 1.974619662s ago: executing program 3 (id=15164): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x11) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) 1.795466629s ago: executing program 7 (id=15165): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 1.675356726s ago: executing program 5 (id=15166): r0 = socket(0x10, 0x3, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 1.574910327s ago: executing program 3 (id=15167): r0 = epoll_create1(0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0xffff}) 1.563387263s ago: executing program 0 (id=15168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x92}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x63}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.214394163s ago: executing program 0 (id=15169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) shmctl$SHM_LOCK(0x0, 0xb) 774.066543ms ago: executing program 0 (id=15170): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x3, "ddbd7b17"}, @local=@item_4={0x3, 0x2, 0x9, "3a2146a0"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 515.690473ms ago: executing program 7 (id=15171): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x28043) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0xd0) 503.917607ms ago: executing program 3 (id=15172): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x810084, &(0x7f0000000880)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES16, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES64, @ANYRESHEX], 0x1, 0x686, &(0x7f00000001c0)="$eJzs3U9sHFcdB/DvrDd2NpTUbZM2RZUSNRIgIhI7JgVXQgSEUA4VqtoDNyQrcRorm7Q4LnIrRMP/aw/hiFQOPsEJwT1SuXCBW4/4WAnBpSdzYdHMztobe9d/Qux1yucTjd9782be+81vZ3b2j6IN8H/ryrk076fIlXOvLJft1ZWZ9urKzK1ePclEkkbSrIqiLDqdD5PL6S55PklRD1cMm+fewuxrH32y+nG31ayXavvGdvvtzt16yZkkY3W5ya2HHe/q4PE2HN1puGL9CMuEne0lDkbtSHU5l/55r7vmB395Yr2nT2vQ3jue+cBjoOjeN7eYTI7VF3r5OqB7V+zesx9rd0cdAAAAAByAJ9eyluUcH3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DgpvtIaK4t6afTqZ1L0fv9/vF6Xun64nN7b5vf3Kw4AAAAAAAAAOECn17KW5RzvtTtF9Z3/i1XjRPX3M3k7dzKfxZzPcuaylKUsZjrJZN9A48tzS0uL0/17Tgze8+LAPS/uEOhEXbYe0YEDAAAAAAAAwKfLT3Nl4/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DIpkrFtUy4lefTKNZpKJ3nZ3k78lGR9ttP+7+6MOAAAAAA7Ak2tZy3KO99qdonrP/2z1vv9o3s7tLGUhS2lnPteqzwK67/obqysz7dWVmVvlsnXcb/5rT2FUI6b72cPgmU9VW7RyPQvVmvO5mjfTzrU0qj1Lp3rxDI7rJ2VMxTdqu4zsWl2WR/5+XW7x3p4Odpg9fpgyWWXkyHpGpurYymw8tX0m9vjobJ5pOo31YE9smqleX9ztVE4/TM6P1WV5PL8clvODcry/sTkTF/vOvme3z3nyhT/9/ns32rdv3rh+59xID+khjNVlp/rb2pqJmb5MPNfNwPdf/zRmYoupKhMn19tX8p28nnM5k1ezmIX8MHNZynzO5NtVba4+n4u+z1OHnDOXH2i9ulMk4/UZ2n2w9hbTi9W+x7OQ7+bNXMt8Xqr+Xcx0vppLuZTZvkf45C6eaRtDrvrOZwcGf/aLdaWV5Fd1OSqdif5Wmden+vLa/5w7WfX1r9nI0tOP/n7U/FxdKef4WV0eDpszMd2XiWe2z8Rvq6eVO+3bNxdvzL21u+mefr+ulNfRL0Z9l3hAeb48XT5YVevBs6Pse6bb19ycr/H6G5fufo0tfSd7fX//za9frrYZdqWO16/hml+f3XLHKvueGzjLTNV3qq9v0OstAA69Y186Nt76R+uvrQ9aP2/daL1y9FsTX5t4YTxH/nzk5ebU2OcbLxR/yAf58YNvcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIdz5513b8612/OLmyrNdN4b0rUvlf8M6SqSPMK5ej9nNnSbI3seudhhm+efSA4mh1sr40kOfNKBlX93Op16TXEY4tm+Uv2E4UQ6+z5XM8mgrtOjT8KIn5iAfXdh6dZbF+688+6XF27NvTH/xvzt2UuXZqdmL700c+H6Qnt+qvt31FEC+2Hjpj/qSAAAAAAAAAAAAIDdOoj/TjB89qMHeagAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAY+rKuTTvp8j01Pk/lu3VlZl2ufTqG1s2kzSSFD9Kig+Ty+kumewbrhg2z72F2dc++mT1442xmr3tG9vttzt36yVnkozV5aMa7+puxvvddp3F+hGWCTvbSxyM2n8DAAD//xcoC0M=") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500)=""/38, 0x26) 357.965799ms ago: executing program 1 (id=15173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 270.128432ms ago: executing program 5 (id=15174): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1010408, &(0x7f0000000940)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@usrquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid}]}, 0x1, 0x61b6, &(0x7f00000075c0)="$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") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1218001, &(0x7f0000000180)={[{@file_umask={'file_umask', 0x3d, 0x7}}, {}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@codepage={'codepage', 0x3d, 'iso8859-7'}}]}, 0x1, 0x342, &(0x7f00000005c0)="$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") open(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x82002, 0x0) 179.822632ms ago: executing program 7 (id=15175): unshare(0x400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) lseek(r0, 0x4000012, 0x1) 0s ago: executing program 3 (id=15176): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x2c020400) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="f83cffff", 0x4}], 0x1, 0x6) kernel console output (not intermixed with test programs): 326 audit(1757426150.757:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.5.13766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1365.521412][ T30] audit: type=1326 audit(1757426150.757:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.5.13766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1365.795718][ T6241] loop1: detected capacity change from 0 to 256 [ 1365.830056][ T30] audit: type=1326 audit(1757426151.478:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.13775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec38ebe9 code=0x7ffc0000 [ 1365.864863][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13777'. [ 1365.903683][ T30] audit: type=1326 audit(1757426151.487:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.13775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f0dec38ebe9 code=0x7ffc0000 [ 1365.989365][ T6241] FAT-fs (loop1): Directory bread(block 64) failed [ 1366.033347][ T6241] FAT-fs (loop1): Directory bread(block 65) failed [ 1366.046610][ T30] audit: type=1326 audit(1757426151.487:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.13775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec38ebe9 code=0x7ffc0000 [ 1366.065399][ T6241] FAT-fs (loop1): Directory bread(block 66) failed [ 1366.148860][ T30] audit: type=1326 audit(1757426151.487:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.3.13775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec38ebe9 code=0x7ffc0000 [ 1366.161525][ T6241] FAT-fs (loop1): Directory bread(block 67) failed [ 1366.261948][ T6241] FAT-fs (loop1): Directory bread(block 68) failed [ 1366.294930][ T6241] FAT-fs (loop1): Directory bread(block 69) failed [ 1366.332824][ T6241] FAT-fs (loop1): Directory bread(block 70) failed [ 1366.339372][ T6241] FAT-fs (loop1): Directory bread(block 71) failed [ 1366.399358][ T6241] FAT-fs (loop1): Directory bread(block 72) failed [ 1366.461918][ T6241] FAT-fs (loop1): Directory bread(block 73) failed [ 1366.632291][T24844] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1366.664365][ T6214] loop9: detected capacity change from 0 to 32768 [ 1366.792567][ T6214] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1366.856544][T24844] usb 4-1: Using ep0 maxpacket: 32 [ 1367.004271][T24844] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1367.037957][T24844] usb 4-1: config 0 has no interface number 0 [ 1367.102795][T24844] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1367.111904][T24844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.175048][ T6214] XFS (loop9): Ending clean mount [ 1367.209500][T24844] usb 4-1: Product: syz [ 1367.217625][T24844] usb 4-1: Manufacturer: syz [ 1367.223685][ T6214] XFS (loop9): Quotacheck needed: Please wait. [ 1367.251767][T24844] usb 4-1: SerialNumber: syz [ 1367.267625][T24844] usb 4-1: config 0 descriptor?? [ 1367.414734][T24844] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1367.486301][ T6214] XFS (loop9): Quotacheck: Done. [ 1367.733281][T24844] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 1367.751300][T24844] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 1367.762029][ T6295] loop0: detected capacity change from 0 to 2048 [ 1367.842207][T32607] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1367.881127][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13798'. [ 1367.935709][ T6303] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1368.007700][T24844] usb 4-1: USB disconnect, device number 107 [ 1368.039104][ T6295] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 1368.246943][ T6295] Remounting filesystem read-only [ 1369.481260][ T6345] loop9: detected capacity change from 0 to 1024 [ 1369.902810][ T6357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13820'. [ 1370.013830][ T6361] netlink: 'syz.7.13824': attribute type 21 has an invalid length. [ 1370.069900][ T6361] netlink: 128 bytes leftover after parsing attributes in process `syz.7.13824'. [ 1370.124865][ T6361] netlink: 'syz.7.13824': attribute type 5 has an invalid length. [ 1370.180201][ T6361] netlink: 'syz.7.13824': attribute type 6 has an invalid length. [ 1370.213683][ T6361] netlink: 3 bytes leftover after parsing attributes in process `syz.7.13824'. [ 1370.671828][ T6329] loop0: detected capacity change from 0 to 32768 [ 1370.721636][ T6384] loop1: detected capacity change from 0 to 164 [ 1370.755378][ T6329] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1370.782228][ T6384] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1370.831400][ T6384] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1370.859375][ T6329] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1370.935727][ T6394] random: crng reseeded on system resumption [ 1370.948883][ T6384] rock: directory entry would overflow storage [ 1370.979268][ T6384] rock: sig=0x4f50, size=4, remaining=3 [ 1371.011634][ T6384] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1371.268908][ T4786] ocfs2: Unmounting device (7,0) on (node local) [ 1371.368332][ T916] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1371.492104][ T6408] loop5: detected capacity change from 0 to 256 [ 1371.600193][ T916] usb 8-1: Using ep0 maxpacket: 8 [ 1371.649586][ T916] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1371.678366][ T6408] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 1371.688538][ T916] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.754736][ T916] usb 8-1: config 0 has no interface number 0 [ 1371.760873][ T916] usb 8-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1371.794509][ T916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.833619][ T916] usb 8-1: config 0 descriptor?? [ 1372.173372][ T6420] loop1: detected capacity change from 0 to 512 [ 1372.373990][ T6420] EXT4-fs (loop1): 1 orphan inode deleted [ 1372.400931][T32705] usb 8-1: USB disconnect, device number 23 [ 1372.458694][ T13] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1372.468616][ T13] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 1372.497153][ T6420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1372.583692][ T6420] ext4 filesystem being mounted at /2382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1372.651469][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1372.806532][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.910093][ T30] audit: type=1326 audit(1757426158.119:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.5.13863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1372.920957][ T6455] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1373.046358][ T30] audit: type=1326 audit(1757426158.119:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.5.13863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1373.203476][ T30] audit: type=1326 audit(1757426158.166:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.5.13863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1373.323294][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13867'. [ 1373.367190][ T30] audit: type=1326 audit(1757426158.166:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.5.13863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1373.484058][ T30] audit: type=1326 audit(1757426158.166:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.5.13863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1373.484873][ T864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1373.552402][ T6472] netlink: 'syz.9.13870': attribute type 32 has an invalid length. [ 1373.656746][T19489] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1373.887737][ T6485] netlink: 'syz.9.13876': attribute type 10 has an invalid length. [ 1373.997119][ T6485] team0: Port device team_slave_0 removed [ 1374.113869][ T6487] loop5: detected capacity change from 0 to 4096 [ 1374.150281][ T6490] loop1: detected capacity change from 0 to 2048 [ 1374.190539][ T6487] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 1374.230079][ T6487] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 1374.263447][ T6490] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1374.279425][ T6487] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 1374.316487][ T6487] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 1374.349138][ T6490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1374.383063][ T6487] ntfs3(loop5): try to read out of volume at offset 0x3fffffc1c00 [ 1374.423230][ T6487] ntfs3(loop5): try to read out of volume at offset 0x3fffffc2c00 [ 1374.460367][ T6498] loop7: detected capacity change from 0 to 2048 [ 1374.482650][ T6487] ntfs3(loop5): try to read out of volume at offset 0x3fffffc4c00 [ 1374.563260][ T6487] ntfs3(loop5): try to read out of volume at offset 0x3fffffc8c00 [ 1374.565906][ T6498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1374.604841][ T6487] ntfs3(loop5): try to read out of volume at offset 0x3fffffd0c00 [ 1374.670644][ T6487] ntfs3(loop5): try to read out of volume at offset 0x3fffffe0c00 [ 1374.768458][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1374.820060][ T6462] loop3: detected capacity change from 0 to 32768 [ 1374.838434][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1374.921186][ T6462] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.13864 (6462) [ 1375.013505][ T6462] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1375.077053][ T6462] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1375.346397][ T6462] BTRFS info (device loop3): enabling ssd optimizations [ 1375.366378][ T6462] BTRFS info (device loop3): enabling free space tree [ 1375.390610][ T6534] loop5: detected capacity change from 0 to 128 [ 1375.669840][ T6462] BTRFS info (device loop3): balance: start -sprofiles=data,usage=257,devid=0,drange=7..8,vrange=18446744073709551614..18446744073709551613,limit=25769803776 [ 1375.708665][ T5855] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1375.721645][ T6537] loop9: detected capacity change from 0 to 4096 [ 1375.732656][ T6462] BTRFS info (device loop3): balance: ended with status: 0 [ 1375.943604][ T6544] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1376.028711][ T6537] NILFS error (device loop9): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1376.114967][ T5883] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1376.135238][ T6546] loop1: detected capacity change from 0 to 128 [ 1376.142545][ T6514] loop7: detected capacity change from 0 to 32768 [ 1376.161693][ T6537] Remounting filesystem read-only [ 1376.245843][ T6546] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1376.303052][ T6514] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 1376.336144][ T6546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1376.573877][T25620] ocfs2: Unmounting device (7,7) on (node local) [ 1376.768305][ T6559] loop7: detected capacity change from 0 to 1024 [ 1376.909961][ T6556] loop5: detected capacity change from 0 to 4096 [ 1377.071351][T19476] hfsplus: b-tree write err: -5, ino 4 [ 1377.397950][ T6571] erofs (device loop3): cannot find valid erofs superblock [ 1377.771637][ T916] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1377.996048][ T916] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.000384][ T6582] loop7: detected capacity change from 0 to 4096 [ 1378.038826][ T916] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1378.082489][ T916] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1378.083369][ T6582] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 1378.098059][ T6589] loop3: detected capacity change from 0 to 1024 [ 1378.114730][ T916] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1378.127615][ T916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.225365][ T916] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1378.242341][ T916] usb 2-1: invalid MIDI out EP 0 [ 1378.320674][ T61] hfsplus: b-tree write err: -5, ino 4 [ 1378.626980][T29645] udevd[29645]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1378.652060][ T916] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1378.680603][ T6600] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13921'. [ 1378.713836][ T6600] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13921'. [ 1378.754133][ T6603] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.13922'. [ 1378.763765][ T6600] netlink: 21 bytes leftover after parsing attributes in process `syz.3.13921'. [ 1378.783437][ T916] usb 2-1: USB disconnect, device number 17 [ 1378.786270][ T6604] netlink: 'syz.0.13923': attribute type 11 has an invalid length. [ 1378.819373][ T6603] netlink: zone id is out of range [ 1378.824584][ T6603] netlink: get zone limit has 8 unknown bytes [ 1378.864168][ T6606] netlink: 'syz.5.13924': attribute type 4 has an invalid length. [ 1378.883454][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1379.226880][ T6619] cgroup: none used incorrectly [ 1379.317412][ T6622] loop1: detected capacity change from 0 to 64 [ 1379.511965][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13933'. [ 1379.562497][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13933'. [ 1379.589435][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13933'. [ 1379.601582][ T6634] loop0: detected capacity change from 0 to 256 [ 1379.667710][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13933'. [ 1379.699342][ T6634] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1379.734803][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13933'. [ 1379.818696][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13933'. [ 1379.889812][ T6640] loop9: detected capacity change from 0 to 1024 [ 1379.921270][ T6640] EXT4-fs: Ignoring removed nobh option [ 1379.949811][ T6640] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1380.025243][ T6640] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.13938: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1380.051970][ T6640] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.13938: couldn't read orphan inode 11 (err -117) [ 1380.145066][ T6648] dlm: no locking on control device [ 1380.199377][ T6640] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1380.400284][ T6661] XFS (nullb0): Invalid superblock magic number [ 1380.494774][T32607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.670815][T24829] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1380.793306][ T6671] loop7: detected capacity change from 0 to 4096 [ 1380.843081][ T6671] ntfs3(loop7): ino=3, Correct links count -> 2. [ 1380.904407][T24829] usb 6-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 1380.943368][T24829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1381.025822][T24829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1381.058666][T24829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1381.132160][T24829] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1381.220182][T24829] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1381.298390][T24829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.367855][T24829] usb 6-1: config 0 descriptor?? [ 1381.740455][T24829] rc_core: IR keymap rc-hauppauge not found [ 1381.746431][T24829] Registered IR keymap rc-empty [ 1381.791903][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1381.838534][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1381.901379][T24829] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1381.937124][T24829] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input81 [ 1381.990595][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1382.080087][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1382.101700][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1382.195619][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1382.229822][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1382.312537][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1382.324305][ T6715] loop1: detected capacity change from 0 to 1764 [ 1382.369074][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1382.417729][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1382.477640][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1382.526633][T24829] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1382.591336][T24829] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1382.648589][ T6682] loop0: detected capacity change from 0 to 32768 [ 1382.678785][T24829] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1382.707395][ T6682] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.13952 (6682) [ 1382.755423][T24829] usb 6-1: USB disconnect, device number 123 [ 1382.828150][ T6682] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1382.852671][ T6682] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1383.350443][ T6682] BTRFS info (device loop0): enabling ssd optimizations [ 1383.395317][ T6682] BTRFS info (device loop0): enabling free space tree [ 1383.416363][ T6761] loop5: detected capacity change from 0 to 1024 [ 1383.469154][ T6767] netlink: 'syz.7.13980': attribute type 3 has an invalid length. [ 1383.695371][ T4786] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1384.177411][ T6787] loop0: detected capacity change from 0 to 16 [ 1384.296985][ T6787] erofs (device loop0): mounted with root inode @ nid 36. [ 1384.592478][ T6798] loop1: detected capacity change from 0 to 256 [ 1384.710965][ T6758] loop3: detected capacity change from 0 to 32768 [ 1385.070045][ T6809] loop1: detected capacity change from 0 to 1024 [ 1385.084789][ T6758] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc [ 1385.084830][ T6758] allowing incompatible features above 0.0: (unknown version) [ 1385.084847][ T6758] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1385.307023][ T6809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.405702][ T6758] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 1385.490592][ T6758] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 1385.498826][ T6758] bcachefs (loop3): Version upgrade required: [ 1385.498826][ T6758] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1385.498826][ T6758] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 1385.498826][ T6758] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1385.548686][ T6809] EXT4-fs error (device loop1): ext4_xattr_set_entry:1660: inode #16: comm syz.1.13998: corrupted xattr entries [ 1385.674334][ T6758] bcachefs (loop3): dropping and reconstructing all alloc info [ 1385.706452][ T6809] EXT4-fs (loop1): Remounting filesystem read-only [ 1385.929692][ T6758] bcachefs (loop3): accounting_read... [ 1385.959822][ T6834] No source specified [ 1386.080651][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.093360][ T6758] done [ 1386.096185][ T6758] bcachefs (loop3): alloc_read... done [ 1386.182824][ T6758] bcachefs (loop3): done starting filesystem [ 1386.252753][ T6758] bcachefs (loop3): dirent to missing inode: [ 1386.252802][ T6758] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg [ 1386.517799][ T5883] bcachefs (loop3): shutting down [ 1386.748929][ T5883] bcachefs (loop3): shutdown complete [ 1386.995121][ T6865] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1387.016699][ T6868] __nla_validate_parse: 41 callbacks suppressed [ 1387.016725][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14026'. [ 1387.057901][ T6865] Error validating options; rc = [-22] [ 1387.097893][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14026'. [ 1387.254368][ T6872] netlink: 'syz.5.14029': attribute type 10 has an invalid length. [ 1387.291955][ T6872] team0: Device hsr_slave_0 failed to register rx_handler [ 1387.339755][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1387.696747][ T6883] loop9: detected capacity change from 0 to 256 [ 1387.832350][ T6883] FAT-fs (loop9): Directory bread(block 64) failed [ 1387.842518][ T6883] FAT-fs (loop9): Directory bread(block 65) failed [ 1387.851091][ T6883] FAT-fs (loop9): Directory bread(block 66) failed [ 1387.903211][ T6883] FAT-fs (loop9): Directory bread(block 67) failed [ 1387.931731][ T6883] FAT-fs (loop9): Directory bread(block 68) failed [ 1387.986786][ T6883] FAT-fs (loop9): Directory bread(block 69) failed [ 1388.017365][ T6883] FAT-fs (loop9): Directory bread(block 70) failed [ 1388.052857][ T6883] FAT-fs (loop9): Directory bread(block 71) failed [ 1388.093922][ T6883] FAT-fs (loop9): Directory bread(block 72) failed [ 1388.101671][ T6883] FAT-fs (loop9): Directory bread(block 73) failed [ 1388.139851][ T6894] loop7: detected capacity change from 0 to 1024 [ 1388.178330][ T6896] loop0: detected capacity change from 0 to 1024 [ 1388.185690][ T5855] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1388.285219][ T6894] syz.7.14040: attempt to access beyond end of device [ 1388.285219][ T6894] loop7: rw=0, sector=1835012, nr_sectors = 4 limit=1024 [ 1388.359542][ T6894] Buffer I/O error on dev loop7, logical block 458753, async page read [ 1388.398674][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 1388.398845][ T6894] hfsplus: unable to mark blocks free: error -5 [ 1388.417885][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.440819][ T6894] hfsplus: can't free extent [ 1388.467745][ T61] hfsplus: b-tree write err: -5, ino 4 [ 1388.481389][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1388.502511][ T5855] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1388.523974][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.585902][ T5855] usb 2-1: config 0 descriptor?? [ 1388.618345][ T5855] hub 2-1:0.0: USB hub found [ 1388.836750][ T5855] hub 2-1:0.0: 1 port detected [ 1388.992382][ T6912] netlink: 'syz.0.14049': attribute type 11 has an invalid length. [ 1389.019392][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14049'. [ 1389.062533][ T5855] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1389.068950][ T5855] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1389.126564][ T5855] usbhid 2-1:0.0: can't add hid device: -71 [ 1389.137286][ T5855] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1389.229333][ T5855] usb 2-1: USB disconnect, device number 18 [ 1389.644548][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14057'. [ 1389.701943][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14057'. [ 1389.837876][ T6932] netlink: 'syz.0.14058': attribute type 10 has an invalid length. [ 1389.887492][ T6932] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1390.135890][ T6910] loop5: detected capacity change from 0 to 32768 [ 1390.136353][ T6942] loop7: detected capacity change from 0 to 256 [ 1390.215662][ T6945] loop0: detected capacity change from 0 to 256 [ 1390.257416][ T6942] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d) [ 1391.057298][ T6969] loop7: detected capacity change from 0 to 256 [ 1391.137488][ T6969] FAT-fs (loop7): Directory bread(block 64) failed [ 1391.191742][ T6969] FAT-fs (loop7): Directory bread(block 65) failed [ 1391.198460][ T6969] FAT-fs (loop7): Directory bread(block 66) failed [ 1391.239639][ T6969] FAT-fs (loop7): Directory bread(block 67) failed [ 1391.302731][ T6972] loop3: detected capacity change from 0 to 16 [ 1391.308968][ T6969] FAT-fs (loop7): Directory bread(block 68) failed [ 1391.309010][ T6969] FAT-fs (loop7): Directory bread(block 69) failed [ 1391.309102][ T6969] FAT-fs (loop7): Directory bread(block 70) failed [ 1391.309143][ T6969] FAT-fs (loop7): Directory bread(block 71) failed [ 1391.309233][ T6969] FAT-fs (loop7): Directory bread(block 72) failed [ 1391.309263][ T6969] FAT-fs (loop7): Directory bread(block 73) failed [ 1391.496309][ T6972] erofs (device loop3): mounted with root inode @ nid 36. [ 1391.598321][ T6940] loop9: detected capacity change from 0 to 32768 [ 1391.650844][ T6940] ea_get: invalid extended attribute [ 1391.801252][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14083'. [ 1392.023104][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14086'. [ 1393.022161][ T7026] loop1: detected capacity change from 0 to 256 [ 1393.100635][ T7026] FAT-fs (loop1): Directory bread(block 64) failed [ 1393.121224][ T7026] FAT-fs (loop1): Directory bread(block 65) failed [ 1393.139029][ T7026] FAT-fs (loop1): Directory bread(block 66) failed [ 1393.173822][ T7026] FAT-fs (loop1): Directory bread(block 67) failed [ 1393.202590][ T7026] FAT-fs (loop1): Directory bread(block 68) failed [ 1393.229946][ T7026] FAT-fs (loop1): Directory bread(block 69) failed [ 1393.298309][ T7026] FAT-fs (loop1): Directory bread(block 70) failed [ 1393.326077][ T7026] FAT-fs (loop1): Directory bread(block 71) failed [ 1393.355243][ T7026] FAT-fs (loop1): Directory bread(block 72) failed [ 1393.432406][ T7026] FAT-fs (loop1): Directory bread(block 73) failed [ 1393.647312][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14114'. [ 1393.689923][ T7048] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004 [ 1393.706739][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14114'. [ 1394.017150][ T30] audit: type=1326 audit(1757426177.865:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1394.138372][ T30] audit: type=1326 audit(1757426177.865:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1394.160815][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.278457][ T30] audit: type=1326 audit(1757426177.884:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1394.278521][ T30] audit: type=1326 audit(1757426177.893:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1394.278572][ T30] audit: type=1326 audit(1757426177.893:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7058 comm="syz.5.14120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1394.285240][ T7069] netlink: 'syz.1.14126': attribute type 10 has an invalid length. [ 1394.285278][ T7069] syz_tun: entered promiscuous mode [ 1394.285300][ T7069] syz_tun: left allmulticast mode [ 1394.320982][ T7070] netlink: 160 bytes leftover after parsing attributes in process `syz.0.14127'. [ 1394.321019][ T7070] netlink: 'syz.0.14127': attribute type 1 has an invalid length. [ 1394.321037][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14127'. [ 1394.768370][ T7086] loop3: detected capacity change from 0 to 256 [ 1394.953236][ T7086] FAT-fs (loop3): Directory bread(block 64) failed [ 1394.953278][ T7086] FAT-fs (loop3): Directory bread(block 65) failed [ 1394.953366][ T7086] FAT-fs (loop3): Directory bread(block 66) failed [ 1394.953396][ T7086] FAT-fs (loop3): Directory bread(block 67) failed [ 1394.953481][ T7086] FAT-fs (loop3): Directory bread(block 68) failed [ 1394.953511][ T7086] FAT-fs (loop3): Directory bread(block 69) failed [ 1394.953600][ T7086] FAT-fs (loop3): Directory bread(block 70) failed [ 1394.953630][ T7086] FAT-fs (loop3): Directory bread(block 71) failed [ 1394.953717][ T7086] FAT-fs (loop3): Directory bread(block 72) failed [ 1394.953747][ T7086] FAT-fs (loop3): Directory bread(block 73) failed [ 1395.416811][ T7104] loop3: detected capacity change from 0 to 256 [ 1395.824201][ T7118] netlink: 172 bytes leftover after parsing attributes in process `syz.7.14150'. [ 1395.921411][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14153'. [ 1396.041731][ T7124] comedi comedi3: dmm32at: I/O port conflict (0xfffffffffffffffd,16) [ 1396.170219][ T7129] netlink: 152 bytes leftover after parsing attributes in process `syz.7.14156'. [ 1396.200882][ T7130] loop3: detected capacity change from 0 to 1764 [ 1396.446481][ T7136] netlink: 648 bytes leftover after parsing attributes in process `syz.7.14160'. [ 1397.012886][ T5885] Bluetooth: hci4: unexpected event for opcode 0x2029 [ 1397.096783][ T7119] loop1: detected capacity change from 0 to 32768 [ 1397.105003][ T7119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.14152 (7119) [ 1397.161867][ T7119] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1397.227974][ T7119] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 1397.441555][ T7179] loop3: detected capacity change from 0 to 22 [ 1397.492353][ T7179] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1397.512451][ T7119] BTRFS info (device loop1): enabling ssd optimizations [ 1397.533710][ T7179] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1397.553645][ T7119] BTRFS info (device loop1): enabling free space tree [ 1397.555249][ T7176] loop9: detected capacity change from 0 to 4096 [ 1397.667719][ T7184] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1397.767558][ T7140] loop0: detected capacity change from 0 to 32768 [ 1397.862080][ T7140] ERROR: (device loop0): diAllocBit: iag inconsistent [ 1397.862080][ T7140] [ 1397.949411][ T7140] ialloc: diAlloc returned -5! [ 1398.011657][ T5872] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1398.349800][ T7195] loop3: detected capacity change from 0 to 256 [ 1398.979276][ T7209] virtiofs: Unknown parameter 'always' [ 1398.988722][ T30] audit: type=1326 audit(1757426182.514:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.3.14187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec38ebe9 code=0x7ffc0000 [ 1399.102193][ T30] audit: type=1326 audit(1757426182.514:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.3.14187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec38ebe9 code=0x7ffc0000 [ 1399.200837][ T30] audit: type=1326 audit(1757426182.533:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.3.14187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f0dec38ebe9 code=0x7ffc0000 [ 1399.349031][ T30] audit: type=1326 audit(1757426182.533:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.3.14187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec38ebe9 code=0x7ffc0000 [ 1399.489680][ T30] audit: type=1326 audit(1757426182.533:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.3.14187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dec38ebe9 code=0x7ffc0000 [ 1399.675556][ T7225] loop3: detected capacity change from 0 to 4096 [ 1399.752336][ T7232] loop9: detected capacity change from 0 to 1024 [ 1399.956970][ T7242] loop5: detected capacity change from 0 to 16 [ 1399.965514][ T7232] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1400.004910][ T7242] erofs (device loop5): mounted with root inode @ nid 36. [ 1400.058305][ T7232] EXT4-fs error (device loop9): ext4_get_first_dir_block:3552: inode #11: comm syz.9.14200: directory missing '..' [ 1400.211198][ T7242] erofs (device loop5): per-inode big pcluster without sb feature for nid 36 [ 1400.281097][ T7242] erofs (device loop5): per-inode big pcluster without sb feature for nid 36 [ 1400.327694][T32607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.344904][ T7242] erofs (device loop5): read error -117 @ 536870984 of nid 36 [ 1400.843789][ T7264] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14214'. [ 1401.139893][ T7276] trusted_key: encrypted_key: hex blob is missing [ 1401.222143][ T30] audit: type=1326 audit(1757426184.600:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.7.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9528b8ebe9 code=0x7ffc0000 [ 1401.321261][ T30] audit: type=1326 audit(1757426184.600:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.7.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9528b8ebe9 code=0x7ffc0000 [ 1401.366379][ T5885] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1401.376821][ T5885] Bluetooth: hci4: Injecting HCI hardware error event [ 1401.389143][ T5885] Bluetooth: hci4: hardware error 0x00 [ 1401.411018][ T30] audit: type=1326 audit(1757426184.600:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.7.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f9528b8ebe9 code=0x7ffc0000 [ 1401.456661][ T30] audit: type=1326 audit(1757426184.600:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.7.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9528b8ebe9 code=0x7ffc0000 [ 1401.480338][ T864] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1401.498675][ T30] audit: type=1326 audit(1757426184.600:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.7.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9528b8ebe9 code=0x7ffc0000 [ 1401.633039][ T7289] loop3: detected capacity change from 0 to 4096 [ 1401.647990][ T7289] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1401.680046][ T864] usb 10-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1401.702646][ T864] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.732965][ T864] usb 10-1: Product: syz [ 1401.748776][ T864] usb 10-1: Manufacturer: syz [ 1401.756499][ T7295] netlink: 'syz.7.14228': attribute type 3 has an invalid length. [ 1401.768179][ T864] usb 10-1: SerialNumber: syz [ 1401.773245][ T7295] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.14228'. [ 1401.813756][ T864] usb 10-1: config 0 descriptor?? [ 1401.820479][ T7289] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1401.829046][ T864] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1401.848426][ T7289] ntfs3(loop3): ino=19, mi_enum_attr [ 1401.919331][ T7289] ntfs3(loop3): failed to convert "c46c" to macceltic [ 1401.948914][ T7289] ntfs3(loop3): ino=20, mi_enum_attr [ 1402.297283][ T864] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1402.304453][ T864] sq905c 10-1:0.0: Reading version command failed [ 1402.360977][ T864] sq905c 10-1:0.0: probe with driver sq905c failed with error -71 [ 1402.390849][ T864] usb 10-1: USB disconnect, device number 11 [ 1402.637911][ T916] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1402.824716][ T7326] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1402.874581][ T916] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1402.906754][ T916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.926322][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14245'. [ 1402.935265][ T916] usb 2-1: Product: syz [ 1402.940623][ T916] usb 2-1: Manufacturer: syz [ 1402.945240][ T916] usb 2-1: SerialNumber: syz [ 1403.016264][ T916] usb 2-1: config 0 descriptor?? [ 1403.104864][ T7338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14249'. [ 1403.124982][ T916] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1403.155064][ T916] pctv452e: pctv452e_power_ctrl: 1 [ 1403.155064][ T916] [ 1403.194608][ T916] usb 2-1: selecting invalid altsetting 3 [ 1403.222212][ T916] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1403.222212][ T916] [ 1403.278998][ T916] dvb-usb: bulk message failed: -22 (5/0) [ 1403.312429][ T916] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1403.387802][ T916] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1403.512985][ T916] usb 2-1: USB disconnect, device number 19 [ 1403.760675][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1403.761500][ T5885] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1404.051260][ T7369] loop3: detected capacity change from 0 to 512 [ 1404.059747][ T5855] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1404.080570][ T7369] EXT4-fs: Ignoring removed nobh option [ 1404.124362][ T7369] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 1404.133609][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14266'. [ 1404.172908][ T7369] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 1404.182028][ T7369] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.14264: casefold flag without casefold feature [ 1404.195785][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14266'. [ 1404.262927][ T5855] usb 8-1: Using ep0 maxpacket: 16 [ 1404.285005][ T5855] usb 8-1: config 0 has an invalid interface number: 147 but max is 0 [ 1404.291433][ T7369] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.14264: couldn't read orphan inode 13 (err -117) [ 1404.326951][ T5855] usb 8-1: config 0 has no interface number 0 [ 1404.343231][ T7379] loop0: detected capacity change from 0 to 256 [ 1404.359615][ T5855] usb 8-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 1404.380157][ T7369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1404.404232][ T5855] usb 8-1: config 0 interface 147 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1404.453460][ T5855] usb 8-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1404.492533][ T7379] FAT-fs (loop0): Directory bread(block 64) failed [ 1404.510261][ T7379] FAT-fs (loop0): Directory bread(block 65) failed [ 1404.547784][ T7379] FAT-fs (loop0): Directory bread(block 66) failed [ 1404.560152][ T5855] usb 8-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1404.581986][ T7379] FAT-fs (loop0): Directory bread(block 67) failed [ 1404.600395][ T5855] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.626066][ T7379] FAT-fs (loop0): Directory bread(block 68) failed [ 1404.636713][ T5855] usb 8-1: Product: syz [ 1404.641150][ T7379] FAT-fs (loop0): Directory bread(block 69) failed [ 1404.659226][ T5855] usb 8-1: Manufacturer: syz [ 1404.663900][ T5855] usb 8-1: SerialNumber: syz [ 1404.692720][ T7379] FAT-fs (loop0): Directory bread(block 70) failed [ 1404.699326][ T7379] FAT-fs (loop0): Directory bread(block 71) failed [ 1404.733246][ T5883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.743678][ T5855] usb 8-1: config 0 descriptor?? [ 1404.744172][ T7379] FAT-fs (loop0): Directory bread(block 72) failed [ 1404.759442][ T7362] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1404.784164][ T7362] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1404.832836][ T7379] FAT-fs (loop0): Directory bread(block 73) failed [ 1404.875734][ T7354] loop5: detected capacity change from 0 to 32768 [ 1404.957436][ T7354] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1405.018898][ T7354] (syz.5.14256,7354,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72 [ 1405.094707][ T5855] net1080 8-1:0.147: probe with driver net1080 failed with error -71 [ 1405.114268][ T7354] ocfs2: Unmounting device (7,5) on (node local) [ 1405.153006][ T5855] usb 8-1: USB disconnect, device number 24 [ 1405.420531][ T7402] loop0: detected capacity change from 0 to 64 [ 1405.845638][ T7412] loop3: detected capacity change from 0 to 64 [ 1405.854553][ T7415] loop0: detected capacity change from 0 to 1024 [ 1405.974752][ T7412] hfs: request for non-existent node -117440513 in B*Tree [ 1405.982735][ T7412] hfs: request for non-existent node -117440513 in B*Tree [ 1406.116082][T19479] hfsplus: b-tree write err: -5, ino 4 [ 1406.272744][ T30] audit: type=1326 audit(1757426189.314:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.7.14293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9528b8ebe9 code=0x7ffc0000 [ 1406.387995][ T30] audit: type=1326 audit(1757426189.314:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.7.14293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9528b8ebe9 code=0x7ffc0000 [ 1406.474620][ T30] audit: type=1326 audit(1757426189.371:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.7.14293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f9528b8ebe9 code=0x7ffc0000 [ 1406.598647][ T30] audit: type=1326 audit(1757426189.371:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.7.14293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9528b8ebe9 code=0x7ffc0000 [ 1406.649798][ T30] audit: type=1326 audit(1757426189.371:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7426 comm="syz.7.14293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9528b8ebe9 code=0x7ffc0000 [ 1406.727032][ T7443] loop5: detected capacity change from 0 to 64 [ 1407.292147][ T7462] loop0: detected capacity change from 0 to 2048 [ 1407.335495][ T7462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1407.441865][ T7473] loop3: detected capacity change from 0 to 512 [ 1407.445499][ T7471] loop9: detected capacity change from 0 to 256 [ 1407.455244][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14309'. [ 1407.455461][ T7473] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1407.470898][ T7462] cifs: Unknown parameter 'norecovery' [ 1407.483581][ T7473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 1407.502586][ T7471] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1407.513192][ T7473] System zones: 1-12 [ 1407.513630][ T7471] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1407.540199][ T7473] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1407.575064][ T7473] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.14313: invalid indirect mapped block 12 (level 1) [ 1407.595281][ T7471] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1407.601217][ T7473] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.14313: invalid indirect mapped block 2 (level 2) [ 1407.635243][ T7473] EXT4-fs (loop3): 1 truncate cleaned up [ 1407.647639][ T7473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1407.721289][ T4786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.912990][ T5883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1408.344871][ T7493] loop0: detected capacity change from 0 to 1024 [ 1408.794500][ T7506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14328'. [ 1408.874890][ T7506] netlink: 'syz.0.14328': attribute type 2 has an invalid length. [ 1408.920981][ T7506] netlink: 'syz.0.14328': attribute type 2 has an invalid length. [ 1408.948700][ T7506] netlink: 'syz.0.14328': attribute type 1 has an invalid length. [ 1408.967951][ T7506] netlink: 'syz.0.14328': attribute type 2 has an invalid length. [ 1409.013894][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14328'. [ 1409.383928][ T864] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 1409.556865][ T864] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.567214][ T864] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1409.578551][ T864] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1409.596480][ T7514] netlink: 92 bytes leftover after parsing attributes in process `syz.3.14333'. [ 1409.608193][ T864] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1409.616219][ T864] usb 8-1: SerialNumber: syz [ 1409.636361][ T7514] netlink: 92 bytes leftover after parsing attributes in process `syz.3.14333'. [ 1409.655139][ T864] usb 8-1: 0:2 : does not exist [ 1409.871570][ T7529] netlink: 88 bytes leftover after parsing attributes in process `syz.5.14340'. [ 1409.919860][ T7529] netlink: 88 bytes leftover after parsing attributes in process `syz.5.14340'. [ 1410.145492][ T864] usb 8-1: USB disconnect, device number 25 [ 1410.264858][ T7545] loop1: detected capacity change from 0 to 256 [ 1410.291264][ T7547] netlink: 'syz.5.14349': attribute type 10 has an invalid length. [ 1410.330440][ T7545] FAT-fs (loop1): Directory bread(block 64) failed [ 1410.347196][ T7545] FAT-fs (loop1): Directory bread(block 65) failed [ 1410.362890][ T7545] FAT-fs (loop1): Directory bread(block 66) failed [ 1410.373056][ T7545] FAT-fs (loop1): Directory bread(block 67) failed [ 1410.387738][ T7547] macvlan1: entered allmulticast mode [ 1410.418240][ T7547] team0: Port device macvlan1 added [ 1410.424560][ T7545] FAT-fs (loop1): Directory bread(block 68) failed [ 1410.435566][ T7545] FAT-fs (loop1): Directory bread(block 69) failed [ 1410.484907][ T7545] FAT-fs (loop1): Directory bread(block 70) failed [ 1410.534268][ T7545] FAT-fs (loop1): Directory bread(block 71) failed [ 1410.572342][ T7545] FAT-fs (loop1): Directory bread(block 72) failed [ 1410.589834][ T7545] FAT-fs (loop1): Directory bread(block 73) failed [ 1410.750027][ T7558] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1410.835835][ T30] audit: type=1800 audit(1757426193.589:400): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14348" name="file2" dev="loop1" ino=1048838 res=0 errno=0 [ 1410.885648][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14356'. [ 1410.951640][ T7561] netlink: 'syz.3.14356': attribute type 1 has an invalid length. [ 1411.008169][ T7561] netlink: 'syz.3.14356': attribute type 2 has an invalid length. [ 1411.045979][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14356'. [ 1411.274505][ T7576] netlink: 45 bytes leftover after parsing attributes in process `syz.1.14361'. [ 1411.433085][ T7581] loop5: detected capacity change from 0 to 1024 [ 1411.594514][ T7581] hfsplus: trying to free free bnode 0(1) [ 1411.602024][ T7589] netlink: 'syz.9.14369': attribute type 1 has an invalid length. [ 1411.741774][T19479] hfsplus: b-tree write err: -5, ino 4 [ 1411.847727][ T7594] loop1: detected capacity change from 0 to 1024 [ 1411.879199][ T7594] EXT4-fs: Ignoring removed bh option [ 1411.884701][ T7594] EXT4-fs: inline encryption not supported [ 1411.948586][ T7594] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1412.041682][ T7594] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 1412.124272][ T7594] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.14374: lblock 2 mapped to illegal pblock 2 (length 1) [ 1412.227580][ T7594] EXT4-fs (loop1): Remounting filesystem read-only [ 1412.234144][ T7594] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1412.291201][ T7594] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1412.334246][ T30] audit: type=1326 audit(1757426194.992:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7611 comm="syz.5.14381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1412.427547][ T7594] EXT4-fs (loop1): 1 orphan inode deleted [ 1412.432593][ T30] audit: type=1326 audit(1757426194.992:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7611 comm="syz.5.14381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1412.488369][ T7619] vlan0: entered promiscuous mode [ 1412.554961][ T7594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1412.605509][ T30] audit: type=1326 audit(1757426194.992:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7611 comm="syz.5.14381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1412.625421][ T7594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1412.708917][ T30] audit: type=1326 audit(1757426194.992:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7611 comm="syz.5.14381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde70f8ebe9 code=0x7ffc0000 [ 1412.885388][ T7631] __nla_validate_parse: 1 callbacks suppressed [ 1412.885411][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14390'. [ 1413.010560][ T7634] loop9: detected capacity change from 0 to 64 [ 1413.672044][ T7650] loop1: detected capacity change from 0 to 1024 [ 1413.727630][ T7650] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1413.803260][ T7626] loop3: detected capacity change from 0 to 32768 [ 1413.846276][ T7650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1413.846855][ T7626] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.14387 (7626) [ 1413.934348][ T7626] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1414.015431][ T7650] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.14399: missing EA_INODE flag [ 1414.020058][ T7626] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1414.087622][ T7650] EXT4-fs (loop1): Remounting filesystem read-only [ 1414.096640][ T7626] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1414.293628][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.342587][ T7638] loop5: detected capacity change from 0 to 40427 [ 1414.350625][ T7638] F2FS-fs: heap/no_heap options were deprecated [ 1414.360981][ T7638] F2FS-fs (loop5): invalid crc value [ 1414.369872][ T7638] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 1414.470061][ T7626] BTRFS info (device loop3): rebuilding free space tree [ 1414.593864][ T7626] BTRFS info (device loop3): disabling free space tree [ 1414.625772][ T7626] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1414.676471][ T7626] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1414.746716][ T7626] BTRFS info (device loop3): setting nodatasum [ 1414.793781][ T7626] BTRFS info (device loop3): allowing degraded mounts [ 1414.826796][ T7626] BTRFS info (device loop3): enabling disk space caching [ 1414.855949][ T7626] BTRFS info (device loop3): force clearing of disk cache [ 1414.875349][ T7638] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1414.889336][ T7626] BTRFS info (device loop3): force zlib compression, level 3 [ 1414.898843][ T7638] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1414.943001][ T864] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1415.116642][ T5883] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1415.167038][ T864] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1415.204661][ T864] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.254155][ T864] usb 10-1: Product: syz [ 1415.258479][ T864] usb 10-1: Manufacturer: syz [ 1415.263177][ T864] usb 10-1: SerialNumber: syz [ 1415.396935][ T864] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1415.460967][ T974] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1415.554782][ T7700] loop7: detected capacity change from 0 to 4096 [ 1415.692754][ T7700] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1415.855420][ T7700] ntfs3(loop7): Failed to load $Extend (-22). [ 1415.861623][ T7700] ntfs3(loop7): Failed to initialize $Extend. [ 1416.051034][ T916] usb 10-1: USB disconnect, device number 12 [ 1416.544796][ T7719] loop0: detected capacity change from 0 to 256 [ 1416.569194][ T7719] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1416.685775][ T974] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1416.733351][ T974] ath9k_htc: Failed to initialize the device [ 1416.745574][ T7726] netlink: 248 bytes leftover after parsing attributes in process `syz.3.14425'. [ 1416.789973][ T916] usb 10-1: ath9k_htc: USB layer deinitialized [ 1416.812736][ T7726] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14425'. [ 1417.316431][ T7738] bridge1: entered promiscuous mode [ 1417.755468][ T7758] netlink: 'syz.1.14442': attribute type 1 has an invalid length. [ 1417.828077][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.9.14444'. [ 1417.902774][ T7766] netlink: 'syz.0.14446': attribute type 1 has an invalid length. [ 1417.929359][ T7766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14446'. [ 1418.450189][ T7782] loop5: detected capacity change from 0 to 256 [ 1418.636133][ T7782] FAT-fs (loop5): Directory bread(block 64) failed [ 1418.673954][ T7782] FAT-fs (loop5): Directory bread(block 65) failed [ 1418.680621][ T7782] FAT-fs (loop5): Directory bread(block 66) failed [ 1418.742968][ T7782] FAT-fs (loop5): Directory bread(block 67) failed [ 1418.770404][ T7782] FAT-fs (loop5): Directory bread(block 68) failed [ 1418.776975][ T7782] FAT-fs (loop5): Directory bread(block 69) failed [ 1418.824336][ T7743] loop3: detected capacity change from 0 to 32768 [ 1418.864725][ T7782] FAT-fs (loop5): Directory bread(block 70) failed [ 1418.897371][ T7743] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1418.927445][ T7782] FAT-fs (loop5): Directory bread(block 71) failed [ 1418.971229][ T7782] FAT-fs (loop5): Directory bread(block 72) failed [ 1419.002179][ T7782] FAT-fs (loop5): Directory bread(block 73) failed [ 1419.039400][ T7743] XFS (loop3): Ending clean mount [ 1419.162582][ T7743] XFS (loop3): Quotacheck needed: Please wait. [ 1419.270476][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14465'. [ 1419.384256][ T7743] XFS (loop3): Quotacheck: Done. [ 1419.582258][ T5883] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1419.979707][ T916] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1420.009327][ T7835] netlink: 'syz.1.14476': attribute type 4 has an invalid length. [ 1420.192392][ T916] usb 8-1: Using ep0 maxpacket: 16 [ 1420.223077][ T916] usb 8-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1420.242097][ T7841] /dev/nullb0: Can't open blockdev [ 1420.250937][ T916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.296171][ T916] usb 8-1: Product: syz [ 1420.301630][ T916] usb 8-1: Manufacturer: syz [ 1420.306254][ T916] usb 8-1: SerialNumber: syz [ 1420.311741][ C0] vkms_vblank_simulate: vblank timer overrun [ 1420.348224][ C0] vkms_vblank_simulate: vblank timer overrun [ 1420.388549][ T916] usb 8-1: config 0 descriptor?? [ 1420.473041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1420.662592][ T916] usb 8-1: ignoring: not an USB2CAN converter [ 1420.689752][ T7853] loop5: detected capacity change from 0 to 512 [ 1420.744596][ T7853] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.14483: casefold flag without casefold feature [ 1420.793816][ T7853] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.14483: couldn't read orphan inode 15 (err -117) [ 1420.860252][ T7853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.897667][ T916] usb 8-1: USB disconnect, device number 26 [ 1421.128312][ T5875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.294648][ T7883] loop0: detected capacity change from 0 to 16 [ 1421.310286][ T7887] loop1: detected capacity change from 0 to 256 [ 1421.341348][ T7883] erofs (device loop0): EXPERIMENTAL 48-bit layout support in use. Use at your own risk! [ 1421.376043][ T7883] erofs (device loop0): mounted with root inode @ nid 36. [ 1421.454164][ T7887] FAT-fs (loop1): Directory bread(block 64) failed [ 1421.460925][ T7883] syz.0.14499: attempt to access beyond end of device [ 1421.460925][ T7883] loop0: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 1421.487809][ T7887] FAT-fs (loop1): Directory bread(block 65) failed [ 1421.514222][ T7887] FAT-fs (loop1): Directory bread(block 66) failed [ 1421.528500][ T7883] erofs (device loop0): read error -5 @ 72 of nid 36 [ 1421.550078][ T7887] FAT-fs (loop1): Directory bread(block 67) failed [ 1421.556732][ T7887] FAT-fs (loop1): Directory bread(block 68) failed [ 1421.625571][ T7887] FAT-fs (loop1): Directory bread(block 69) failed [ 1421.648839][ T7887] FAT-fs (loop1): Directory bread(block 70) failed [ 1421.655391][ T7887] FAT-fs (loop1): Directory bread(block 71) failed [ 1421.680249][ T7895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1421.696100][ T7887] FAT-fs (loop1): Directory bread(block 72) failed [ 1421.745245][ T7887] FAT-fs (loop1): Directory bread(block 73) failed [ 1422.139243][ T7911] netlink: 'syz.5.14512': attribute type 11 has an invalid length. [ 1422.300086][ T7918] loop0: detected capacity change from 0 to 256 [ 1423.176591][ T7943] loop3: detected capacity change from 0 to 1024 [ 1423.257827][ T7948] netlink: 'syz.5.14530': attribute type 3 has an invalid length. [ 1423.291758][ T7948] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14530'. [ 1423.527676][ T974] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 1423.586320][ T7958] ./file0: Can't lookup blockdev [ 1423.626765][ T7919] loop1: detected capacity change from 0 to 32768 [ 1423.726260][ T974] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1423.749980][ T974] usb 8-1: config 0 has no interface number 0 [ 1423.773616][ T974] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1423.796187][ T974] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1423.823207][ T7919] JBD2: Ignoring recovery information on journal [ 1423.827099][ T974] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1423.841697][ T974] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1423.853949][ T974] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1423.865080][ T974] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1423.880912][ T974] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1423.890194][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.908822][ T974] usb 8-1: config 0 descriptor?? [ 1423.937484][ T7950] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1423.988348][ T974] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1424.024716][ T7919] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1424.095557][ T7972] netlink: 116 bytes leftover after parsing attributes in process `syz.5.14541'. [ 1424.134365][ T7967] loop9: detected capacity change from 0 to 4096 [ 1424.237253][ T7967] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 1424.237804][ T7919] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 1424.263266][ T7977] loop0: detected capacity change from 0 to 1024 [ 1424.285694][ T7950] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1424.308366][ T7919] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1424.325911][ T5855] usb 8-1: USB disconnect, device number 27 [ 1424.384533][ T5855] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1424.412048][ T7919] OCFS2: File system is now read-only. [ 1424.446803][ T7919] (syz.1.14514,7919,1):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 1424.487441][ T7919] (syz.1.14514,7919,1):ocfs2_mknod:337 ERROR: status = -117 [ 1424.530824][ T7919] (syz.1.14514,7919,1):ocfs2_mknod:505 ERROR: status = -117 [ 1424.558571][ T7980] loop5: detected capacity change from 0 to 2048 [ 1424.576349][ T7919] (syz.1.14514,7919,1):ocfs2_create:678 ERROR: status = -117 [ 1424.651418][ T7980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1424.813204][ T5872] ocfs2: Unmounting device (7,1) on (node local) [ 1424.885426][ T7987] netdevsim netdevsim9: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 1425.383433][ T7993] loop5: detected capacity change from 0 to 4096 [ 1425.433913][ T7993] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1425.654022][ T7993] ntfs3(loop5): ino=19, mi_enum_attr [ 1425.687196][ T7993] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1425.780614][ T7993] ntfs3(loop5): failed to convert "c46c" to iso8859-9 [ 1425.836815][ T7993] ntfs3(loop5): ino=20, mi_enum_attr [ 1426.410423][ T8025] loop7: detected capacity change from 0 to 4096 [ 1426.467614][ T8025] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1426.592530][ T8025] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1426.703407][ T8025] ntfs3(loop7): ino=1f, "file2" failed to open parent directory r=5 to update [ 1426.945357][T19479] ntfs3(loop7): ino=1f, failed to open parent directory r=5 to update [ 1427.480568][ T8073] loop3: detected capacity change from 0 to 1024 [ 1427.835254][ T8081] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14594'. [ 1428.445025][ T974] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1428.539557][ T8111] loop9: detected capacity change from 0 to 1024 [ 1428.622610][ T974] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.672760][ T974] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1428.729263][ T8113] loop0: detected capacity change from 0 to 1024 [ 1428.733788][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.782916][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.796207][ T8116] loop3: detected capacity change from 0 to 1024 [ 1428.823457][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1428.842361][ T8116] EXT4-fs: Ignoring removed oldalloc option [ 1428.848342][ T8116] EXT4-fs: Ignoring removed orlov option [ 1428.856332][ T974] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1428.868836][ T8113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1428.906473][ T8113] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1428.934950][ T974] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1428.955460][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.964946][ T8116] EXT4-fs (loop3): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 1428.996783][ T974] usb 6-1: Product: syz [ 1429.011787][ T974] usb 6-1: Manufacturer: syz [ 1429.027327][ T974] usb 6-1: SerialNumber: syz [ 1429.048171][ T974] usb 6-1: config 0 descriptor?? [ 1429.048552][ T8113] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 1429.128037][ T8116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.174341][ T8113] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.14610: Freeing blocks not in datazone - block = 0, count = 4096 [ 1429.280777][ T974] usb 6-1: ucan: probing device on interface #0 [ 1429.287129][ T974] usb 6-1: ucan: invalid endpoint configuration [ 1429.296467][ T8103] loop7: detected capacity change from 0 to 32768 [ 1429.314202][ T8113] EXT4-fs (loop0): Remounting filesystem read-only [ 1429.321003][ T8113] EXT4-fs (loop0): 1 orphan inode deleted [ 1429.322718][T19489] EXT4-fs (loop0): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 1429.374897][ T974] usb 6-1: ucan: probe failed; try to update the device firmware [ 1429.385412][ T8113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.385748][T19489] Quota error (device loop0): write_blk: dquota write failed [ 1429.463855][ T974] usb 6-1: USB disconnect, device number 124 [ 1429.483024][T19489] Quota error (device loop0): free_dqentry: Can't move quota data block (2) to free list [ 1429.513214][ T8103] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1429.572733][ T5883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.595695][ T4786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.616916][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14620'. [ 1429.631396][ T8103] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2048 but claims that 39166 are free [ 1429.707401][ T8103] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1429.771205][ T8103] OCFS2: File system is now read-only. [ 1429.786761][ T8103] (syz.7.14605,8103,0):ocfs2_search_chain:1817 ERROR: status = -30 [ 1429.824108][T24829] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1429.843818][ T8103] (syz.7.14605,8103,0):ocfs2_search_chain:1940 ERROR: status = -30 [ 1429.904768][ T8103] (syz.7.14605,8103,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 1429.944914][ T8103] (syz.7.14605,8103,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 1429.995807][ T8103] (syz.7.14605,8103,0):ocfs2_claim_new_inode:2298 ERROR: status = -30 [ 1430.037898][ T8103] (syz.7.14605,8103,0):ocfs2_claim_new_inode:2313 ERROR: status = -30 [ 1430.049367][ T8103] (syz.7.14605,8103,0):ocfs2_mknod_locked:641 ERROR: status = -30 [ 1430.070454][T24829] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1430.092608][ T8103] (syz.7.14605,8103,0):ocfs2_mknod:388 ERROR: status = -30 [ 1430.111333][T24829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1430.154007][ T8103] (syz.7.14605,8103,0):ocfs2_mknod:505 ERROR: status = -30 [ 1430.172374][T24829] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1430.181955][ T8147] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14624'. [ 1430.198256][ T8103] (syz.7.14605,8103,0):ocfs2_create:678 ERROR: status = -30 [ 1430.216556][T24829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.277942][ T8151] loop9: detected capacity change from 0 to 16 [ 1430.284610][ T8150] loop0: detected capacity change from 0 to 256 [ 1430.311908][T24829] usb 2-1: config 0 descriptor?? [ 1430.319731][ T8151] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1430.352334][ T8135] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1430.362416][T24829] hub 2-1:0.0: USB hub found [ 1430.369692][T25620] ocfs2: Unmounting device (7,7) on (node local) [ 1430.393014][ T8150] FAT-fs (loop0): Directory bread(block 64) failed [ 1430.418415][ T8150] FAT-fs (loop0): Directory bread(block 65) failed [ 1430.435740][ T8150] FAT-fs (loop0): Directory bread(block 66) failed [ 1430.486913][ T8150] FAT-fs (loop0): Directory bread(block 67) failed [ 1430.509351][ T8150] FAT-fs (loop0): Directory bread(block 68) failed [ 1430.551139][ T8150] FAT-fs (loop0): Directory bread(block 69) failed [ 1430.569183][ T8150] FAT-fs (loop0): Directory bread(block 70) failed [ 1430.591055][T24829] hub 2-1:0.0: 2 ports detected [ 1430.618372][ T8150] FAT-fs (loop0): Directory bread(block 71) failed [ 1430.679711][ T8150] FAT-fs (loop0): Directory bread(block 72) failed [ 1430.690496][ T8150] FAT-fs (loop0): Directory bread(block 73) failed [ 1430.806220][T24829] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1430.834741][T24829] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1430.902222][T24829] usbhid 2-1:0.0: can't add hid device: -71 [ 1430.915862][T24829] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1431.001893][T24829] usb 2-1: USB disconnect, device number 20 [ 1431.070426][ T8166] netlink: 'syz.0.14635': attribute type 4 has an invalid length. [ 1431.137673][ T8171] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14629'. [ 1431.290875][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14637'. [ 1431.374285][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14637'. [ 1431.405374][ T8173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14637'. [ 1432.309793][ T8217] comedi comedi3: no devices specified [ 1432.761232][ T8233] autofs4:pid:8233:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2816), cmd(0xc0189375) [ 1432.832161][ T8233] autofs4:pid:8233:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1432.879896][ T8237] loop0: detected capacity change from 0 to 256 [ 1432.887206][T32705] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1433.084999][T32705] usb 2-1: Using ep0 maxpacket: 8 [ 1433.125909][T32705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1433.158828][T32705] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1433.206745][T32705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.224711][T32705] usb 2-1: Product: syz [ 1433.229044][T32705] usb 2-1: Manufacturer: syz [ 1433.235587][T32705] usb 2-1: SerialNumber: syz [ 1433.278352][T32705] usb 2-1: config 0 descriptor?? [ 1433.344699][T32705] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1433.533507][ T8210] loop7: detected capacity change from 0 to 32768 [ 1433.570949][ T8210] XFS: ikeep mount option is deprecated. [ 1433.586000][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14679'. [ 1433.613808][T32705] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1433.636888][T32705] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1433.672538][ T8210] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1433.728547][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14682'. [ 1433.825711][ T974] usb 2-1: USB disconnect, device number 21 [ 1433.924764][ T8210] XFS (loop7): Ending clean mount [ 1433.958286][ T30] audit: type=1326 audit(1757426215.225:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8275 comm="syz.9.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ea78ebe9 code=0x7ffc0000 [ 1434.006636][ T8210] XFS (loop7): Quotacheck needed: Please wait. [ 1434.031853][ T8279] loop5: detected capacity change from 0 to 512 [ 1434.058364][ T30] audit: type=1326 audit(1757426215.225:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8275 comm="syz.9.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f98ea78ebe9 code=0x7ffc0000 [ 1434.080766][ C0] vkms_vblank_simulate: vblank timer overrun [ 1434.087597][ T30] audit: type=1326 audit(1757426215.225:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8275 comm="syz.9.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ea78ebe9 code=0x7ffc0000 [ 1434.128772][ T30] audit: type=1326 audit(1757426215.225:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8275 comm="syz.9.14684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ea78ebe9 code=0x7ffc0000 [ 1434.170408][ T8279] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1434.257037][ T8279] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 1434.321495][ T8210] XFS (loop7): Quotacheck: Done. [ 1434.327845][ T8279] System zones: 1-12 [ 1434.332048][ T8279] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 1434.332048][ T8279] [ 1434.384757][ T8279] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1434.412062][ T8279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1434.549568][ T8279] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 1434.549568][ T8279] [ 1434.629961][T25620] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1434.802274][ T5875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.201407][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.791432][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14694'. [ 1435.842586][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14694'. [ 1435.906154][ T8327] netlink: 'syz.7.14694': attribute type 15 has an invalid length. [ 1435.984075][ T8329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1436.141372][ T8333] loop0: detected capacity change from 0 to 1024 [ 1436.272822][ T8291] loop9: detected capacity change from 0 to 40427 [ 1436.290786][ T8337] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1436.297314][ T8337] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1436.318888][ T8291] F2FS-fs (loop9): Image doesn't support compression [ 1436.351773][ T8291] F2FS-fs (loop9): build fault injection type: 0x35f7 [ 1436.364422][ T8333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1436.367796][ T8337] vhci_hcd vhci_hcd.0: Device attached [ 1436.410607][ T8291] F2FS-fs (loop9): invalid crc value [ 1436.438073][ T8346] loop7: detected capacity change from 0 to 512 [ 1436.505529][ T8346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002] [ 1436.535317][ T8346] System zones: 1-12 [ 1436.546596][ T8346] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.14715: invalid indirect mapped block 8 (level 2) [ 1436.564064][ T8346] EXT4-fs (loop7): Remounting filesystem read-only [ 1436.570651][ T10] vhci_hcd: vhci_device speed not set [ 1436.590540][ T8351] mkiss: ax0: crc mode is auto. [ 1436.602260][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1436.634411][T24829] usb 6-1: new low-speed USB device number 125 using dummy_hcd [ 1436.642164][ T10] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1436.680947][ T8346] EXT4-fs (loop7): 1 truncate cleaned up [ 1436.698015][ T8325] loop1: detected capacity change from 0 to 32768 [ 1436.735888][ T8346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1436.740958][ T4786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1436.836288][T24829] usb 6-1: config 0 has no interfaces? [ 1436.880150][T24829] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1436.889253][T24829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.985097][T24829] usb 6-1: config 0 descriptor?? [ 1437.063709][ T8291] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1437.086531][ T8353] netlink: 'syz.3.14719': attribute type 1 has an invalid length. [ 1437.122870][ T8291] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1437.145164][T25620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.156981][ T8356] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14718'. [ 1437.235102][ T8291] syz.9.14691: attempt to access beyond end of device [ 1437.235102][ T8291] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1437.332836][ T8342] vhci_hcd: unknown pdu 2 [ 1437.340966][ T49] vhci_hcd: stop threads [ 1437.345225][ T49] vhci_hcd: release socket [ 1437.347596][ T5855] usb 6-1: USB disconnect, device number 125 [ 1437.368387][ T49] vhci_hcd: disconnect device [ 1437.385994][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.9.14691 Not tainted syzkaller #0 PREEMPT(full) [ 1437.386036][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1437.386056][ T8291] Call Trace: [ 1437.386066][ T8291] [ 1437.386077][ T8291] dump_stack_lvl+0x189/0x250 [ 1437.386121][ T8291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1437.386152][ T8291] ? __pfx_queue_work_on+0x10/0x10 [ 1437.386186][ T8291] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1437.386222][ T8291] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1437.386270][ T8291] f2fs_handle_critical_error+0x37c/0x540 [ 1437.386318][ T8291] f2fs_write_end_io+0x886/0xb60 [ 1437.386365][ T8291] __submit_merged_bio+0x27a/0x6a0 [ 1437.386409][ T8291] __submit_merged_write_cond+0x255/0x530 [ 1437.386453][ T8291] f2fs_write_data_pages+0x261d/0x3000 [ 1437.386533][ T8291] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1437.386626][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.386655][ T8291] ? check_path+0x21/0x40 [ 1437.386679][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.386708][ T8291] ? check_noncircular+0xe0/0x160 [ 1437.386795][ T8291] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1437.386836][ T8291] do_writepages+0x32e/0x550 [ 1437.386879][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.386912][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.386937][ T8291] ? do_raw_spin_unlock+0x122/0x240 [ 1437.386975][ T8291] filemap_fdatawrite+0x199/0x240 [ 1437.387012][ T8291] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1437.387097][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.387133][ T8291] ? do_raw_spin_unlock+0x122/0x240 [ 1437.387179][ T8291] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1437.387226][ T8291] f2fs_write_checkpoint+0x95a/0x1df0 [ 1437.387281][ T8291] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1437.387354][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.387383][ T8291] ? down_write+0x162/0x1f0 [ 1437.387409][ T8291] ? __pfx_down_write+0x10/0x10 [ 1437.387431][ T8291] ? filemap_write_and_wait_range+0x27a/0x320 [ 1437.387483][ T8291] f2fs_issue_checkpoint+0x3ac/0x570 [ 1437.387515][ T8291] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 1437.387584][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.387612][ T8291] ? f2fs_sync_fs+0x200/0x3d0 [ 1437.387650][ T8291] f2fs_symlink+0x6b4/0x880 [ 1437.387694][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.387732][ T8291] ? __pfx_f2fs_symlink+0x10/0x10 [ 1437.387773][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.387802][ T8291] ? inode_permission+0x149/0x470 [ 1437.387826][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.387854][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.387889][ T8291] vfs_symlink+0x143/0x2f0 [ 1437.387929][ T8291] do_symlinkat+0x1b1/0x3f0 [ 1437.387968][ T8291] ? __pfx_do_symlinkat+0x10/0x10 [ 1437.388001][ T8291] ? strncpy_from_user+0x150/0x290 [ 1437.388040][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.388068][ T8291] ? getname_flags+0x1e5/0x540 [ 1437.388098][ T8291] __x64_sys_symlink+0x7a/0x90 [ 1437.388135][ T8291] do_syscall_64+0xfa/0x3b0 [ 1437.388180][ T8291] ? lockdep_hardirqs_on+0x9c/0x150 [ 1437.388216][ T8291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.388240][ T8291] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1437.388268][ T8291] ? exc_page_fault+0x9f/0xf0 [ 1437.388306][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.388331][ T8291] RIP: 0033:0x7f98ea78ebe9 [ 1437.388354][ T8291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1437.388376][ T8291] RSP: 002b:00007f98eb6d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1437.388404][ T8291] RAX: ffffffffffffffda RBX: 00007f98ea9b5fa0 RCX: 00007f98ea78ebe9 [ 1437.388424][ T8291] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000000 [ 1437.388442][ T8291] RBP: 00007f98ea811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1437.388459][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1437.388474][ T8291] R13: 00007f98ea9b6038 R14: 00007f98ea9b5fa0 R15: 00007ffd6950dac8 [ 1437.388514][ T8291] [ 1437.388526][ T8291] F2FS-fs (loop9): Remounting filesystem read-only [ 1437.425227][ T10] vhci_hcd: vhci_device speed not set [ 1437.791637][ C0] vkms_vblank_simulate: vblank timer overrun [ 1438.149079][ T8367] loop7: detected capacity change from 0 to 128 [ 1438.224004][ T8367] befs: (loop7): invalid magic header [ 1438.516190][ T8372] loop1: detected capacity change from 0 to 4096 [ 1438.533060][ T8381] netlink: 140 bytes leftover after parsing attributes in process `syz.7.14732'. [ 1438.563397][ T8372] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1438.723051][ T8372] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1438.818698][ T8389] loop7: detected capacity change from 0 to 256 [ 1438.848091][ T8372] ntfs3(loop1): ino=1e, mi_enum_attr [ 1438.879076][ T8372] ntfs3(loop1): ino=1e, mi_enum_attr [ 1439.779203][ T8421] netlink: 'syz.1.14751': attribute type 2 has an invalid length. [ 1439.845150][ T8421] bridge: entered promiscuous mode [ 1439.989763][ T8431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1440.027085][ T8428] loop3: detected capacity change from 0 to 512 [ 1440.056220][ T8428] EXT4-fs: Ignoring removed mblk_io_submit option [ 1440.118169][ T8428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1440.161119][ T8437] loop1: detected capacity change from 0 to 256 [ 1440.212602][ T8428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1440.244379][ T8437] FAT-fs (loop1): Directory bread(block 1285) failed [ 1440.368184][ T8428] ext4 filesystem being mounted at /2566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1440.395329][ T8437] FAT-fs (loop1): Directory bread(block 1285) failed [ 1440.417076][ T8441] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1440.642034][ T5883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.547314][ T8470] IPVS: persistence engine module ip_vs_pe_s not found [ 1441.758432][ T8453] loop9: detected capacity change from 0 to 32768 [ 1441.802384][ T8453] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 1441.876667][ T8453] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1441.905813][ T8454] loop5: detected capacity change from 0 to 32768 [ 1441.920943][ T8454] XFS: noikeep mount option is deprecated. [ 1441.954368][ T8454] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1442.175444][ T8454] XFS (loop5): Ending clean mount [ 1442.211249][ T8454] XFS (loop5): Quotacheck needed: Please wait. [ 1442.259073][T32607] ocfs2: Unmounting device (7,9) on (node local) [ 1442.305378][ T8454] XFS (loop5): Quotacheck: Done. [ 1442.518016][ T8510] loop0: detected capacity change from 0 to 256 [ 1442.609655][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14785'. [ 1442.649940][ T5875] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1442.888191][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1443.112790][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1443.130237][ T10] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1443.130274][ T10] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1443.130300][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.130323][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1443.130349][ T10] usb 4-1: config 1 has no interface number 0 [ 1443.130401][ T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1443.130429][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.143573][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1443.358112][ T10] snd_usb_pod 4-1:1.1: set_interface failed [ 1443.361833][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1443.362009][ T10] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1443.381076][ T10] usb 4-1: USB disconnect, device number 108 [ 1443.676876][ T8538] ptrace attach of "./syz-executor exec"[5875] was attempted by "./syz-executor exec"[8538] [ 1443.925208][ T8548] loop7: detected capacity change from 0 to 64 [ 1444.285591][ T8554] program syz.9.14803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1444.776789][ T8570] loop0: detected capacity change from 0 to 128 [ 1444.857495][ T8570] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1444.965398][ T8578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14814'. [ 1445.029710][ T8575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14814'. [ 1445.219326][ T8582] loop5: detected capacity change from 0 to 2048 [ 1445.252542][ T8582] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1445.334860][ T8587] loop3: detected capacity change from 0 to 256 [ 1445.346813][ T8590] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1445.383483][ T8591] loop0: detected capacity change from 0 to 128 [ 1445.512922][ T8587] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1446.259493][ T8565] loop1: detected capacity change from 0 to 32768 [ 1446.311715][ T8565] read_mapping_page failed! [ 1446.466474][ T110] read_mapping_page failed! [ 1446.658405][ T8626] vivid-001: disconnect [ 1446.716312][ T8623] vivid-001: reconnect [ 1447.430264][ T10] kernel write not supported for file /snd/midiC2D0 (pid: 10 comm: kworker/0:1) [ 1447.442977][ T8644] loop5: detected capacity change from 0 to 764 [ 1448.265644][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1448.306068][ T8674] loop1: detected capacity change from 0 to 1024 [ 1448.458129][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1448.498641][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1448.511334][ T10] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1448.542498][T19476] hfsplus: b-tree write err: -5, ino 4 [ 1448.542596][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.595677][ T8682] loop7: detected capacity change from 0 to 128 [ 1448.605707][ T10] usb 4-1: config 0 descriptor?? [ 1448.657965][ T8682] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1448.735946][T32705] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1448.753233][ T8682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1448.919509][T32705] usb 6-1: Using ep0 maxpacket: 8 [ 1448.933248][T32705] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.964642][T32705] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.971414][ T8686] loop0: detected capacity change from 0 to 4096 [ 1449.017230][T32705] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1449.056355][T32705] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1449.083935][ T8689] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1449.116110][T32705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.179433][T32705] usb 6-1: config 0 descriptor?? [ 1449.199147][ T10] hid-u2fzero 0003:20A0:4287.0002: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0 [ 1449.383186][ T10] hid-u2fzero 0003:20A0:4287.0002: NitroKey U2F LED initialised [ 1449.433242][ T10] hid-u2fzero 0003:20A0:4287.0002: NitroKey U2F RNG initialised [ 1449.488583][ T10] usb 4-1: USB disconnect, device number 109 [ 1449.662780][T32705] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 1449.698091][T32705] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 1449.730151][T32705] samsung 0003:0419:0001.0003: unknown main item tag 0x2 [ 1449.759880][T32705] samsung 0003:0419:0001.0003: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0 [ 1449.827551][ T8678] loop9: detected capacity change from 0 to 32768 [ 1449.853752][T32705] usb 6-1: USB disconnect, device number 126 [ 1449.886559][ T8678] JBD2: Ignoring recovery information on journal [ 1449.962252][ T8703] loop1: detected capacity change from 0 to 512 [ 1450.078807][ T8678] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1450.130119][ T8703] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.14873: corrupted inode contents [ 1450.216943][ T8701] fido_id[8701]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1450.218523][ T8715] loop3: detected capacity change from 0 to 256 [ 1450.292694][ T8703] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.14873: mark_inode_dirty error [ 1450.321776][ T8678] OCFS2: ERROR (device loop9): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 1450.321822][ T8678] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1450.416748][ T8678] OCFS2: File system is now read-only. [ 1450.422309][ T8678] (syz.9.14862,8678,1):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 1450.438387][ T8715] FAT-fs (loop3): Directory bread(block 64) failed [ 1450.468129][ T8703] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.14873: corrupted inode contents [ 1450.500338][ T8715] FAT-fs (loop3): Directory bread(block 65) failed [ 1450.503076][ T8678] (syz.9.14862,8678,1):ocfs2_mknod:337 ERROR: status = -117 [ 1450.519768][ T8715] FAT-fs (loop3): Directory bread(block 66) failed [ 1450.540346][ T8703] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.14873: mark_inode_dirty error [ 1450.570496][ T8715] FAT-fs (loop3): Directory bread(block 67) failed [ 1450.577762][ T8678] (syz.9.14862,8678,0):ocfs2_mknod:505 ERROR: status = -117 [ 1450.601144][ T8678] (syz.9.14862,8678,0):ocfs2_create:678 ERROR: status = -117 [ 1450.619922][ T8715] FAT-fs (loop3): Directory bread(block 68) failed [ 1450.649613][ T8715] FAT-fs (loop3): Directory bread(block 69) failed [ 1450.650713][ T8703] Quota error (device loop1): write_blk: dquota write failed [ 1450.692651][ T8715] FAT-fs (loop3): Directory bread(block 70) failed [ 1450.718409][ T8703] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1450.728438][ T8715] FAT-fs (loop3): Directory bread(block 71) failed [ 1450.728573][ T8715] FAT-fs (loop3): Directory bread(block 72) failed [ 1450.728604][ T8715] FAT-fs (loop3): Directory bread(block 73) failed [ 1450.767206][ T8703] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.14873: Failed to acquire dquot type 0 [ 1450.792582][T32607] ocfs2: Unmounting device (7,9) on (node local) [ 1450.924056][ T8703] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.14873: corrupted inode contents [ 1450.982376][ T8729] loop0: detected capacity change from 0 to 512 [ 1451.009575][ T8727] loop5: detected capacity change from 0 to 256 [ 1451.014617][ T8729] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1451.037122][ T8703] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.14873: mark_inode_dirty error [ 1451.042128][ T8727] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1451.067634][ T8727] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1451.085154][ T8703] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.14873: corrupted inode contents [ 1451.132269][ T8729] EXT4-fs (loop0): 1 truncate cleaned up [ 1451.139935][ T8729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1451.205608][ T8703] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.14873: mark_inode_dirty error [ 1451.218556][ T8727] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1451.272951][ T8703] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.14873: corrupted inode contents [ 1451.354306][ T8733] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.0.14885: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1451.402266][ T30] audit: type=1800 audit(1757426231.538:409): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14884" name="file1" dev="loop5" ino=1048872 res=0 errno=0 [ 1451.408549][ T8703] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 1451.519176][ T8703] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.14873: corrupted inode contents [ 1451.535368][ T8733] EXT4-fs (loop0): Remounting filesystem read-only [ 1451.627590][ T8703] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.14873: mark_inode_dirty error [ 1451.694299][ T8703] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 1451.714372][ T30] audit: type=1400 audit(1757426231.828:410): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200DFFFFFFFFFFFFFF7FA6 pid=8742 comm="syz.7.14889" [ 1451.802383][ T8703] EXT4-fs (loop1): 1 truncate cleaned up [ 1451.810691][ T4786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.813195][ T8703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1451.843670][ T8703] ext4 filesystem being mounted at /2542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1452.119286][ T5872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.392238][ T8761] loop9: detected capacity change from 0 to 512 [ 1452.412710][ T8761] EXT4-fs: Ignoring removed nobh option [ 1452.517458][ T8761] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1452.701299][ T8761] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.14901: iget: bad i_size value: 38620345925642 [ 1452.759671][ T8761] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.14901: couldn't read orphan inode 15 (err -117) [ 1452.800189][ T8761] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1452.976005][ T8761] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.14901: bg 0: block 5: invalid block bitmap [ 1452.993938][ T8761] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 1452.994015][ T8761] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1452.994015][ T8761] [ 1452.994035][ T8761] EXT4-fs (loop9): Total free blocks count 0 [ 1452.994054][ T8761] EXT4-fs (loop9): Free/Dirty block details [ 1452.994090][ T8761] EXT4-fs (loop9): free_blocks=0 [ 1452.994135][ T8761] EXT4-fs (loop9): dirty_blocks=1 [ 1452.994152][ T8761] EXT4-fs (loop9): Block reservation details [ 1452.994169][ T8761] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 1453.100080][ T8783] befs: Bad value for 'gid' [ 1453.100118][ T8783] befs: Bad value for 'gid' [ 1453.126731][T32607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.272336][ T8787] loop5: detected capacity change from 0 to 128 [ 1453.338600][ T30] audit: type=1800 audit(1757426233.344:411): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14910" name="file2" dev="loop5" ino=1048873 res=0 errno=0 [ 1453.354902][ T8787] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1453.405713][ T8787] FAT-fs (loop5): Filesystem has been set read-only [ 1453.551321][ T8787] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1453.555515][ T8787] syz.5.14910: attempt to access beyond end of device [ 1453.555515][ T8787] loop5: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 1454.205841][ T8810] sctp: [Deprecated]: syz.1.14918 (pid 8810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1454.205841][ T8810] Use struct sctp_sack_info instead [ 1454.337888][ T916] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1454.584960][ T916] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1454.615610][ T916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.623683][ T916] usb 4-1: Product: syz [ 1454.663181][ T916] usb 4-1: Manufacturer: syz [ 1454.667857][ T916] usb 4-1: SerialNumber: syz [ 1454.725763][ T916] usb 4-1: config 0 descriptor?? [ 1454.760249][ T916] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1454.973067][ T8831] netlink: 240 bytes leftover after parsing attributes in process `syz.0.14928'. [ 1455.022016][ T10] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1455.029802][ T8831] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14928'. [ 1455.241682][ T10] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.291990][ T10] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.348096][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1455.380848][ T10] usb 8-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1455.427775][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.439034][T32705] usb 4-1: USB disconnect, device number 110 [ 1455.480242][ T10] usb 8-1: config 0 descriptor?? [ 1455.534272][ T8846] tipc: Invalid UDP bearer configuration [ 1455.534339][ T8846] tipc: Enabling of bearer rejected, failed to enable media [ 1455.717642][ T864] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1455.963443][ T864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.987495][ T10] uclogic 0003:5543:0005.0004: item 0 2 0 8 parsing failed [ 1455.995387][ T864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.005211][ T864] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1456.018238][ T10] uclogic 0003:5543:0005.0004: parse failed [ 1456.024322][ T10] uclogic 0003:5543:0005.0004: probe with driver uclogic failed with error -22 [ 1456.049267][ T864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.119574][ T864] usb 2-1: config 0 descriptor?? [ 1456.182077][ T8862] loop5: detected capacity change from 0 to 256 [ 1456.255602][ T10] usb 8-1: USB disconnect, device number 28 [ 1456.268416][ T8862] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1456.361750][ T8862] exFAT-fs (loop5): error, data size is invalid(10) [ 1456.428647][ T8862] exFAT-fs (loop5): Filesystem has been set read-only [ 1456.487277][ T8870] exFAT-fs (loop5): error, data size is invalid(10) [ 1456.575637][ T864] hkems 0003:2006:0118.0005: unknown main item tag 0x2 [ 1456.614341][ T864] hkems 0003:2006:0118.0005: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 1456.636448][ T864] hkems 0003:2006:0118.0005: no inputs found [ 1456.642539][ T864] hkems 0003:2006:0118.0005: force feedback init failed [ 1456.775645][ T8878] loop0: detected capacity change from 0 to 128 [ 1456.795362][ T8879] loop3: detected capacity change from 0 to 512 [ 1456.808734][ T8878] EXT4-fs: Ignoring removed nobh option [ 1456.832455][ T8879] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1456.870415][ T864] usb 2-1: USB disconnect, device number 22 [ 1456.870735][ T8878] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1456.885602][ T8881] loop5: detected capacity change from 0 to 1024 [ 1456.929890][ T8878] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.944375][ T8875] fido_id[8875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1456.961720][ T8881] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1456.995381][ T8881] EXT4-fs (loop5): 1 truncate cleaned up [ 1457.027355][ T30] audit: type=1800 audit(1757426236.805:412): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14950" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 1457.040389][ T8879] EXT4-fs (loop3): 1 truncate cleaned up [ 1457.078608][ T8881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1457.138762][ T8879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1457.160842][ T4786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1457.250321][ T5875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1457.330383][ T30] audit: type=1800 audit(1757426237.085:413): pid=8879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14951" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1457.650391][ T8900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1457.685254][ T5883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.112949][ T8909] ALSA: seq fatal error: cannot create timer (-19) [ 1458.139438][ T8916] zonefs (nullb0) ERROR: Not a zoned block device [ 1458.376141][ T8919] loop5: detected capacity change from 0 to 4096 [ 1458.416240][ T8919] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1458.502330][ T8931] loop7: detected capacity change from 0 to 1024 [ 1458.533500][ T8931] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1458.596472][ T8931] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1458.644298][ T8919] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1458.686258][ T8931] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1458.777393][ T8931] EXT4-fs error (device loop7): ext4_get_journal_inode:5800: inode #32: comm syz.7.14972: iget: special inode unallocated [ 1458.873367][ T8931] EXT4-fs (loop7): no journal found [ 1458.878627][ T8931] EXT4-fs (loop7): can't get journal size [ 1458.920243][ T8931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1458.942478][ T8937] loop9: detected capacity change from 0 to 1024 [ 1459.124951][ T8931] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.7.14972: path /1028/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 1459.244054][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1459.354393][T25620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.582147][ T8946] loop1: detected capacity change from 0 to 32768 [ 1460.636926][ T8946] XFS (loop1): Metadata CRC error detected at xfs_sb_read_verify+0x2ec/0x400, xfs_sb block 0x0 [ 1460.669575][ T8946] XFS (loop1): Unmount and run xfs_repair [ 1460.675330][ T8946] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1460.698153][ T8975] loop7: detected capacity change from 0 to 4096 [ 1460.713225][ T8946] 00000000: 58 46 53 42 00 00 04 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 1460.730073][ T8975] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 1460.757423][ T8946] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1460.810060][ T8975] ntfs3(loop7): Failed to load root (-22). [ 1460.878176][ T8946] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1460.928420][ T8946] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40 ....... ......$@ [ 1460.976733][ T8962] loop3: detected capacity change from 0 to 32768 [ 1460.984340][ T8946] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42 ......$A......$B [ 1461.045103][ T8946] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 1461.081194][ T8946] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 1461.094969][ T8962] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1461.124864][ T8946] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 1461.137206][ T8946] XFS (loop1): SB validate failed with error -74. [ 1461.273210][ T8962] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1461.565064][ T5883] ocfs2: Unmounting device (7,3) on (node local) [ 1462.204006][ T9015] loop0: detected capacity change from 0 to 16 [ 1462.304275][ T9015] erofs (device loop0): mounted with root inode @ nid 36. [ 1463.119639][ T9040] netlink: 'syz.9.15016': attribute type 2 has an invalid length. [ 1463.747275][ T9013] loop7: detected capacity change from 0 to 40427 [ 1463.790179][ T9013] F2FS-fs (loop7): invalid crc value [ 1463.791964][ T9056] loop5: detected capacity change from 0 to 4096 [ 1464.143665][ T974] IPVS: starting estimator thread 0... [ 1464.180545][ T9073] trusted_key: encrypted_key: keylen parameter is missing [ 1464.226158][ T9013] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1464.237664][ T9072] IPVS: using max 26 ests per chain, 62400 per kthread [ 1464.347259][ T9013] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1464.419743][ T9079] netlink: 16 bytes leftover after parsing attributes in process `syz.9.15032'. [ 1464.636010][T25620] syz-executor: attempt to access beyond end of device [ 1464.636010][T25620] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1464.696905][T25620] CPU: 1 UID: 0 PID: 25620 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1464.696939][T25620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1464.696955][T25620] Call Trace: [ 1464.696965][T25620] [ 1464.696976][T25620] dump_stack_lvl+0x189/0x250 [ 1464.697017][T25620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1464.697048][T25620] ? __pfx_queue_work_on+0x10/0x10 [ 1464.697073][T25620] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1464.697109][T25620] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1464.697161][T25620] f2fs_handle_critical_error+0x37c/0x540 [ 1464.697206][T25620] f2fs_write_end_io+0x886/0xb60 [ 1464.697253][T25620] __submit_merged_bio+0x27a/0x6a0 [ 1464.697296][T25620] __submit_merged_write_cond+0x255/0x530 [ 1464.697340][T25620] f2fs_write_data_pages+0x261d/0x3000 [ 1464.697377][T25620] ? __lock_acquire+0xab9/0xd20 [ 1464.697451][T25620] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1464.697541][T25620] ? __mod_zone_page_state+0xd7/0x140 [ 1464.697588][T25620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.697618][T25620] ? folios_put_refs+0x560/0x640 [ 1464.697660][T25620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.697688][T25620] ? __lock_acquire+0xab9/0xd20 [ 1464.697733][T25620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.697760][T25620] ? do_raw_spin_lock+0x121/0x290 [ 1464.697798][T25620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.697837][T25620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.697865][T25620] ? do_raw_spin_unlock+0x122/0x240 [ 1464.697896][T25620] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1464.697936][T25620] do_writepages+0x32e/0x550 [ 1464.697976][T25620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.698009][T25620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.698036][T25620] ? do_raw_spin_unlock+0x122/0x240 [ 1464.698072][T25620] filemap_fdatawrite+0x199/0x240 [ 1464.698109][T25620] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1464.698192][T25620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.698226][T25620] ? do_raw_spin_unlock+0x122/0x240 [ 1464.698261][T25620] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1464.698306][T25620] f2fs_write_checkpoint+0x95a/0x1df0 [ 1464.698358][T25620] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1464.698438][T25620] ? kill_f2fs_super+0x298/0x6c0 [ 1464.698470][T25620] kill_f2fs_super+0x2c3/0x6c0 [ 1464.698503][T25620] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1464.698525][T25620] ? radix_tree_delete_item+0x2b6/0x400 [ 1464.698567][T25620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.698595][T25620] ? shrinker_free+0x2ce/0x3e0 [ 1464.698625][T25620] deactivate_locked_super+0xbc/0x130 [ 1464.698658][T25620] cleanup_mnt+0x425/0x4c0 [ 1464.698684][T25620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.698712][T25620] ? lockdep_hardirqs_on+0x9c/0x150 [ 1464.698751][T25620] task_work_run+0x1d4/0x260 [ 1464.698788][T25620] ? __pfx_task_work_run+0x10/0x10 [ 1464.698827][T25620] ? __x64_sys_umount+0x122/0x160 [ 1464.698867][T25620] ? exit_to_user_mode_loop+0x40/0x110 [ 1464.698908][T25620] exit_to_user_mode_loop+0xec/0x110 [ 1464.698944][T25620] do_syscall_64+0x2bd/0x3b0 [ 1464.698980][T25620] ? lockdep_hardirqs_on+0x9c/0x150 [ 1464.699014][T25620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.699037][T25620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1464.699064][T25620] ? exc_page_fault+0x9f/0xf0 [ 1464.699101][T25620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.699125][T25620] RIP: 0033:0x7f9528b8ff17 [ 1464.699147][T25620] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1464.699168][T25620] RSP: 002b:00007ffd70415038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1464.699194][T25620] RAX: 0000000000000000 RBX: 00007f9528c11c05 RCX: 00007f9528b8ff17 [ 1464.699211][T25620] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd704150f0 [ 1464.699228][T25620] RBP: 00007ffd704150f0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.699244][T25620] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd70416180 [ 1464.699260][T25620] R13: 00007f9528c11c05 R14: 0000000000152cc5 R15: 00007ffd704161c0 [ 1464.699298][T25620] [ 1464.702874][T25620] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1465.767672][ T9106] Zero length message leads to an empty skb [ 1466.014149][ T9115] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15050'. [ 1466.774981][ T9138] loop9: detected capacity change from 0 to 1024 [ 1466.838655][ T9138] EXT4-fs: Ignoring removed oldalloc option [ 1466.846233][ T9138] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1466.994819][ T9138] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1467.108257][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15064'. [ 1467.239930][T32607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.534935][ T9155] loop7: detected capacity change from 0 to 4096 [ 1467.611673][ T9164] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15069'. [ 1467.812336][ T9155] ntfs3(loop7): failed to convert "0080" to maccroatian [ 1467.873424][ T9155] ntfs3(loop7): failed to convert name for inode 1e. [ 1467.893062][ T9155] ntfs3(loop7): ino=1f, mi_enum_attr [ 1468.267749][ T9178] loop9: detected capacity change from 0 to 128 [ 1468.286446][ T9178] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1468.350171][ T9178] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1468.536075][ T864] IPVS: starting estimator thread 0... [ 1468.673927][ T9182] IPVS: using max 25 ests per chain, 60000 per kthread [ 1468.878595][ T9162] loop3: detected capacity change from 0 to 32768 [ 1468.940571][ T9162] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1468.959696][ T9195] netlink: 16 bytes leftover after parsing attributes in process `syz.9.15084'. [ 1469.268462][ T9162] XFS (loop3): Ending clean mount [ 1469.280627][ T9204] tipc: Started in network mode [ 1469.297702][ T9204] tipc: Node identity 5f000000000000000000000000000001, cluster identity 4711 [ 1469.316528][ T9162] XFS (loop3): Quotacheck needed: Please wait. [ 1469.331835][ T9204] tipc: Enabling of bearer rejected, failed to enable media [ 1469.375202][ T9171] loop0: detected capacity change from 0 to 32768 [ 1469.389478][ T9208] loop5: detected capacity change from 0 to 1024 [ 1469.421260][ T9208] EXT4-fs: Ignoring removed oldalloc option [ 1469.486094][ T9208] EXT4-fs: Ignoring removed orlov option [ 1469.514466][ T9208] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1469.530575][ T9162] XFS (loop3): Quotacheck: Done. [ 1469.736089][ T9208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1469.917084][ T5883] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1470.022822][ T5875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.167131][ T9202] loop9: detected capacity change from 0 to 32768 [ 1470.309283][ T9202] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1470.461410][ T9232] loop7: detected capacity change from 0 to 256 [ 1470.587829][ T9232] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1470.682660][ T9202] XFS (loop9): Ending clean mount [ 1470.939948][ T30] audit: type=1800 audit(1757426249.807:414): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.15086" name="file2" dev="loop9" ino=9287 res=0 errno=0 [ 1471.025977][ T4004] Bluetooth: hci3: command 0x0406 tx timeout [ 1471.180585][T32607] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1471.232533][ T9245] loop0: detected capacity change from 0 to 256 [ 1472.142419][ T9231] loop5: detected capacity change from 0 to 32768 [ 1472.608838][ T9281] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 1472.629811][ T9275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.116676][ T9257] loop0: detected capacity change from 0 to 32768 [ 1473.191136][ T9257] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1473.290149][ T9257] XFS (loop0): Ending clean mount [ 1473.313885][ T9302] loop3: detected capacity change from 0 to 64 [ 1473.331027][ T9257] XFS (loop0): Quotacheck needed: Please wait. [ 1473.341335][ T9306] loop5: detected capacity change from 0 to 64 [ 1473.511403][ T9257] XFS (loop0): Quotacheck: Done. [ 1473.707294][ T9308] overlayfs: upper fs needs to support d_type. [ 1473.774062][ T4786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1473.799489][ T9308] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1473.835318][ T9308] overlayfs: failed to set xattr on upper [ 1473.843815][ T9308] overlayfs: ...falling back to redirect_dir=nofollow. [ 1473.851125][ T9308] overlayfs: ...falling back to index=off. [ 1473.878840][ T9308] overlayfs: ...falling back to uuid=null. [ 1474.143416][ T5875] Trying to free block not in datazone [ 1474.196563][ T9312] loop9: detected capacity change from 0 to 4096 [ 1474.227738][ T5875] Trying to free block not in datazone [ 1474.333894][ T9312] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1474.376056][ T9312] ntfs3(loop9): Failed to load $Extend (-2). [ 1474.411792][ T5875] Trying to free block not in datazone [ 1474.412793][ T9312] ntfs3(loop9): Failed to initialize $Extend. [ 1474.456895][ T9290] loop1: detected capacity change from 0 to 32768 [ 1474.527452][ T9290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.15120 (9290) [ 1474.634096][ T9290] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1474.687552][ T9290] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 1474.699722][ T9319] binder_alloc: binder_alloc_mmap_handler: 9318 200000ffc000-200000ffd000 already mapped failed -16 [ 1474.862527][ T9290] BTRFS info (device loop1): setting nodatasum [ 1474.880045][ T974] kernel write not supported for file /uhid (pid: 974 comm: kworker/0:2) [ 1474.890477][ T9290] BTRFS info (device loop1): enabling ssd optimizations [ 1474.914040][ T9290] BTRFS info (device loop1): disabling tree log [ 1474.947212][ T9290] BTRFS info (device loop1): enabling free space tree [ 1474.964840][ T9290] BTRFS info (device loop1): enabling auto defrag [ 1475.313842][ T9310] loop7: detected capacity change from 0 to 32768 [ 1475.431152][ T9310] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1475.464215][ T5872] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1475.536947][ T9353] loop3: detected capacity change from 0 to 64 [ 1475.587967][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.706265][ T9310] XFS (loop7): Ending clean mount [ 1475.874886][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.030208][T25620] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1476.103129][ T9363] loop9: detected capacity change from 0 to 1024 [ 1476.247004][ T9344] loop0: detected capacity change from 0 to 32768 [ 1476.255958][ T9363] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1476.317690][ T9363] ext4 filesystem being mounted at /607/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1476.359787][ T9344] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15132 (9344) [ 1476.467360][ T9369] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 1476.497063][ T9344] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1476.551394][ T9344] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1476.678714][ C1] vkms_vblank_simulate: vblank timer overrun [ 1476.854708][T32607] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1476.857343][ T9389] Bluetooth: MGMT ver 1.23 [ 1477.050979][ T9397] tipc: Enabling of bearer rejected, failed to enable media [ 1477.115970][ T9344] BTRFS info (device loop0): rebuilding free space tree [ 1477.250386][ T9344] BTRFS info (device loop0): disabling free space tree [ 1477.257353][ T9344] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1477.289533][ T9344] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1477.399659][ T9344] BTRFS info (device loop0): enabling ssd optimizations [ 1477.483570][ T9344] BTRFS info (device loop0): force clearing of disk cache [ 1477.532601][ T9344] BTRFS info (device loop0): enabling auto defrag [ 1477.609355][ T9344] BTRFS info (device loop0): doing ref verification [ 1477.642856][ T9344] BTRFS info (device loop0): max_inline set to 4096 [ 1477.667282][ T9413] loop5: detected capacity change from 0 to 128 [ 1477.717320][ T9413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1477.783062][ T9413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1477.809935][ T9413] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1477.938457][ T9413] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1478.000036][ T4786] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1478.006266][ T9413] ext4 filesystem being mounted at /2562/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1478.377216][ T5875] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1478.759199][ T9407] loop7: detected capacity change from 0 to 32768 [ 1478.917655][ T9407] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1479.090225][ T9407] XFS (loop7): Ending clean mount [ 1479.241797][T25620] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1479.813573][ T9422] loop1: detected capacity change from 0 to 32768 [ 1480.003384][ T9422] [ 1480.003384][ T9422] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1480.003384][ T9422] [ 1480.097051][ T9422] ERROR: (device loop1): diWrite: ixpxd invalid [ 1480.097051][ T9422] [ 1480.207782][ T9422] ERROR: (device loop1): txCommit: [ 1480.207782][ T9422] [ 1480.370006][ T9460] jfs_create: dtSearch returned -17 [ 1480.641816][ T9428] loop9: detected capacity change from 0 to 32768 [ 1480.667416][ T9466] loop3: detected capacity change from 0 to 1024 [ 1480.705281][ T5872] [ 1480.705281][ T5872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1480.705281][ T5872] [ 1480.735119][ T5872] [ 1480.735119][ T5872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1480.735119][ T5872] [ 1480.912039][ T9428] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1480.977778][ T13] (kworker/u8:1,13,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 1481.079065][ T9428] [ 1481.081458][ T9428] ====================================================== [ 1481.088517][ T9428] WARNING: possible circular locking dependency detected [ 1481.095536][ T9428] syzkaller #0 Not tainted [ 1481.099977][ T9428] ------------------------------------------------------ [ 1481.106995][ T9428] syz.9.15158/9428 is trying to acquire lock: [ 1481.113059][ T9428] ffff888057026ab8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720 [ 1481.122407][ T9428] [ 1481.122407][ T9428] but task is already holding lock: [ 1481.129766][ T9428] ffff888025f94950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 [ 1481.139041][ T9428] [ 1481.139041][ T9428] which lock already depends on the new lock. [ 1481.139041][ T9428] [ 1481.149450][ T9428] [ 1481.149450][ T9428] the existing dependency chain (in reverse order) is: [ 1481.158472][ T9428] [ 1481.158472][ T9428] -> #2 (jbd2_handle){++++}-{0:0}: [ 1481.165805][ T9428] lock_acquire+0x120/0x360 [ 1481.170855][ T9428] jbd2_journal_lock_updates+0xaa/0x360 [ 1481.176938][ T9428] __ocfs2_flush_truncate_log+0x2ba/0x10e0 [ 1481.183274][ T9428] ocfs2_truncate_log_shutdown+0x141/0x2f0 [ 1481.189612][ T9428] ocfs2_dismount_volume+0x209/0x8d0 [ 1481.195434][ T9428] generic_shutdown_super+0x135/0x2c0 [ 1481.201327][ T9428] kill_block_super+0x44/0x90 [ 1481.206517][ T9428] deactivate_locked_super+0xbc/0x130 [ 1481.212411][ T9428] cleanup_mnt+0x425/0x4c0 [ 1481.217340][ T9428] task_work_run+0x1d4/0x260 [ 1481.222461][ T9428] exit_to_user_mode_loop+0xec/0x110 [ 1481.228276][ T9428] do_syscall_64+0x2bd/0x3b0 [ 1481.233387][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.239799][ T9428] [ 1481.239799][ T9428] -> #1 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}: [ 1481.250496][ T9428] lock_acquire+0x120/0x360 [ 1481.255522][ T9428] down_write+0x96/0x1f0 [ 1481.260270][ T9428] ocfs2_xattr_set+0xadd/0x11f0 [ 1481.265646][ T9428] __vfs_setxattr+0x43c/0x480 [ 1481.270856][ T9428] __vfs_setxattr_noperm+0x12d/0x660 [ 1481.276677][ T9428] vfs_setxattr+0x16b/0x2f0 [ 1481.281698][ T9428] filename_setxattr+0x274/0x600 [ 1481.287197][ T9428] path_setxattrat+0x364/0x3a0 [ 1481.292496][ T9428] __x64_sys_setxattr+0xbc/0xe0 [ 1481.297863][ T9428] do_syscall_64+0xfa/0x3b0 [ 1481.302903][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.309313][ T9428] [ 1481.309313][ T9428] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 1481.317130][ T9428] validate_chain+0xb9b/0x2140 [ 1481.322410][ T9428] __lock_acquire+0xab9/0xd20 [ 1481.327630][ T9428] lock_acquire+0x120/0x360 [ 1481.332649][ T9428] down_read+0x46/0x2e0 [ 1481.337311][ T9428] ocfs2_init_acl+0x2f9/0x720 [ 1481.342500][ T9428] ocfs2_mknod+0x1321/0x2050 [ 1481.347598][ T9428] ocfs2_mkdir+0x191/0x440 [ 1481.352522][ T9428] vfs_mkdir+0x306/0x510 [ 1481.357283][ T9428] do_mkdirat+0x247/0x590 [ 1481.362128][ T9428] __x64_sys_mkdirat+0x87/0xa0 [ 1481.367405][ T9428] do_syscall_64+0xfa/0x3b0 [ 1481.372440][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.378846][ T9428] [ 1481.378846][ T9428] other info that might help us debug this: [ 1481.378846][ T9428] [ 1481.389054][ T9428] Chain exists of: [ 1481.389054][ T9428] &oi->ip_xattr_sem --> &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> jbd2_handle [ 1481.389054][ T9428] [ 1481.404962][ T9428] Possible unsafe locking scenario: [ 1481.404962][ T9428] [ 1481.412396][ T9428] CPU0 CPU1 [ 1481.417828][ T9428] ---- ---- [ 1481.423171][ T9428] rlock(jbd2_handle); [ 1481.427318][ T9428] lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]); [ 1481.437283][ T9428] lock(jbd2_handle); [ 1481.443866][ T9428] rlock(&oi->ip_xattr_sem); [ 1481.448534][ T9428] [ 1481.448534][ T9428] *** DEADLOCK *** [ 1481.448534][ T9428] [ 1481.456690][ T9428] 8 locks held by syz.9.15158/9428: [ 1481.461876][ T9428] #0: ffff88807d21a428 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1481.471133][ T9428] #1: ffff888057026d80 (&type->i_mutex_dir_key#20/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 [ 1481.481872][ T9428] #2: ffff88807bbd6d80 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 1481.495640][ T9428] #3: ffff8880570209c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 1481.509498][ T9428] #4: ffff88807bbd09c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0 [ 1481.523536][ T9428] #5: ffff88807d21a618 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050 [ 1481.532791][ T9428] #6: ffff88805a6f20e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0 [ 1481.543515][ T9428] #7: ffff888025f94950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 [ 1481.553201][ T9428] [ 1481.553201][ T9428] stack backtrace: [ 1481.559078][ T9428] CPU: 0 UID: 0 PID: 9428 Comm: syz.9.15158 Not tainted syzkaller #0 PREEMPT(full) [ 1481.559104][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1481.559120][ T9428] Call Trace: [ 1481.559132][ T9428] [ 1481.559143][ T9428] dump_stack_lvl+0x189/0x250 [ 1481.559175][ T9428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1481.559200][ T9428] ? __pfx__printk+0x10/0x10 [ 1481.559230][ T9428] ? stack_trace_save+0x9c/0xe0 [ 1481.559258][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.559289][ T9428] print_circular_bug+0x2ee/0x310 [ 1481.559317][ T9428] check_noncircular+0x134/0x160 [ 1481.559345][ T9428] validate_chain+0xb9b/0x2140 [ 1481.559366][ T9428] ? __pfx_find_get_block_common+0x10/0x10 [ 1481.559391][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.559419][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.559448][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.559476][ T9428] __lock_acquire+0xab9/0xd20 [ 1481.559514][ T9428] ? ocfs2_init_acl+0x2f9/0x720 [ 1481.559539][ T9428] lock_acquire+0x120/0x360 [ 1481.559569][ T9428] ? ocfs2_init_acl+0x2f9/0x720 [ 1481.559622][ T9428] ? do_raw_spin_unlock+0x122/0x240 [ 1481.559651][ T9428] down_read+0x46/0x2e0 [ 1481.559672][ T9428] ? ocfs2_init_acl+0x2f9/0x720 [ 1481.559697][ T9428] ocfs2_init_acl+0x2f9/0x720 [ 1481.559726][ T9428] ? __pfx_ocfs2_init_acl+0x10/0x10 [ 1481.559750][ T9428] ? dquot_alloc_inode+0x216/0xa50 [ 1481.559774][ T9428] ? __pfx_ocfs2_journal_dirty+0x10/0x10 [ 1481.559802][ T9428] ? ocfs2_block_signals+0x94/0xe0 [ 1481.559835][ T9428] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 1481.559870][ T9428] ? ocfs2_metadata_cache_get_super+0x43/0x80 [ 1481.559892][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.559916][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.559944][ T9428] ocfs2_mknod+0x1321/0x2050 [ 1481.559981][ T9428] ? __pfx_ocfs2_mknod+0x10/0x10 [ 1481.560003][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560027][ T9428] ? do_raw_spin_unlock+0x122/0x240 [ 1481.560056][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560080][ T9428] ? ocfs2_inode_lock_full_nested+0xabe/0x1b40 [ 1481.560116][ T9428] ? __lock_acquire+0xab9/0xd20 [ 1481.560151][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560178][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560205][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560230][ T9428] ? __lock_acquire+0xab9/0xd20 [ 1481.560264][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560289][ T9428] ? do_raw_spin_lock+0x121/0x290 [ 1481.560317][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560343][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560367][ T9428] ? do_raw_spin_unlock+0x122/0x240 [ 1481.560397][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560421][ T9428] ? put_pid+0xe9/0x130 [ 1481.560449][ T9428] ocfs2_mkdir+0x191/0x440 [ 1481.560470][ T9428] ? __pfx_from_kgid+0x10/0x10 [ 1481.560499][ T9428] ? apparmor_path_mkdir+0x1a7/0x220 [ 1481.560526][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560552][ T9428] ? __pfx_ocfs2_mkdir+0x10/0x10 [ 1481.560572][ T9428] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 1481.560594][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560619][ T9428] ? inode_permission+0x149/0x470 [ 1481.560638][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560662][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560690][ T9428] vfs_mkdir+0x306/0x510 [ 1481.560720][ T9428] do_mkdirat+0x247/0x590 [ 1481.560748][ T9428] ? __pfx_do_mkdirat+0x10/0x10 [ 1481.560777][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560801][ T9428] ? getname_flags+0x1e5/0x540 [ 1481.560823][ T9428] __x64_sys_mkdirat+0x87/0xa0 [ 1481.560851][ T9428] do_syscall_64+0xfa/0x3b0 [ 1481.560887][ T9428] ? lockdep_hardirqs_on+0x9c/0x150 [ 1481.560919][ T9428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.560940][ T9428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1481.560964][ T9428] ? exc_page_fault+0x9f/0xf0 [ 1481.560999][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.561021][ T9428] RIP: 0033:0x7f98ea78d457 [ 1481.561041][ T9428] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1481.561061][ T9428] RSP: 002b:00007f98eb6d3e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1481.561083][ T9428] RAX: ffffffffffffffda RBX: 00007f98eb6d3ef0 RCX: 00007f98ea78d457 [ 1481.561100][ T9428] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 00000000ffffff9c [ 1481.561115][ T9428] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1481.561128][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 1481.561142][ T9428] R13: 00007f98eb6d3eb0 R14: 0000000000000000 R15: 0000000000000000 [ 1481.561165][ T9428] [ 1482.059135][ T9476] (syz.9.15158,9476,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 1482.111224][ T9476] (syz.9.15158,9476,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2 [ 1482.256368][ T9476] (syz.9.15158,9476,1):__ocfs2_prepare_orphan_dir:2183 ERROR: status = -2 [ 1482.311555][ T9476] (syz.9.15158,9476,1):ocfs2_prepare_orphan_dir:2227 ERROR: status = -2 [ 1482.383338][ T9469] loop5: detected capacity change from 0 to 32768 [ 1482.391169][ T9476] (syz.9.15158,9476,0):ocfs2_prepare_orphan_dir:2243 ERROR: status = -2 [ 1482.399578][ T9476] (syz.9.15158,9476,0):ocfs2_unlink:967 ERROR: status = -2 [ 1482.458265][T32607] ocfs2: Unmounting device (7,9) on (node local)