last executing test programs: 3m0.39978849s ago: executing program 2 (id=338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="016fbfbd7000fedbdf250900000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x48440}, 0x4040000) 3m0.299740212s ago: executing program 2 (id=340): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x46, 0x0, &(0x7f00000000c0)="e3ef7f670000ec6789b424154494000000000016aa00000000040033a42c9550f5810011e0f0546e8f62d070e87f2c73d153bf01de50151803c474719193467201bd7c0b9cad", 0x0, 0xa0002000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3m0.176001706s ago: executing program 2 (id=341): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 2m59.944098s ago: executing program 2 (id=345): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1c41a, &(0x7f0000000180)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x8000}}, {@debug}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@noacl}, {@jqfmt_vfsv1}, {@resuid}], [], 0x2c}, 0x81, 0x483, &(0x7f0000000c40)="$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") chdir(&(0x7f0000000140)='./file0\x00') mount$bind(&(0x7f0000002cc0)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x81001, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)) 2m59.324490474s ago: executing program 2 (id=350): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000004c0), 0x0}, 0x20) 2m58.692020878s ago: executing program 2 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2151090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) 2m58.574966141s ago: executing program 32 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2151090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) 50.844087987s ago: executing program 0 (id=1974): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x8, 0x1, "0e"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='('], 0x9) 50.643649281s ago: executing program 0 (id=1977): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0xff00, 0x37bc0b736aabec5e, &(0x7f0000000100)={0xa, 0x0, 0xa576, @empty, 0x40000008, 0x2}, 0x20) 50.446924326s ago: executing program 0 (id=1988): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) brk(0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x8000, 0x0) getdents64(r0, &(0x7f0000001f00)=""/4093, 0xffd) 50.25649111s ago: executing program 0 (id=1991): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5eda, &(0x7f000005eb40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 48.499663189s ago: executing program 0 (id=1993): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000000040)=""/32, 0x20}) 47.305429256s ago: executing program 0 (id=2004): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="137c", 0x2}], 0x1}}], 0x1, 0x4004) syz_extract_tcp_res(0x0, 0xffffffff, 0x8) 47.073099631s ago: executing program 33 (id=2004): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="137c", 0x2}], 0x1}}], 0x1, 0x4004) syz_extract_tcp_res(0x0, 0xffffffff, 0x8) 4.643858336s ago: executing program 3 (id=2449): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000020000000000000000000000850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800e700850000009400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, 0xffffffffffffffff, 0xffff0000}, 0xc) 4.520245389s ago: executing program 3 (id=2452): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xf, 0x7ffffffe}]}) timer_create(0x2, 0x0, &(0x7f0000000340)=0x0) timer_delete(r0) 4.4889055s ago: executing program 3 (id=2453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ee77008500000086000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 4.423472242s ago: executing program 3 (id=2455): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a08538b3"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.352760815s ago: executing program 4 (id=2468): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742", @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x0) 3.313093806s ago: executing program 4 (id=2469): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x40, 0x15, 0x4, "59d11c5f"}, 0x0, 0x0, 0x0, 0x0}) 2.006645425s ago: executing program 1 (id=2483): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0x110}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @broadcast}) 1.524764976s ago: executing program 3 (id=2488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000090a010400000020000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2c00128014000180090001006c61737400000000043cae884c0001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.437927238s ago: executing program 6 (id=2489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.404753509s ago: executing program 3 (id=2491): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_connect$midi(0x4, 0x50, &(0x7f0000000300)=ANY=[@ANYBLOB="120101020000000830144b47400001836d02030109023e0001010020f9090400000201032003072403010e00fd072401d909070009050a10000400050808250104b2106da409050b04ff0307010d04251742d720b306f5583818dcef6dbaeedba24ffcb449dcea0e71741f171cf88fe5548d5364a73184769f48d6d8b4e5a70232e0a577701425ad2616bbb71c1427ba600e000ce0576730d3d3cba255b036b91f1fa5d2a2c47a25936aadab78ed1ec98f28a9a265d0a9"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.35574343s ago: executing program 1 (id=2492): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x1, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.208105113s ago: executing program 1 (id=2494): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) mmap$IORING_OFF_SQ_RING(0x230c11000000, 0x1000, 0x200000b, 0x12, r2, 0x0) 1.201663113s ago: executing program 1 (id=2495): syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="e3875d521f5532124979134cee223e3b811021bfe1f72c45dffda9ca1c0ed71b1140ce4294b7128da40685c173b8aef0a8d1deea7da01bcb5130b02b4d199c24d4f64a2cabf05df6cb8b5bb31f16f0b3242109414fa7d4117548b88b42e4aeee291a40d33563c7808461dc72cd2f6d6cc7b3c9ae9bf60362ad54bd3677a94fb74b6907d6d3d00e4385b2459f3fbf1a9512f9858a9342bd773a080587bf66016cf54549cb76958043b5d865b6435b56df4a2be99aff0f40456cb1fc14e35948a3db27be2c8f84e5276f", @ANYRES16], 0xff, 0x6de, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40041, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f002a7a5a3e47207f3e6f5321c72e7b9551be8b8629359b3365847ce5c3feaa8cb4794cf9b791"], 0x0, 0x30) 1.186736124s ago: executing program 5 (id=2496): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f00000016c0)={[{@shortname_win95}, {@rodir}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@shortname_lower}, {@rodir}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlateno}, {@rodir}, {@utf8no}, {@numtail}, {@rodir}, {@shortname_win95}]}, 0x7f, 0x2ba, &(0x7f0000001780)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 1.128154335s ago: executing program 4 (id=2497): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xff, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 1.045438937s ago: executing program 4 (id=2498): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000400000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000398aaedfb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000002100000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76eabb2e5bba7bb7ad54162dcdab", 0x0, 0x406400, 0x6000002f, 0x0, 0x0, 0x0, 0x0}, 0x50) 989.142618ms ago: executing program 6 (id=2499): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c706172743d3078303030303030303030303030306630332c6e6c733d6d61637475726b6973682c008866a7758e550da0947fc42499952002356575bac0cb11c22f31b6605838f92fc821ef9ee4df4806500b7738a217e12f5c0000000000000000"], 0x1, 0x5d8, &(0x7f0000000cc0)="$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") mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145042, 0x1ca) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 973.536899ms ago: executing program 5 (id=2500): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000c40)={{@host, 0x1}, {@hyper, 0x7}, 0x400, "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"}, 0x418, 0x2}) 928.963899ms ago: executing program 1 (id=2501): sendmsg$inet(0xffffffffffffffff, 0x0, 0x80d1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c082) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) 735.943313ms ago: executing program 6 (id=2502): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80080000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa6bdba616cfca576}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 711.459374ms ago: executing program 5 (id=2503): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x1, 0xb, 0x200, 0x8, 0x7, 0x7fffffff, 0x2, 0x800, r2}, 0x20) 619.341916ms ago: executing program 1 (id=2504): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x804000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$eJzs3U1vHVf9B/DfffC147RpVP1V5R+xcFMeWkrznEB5asqCBSxAQl2TyHWrlBRQEhCtIuLKC8QGeAmw6YZFJV4BL6CvASGxJVLSVReUQWOf44xvrn3tJp659vl8pJuZ35w7vmfyveOZ65m5EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PznXi4irv04Tjkc8FYOIfsSRul6KeuRKfv4wIk7EenM8FxGD+Yh6/vV/nom4GBEfH4u4/+DOcj35/C77cens7Zuf/fB7//jdH9dOvPPmTz8cb//x/1346Pd3I47/6NWPPrv7ZJYdAAAASlFVVdVLH/NPps/3/a47BQC0Im//qyRPV6vVavUTrf/Q38vznzradX/Vh7Ruqia72ywiYrU5T73P4HA8ABwwq/Fp112gQ/Iv2jAijnbdCWCm9bruAPvi/oM7y72Ub6+5PVjaaM9/p9yS/2pv8/qO7YbTjJ9j0tb7ay0G8ew2/TnSUh9mSc6/P57/1Y32UXrefufflu3yH21c+lScnP9gPP8xW/L/U0Qc2Pz7E/MvVc5/uJf8VwcHeP2XPwAAAAAAh1/++//xjo//zj/+ouzKTsd/l1rqAwAAAAAAAAA8aY97/79N7v8HAAAAM6v+rF7787GH07b7LrZ6+hu9iKfHng8UZqnx5YAAAAAAAAAAAAAAQDuGEYvpvP65iHh6cbGqqvrRNF7v1ePOf9CVvvxQsq5/yQMAwIaPj41dy9+LWIiIN9J3/c0tLi5W1VxELFZH5vP+7Gh+oTrS+Fybh/W0+dEudoiHo6r+YQuN+ZqmfV6e1j7+8+rXGlWDXXSsHR0GDgARsbE1um+LdMhU1TPR9V4OB4P1//Cx/rMbXb9PAQAAgP1XVVXVS1/nfTId8+933SkAoBV5+z9+XECtVquLqT/ZmDgz/VGr97Fuqia72ywiYrU5T73P4Hb8AHDArManXXeBDsm/aMOIONF1J4CZ1uu6A+yL+w/uLPdSvr3m9mBpoz2fC7Il/9Xe+nx5/knDacbPMWnr/bUWg3h2m/4811IfZknOvz+e/9WN9nyL/818FvYn/7Zsl3+9nMc76E/Xcv6D8fzH7Pf635a16E/Mv1Q5/+Ge8h/IHwAAAAAAZlj++/9xx3/zIgMAAAAAAADAgXP/wZ3lfN1rPv7/hQnP6zXHXP95aOT8e7vO3/W/h0nOvz+e/9gJOYPG+L3XH+b/yYM7yx/e/vf/5+HM5z83GNWvPdfrD4bpnJ9q7q24HjdiJc4+8vzhlvZzj7TPbWk/P6X9wiPto7r9SG4/Hcvxi7gRb262z085MWphSns1pT3nP7D+FynnP2w86vwXU3tvbFi790H/kfW+OZz0Olf++p8vP7p2tWG4pVqLweayNRyr/znVWp8eWv8/OTqKX91auXn6N9du3755LtJgy9TzkQZPWM5/Lj1y/i++sNGef+8319d7H4z2nP+sWIvhpPzX398vNMbr5X2p5b51Iec/So+cf94CTV7/D3L+E9f/9eV7uYP+AAAAAAAAAAAAAAAAwE6qqlq/RPRKRFxO1/90dW0mANCuvP2vkjxdre6g/tffZqs/arVavbXuzVh/PkfdVE32WrOIiL8356n3GX476YcBALPsvxHxz647QWfkX7D8fX/18ItddwZo1a333v/ZtRs3Vm7e6ronAAAAAAAAAMDnle//udS4//P6eUBj943ecv/X12PpwN7/sz8arN/rPC3Q87Hz/b9Pxc73/x5Oeb25Ke2jKe3zU9oXprRPvNCjIef/fMo4538yLVhJ9399sYP+dC3nfyrd6znn/5Wx5zXzr/5ykPPvb8n/zO13f3nm1nvvv3L93Wtvr7y98vNzZy9fvHDp4oVLl868df3GytmNfzvs8f7K+ed7XzsPtCw5/5y5/MuS8/9SquVflpT/5m6o/MuS1/+8vyf/suT882cf+Zcl5/9SquVflpz/V1Mt/7Lk/F9OtfzLkvP/WqrlX5ac/yupln9Zcv6nUy3/suT8z6Ra/mXJ+ecjXPIvS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl538p1fIvS87/cqrlX5ac/9dTLf+y5Py/kWr5lyXn/2qq5V+WnP83Uy3/suT8v5Vq+Zcl5//tVO+U/zst9ot25Py/k2rrf1ly/t9NtfzLkvN/LdXyL8vD7/83sueRxdnoRpsjVRUxA90wsu8jXf9mAgAAAAAAAAAAAADGtXE6cdfLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/izV6+TQPwnIYQQiO1cMGST3fUtMcFgrv809JIGQksLdYy9dgy+1buGBKFmaWgLAqmR2hf0RSkgQEhtlahCKpUoilSk9k1VXhVFlVArIdWVoDIRVKICtjpznufZmdnZmV3vrj1zzueD4p+9M2fmmTNnZve76DsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotuNts380FEIo/mv8sS2E64q/bw2Hin8u7L/aKwQAAADW6+eNP//q+vyFQ6vYqOk6//iaf/n64uLiYvjgixd/8SeLi/mC7SGMbAmhcVnyTz/9yWLzdaKnw8TQcNO/h3vc/UiPy0d7XD7W4/LxHpdv6XH5RI/Ll+2AZbaWv49p3Ngdjb9uK3dpuDGMNS67o8NWTw9tGR5Ov8tpGGpsszh2PJwMp8JsmF62zVDjfyF8c0dxXw+GdF/DTfd1awjh0o8+fjStYSju4ztCy501ND93P3xL2P7ijz5+9KvzP3hlp9lzNyxbaQi7dhbr/GQIS7+uCkNhS94naZ3DTeu8tcM6R1rWOdTYrvh7+zovrXKd6XFPxHV+p8s6b41fe+L2EMJCWPE67Z4Ow+GatnvN+3uiPCKK2yieypeF0TUdJztWcZwU23z/9tbjpP2YTPt/R9wnoyusofnp+OEnxpft98s9TopH3Q/HanHbDxd3OjHR/KvVlmO1uM7H71z5GOj43HU4BvKx3HQM7Ox1DAyPjzSOgeGlNe9sOQZmlm0zHIYa93Xxzu7HwNT86XNTc09+7J6Tp4+cmD0xe2Zmev/ePfv27tm3b+r4yVOz0+Wfa9ulA+SaMJyPwZ3xvSYdg69tu27zIbn4xY17HUz0yeugeOzvuatY0HXDYYVjvLjOJ3et/3WQv+83vQ5Gm14HHd9TO7wORlfxOiiuc2nX6r5njjb912kNm/VeuK3pGLia3w+L+3z/61Z+L7w1rutTr1/r98ORZcdAelhD8bVXfCX/vDdxf9wvy4+LW4oLrh0PF+Zmz9/7xJH5+fMzIY4r4oam56r9eLmm6TGFZcfL8JqPl0N/+bO7bunw9W1xX03cvfRcjXd4Horr7J3s/lw13t0778+Wr+4OcWywK70/O303K/ZnzhJdjv3iOp+8Z/0/C+Zc0vT+N9br/W9kbLR8/xvJe2Os5f1v+VMz0lhZCJfuWd3731j870q//93YJ+9/xb56/73dj4HiOp+aWusxMNr1/e/2OIfiel4XE8NEU+7/RePyhfIwbXouex43o6Nj8bgZTffYetzsWbZNcWvFfe+avrzjZtftrc9Vy88tFTxuin31p9Pdj5viOs/PrP+9Y2v6a9N7x3ivY2BsZLxY71g+CMr3u8Wt6Ri4NxwNZ8OpcCxvUzzLxX1N7l7dMTAe/7vS7x0398kxUOyrz+3ufgwU1/n2no392WlX/Eq+TtPPTu2/X1gp898yunR77bttozN/sc637+3+u6HiOj/Yu9ac0X0/3R2/cm2H/dT++lnpmD4Wrsx+ujmu89S+7r+bKq5z4/5VHk+HQggvzLzQ+H1X/P3u31z416+3/N630++UX5h54aGpR767lvUDAHD5ftH4c2G8/Fmz6f+xXs3//w8AAAAMhJT7h+PM5H8AAACojJT7R+LM5H8AAACojJT7R+PMapL/H7//wLM/fyrkTwNcjNLlaTc8/KbyeqnjvRD/vX1xSfH1t3557NlPP7W6+x4OIfzsoVd1vP7jb0rrKp1L63xD69eXufm2Vd3/Y48uXa/58xMuHShvPz2e1R4Gqav8zandjdvd/uRMYz7/UGjMRxY+9XR5++W/0/Uv7imv/+fxQ0sOHR9q2X5XXM8dcW6Pnynz8KGl/VDMtN2zt77mH25479L9pe2Gdr608TA/93vl7abPiHrmhvL66XGvtP6//8zXni2u/8Sdndf/1HDn9V+Mt/v9OH96sLx+8z7/dNP6/yCuP91f2u7eL32r4/qfe0V5/eficfGFONvX/5Y/fvXPOz1f6X4OPVBul+5/+n/2NrZLt5duv339E0/NtOyP9tt//sXydg5+5McjzddPX0/3kzz2QOvxPRSf35YeeQjha38YWvZzeGO53d+1rT/d3rkHOq//7rZ1nhu6rbH90uPZ1vK4Pv+V3R0fb1rPob/e1vJ4nnlH3H8vTn27uN2Lj8TjMV7+v98pb6/9s0yfe0fr+026/he2la/bdHtTbet/pm39C7cV+673+h98sVz/c2/e0rL+Q++Mx9OD5ey1/hN/cX3L9l/8avl8nP/o5JmzcxdOHosPZlvb63jLxNZrrr3uJS+9Pr6Xtv/78Nn5x2fPb5/ePh3C9gH8yMDNXv+X4vzvcixs/D2Uvvvj8rj77LvK71uv/Un572fi1x+Lz2f6/vj5PxtrOV7bn/eFN5dzvet/fVzHar3iM/9xW4cv/+eyz/y9+IFvXvjb3/9B+88F6fGce/lE4/F9bsdNjcuGni8vb3+/6uXfX976uv7e6HRjfiPu18X4ycw7byrvr/3202eTfPbd5es3/SSXtg9tnyeybaT1cax3/d+LP8d86+bW9790fHzjqbZPc94WhoolLMT3h7BQXp6ulfb3Zy/d1PH+0ufwhIVXrmWZK5p7cm7q1MkzF56Ymp+dm5+ae/Jjh0+fvXBm/nDjs0sPf6jX9kuv72sar+9js/v3hsar/Ww5NtnVXv+5R48eu2/6rmOzx49cOD7/6LnZ8yeOzs0dnT02d9eR48dnP9pr+5PHDs7sPrDnvt2TJ04eO3j/gQN7DkyePHO2WEa5qB72T3948sz5w41N5g7uPTCzb9/e6cnTZ4/NHrxvenryQq/tG9+bJoutPzJ5fvbUkfmTp2cn505+bPbgzIH9+3f3/PTH0+eOz22fOn/hzNSFudnzU+Vj2T7f+HLxva/X9tTD3Nn4ftdmKP50/r679+fPxy18+RMr3lR5ldYfT8MP42dBpe9vvf6dcv9YnFlN8j8AAADUQcr98YP/ly6Q/wEAAKAyUu7fEmcm/wMAAEBlpNw/EWdWk/yv/6//r/+v/6//fwX7/0H/f6Pp/29I/385/f9V0f/X/9f/1/+nu37r/6fcvzWEWuZ/AAAAqIOU+6+JM5P/AQAAoDJS7r82zkz+BwAAgMpIuf+6OLN65P+x9r/q/+v/6/839//TdfX/g/6//v9l0v/X/+9G/1//f5DX34f9/636//Sbfuv/p9z/kjizeuR/AAAAqIWU+18aZyb/AwAAQGWk3H99nJn8DwAAAJWRcv+2OLOa5P8NPP//Z+JF+v/6/4Pe/z+djmPn/9f/1/9fP/1//f9u9P/1/wd5/X3Y/3f+f/pOv/X/U+7/f3FmNcn/AAAAUAcp978szkz+BwAAgMpIuf+GODP5HwAAACoj5f4b48xqkv83sP/v/P/6/1Xp/zed/1//v5n+v/7/5dD/1//vRv9f/3/j1z8Uf0zQ/++1vf4/V0K/9f9T7n95nFlN8j8AAADUQcr9N8WZyf8AAABQGSn3vyLOTP4HAACAyki5/+Y4s5rkf/1//X/9f/1//X/9/82k/6//343+v/7/IK9f/1//n976rf+fcv8r48xqkv8BAACgDlLuvyXOTP4HAACAyki5/1VxZvI/AAAAVEbK/bfGmdUk/+v/91X//8mg/7+8/z+s/6//X1pr/79hoff69f8312D1/4dXvET/v6T/30r/X/9f/1//n+76rf+fcv+r48xqkv8BAACgDlLuf02cmfwPAAAAlZFy/21xZvI/AAAAVEbK/dvjzGqS//X/+6r/7/z/zv+v/+/8/0v9//kh/f9VcP5//f+g/3/ZrnZ/ftDXr/+v/09v/db/T7l/R5xZTfI/AAAA1EHK/TvjzOR/AAAAqIyU+2+PM5P/AQAAoDJS7r8jzqwm+V///zL7/1tb/6n/33n9+v/6//r/zv+v/6//343+v/7/IK9f/391/f/xXjdEpfVb/z/l/jvjzGqS/wEAAKAOUu6/K85M/gcAAIDKSLn/tXFm8j8AAABURsr9u+LMapL/9f+d/1//X/9f/1//fzPp/6+6/7/1cta1Kf3/9Car/9+T/r/+/6D0/yc6bO/8/1wJ/db/T7n/dXFmNcn/AAAAUAcp978+zkz+BwAAgMpIuf/uODP5HwAAACoj5f7JOLOa5H/9f/1//X/9f/1//f/NVNX+f34fdf5//X/9f/3/Te7/f2WF7Qfl/P/UW7/1/1PuvyfOrCb5HwAAAOog5f5748zkfwAAAKiMlPun4szkfwAAAKiMlPun48xqkv+r3/9vbxaX9P9L+v/6/0H/X/9/k1W1/99+/v8Qgv6//n+m/6//32/n/+9E/58rYf39//G8SePPdfb/U+6fiTOrSf4HAACAOki5f3ecmfwPAAAAlZFy/544M/kfAAAAKiPl/r1xZjXJ/9Xv/3em/1/S/9f/D/r/+v+brC79f+f/Ly/X/y/p/+v/6//r/9fRcIevrb//v7RJ48919v9T7t8XZ1aT/A8AAAB1kHL//jgz+R8AAAAqI+X+++LM5H8AAACojJT7748zq0n+1//X/9f/1//v3/5/6/1vXv//v/T/N5H+v/5/N/r/+v+DvH79f/1/etvY/v/16+7/p9x/IM6sJvkfAAAA6iDl/jfEmcn/AAAAUBkp9z8QZyb/AwAAwEDpdB7CJOX+N8aZ1ST/6/9Xvf+/uEX/X/9/cPv/rfvT+f/1/zuJb5/6/6tUr/7/1mX3p//f6mr35wd9/fr/+v/0trH9/2U/nq65/59y/8E4s5rkfwAAAKiDlPvfFGcm/wMAAEBlpNz/5jgz+R8AAAAqI+X+Q3FmNcn/+v9V7//33/n/h8Lg9v9H9f/1//X/18z5//X/u3H+/8Hs/6fP3dD/75/+f3EM6f/Tj/qt/59y/1vizGqS/wEAAKAOUu5/a5yZ/A8AAACVkXL/2+LM5H8AAACojJT73x5nVpP8r/+v/+/8/87/r/+v/7+Z9P/1/7vR/x/M/n+i/98//X/n/6df9Vv/P+X+d8SZ1ST/AwAAQB2k3P/OODP5HwAAACoj5f7/H2cm/wMAAEBlpNz/YJxZTfJ/hfr/Y3Hq/+v/6//r/zfo//cH/X/9/270//X/B3n9+v/6//TWb/3/lPt/Kc6sJvkfAAAA6iDl/ofizOR/AAAAqIyU+98VZyb/AwAAQGWk3P/LcWY1yf8V6v+X+vT8/8P59vX/9f/1//X/9f830oD2/yf0/0v6//r/g7x+/X/9f3rrt/5/yv2/EmdWk/wPAAAAdZBy/6/Gmcn/AAAAUBkp9/9anJn8DwAAAJWRcv/DcWY1yf/6/87/r/+v/9+3/f/R1v2p/6//38mA9v+d/z/S/9f/H+T16//r/9Nbv/X/U+7/9TizmuR/AAAAqIOU+x+JM5P/AQAAoDJS7n93nJn8DwAAAJWRcv974sxqkv/1//X/9f/1//u2/9+2P/X/+7X//29dL9X/1//vRv9f/3+Q16//r/9Pb/3W/0+5/9E4s5rkfwAAAKiDlPvfG2cm/wMAAEBlpNz/G3Fm8j8AAABURsr9vxlnNpj5f3itG+j/6//r/+v/r7r/vxBC0P/X/18j/f/l/f/iPexq9v/HV3NF/f9V0f/X/9f/1/+nu37r/6fc/744s8HM/wAAAEAHKff/VpyZ/A8AAACVkXL/b8eZyf8AAABQGSn3vz/OrCb5X/9f/1//X//f+f/1/zeT/n+9zv8/HvT/g/6//r/+v/4/Wb/1/1Pu/0CcWU3yPwAAANRByv2/E2cm/wMAAEBlpNx/OM5M/gcAAIDKSLn/sTizmuR//f+r1P/fWl5f/1//vzr9/0X9f/3/jvT/69X/d/7/kv6//r/+v/4/pX7r/6fcfyTOrCb5HwAAAOog5f4PxpnJ/wAAAFAZKfcfjTOT/wEAAKAyUu4/FmdWk/yv/+/8//r/+v/O/6//v5n0//X/u9H/1/8f5PXr/+v/01u/9f9T7p+NM6tJ/gcAAIA6SLn/eJyZ/A8AAACVkXL/iTgz+R8AAAAqI+X+x+PMapL/9f/1/1fV/x8L+v/6//r/+v+XRf9f/78b/X/9/0Fev/6//j+9bVz//583pP+fcv/JOLOa5H8AAACog5T7PxRnJv8DAABAZaTc/+E4M/kfAAAAKiPl/lNxZjXJ//r/+v/O/1/B/v+o/n/Q/+8b+v/6/93o/+v/D/L69f/1/+ltKGxU/z9sSP8/5f7TcWY1yf8AAABQByn3n4kzk/8BAACgMlLuPxtnJv8DAABAZaTcfy7OrCb5X/9f/1//v4L9f+f/b9D/7w/6//r/3ej/6/8P8vr1//X/6W3jzv+/Mf3/lPt/N86sJvkfAAAA6iDl/v9j7z6a5LyrPY63riWPVK5bd3X3vAV27OAd+DWwYUuRc44GTE4m55yTiSbnnIPJORlMBkOVKWvOOfZIPd2t0fT08/zP57PgMGaseayhxvUr1beee8ct9j8AAAAMI3f/feIW+x8AAACGkbv/vnFLk/2v/9f/6//1//p//f826f/1/6vo/+fT/59Z8vfr//X/+n/WmVr/n7v/fnFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+n/9v/5/Mv3/fuen/9f/6/8vif5f/7/Ydf9/Lj4YvP9fRv+v/9f/s87U+v/c/Q+KW5rsfwAAAOggd/+D4xb7HwAAAIaRu/8hcYv9DwAAAMPI3f/QuKXJ/tf/6//H7f/35tb/e/9/fl9H7P9P3f5l9f/HS/+v/1/suv9v8v7/ZfT/+n/9P+tMrf/P3f+wuKXJ/gcAAIAOcvc/PG6x/wEAAGAYufsfEbfY/wAAADCM3P2PjFua7H/9v/5/3P5/du//1//n93WI/v9c/Tre/6//1/8fTv+v/5/z8+v/9f+sN7X+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuf0zcYv8DAADAMHL3PzZuabL/9f/6f/2//l//fwLv/9f/6//1/0vp//X/c35+/b/+n/Wm1v/n7n9c3NJk/wMAAEAHufsfH7fY/wAAADCM3P1PiFvsfwAAABhG7v4nxi1N9v+l9f+n9P+H0P8vf379v/5f/6//1//r/1fR/+v/5/z8+n/9P+ttvf+/+przd9P+P3f/NXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/S/r/KxYzfv//2c2+tP4/vv7B/v/WU/p//f80+/9b4qeM/l//f7F59/9n9f876//39P8r+/nNfif0//p//T/rbL3/X9P7X/hx7v5r45Ym+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv8v7f3/0+//vf9/t+//z193C/3/mWXPr//v0v/v8/5//f8y8+7/vf9/i/3/PfI30/v/D7frfn7uz7+q/7/rBs+v/6eDqfX/ufufEbc02f8AAADQQe7+Z8Yt9j8AAAAMI3f/s+IW+x8AAACGkbv/2XFLg/1/Wv9fz5H0/97/v1H/f27/79f/H3we/b/+fxn9v/5/ld29/1//v5hAPz/35/f+//X9/1XrfhGGN7X+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVv9/xTb6/9NLfz/1//r/ZfT/+v+F/v/Idt3Pz/359f/e/896U+v/c/dfF7fU8Dt9hH9KAAAAYEpy978gbmny5/8AAADQQe7+F8Yt9j8AAAAMI3f/i+KWJvtf/6//1//r/73/X/+/Tfr/4fr/U/r/2+n/9f/6f/0/q02t/8/d/+K4pcn+BwAAgA5y978kbrH/AQAAYBi5+18at9j/AAAAMIzc/S+LW5rsf/2//l//r//X/+v/t0n/P1z/7/3/d6D/1//r//X/rDa1/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbpnd/r+woN2M/l//r//X/+v/9f/bNP3+/8xGn6X/36f/P2hb/f/ZQ76e/n9az388/X9+9/X/jGkC/f/d7vhx7v5Xxy2z2/8AAADAYXL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/w/r/m6/a/9/X9P/5G6b/j6v/1/8v9P9F/6//X8yi/9+M/n+f/v8g7//X/3v/v/6f1SbQ/x/4OHf/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/vf9f/6//1//r//X/26T/1/+vMqP+f2/ZX9T/6//1//p/Vpta/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WtzTZ//p//f/O+///GbL/P/+I+n/9v/5f/6//X21G/f9S+n/9v/5f/89qU+v/c/e/PW5psv8BAACgg9z974hb7H8AAAAYRu7+d8Yt9j8AAAAMI3f/u+KWJvtf/6//33n/7/3/Rf8f31f9v/7/Euj/9f8L/f+R7bqfn/vz6//1/6w3tf4/d/+745Ym+x8AAAA6yN3/nrjF/gcAAIBh5O6/Pm6x/wEAAGAYufvfG7c02f/6f/2//l//r//X/2+T/l//v8rJ9v/X3qz/P2jX/fzcn1//r/9nvan1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAADCN3/wfiFvsfAAAAhpG7/4NxS5P9r/+fe/9/95viCabW/+en6P/1/yv7/73FxfT/+v9Lof/X/y+28v7/C39SLKf/1//r//X/rHZi/f89r77XXW77L2v6/9z9H4pbmux/AAAA6CB3/w1xi/0PAAAAw8jd/+G4xf4HAACAYeTu/0jc0mT/9+j/z1z0aeP0/97/r/+fdP+fP1S9/1//r//X/y813f5/M/p//b/+X//PalN7/3/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk//fo/y+m/9937P3/rf+n/9f/l03e/6//1/9fLv2//n+h/z+yXffzc3/+ofv/Uwv9P8diav1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNxw5//d3SOdKP2//t/7//X/+n/9/zbp/4/Q/586vfFz6f/36f+PZtf9/Nyff+j+3/v/OSZT6/9z9382bvHn/wAAADCM3P2fi1vsfwAAABhG7v7Pxy32PwAAAAxgv3fP3f+FuKXJ/l/T/+/l5x25/z93+NfW/+v/F/p//b/+X/9/mYbs/y+B/n+f/v9odt3Pz/35Z9f/X3/wQ/0/J2FJ/3/+J/Gu+v/c/V+MW5rsfwAAAOggd/+X4hb7HwAAAIaRu//LcYv9DwAAAMPI3f+VuKXJ/l/a/+95/7/+X/+v/1/o//X/x0L/r/9fRf+v/5/z88+u/7+A/p+TMLX3/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/m/ELU32/5r3/+v/N/tH0f/r/5f+/0H/r//fsP8/s9D/H5n+X/+/0P8f2a77+bk//+X0/+f0/zQxtf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBh5O7/dtxi/wMAAMAwcvd/J25psv9H7v9XfZr+f5/+X/+/0P9Pof/3/v/LoP/X/y/0/0e2635+7s/v/f/6f9abWv+fu/+7cUuT/Q8AAAAd5O7/Xtxi/wMAAMAwcvffuFjcYP8DAADAmG48/59nF9+PW5rs/5H7/1X0//v0//r/hf5f/79l+n/9/yr6f/3/nJ9f/6//Z72p9f+5+38QtzTZ/wAAANBB7v4fxi32PwAAAAwjd/+P4hb7HwAAAIaRu//HcUuT/a//1//r//X/+n/9/zbp//X/q+j/9f9zfn79v/6f9abW/+fu/0nc0mT/AwAAQAe5+38at9j/AAAAMIzc/T+LW+x/AAAAGEbu/p/HLU32v/5f/6//1//r//X/26T/1/+vov/X/8/5+fX/+n/Wm1r/n7v/F3FLk/0PAAAAHeTu/2XcYv8DAADAMHL3/ypusf8BAABgGLn7fx23NNn/+v/bnuNc/XX9v/5f/6//T/r/49G2/7/tX6v6/7X0//r/OT+//l//z3pT6/9z9/8mbmmy/wEAAKCD3P2/jVvsfwAAABhG7v7fxS32PwAAAAwjd//v45Ym+1//7/3/+n/9/zz6/yv1//r/pSbb/3v//0b0//r/OT+//l//z3pT6/9z998UtzTZ/wAAANBB7v4/xC32PwAAAAwjd/8f4xb7HwAAAIaRu//muKXJ/tf/6/+H7P/39P/j9f/e/z/L/v9O+n/9/2r6f/3/nJ9f/6//Z72p9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAAwjd/9f4hb7HwAAAIaRu/+vcUuT/a//1/8P2f97/7/+X/8/Gfp//f8q+n/9/5yfX/+v/2e9qfX/ufv/Frc02f8AAADQQe7+v8ct9j8AAAAMI3f/P+IW+x8AAACGkbv/n3FLk/2v/9f/6//1//p//f826f/n2/9fuThC/3/dQv+v/9f/6//1/5Sp9f+5+/8VtzTZ/wAAANBB7v5b4pal+///T+ipAAAAgOOUu//fcYs//wcAAIBh5O7/T9zSZP/r//X/+n/9v/5f/79N+v/59v/e/7+e/l//r//X/7Pa1Pr/3P3/DQAA///E7/7M") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xe042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 618.929736ms ago: executing program 5 (id=2505): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x0, 0x0, 'sh\x00', 0x0, 0xffffffff, 0x1e}, 0x2c) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000003c0)="00140a000000000000001d1e01e8e51f", 0x10}], 0x1}, 0x0) 549.071668ms ago: executing program 6 (id=2506): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f00000095c0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3818, 0x8) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x10) 472.123699ms ago: executing program 5 (id=2507): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002007379"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000140)) 453.64733ms ago: executing program 5 (id=2508): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@noquota}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x45f, &(0x7f00000004c0)="$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") unlink(&(0x7f0000000240)='./file0/file0\x00') chdir(&(0x7f0000000400)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 277.054524ms ago: executing program 6 (id=2509): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000002c0)="c4470c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 198.336736ms ago: executing program 6 (id=2510): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40086604, 0x0) 66.933898ms ago: executing program 4 (id=2511): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x1, @empty, 0x5}]}}}}}}}}, 0x0) 0s ago: executing program 4 (id=2512): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000080)='./file0\x00', 0x6218840, &(0x7f0000000040), 0x1, 0x9877, &(0x7f0000012f80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000040)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) kernel console output (not intermixed with test programs): T8632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.790627][ T8632] [ 192.803944][ T8632] [ 192.803944][ T8632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.803944][ T8632] [ 192.818265][ T8632] [ 192.818265][ T8632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.818265][ T8632] [ 192.829386][ T8632] [ 192.829386][ T8632] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.829386][ T8632] [ 192.865824][ T276] [ 192.865824][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.865824][ T276] [ 192.925659][ T4185] [ 192.925659][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.925659][ T4185] [ 192.953650][ T4185] [ 192.953650][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 192.953650][ T4185] [ 192.959975][ T8623] loop3: detected capacity change from 0 to 40427 [ 193.006329][ T8623] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 193.039314][ T8623] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 193.117452][ T8623] F2FS-fs (loop3): invalid crc value [ 193.175986][ T8623] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 193.236718][ T8653] netlink: 'syz.5.1621': attribute type 11 has an invalid length. [ 193.250257][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1621'. [ 193.271774][ T8623] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 193.282729][ T8623] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 193.306993][ T8656] loop5: detected capacity change from 0 to 256 [ 193.319258][ T21] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 193.342824][ T8656] exfat: Deprecated parameter 'namecase' [ 193.348711][ T8656] exfat: Deprecated parameter 'namecase' [ 193.354823][ T8656] exfat: Deprecated parameter 'namecase' [ 193.391612][ T4189] attempt to access beyond end of device [ 193.391612][ T4189] loop3: rw=2049, want=45104, limit=40427 [ 193.392289][ T8656] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 193.502247][ T6595] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 193.560966][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 193.684528][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.698391][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.714459][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.727882][ T21] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.742511][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.753573][ T21] usb 5-1: config 0 descriptor?? [ 193.856008][ T8666] loop1: detected capacity change from 0 to 2048 [ 193.889473][ T6595] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 193.902192][ T6595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.942928][ T6595] usb 1-1: config 0 descriptor?? [ 193.972654][ T8666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.983522][ T6595] cp210x 1-1:0.0: cp210x converter detected [ 194.131644][ T8676] loop3: detected capacity change from 0 to 8192 [ 194.255677][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.260958][ T21] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 194.262076][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.311658][ T21] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 194.337934][ T8676] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 194.352330][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0010/input/input14 [ 194.364120][ T8676] FAT-fs (loop3): Filesystem has been set read-only [ 194.369572][ T21] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 194.388403][ T8676] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 2068) [ 194.397153][ T6595] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 194.432489][ T8643] udc-core: couldn't find an available UDC or it's busy [ 194.443497][ T6595] usb 1-1: cp210x converter now attached to ttyUSB0 [ 194.459456][ T8643] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 194.499800][ T21] usb 5-1: USB disconnect, device number 15 [ 194.654598][ T6595] usb 1-1: USB disconnect, device number 15 [ 194.675884][ T6595] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 194.699647][ T8697] fido_id[8697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 194.723563][ T6595] cp210x 1-1:0.0: device disconnected [ 194.730841][ T8702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1642'. [ 194.760377][ T8702] sch_fq: defrate 0 ignored. [ 194.894108][ T150] block nbd0: Possible stuck request ffff888021818000: control (read@0,4096B). Runtime 60 seconds [ 194.979595][ T8689] loop5: detected capacity change from 0 to 40427 [ 195.001019][ T8689] F2FS-fs (loop5): invalid crc value [ 195.038009][ T8689] F2FS-fs (loop5): Found nat_bits in checkpoint [ 195.048916][ T8717] loop1: detected capacity change from 0 to 256 [ 195.124400][ T8689] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 195.147157][ T8689] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 195.270988][ T8724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1652'. [ 195.355243][ T5147] attempt to access beyond end of device [ 195.355243][ T5147] loop5: rw=2049, want=45104, limit=40427 [ 195.581469][ T8741] loop3: detected capacity change from 0 to 128 [ 195.709995][ T8741] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 195.816299][ T8741] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 195.856394][ T8741] FAT-fs (loop3): Filesystem has been set read-only [ 195.952503][ T4189] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 196.195662][ T8764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1667'. [ 196.250600][ T8764] sch_fq: defrate 0 ignored. [ 196.401407][ T8775] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.420067][ T8742] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 196.426450][ T8742] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 196.455340][ T8775] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.470717][ T8742] F2FS-fs (loop0): invalid crc value [ 196.500653][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1675'. [ 196.516891][ T8742] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 196.552352][ T8777] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.564870][ T8777] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.669549][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.685430][ T8742] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 196.699228][ T8742] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.878107][ T8799] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1681'. [ 196.956119][ T4185] attempt to access beyond end of device [ 196.956119][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 196.987556][ T8803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1684'. [ 197.186356][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1689'. [ 197.213721][ T8814] set_capacity_and_notify: 3 callbacks suppressed [ 197.213738][ T8814] loop1: detected capacity change from 0 to 1024 [ 197.324798][ T8814] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.347838][ T8814] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.467639][ T8824] loop4: detected capacity change from 0 to 512 [ 197.566925][ T8830] loop0: detected capacity change from 0 to 64 [ 197.586341][ T8827] loop5: detected capacity change from 0 to 4096 [ 197.675027][ T8824] EXT4-fs (loop4): Ignoring removed bh option [ 197.765057][ T8827] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 197.765092][ T8824] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 197.882930][ T8824] EXT4-fs (loop4): 1 truncate cleaned up [ 197.916206][ T4185] hfs: node 4:3 still has 1 user(s)! [ 197.984369][ T8824] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 198.013509][ T8839] loop5: detected capacity change from 0 to 128 [ 198.044225][ T8841] input: syz1 as /devices/virtual/input/input15 [ 198.063733][ T8839] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 198.372358][ T8834] loop1: detected capacity change from 0 to 40427 [ 198.445966][ T8834] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 198.474568][ T8834] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 198.519293][ T4271] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 198.554720][ T8834] F2FS-fs (loop1): invalid crc value [ 198.607208][ T8834] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 198.759394][ T4271] usb 4-1: Using ep0 maxpacket: 16 [ 198.760156][ T8834] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 198.776935][ T8834] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 198.877710][ T4188] attempt to access beyond end of device [ 198.877710][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 199.042168][ T4271] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 199.072047][ T4271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.086001][ T6595] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 199.097375][ T4271] usb 4-1: Product: syz [ 199.107771][ T4271] usb 4-1: Manufacturer: syz [ 199.112996][ T4271] usb 4-1: SerialNumber: syz [ 199.179429][ T4229] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 199.198024][ T8886] loop1: detected capacity change from 0 to 256 [ 199.239101][ T8886] FAT-fs (loop1): Directory bread(block 64) failed [ 199.246694][ T8886] FAT-fs (loop1): Directory bread(block 65) failed [ 199.253836][ T8886] FAT-fs (loop1): Directory bread(block 66) failed [ 199.260806][ T8886] FAT-fs (loop1): Directory bread(block 67) failed [ 199.267564][ T8886] FAT-fs (loop1): Directory bread(block 68) failed [ 199.276008][ T8886] FAT-fs (loop1): Directory bread(block 69) failed [ 199.283099][ T8886] FAT-fs (loop1): Directory bread(block 70) failed [ 199.290373][ T8886] FAT-fs (loop1): Directory bread(block 71) failed [ 199.297146][ T8886] FAT-fs (loop1): Directory bread(block 72) failed [ 199.305374][ T8886] FAT-fs (loop1): Directory bread(block 73) failed [ 199.329366][ T6595] usb 1-1: Using ep0 maxpacket: 16 [ 199.391954][ T4271] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 199.408136][ T4271] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 199.425586][ T4271] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 199.434158][ T4271] usb 4-1: media controller created [ 199.464341][ T6595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.485846][ T4271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.494312][ T6595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.510732][ T6595] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 199.526325][ T6595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.536093][ T6595] usb 1-1: config 0 descriptor?? [ 199.589601][ T4229] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 199.593318][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1721'. [ 199.598634][ T4229] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.618782][ T4229] usb 6-1: config 0 has no interface number 0 [ 199.625766][ T4229] usb 6-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.740766][ T4271] zl10353_read_register: readreg error (reg=127, ret==-110) [ 199.775535][ T4271] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 199.786562][ T4271] usb 4-1: USB disconnect, device number 15 [ 199.839703][ T4229] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 199.848991][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.857532][ T4229] usb 6-1: Product: syz [ 199.879261][ T4229] usb 6-1: Manufacturer: syz [ 199.886350][ T4229] usb 6-1: SerialNumber: syz [ 199.907511][ T4229] usb 6-1: config 0 descriptor?? [ 199.953539][ T6596] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 199.975599][ T4229] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input16 [ 200.020899][ T6595] ntrig 0003:1B96:0008.0011: nested delimiters [ 200.027116][ T6595] ntrig 0003:1B96:0008.0011: item 0 1 2 10 parsing failed [ 200.036368][ T6595] ntrig 0003:1B96:0008.0011: parse failed [ 200.042441][ T6595] ntrig: probe of 0003:1B96:0008.0011 failed with error -22 [ 200.181344][ T4271] usb 6-1: USB disconnect, device number 12 [ 200.199240][ T6596] usb 5-1: Using ep0 maxpacket: 8 [ 200.223435][ T6595] usb 1-1: USB disconnect, device number 16 [ 200.319404][ T6596] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 200.328521][ T6596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.339860][ T6596] usb 5-1: config 0 descriptor?? [ 200.384945][ T6596] gm12u320 5-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 200.394319][ T6596] gm12u320: probe of 5-1:0.0 failed with error -5 [ 200.403236][ T6596] usb-storage 5-1:0.0: USB Mass Storage device detected [ 200.413716][ T6596] usb-storage 5-1:0.0: device ignored [ 200.584547][ T6596] usb 5-1: USB disconnect, device number 16 [ 200.717374][ T8905] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1727'. [ 200.742867][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 200.767338][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1727'. [ 200.781919][ T8911] loop0: detected capacity change from 0 to 512 [ 200.863942][ T8911] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 200.888112][ T8919] loop5: detected capacity change from 0 to 512 [ 200.903375][ T8911] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.929920][ T8919] EXT4-fs (loop5): Ignoring removed bh option [ 200.999460][ T8919] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 201.033030][ T8923] loop1: detected capacity change from 0 to 8192 [ 201.039917][ T8919] EXT4-fs (loop5): 1 truncate cleaned up [ 201.057895][ T8919] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 201.207814][ T8923] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 201.281691][ T8923] REISERFS (device loop1): using ordered data mode [ 201.290160][ T8923] reiserfs: using flush barriers [ 201.327556][ T8923] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 201.345709][ T8923] REISERFS (device loop1): checking transaction log (loop1) [ 201.384531][ T8923] REISERFS (device loop1): Using r5 hash to sort names [ 201.390833][ T4189] hfs: node 4:3 still has 1 user(s)! [ 201.402712][ T8923] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 201.654077][ T8944] input: syz0 as /devices/virtual/input/input17 [ 202.067326][ T8967] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 202.151231][ T6595] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 202.181256][ T8964] hfsplus: catalog searching failed [ 202.237753][ T9] hfsplus: b-tree write err: -5, ino 3 [ 202.548569][ T8990] openvswitch: netlink: Actions may not be safe on all matching packets [ 202.553842][ T8988] set_capacity_and_notify: 3 callbacks suppressed [ 202.553991][ T8988] loop4: detected capacity change from 0 to 1024 [ 202.557418][ T6595] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 202.586139][ T8985] loop3: detected capacity change from 0 to 8192 [ 202.594049][ T6595] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 202.605820][ T6595] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.661248][ T6595] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 202.669390][ T8988] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.684304][ T8997] loop1: detected capacity change from 0 to 512 [ 202.754789][ T8997] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1765: missing EA_INODE flag [ 202.797780][ T8999] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1766'. [ 202.817392][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'. [ 202.826806][ T8997] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1765: error while reading EA inode 12 err=-117 [ 202.848695][ T8997] EXT4-fs (loop1): 1 orphan inode deleted [ 202.858162][ T8997] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 203.005802][ T9006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1767'. [ 203.167732][ T9010] loop4: detected capacity change from 0 to 512 [ 203.298459][ T9010] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.371293][ T9004] loop1: detected capacity change from 0 to 32768 [ 203.378272][ T9010] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.493287][ T9025] loop0: detected capacity change from 0 to 256 [ 203.496451][ T9010] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.1771: casefold flag without casefold feature [ 203.541702][ T9027] loop3: detected capacity change from 0 to 512 [ 203.634647][ T9027] EXT4-fs (loop3): 1 truncate cleaned up [ 203.691577][ T9027] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,quota,,errors=continue. Quota mode: writeback. [ 203.829407][ T6595] stv0680 6-1:4.0: Could not get descriptor 0200 [ 203.888105][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1783'. [ 204.022323][ T9040] program syz.4.1785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.038160][ T9044] loop0: detected capacity change from 0 to 1024 [ 204.049274][ T6595] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 204.057567][ T6595] stv0680 6-1:4.0: last error: 34, command = 0x4 [ 204.089788][ T6595] usb 6-1: USB disconnect, device number 13 [ 204.278891][ T9056] device macvlan0 entered promiscuous mode [ 204.323375][ T9056] netlink: 'syz.0.1788': attribute type 1 has an invalid length. [ 204.358136][ T9056] netlink: 'syz.0.1788': attribute type 2 has an invalid length. [ 204.413157][ T4958] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 204.669365][ T4958] usb 2-1: Using ep0 maxpacket: 16 [ 204.752073][ T9073] device gretap0 entered promiscuous mode [ 204.768456][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 204.789977][ T4958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 204.799283][ T9073] device gretap0 left promiscuous mode [ 204.895975][ T9079] loop4: detected capacity change from 0 to 256 [ 204.915270][ T9052] loop3: detected capacity change from 0 to 32768 [ 204.969482][ T4958] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 204.974418][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1802'. [ 204.978681][ T4958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.024000][ T4958] usb 2-1: Product: syz [ 205.028414][ T4958] usb 2-1: Manufacturer: syz [ 205.066317][ T9052] JBD2: Ignoring recovery information on journal [ 205.074071][ T4958] usb 2-1: SerialNumber: syz [ 205.110358][ T4958] usb 2-1: config 0 descriptor?? [ 205.166227][ T4958] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 205.179288][ T4958] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 205.211403][ T9052] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 205.353688][ T26] audit: type=1800 audit(1784813475.628:30): pid=9052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1789" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 205.483260][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 205.489951][ T4958] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 205.649841][ T4958] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 205.669382][ T4958] em28xx 2-1:0.0: board has no eeprom [ 205.760868][ T9077] JBD2: Ignoring recovery information on journal [ 205.789495][ T4958] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 205.806074][ T4958] em28xx 2-1:0.0: dvb set to bulk mode. [ 205.815884][ T13] em28xx 2-1:0.0: Binding DVB extension [ 205.830664][ T4958] usb 2-1: USB disconnect, device number 19 [ 205.862039][ T9077] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 205.862063][ T4958] em28xx 2-1:0.0: Disconnecting em28xx [ 205.917348][ T13] em28xx 2-1:0.0: Registering input extension [ 205.926268][ T4958] em28xx 2-1:0.0: Closing input extension [ 205.971106][ T9077] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 205.971223][ T9077] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 206.007972][ T4958] em28xx 2-1:0.0: Freeing device [ 206.019249][ T4229] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 206.039075][ T9077] OCFS2: Returning error to the calling process. [ 206.064293][ T9077] (syz.0.1799,9077,0):ocfs2_setattr:1302 ERROR: status = -117 [ 206.093469][ T9106] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 206.093558][ T9106] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 206.188782][ T9106] OCFS2: Returning error to the calling process. [ 206.225434][ T9106] (syz.0.1799,9106,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 206.245126][ T9106] (syz.0.1799,9106,0):ocfs2_mknod:334 ERROR: status = -117 [ 206.272376][ T9106] (syz.0.1799,9106,0):ocfs2_mknod:502 ERROR: status = -117 [ 206.288150][ T9106] (syz.0.1799,9106,1):ocfs2_create:676 ERROR: status = -117 [ 206.323752][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 206.379609][ T4229] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 133, changing to 11 [ 206.414734][ T4229] usb 4-1: config 0 interface 0 has no altsetting 0 [ 206.439291][ T4229] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 206.478894][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.526531][ T4229] usb 4-1: config 0 descriptor?? [ 206.672170][ T9122] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 206.806864][ T26] audit: type=1800 audit(1784813733.074:31): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1819" name="file2" dev="loop1" ino=31 res=0 errno=0 [ 207.013438][ T4229] wacom 0003:056A:0045.0012: unknown main item tag 0x1 [ 207.020723][ T4958] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 207.022975][ T9143] vcan0: tx address claim with dlc 0 [ 207.032353][ T4229] wacom 0003:056A:0045.0012: unknown main item tag 0x6 [ 207.049027][ T4229] wacom 0003:056A:0045.0012: ignoring exceeding usage max [ 207.065019][ T4229] wacom 0003:056A:0045.0012: item fetching failed at offset 26/40 [ 207.082492][ T4229] wacom 0003:056A:0045.0012: parse failed [ 207.097025][ T4229] wacom: probe of 0003:056A:0045.0012 failed with error -22 [ 207.236287][ T7721] usb 4-1: USB disconnect, device number 16 [ 207.337264][ T9158] netlink: 'syz.5.1835': attribute type 2 has an invalid length. [ 207.357094][ T9158] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1835'. [ 207.394448][ T4958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.420533][ T4958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.457406][ T4958] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 207.489301][ T4958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.513803][ T4958] usb 1-1: config 0 descriptor?? [ 207.722451][ T9162] set_capacity_and_notify: 4 callbacks suppressed [ 207.722467][ T9162] loop1: detected capacity change from 0 to 40427 [ 207.779388][ T9162] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 207.816026][ T9162] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 207.846531][ T9162] F2FS-fs (loop1): invalid crc value [ 207.887679][ T9162] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.994963][ T9162] F2FS-fs (loop1): recover fsync data on readonly fs [ 208.025753][ T4958] playstation 0003:054C:0DF2.0013: unknown main item tag 0x4 [ 208.053190][ T4958] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 208.069853][ T9162] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 208.093226][ T9170] loop5: detected capacity change from 0 to 32768 [ 208.108472][ T9162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 208.119550][ T4958] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 208.175486][ T9162] F2FS-fs (loop1): Corrupted max_depth of 3: 255 [ 208.217100][ T9162] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 208.239339][ T4958] playstation 0003:054C:0DF2.0013: Failed to retrieve feature with reportID 9: -71 [ 208.248707][ T4958] playstation 0003:054C:0DF2.0013: Failed to retrieve DualSense pairing info: -71 [ 208.266437][ T9189] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 208.294087][ T4958] playstation 0003:054C:0DF2.0013: Failed to get MAC address from DualSense [ 208.308193][ T4958] playstation 0003:054C:0DF2.0013: Failed to create dualsense. [ 208.321794][ T9170] XFS (loop5): Mounting V5 Filesystem [ 208.364679][ T4958] playstation: probe of 0003:054C:0DF2.0013 failed with error -71 [ 208.387884][ T4958] usb 1-1: USB disconnect, device number 17 [ 208.459560][ T9198] loop4: detected capacity change from 0 to 512 [ 208.497472][ T9199] fido_id[9199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 208.513385][ T9170] XFS (loop5): Ending clean mount [ 208.533100][ T9198] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.615861][ T9198] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1850: invalid indirect mapped block 4294967295 (level 1) [ 208.633659][ T5147] XFS (loop5): Unmounting Filesystem [ 208.653334][ T9198] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1850: invalid indirect mapped block 4294967295 (level 1) [ 208.677268][ T9198] EXT4-fs (loop4): 2 truncates cleaned up [ 208.685433][ T9198] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,init_itable=0x0000000000001007,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 208.713598][ T9198] EXT4-fs error (device loop4): empty_inline_dir:1881: inode #12: block 7: comm syz.4.1850: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 208.740009][ T9198] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 208.849392][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1853'. [ 209.033854][ T9209] loop1: detected capacity change from 0 to 4096 [ 209.087566][ T9216] loop0: detected capacity change from 0 to 512 [ 209.200608][ T9216] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 209.217929][ T9209] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.304483][ T9216] ext4 filesystem being mounted at /344/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.331848][ T26] audit: type=1800 audit(1784813735.614:32): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1854" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 209.422578][ T9230] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 209.619826][ T9239] loop0: detected capacity change from 0 to 64 [ 209.640984][ T9241] netlink: 'syz.4.1867': attribute type 1 has an invalid length. [ 209.677222][ T9239] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 210.243717][ T9271] loop3: detected capacity change from 0 to 164 [ 210.274953][ T9251] loop1: detected capacity change from 0 to 32768 [ 210.285806][ T9268] loop5: detected capacity change from 0 to 8192 [ 210.391049][ T9251] JBD2: Ignoring recovery information on journal [ 210.419308][ T6596] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 210.447080][ T9251] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 210.659291][ T6596] usb 5-1: Using ep0 maxpacket: 8 [ 210.702821][ T9286] loop3: detected capacity change from 0 to 1024 [ 210.789544][ T6596] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 210.814237][ T6596] usb 5-1: config 179 has no interface number 0 [ 210.839877][ T6596] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 210.859284][ T6596] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 210.889243][ T6596] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.909296][ T6596] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 210.929374][ T6596] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 210.959281][ T6596] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 210.968534][ T6596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.984590][ T144] hfsplus: b-tree write err: -5, ino 25 [ 211.003835][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 211.010719][ T9269] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 211.023384][ T144] hfsplus: b-tree write err: -5, ino 4 [ 211.079435][ T144] hfsplus: b-tree write err: -5, ino 2 [ 211.095639][ T144] hfsplus: b-tree write err: -5, ino 26 [ 211.276594][ T9288] XFS (loop0): Mounting V5 Filesystem [ 211.424589][ T9288] XFS (loop0): Ending clean mount [ 211.477027][ T4958] usb 5-1: USB disconnect, device number 17 [ 211.634915][ T4185] XFS (loop0): Unmounting Filesystem [ 211.849089][ T9324] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 211.864541][ T9324] ext4 filesystem being mounted at /376/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.419354][ T7721] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 212.452480][ T9346] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 212.462028][ T9346] REISERFS (device loop0): using ordered data mode [ 212.469656][ T9346] reiserfs: using flush barriers [ 212.483432][ T9346] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.509351][ T21] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 212.609625][ T9346] REISERFS (device loop0): checking transaction log (loop0) [ 212.634054][ T9346] REISERFS (device loop0): Using r5 hash to sort names [ 212.683770][ T9346] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 212.812311][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 212.869475][ T7721] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.909418][ T7721] usb 4-1: not running at top speed; connect to a high speed hub [ 212.983797][ T21] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 212.999432][ T7721] usb 4-1: config 127 has an invalid interface number: 176 but max is 0 [ 213.001990][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.007834][ T7721] usb 4-1: config 127 has no interface number 0 [ 213.007877][ T7721] usb 4-1: config 127 interface 176 altsetting 141 has an invalid endpoint with address 0x0, skipping [ 213.007900][ T7721] usb 4-1: config 127 interface 176 altsetting 141 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 213.007924][ T7721] usb 4-1: config 127 interface 176 has no altsetting 0 [ 213.063917][ T21] usb 5-1: config 0 descriptor?? [ 213.273072][ T7721] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 213.294402][ T7721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.318087][ T7721] usb 4-1: Product: syz [ 213.329428][ T21] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 213.344884][ T7721] usb 4-1: Manufacturer: syz [ 213.353684][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.374158][ T7721] usb 4-1: SerialNumber: syz [ 213.382958][ T9381] set_capacity_and_notify: 6 callbacks suppressed [ 213.382973][ T9381] loop0: detected capacity change from 0 to 512 [ 213.417527][ T9381] EXT4-fs (loop0): Ignoring removed nobh option [ 213.424330][ T21] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 213.432048][ T21] usb 5-1: media controller created [ 213.455458][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.484518][ T9381] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nodelalloc,user_xattr,nobh,errors=remount-ro,. Quota mode: writeback. [ 213.499386][ T9381] ext4 filesystem being mounted at /356/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.533817][ T9381] EXT4-fs error (device loop0): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.0.1921: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 213.559318][ T21] az6027: usb out operation failed. (-71) [ 213.579300][ T21] az6027: usb out operation failed. (-71) [ 213.585925][ T21] stb0899_attach: Driver disabled by Kconfig [ 213.593312][ T21] az6027: no front-end attached [ 213.593312][ T21] [ 213.615236][ T9381] EXT4-fs (loop0): Remounting filesystem read-only [ 213.624154][ T21] az6027: usb out operation failed. (-71) [ 213.632472][ T21] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 213.641011][ T21] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 213.654632][ T21] dvb-usb: schedule remote query interval to 400 msecs. [ 213.661972][ T21] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 213.674517][ T9388] loop1: detected capacity change from 0 to 512 [ 213.683613][ T21] usb 5-1: USB disconnect, device number 18 [ 213.710966][ T7721] go7007 4-1:127.176: The Lifeview TV Walker Ultra is not supported. Sorry! [ 213.723990][ T21] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 213.739605][ T9381] EXT4-fs error (device loop0): ext4_get_first_dir_block:3608: inode #12: comm syz.0.1921: directory missing '.' [ 213.766402][ T9381] EXT4-fs (loop0): Remounting filesystem read-only [ 213.773682][ T7721] usb 4-1: USB disconnect, device number 17 [ 213.804336][ T9388] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1923: inode has both inline data and extents flags [ 213.995220][ T9388] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1923: couldn't read orphan inode 15 (err -117) [ 214.062365][ T9390] loop5: detected capacity change from 0 to 8192 [ 214.110015][ T9388] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.128621][ T9390] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 214.188583][ T9390] REISERFS (device loop5): using ordered data mode [ 214.225352][ T9390] reiserfs: using flush barriers [ 214.255847][ T9390] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 214.351054][ T9390] REISERFS (device loop5): checking transaction log (loop5) [ 214.390609][ T9390] REISERFS (device loop5): Using r5 hash to sort names [ 214.397836][ T9390] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 214.725516][ T9400] loop4: detected capacity change from 0 to 32768 [ 215.084612][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1936'. [ 215.187282][ T9429] sch_tbf: peakrate 2 is lower than or equals to rate 2 ! [ 215.436227][ T9432] loop3: detected capacity change from 0 to 2048 [ 215.465427][ T9437] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.508110][ T9432] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.783627][ T9449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.791008][ T9449] IPv6: NLM_F_CREATE should be set when creating new route [ 215.798294][ T9449] IPv6: NLM_F_CREATE should be set when creating new route [ 215.805583][ T9449] IPv6: NLM_F_CREATE should be set when creating new route [ 216.058361][ T9460] loop5: detected capacity change from 0 to 512 [ 216.292792][ T9465] loop0: detected capacity change from 0 to 512 [ 216.403025][ T9460] EXT4-fs (loop5): Test dummy encryption mode enabled [ 216.422886][ T9465] FAT-fs (loop0): bogus number of FAT sectors [ 216.445225][ T9460] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1952: inode has both inline data and extents flags [ 216.484504][ T9465] FAT-fs (loop0): Can't find a valid FAT filesystem [ 216.569820][ T9460] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1952: couldn't read orphan inode 15 (err -117) [ 216.608490][ T9457] loop4: detected capacity change from 0 to 32768 [ 216.613494][ T9460] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 216.786927][ T9457] XFS (loop4): Mounting V5 Filesystem [ 216.897469][ T9457] XFS (loop4): Ending clean mount [ 217.074970][ T9460] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 217.206014][ T4195] XFS (loop4): Unmounting Filesystem [ 217.291414][ T9455] loop3: detected capacity change from 0 to 40427 [ 217.369111][ T9455] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 217.376899][ T9455] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 217.392488][ T9460] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 217.415383][ T9455] F2FS-fs (loop3): invalid crc value [ 217.439559][ T9460] overlayfs: upper fs does not support tmpfile. [ 217.470052][ T9455] F2FS-fs (loop3): Found nat_bits in checkpoint [ 217.509597][ T9460] fscrypt (loop5): Error allocating 'xts(aes)' transform: -4 [ 217.640792][ T9455] F2FS-fs (loop3): recover fsync data on readonly fs [ 217.695269][ T9455] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 217.740553][ T9455] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 217.835908][ T9503] loop5: detected capacity change from 0 to 128 [ 217.916176][ T9503] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 217.940674][ T9455] F2FS-fs (loop3): Corrupted max_depth of 3: 255 [ 217.990845][ T9455] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 217.999443][ T9504] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.045372][ T9503] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.090952][ T9505] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 218.155083][ T9506] NILFS (loop0): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 218.350666][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1962'. [ 218.404734][ T9510] netlink: 39 bytes leftover after parsing attributes in process `syz.5.1962'. [ 218.730020][ T9520] set_capacity_and_notify: 1 callbacks suppressed [ 218.730034][ T9520] loop0: detected capacity change from 0 to 256 [ 219.068162][ T9508] loop4: detected capacity change from 0 to 32768 [ 219.183653][ T9469] loop1: detected capacity change from 0 to 40427 [ 219.192845][ T9508] JBD2: Ignoring recovery information on journal [ 219.332690][ T26] audit: type=1326 audit(1784813745.614:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.3.1976" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e176f7e99 code=0x7ffc0000 [ 219.349253][ T9539] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 219.374285][ T9508] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 219.409906][ T9542] loop3: detected capacity change from 0 to 512 [ 219.437757][ T26] audit: type=1326 audit(1784813745.644:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.3.1976" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e176f7e99 code=0x7ffc0000 [ 219.489261][ T9539] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 219.578404][ T26] audit: type=1326 audit(1784813745.644:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.3.1976" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e176f7e99 code=0x7ffc0000 [ 219.647712][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 219.669391][ T26] audit: type=1326 audit(1784813745.644:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.3.1976" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2e176f7e99 code=0x7ffc0000 [ 219.722590][ T9542] EXT4-fs (loop3): 1 truncate cleaned up [ 219.728288][ T9542] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 219.779574][ T26] audit: type=1326 audit(1784813745.644:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.3.1976" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e176f7c02 code=0x7ffc0000 [ 219.811287][ T26] audit: type=1326 audit(1784813745.644:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.3.1976" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e176b86ce code=0x7ffc0000 [ 219.835424][ T26] audit: type=1326 audit(1784813745.644:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.3.1976" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2e176f7cc7 code=0x7ffc0000 [ 219.898187][ T9553] loop5: detected capacity change from 0 to 256 [ 219.946309][ T26] audit: type=1326 audit(1784813745.644:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.3.1976" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e176b86ce code=0x7ffc0000 [ 220.007855][ T26] audit: type=1326 audit(1784813745.694:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.3.1976" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e176f7e99 code=0x7ffc0000 [ 220.156644][ T26] audit: type=1326 audit(1784813745.694:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.3.1976" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e176f7b2b code=0x7ffc0000 [ 220.189810][ T9558] loop4: detected capacity change from 0 to 512 [ 220.202058][ T9553] FAT-fs (loop5): Directory bread(block 64) failed [ 220.223331][ T9553] FAT-fs (loop5): Directory bread(block 65) failed [ 220.230150][ T9553] FAT-fs (loop5): Directory bread(block 66) failed [ 220.236720][ T9553] FAT-fs (loop5): Directory bread(block 67) failed [ 220.253982][ T9553] FAT-fs (loop5): Directory bread(block 68) failed [ 220.269378][ T9553] FAT-fs (loop5): Directory bread(block 69) failed [ 220.278680][ T9558] EXT4-fs (loop4): Ignoring removed nobh option [ 220.301492][ T9553] FAT-fs (loop5): Directory bread(block 70) failed [ 220.329241][ T9553] FAT-fs (loop5): Directory bread(block 71) failed [ 220.355669][ T9553] FAT-fs (loop5): Directory bread(block 72) failed [ 220.406090][ T9553] FAT-fs (loop5): Directory bread(block 73) failed [ 220.421536][ T9558] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodelalloc,user_xattr,nobh,errors=remount-ro,. Quota mode: writeback. [ 220.534460][ T9558] ext4 filesystem being mounted at /416/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.556361][ T9564] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.678845][ T9558] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.4.1978: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 220.830980][ T9558] EXT4-fs (loop4): Remounting filesystem read-only [ 220.837549][ T9558] EXT4-fs error (device loop4): ext4_get_first_dir_block:3608: inode #12: comm syz.4.1978: directory missing '.' [ 220.844361][ T9568] netlink: 'syz.5.1985': attribute type 1 has an invalid length. [ 220.889089][ T9558] EXT4-fs (loop4): Remounting filesystem read-only [ 220.903822][ T9568] netlink: 'syz.5.1985': attribute type 2 has an invalid length. [ 220.911119][ T9551] loop0: detected capacity change from 0 to 32768 [ 221.135116][ T9551] overlayfs: upper fs needs to support d_type. [ 221.147381][ T4199] block nbd1: Receive control failed (result -32) [ 221.203765][ T9570] loop5: detected capacity change from 0 to 8192 [ 221.239629][ T9570] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 221.284387][ T9551] overlayfs: upper fs does not support tmpfile. [ 221.291977][ T9570] REISERFS (device loop5): using ordered data mode [ 221.298502][ T9570] reiserfs: using flush barriers [ 221.411995][ T9551] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 221.440420][ T9570] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 221.499553][ T9570] REISERFS (device loop5): checking transaction log (loop5) [ 221.534002][ T9570] REISERFS (device loop5): Using r5 hash to sort names [ 221.540480][ T4185] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 221.540480][ T4185] [ 221.559633][ T9570] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 221.582840][ T4185] ERROR: (device loop0): remounting filesystem as read-only [ 221.629328][ T9570] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 221.700027][ T9570] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 221.711075][ T9567] loop3: detected capacity change from 0 to 32768 [ 222.154721][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.208943][ T9587] netem: change failed [ 222.314090][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.339225][ T9579] loop4: detected capacity change from 0 to 32768 [ 222.420988][ T9579] JBD2: Ignoring recovery information on journal [ 222.437855][ T9579] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 222.560965][ T9579] JBD2: bad block at offset 32 [ 222.596617][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.660104][ T9579] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 222.731628][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.761517][ T9579] (syz.4.1992,9579,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=3344, inode=0, rec_len=0, name_len=0 [ 222.886424][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 223.365259][ T9575] JBD2: Ignoring recovery information on journal [ 223.766999][ T9575] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 224.139322][ T9625] chnl_net:caif_netlink_parms(): no params data found [ 224.178217][ T9575] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 224.178246][ T9575] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 224.407425][ T9575] OCFS2: Returning error to the calling process. [ 224.414508][ T9575] (syz.1.1980,9575,0):ocfs2_setattr:1302 ERROR: status = -117 [ 224.424807][ T9661] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 224.424834][ T9661] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 224.494844][ T9638] set_capacity_and_notify: 2 callbacks suppressed [ 224.494859][ T9638] loop3: detected capacity change from 0 to 32768 [ 224.485215][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.561364][ T9638] XFS (loop3): Mounting V5 Filesystem [ 224.625541][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.679381][ T9661] OCFS2: Returning error to the calling process. [ 224.685836][ T9661] (syz.1.1980,9661,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 224.694975][ T9661] (syz.1.1980,9661,1):ocfs2_mknod:334 ERROR: status = -117 [ 224.703095][ T9661] (syz.1.1980,9661,1):ocfs2_mknod:502 ERROR: status = -117 [ 224.710812][ T9625] device bridge_slave_0 entered promiscuous mode [ 224.715545][ T9661] (syz.1.1980,9661,1):ocfs2_create:676 ERROR: status = -117 [ 224.761747][ T9638] XFS (loop3): Ending clean mount [ 224.834363][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.872039][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.916049][ T9625] device bridge_slave_1 entered promiscuous mode [ 224.916653][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 224.951644][ T4189] XFS (loop3): Unmounting Filesystem [ 224.977090][ T150] block nbd0: Possible stuck request ffff888021818000: control (read@0,4096B). Runtime 90 seconds [ 225.115977][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 225.115991][ T26] audit: type=1326 audit(1784813751.394:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.5.2025" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4436908e99 code=0x7ffc0000 [ 225.166376][ T9680] loop5: detected capacity change from 0 to 512 [ 225.205433][ T26] audit: type=1326 audit(1784813751.434:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.5.2025" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4436908e99 code=0x7ffc0000 [ 225.281560][ T9625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.339089][ T9625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.402568][ T9625] team0: Port device team_slave_0 added [ 225.415998][ T26] audit: type=1326 audit(1784813751.434:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.5.2025" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4436908e99 code=0x7ffc0000 [ 225.477590][ T9683] loop4: detected capacity change from 0 to 32768 [ 225.477806][ T9625] team0: Port device team_slave_1 added [ 225.533965][ T9689] loop1: detected capacity change from 0 to 512 [ 225.538351][ T9680] EXT4-fs (loop5): 1 truncate cleaned up [ 225.540460][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 225.554503][ T26] audit: type=1326 audit(1784813751.434:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.5.2025" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4436908e99 code=0x7ffc0000 [ 225.568095][ T9680] EXT4-fs (loop5): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 225.585983][ T9683] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2026 (9683) [ 225.643033][ T9683] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 225.652751][ T9683] BTRFS info (device loop4): enabling auto defrag [ 225.659313][ T9683] BTRFS info (device loop4): force zlib compression, level 3 [ 225.666847][ T9683] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 225.677173][ T9683] BTRFS info (device loop4): use zstd compression, level 3 [ 225.684760][ T9683] BTRFS info (device loop4): allowing degraded mounts [ 225.691585][ T9683] BTRFS info (device loop4): using free space tree [ 225.698109][ T9683] BTRFS info (device loop4): has skinny extents [ 225.715525][ T9689] EXT4-fs (loop1): Test dummy encryption mode enabled [ 225.864225][ T26] audit: type=1326 audit(1784813751.434:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.5.2025" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4436908c02 code=0x7ffc0000 [ 225.866015][ T9689] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.2021: inode has both inline data and extents flags [ 225.888893][ T26] audit: type=1326 audit(1784813751.444:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.5.2025" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f44368c96ce code=0x7ffc0000 [ 225.926979][ T26] audit: type=1326 audit(1784813751.444:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.5.2025" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4436908cc7 code=0x7ffc0000 [ 225.951663][ T26] audit: type=1326 audit(1784813751.444:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.5.2025" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44368c96ce code=0x7ffc0000 [ 225.975958][ T26] audit: type=1326 audit(1784813751.444:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.5.2025" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4436908b2b code=0x7ffc0000 [ 226.000861][ T26] audit: type=1326 audit(1784813751.474:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9678 comm="syz.5.2025" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f44368c96ce code=0x7ffc0000 [ 226.068380][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.083381][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.146984][ T9689] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2021: couldn't read orphan inode 15 (err -117) [ 226.177810][ T9689] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 226.217181][ T9625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.290918][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.298252][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.345738][ T9625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.377185][ T9683] BTRFS info (device loop4): enabling ssd optimizations [ 226.415232][ T9683] BTRFS info (device loop4): force zlib compression, level 3 [ 226.423670][ T9683] BTRFS info (device loop4): use zstd compression, level 3 [ 226.430994][ T9683] BTRFS info (device loop4): allowing degraded mounts [ 226.432665][ T9689] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 226.578016][ T154] device hsr_slave_0 left promiscuous mode [ 226.600160][ T154] device hsr_slave_1 left promiscuous mode [ 226.647008][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.666037][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.681404][ T9689] overlayfs: failed to resolve './file1': -2 [ 226.759227][ T9738] loop3: detected capacity change from 0 to 256 [ 226.834782][ T9738] exfat: Deprecated parameter 'namecase' [ 226.842197][ T9738] exfat: Deprecated parameter 'namecase' [ 226.847998][ T9738] exfat: Deprecated parameter 'utf8' [ 226.971268][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.978741][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.020169][ T154] device bridge_slave_1 left promiscuous mode [ 227.026428][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.036181][ T9738] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 227.036407][ T154] device bridge_slave_0 left promiscuous mode [ 227.057948][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.110324][ T154] device veth1_macvtap left promiscuous mode [ 227.116404][ T154] device veth0_macvtap left promiscuous mode [ 227.127231][ T154] device veth1_vlan left promiscuous mode [ 227.140887][ T154] device veth0_vlan left promiscuous mode [ 227.193895][ T9744] kernel write not supported for file /full (pid: 9744 comm: kworker/0:17) [ 227.219688][ T9743] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 227.313237][ T9751] loop3: detected capacity change from 0 to 1024 [ 227.524069][ T9762] loop3: detected capacity change from 0 to 512 [ 227.556263][ T9762] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.581309][ T9743] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 227.590467][ T9743] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.601245][ T9743] usb 5-1: config 0 has no interface number 0 [ 227.607490][ T9743] usb 5-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.609451][ T9762] EXT4-fs (loop3): 1 truncate cleaned up [ 227.629475][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 227.669246][ T9762] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,errors=continue,noload,noquota,,errors=continue. Quota mode: none. [ 227.789534][ T9743] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 227.798961][ T9743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.815992][ T9743] usb 5-1: Product: syz [ 227.820765][ T9743] usb 5-1: Manufacturer: syz [ 227.825586][ T9743] usb 5-1: SerialNumber: syz [ 227.839259][ T9743] usb 5-1: config 0 descriptor?? [ 227.873728][ T154] team0 (unregistering): Port device team_slave_1 removed [ 227.904562][ T9743] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input20 [ 227.948079][ T154] team0 (unregistering): Port device team_slave_0 removed [ 227.977883][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.067409][ T9770] tmpfs: Too few inodes for current use [ 228.096629][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.146130][ T21] usb 5-1: USB disconnect, device number 19 [ 228.331100][ T154] bond0 (unregistering): Released all slaves [ 228.373129][ T9780] loop5: detected capacity change from 0 to 64 [ 228.397013][ T9625] device hsr_slave_0 entered promiscuous mode [ 228.404195][ T9625] device hsr_slave_1 entered promiscuous mode [ 228.411190][ T9625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.418862][ T9625] Cannot create hsr debugfs directory [ 228.714326][ T9789] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2050'. [ 228.872605][ T9799] loop1: detected capacity change from 0 to 256 [ 228.976277][ T9625] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.026223][ T9799] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.039922][ T9625] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 229.060092][ T9810] loop5: detected capacity change from 0 to 256 [ 229.062008][ T9625] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 229.137295][ T9625] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 229.260585][ T4236] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 229.268525][ T4236] FAT-fs (loop1): Filesystem has been set read-only [ 229.338686][ T4236] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 229.367834][ T9817] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.486826][ T9625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.564323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.591108][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.643095][ T9625] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.689256][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 229.697368][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.735308][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.783527][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.790689][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.849748][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.895136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.936002][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.979099][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.986279][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.082227][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.110852][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.181401][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.260830][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.298798][ T9855] set_capacity_and_notify: 1 callbacks suppressed [ 230.298813][ T9855] loop5: detected capacity change from 0 to 512 [ 230.315271][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.326917][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2076'. [ 230.356122][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.365568][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.385163][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.422457][ T9625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.499618][ T9625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.531551][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.553284][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.569610][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.628022][ T9855] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 230.704658][ T9855] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.935038][ T9855] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.2075: casefold flag without casefold feature [ 230.935369][ T9858] loop1: detected capacity change from 0 to 32768 [ 231.026244][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.040610][ T9858] (syz.1.2074,9858,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.066252][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.104351][ T9858] (syz.1.2074,9858,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.108671][ T9625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.142812][ T9858] JBD2: Ignoring recovery information on journal [ 231.288176][ T9858] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 231.347943][ T9860] loop3: detected capacity change from 0 to 32768 [ 231.416810][ T9860] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2077 (9860) [ 231.477370][ T9860] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 231.511273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.529511][ T9860] BTRFS info (device loop3): using free space tree [ 231.536078][ T9860] BTRFS info (device loop3): has skinny extents [ 231.567694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.587200][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 231.686731][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.710590][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.797946][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.817344][ T7721] Bluetooth: hci0: command 0x0419 tx timeout [ 231.854904][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.859674][ T9860] BTRFS info (device loop3): enabling ssd optimizations [ 231.918649][ T9860] overlayfs: workdir and upperdir must reside under the same mount [ 231.956368][ T9625] device veth0_vlan entered promiscuous mode [ 232.033186][ T9625] device veth1_vlan entered promiscuous mode [ 232.166770][ T9927] loop4: detected capacity change from 0 to 512 [ 232.223389][ T9691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.241273][ T9691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.286233][ T9625] device veth0_macvtap entered promiscuous mode [ 232.302794][ T9625] device veth1_macvtap entered promiscuous mode [ 232.329475][ T9930] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2087'. [ 232.358656][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.444050][ T9927] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 232.473325][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.536417][ T9927] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.583125][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.678573][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.682562][ T9927] EXT4-fs error (device loop4): ext4_get_first_dir_block:3597: inode #12: comm syz.4.2084: Attempting to read directory block (0) that is past i_size (3) [ 232.723422][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.734235][ T9927] EXT4-fs (loop4): Remounting filesystem read-only [ 232.748554][ T9895] loop5: detected capacity change from 0 to 32768 [ 232.779219][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.819250][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.839202][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.861641][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.872319][ T9691] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 232.901173][ T9691] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.949634][ T9691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.991683][ T9895] JBD2: Ignoring recovery information on journal [ 233.021095][ T9691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.036152][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.115406][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.136204][ T9895] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 233.187542][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.252391][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.300526][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.340535][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.364328][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.377102][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.388950][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.420346][ T9691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.442366][ T5147] ocfs2: Unmounting device (7,5) on (node local) [ 233.461483][ T9691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.504192][ T9625] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.525799][ T9625] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.535655][ T9625] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.544782][ T9625] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.773855][ T9962] loop3: detected capacity change from 0 to 4096 [ 233.831921][ T9691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.845706][ T9691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.863541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.902824][ T9691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.946388][ T9962] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 233.956802][ T9691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.992304][ T9691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.004685][ T9962] ntfs3: loop3: Failed to load $Extend. [ 234.269247][ T4229] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 234.561300][ T4229] usb 6-1: Using ep0 maxpacket: 32 [ 234.684658][ T4229] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.704166][ T4229] usb 6-1: config 0 has no interface number 0 [ 234.738958][ T4229] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 234.774363][ T4229] usb 6-1: config 0 interface 1 has no altsetting 0 [ 234.935660][ T9985] loop6: detected capacity change from 0 to 32768 [ 234.949476][ T4229] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 234.958559][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.984235][ T4229] usb 6-1: Product: syz [ 234.987698][T10014] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 234.993721][ T4229] usb 6-1: Manufacturer: syz [ 235.031796][ T4229] usb 6-1: SerialNumber: syz [ 235.036929][T10014] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 235.066488][T10014] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 235.067076][ T4229] usb 6-1: config 0 descriptor?? [ 235.099692][T10014] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 235.137400][T10014] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 235.169344][T10014] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 235.214871][T10014] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 235.259327][T10014] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 235.303773][T10014] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 235.327517][T10014] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 235.359957][T10014] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 235.371071][T10035] loop4: detected capacity change from 0 to 8 [ 235.375874][ T4229] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 235.422684][T10032] loop1: detected capacity change from 0 to 2048 [ 235.431886][ T4229] cx231xx 6-1:0.1: Failed to read PCB config [ 235.437981][ T4229] cx231xx: probe of 6-1:0.1 failed with error -71 [ 235.467556][T10035] SQUASHFS error: zlib decompression failed, data probably corrupt [ 235.510046][ T4229] usb 6-1: USB disconnect, device number 14 [ 235.518831][T10035] SQUASHFS error: Failed to read block 0x9b: -5 [ 235.569904][T10035] SQUASHFS error: Unable to read metadata cache entry [99] [ 235.577885][T10035] SQUASHFS error: Unable to read inode 0x104 [ 235.585380][T10032] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.597517][T10032] ext4 filesystem being mounted at /418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 235.702477][T10042] loop3: detected capacity change from 0 to 4096 [ 235.788122][T10042] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 236.075672][T10056] loop1: detected capacity change from 0 to 4096 [ 236.161501][T10065] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2121'. [ 236.175729][T10056] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 236.293165][ T9691] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 236.311814][ T4188] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 236.329521][ T4188] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 236.369272][ T4188] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 236.401119][ T9691] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 236.408377][ T4188] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 236.558876][T10089] program syz.4.2130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.188068][T10075] loop3: detected capacity change from 0 to 32768 [ 237.315403][T10082] loop6: detected capacity change from 0 to 32768 [ 237.365960][T10086] loop5: detected capacity change from 0 to 32768 [ 237.585139][T10086] XFS (loop5): Mounting V5 Filesystem [ 237.688476][T10086] XFS (loop5): Ending clean mount [ 237.772624][ T5147] XFS (loop5): Unmounting Filesystem [ 238.185670][T10140] loop3: detected capacity change from 0 to 64 [ 238.232031][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2143'. [ 238.232062][T10142] netlink: 'syz.6.2143': attribute type 29 has an invalid length. [ 238.232074][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2143'. [ 238.232232][T10113] loop4: detected capacity change from 0 to 32768 [ 238.339882][T10140] hfs: walked past end of dir [ 238.427138][T10148] loop6: detected capacity change from 0 to 256 [ 238.538107][T10113] XFS (loop4): Mounting V5 Filesystem [ 238.649807][T10113] XFS (loop4): Ending clean mount [ 238.660620][T10148] FAT-fs (loop6): Directory bread(block 64) failed [ 238.660658][T10148] FAT-fs (loop6): Directory bread(block 65) failed [ 238.709407][T10148] FAT-fs (loop6): Directory bread(block 66) failed [ 238.709445][T10148] FAT-fs (loop6): Directory bread(block 67) failed [ 238.709505][T10148] FAT-fs (loop6): Directory bread(block 68) failed [ 238.709533][T10148] FAT-fs (loop6): Directory bread(block 69) failed [ 238.709593][T10148] FAT-fs (loop6): Directory bread(block 70) failed [ 238.709619][T10148] FAT-fs (loop6): Directory bread(block 71) failed [ 238.709684][T10148] FAT-fs (loop6): Directory bread(block 72) failed [ 238.709710][T10148] FAT-fs (loop6): Directory bread(block 73) failed [ 238.796229][ T4195] XFS (loop4): Unmounting Filesystem [ 239.203114][T10170] mkiss: ax0: crc mode is auto. [ 239.422571][T10163] JBD2: Ignoring recovery information on journal [ 239.475274][T10163] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 239.578560][ T5147] ocfs2: Unmounting device (7,5) on (node local) [ 239.585267][T10186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 239.729906][T10186] EXT4-fs (loop3): 1 truncate cleaned up [ 239.735741][T10186] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 240.197401][T10172] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 240.200136][T10199] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.217139][T10172] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 240.255258][T10172] F2FS-fs (loop1): invalid crc value [ 240.311414][T10215] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 240.346261][T10172] F2FS-fs (loop1): Found nat_bits in checkpoint [ 240.418820][T10219] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2166'. [ 240.437739][T10172] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 240.608650][T10172] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 240.657458][ T9744] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 240.711973][T10230] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2169'. [ 240.726309][T10229] set_capacity_and_notify: 5 callbacks suppressed [ 240.726324][T10229] loop5: detected capacity change from 0 to 1024 [ 240.740250][T10172] F2FS-fs (loop1) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 240.791725][T10172] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x136/0x8e0 [ 240.808066][T10232] loop6: detected capacity change from 0 to 1024 [ 240.898873][T10232] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 240.927857][T10232] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 240.989507][T10232] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.2171: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 241.023119][T10232] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.2171: couldn't read orphan inode 11 (err -117) [ 241.039388][ T9744] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 241.047427][ T9744] usb 4-1: config 0 has no interface number 0 [ 241.056301][ T9744] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.067721][ T9744] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.077822][ T9744] usb 4-1: config 0 interface 1 has no altsetting 0 [ 241.084571][ T9744] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 241.094258][ T9744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.105283][ T9744] usb 4-1: config 0 descriptor?? [ 241.122014][T10232] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 241.192690][T10232] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.2171: Invalid block bitmap block 0 in block_group 0 [ 241.255656][T10232] __quota_error: 24 callbacks suppressed [ 241.255672][T10232] Quota error (device loop6): write_blk: dquota write failed [ 241.280479][T10232] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 241.285095][T10248] device gretap0 entered promiscuous mode [ 241.295385][T10232] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.2171: Failed to acquire dquot type 0 [ 241.328212][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2177'. [ 241.337756][ T155] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm kworker/u4:3: Invalid inode table block 17179869185 in block_group 0 [ 241.340922][T10248] device gretap0 left promiscuous mode [ 241.470680][T10250] loop5: detected capacity change from 0 to 512 [ 241.520479][T10250] Quota error (device loop5): v2_read_file_info: Can't read info structure [ 241.559720][T10250] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 241.592426][T10250] EXT4-fs (loop5): mount failed [ 241.805808][T10250] loop5: detected capacity change from 0 to 512 [ 241.822085][ T9744] input: HID 2179:0053 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:2179:0053.0014/input/input21 [ 241.897258][T10250] EXT4-fs (loop5): Ignoring removed bh option [ 241.936391][ T9744] uclogic 0003:2179:0053.0014: input,hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.3-1/input1 [ 241.968643][T10273] loop1: detected capacity change from 0 to 512 [ 241.981756][T10250] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 242.012804][T10250] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.021193][ T9744] usb 4-1: USB disconnect, device number 18 [ 242.048369][T10273] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 242.243056][T10273] EXT4-fs (loop1): 1 truncate cleaned up [ 242.248764][T10273] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 242.377935][T10268] loop6: detected capacity change from 0 to 32768 [ 242.409287][ T26] audit: type=1800 audit(1784813768.684:99): pid=10273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2186" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 242.436725][T10284] loop4: detected capacity change from 0 to 512 [ 242.454241][T10287] loop5: detected capacity change from 0 to 8 [ 242.481529][T10268] XFS (loop6): Mounting V5 Filesystem [ 242.506055][T10284] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 242.526479][T10268] XFS (loop6): Ending clean mount [ 242.583543][T10297] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2192'. [ 242.645409][T10284] EXT4-fs (loop4): orphan cleanup on readonly fs [ 242.679031][T10284] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 242.702700][ T9625] XFS (loop6): Unmounting Filesystem [ 242.737356][T10284] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 242.904012][T10310] sctp: [Deprecated]: syz.5.2198 (pid 10310) Use of int in maxseg socket option. [ 242.904012][T10310] Use struct sctp_assoc_value instead [ 242.942434][T10311] loop1: detected capacity change from 0 to 764 [ 242.960838][T10284] EXT4-fs (loop4): 1 truncate cleaned up [ 242.966743][T10284] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrjquota="errors=continue,noload,user_xattr,grpjquota="errors=continue,grpquota,jqfmt=vfsv1,lazytime,,errors=continue. Quota mode: writeback. [ 242.988890][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.168185][T10316] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 4: comm syz.4.2190: lblock 0 mapped to illegal pblock 4 (length 1) [ 243.700671][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2211'. [ 243.775509][T10348] loop6: detected capacity change from 0 to 736 [ 243.819369][ T4958] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 244.069219][ T4958] usb 4-1: Using ep0 maxpacket: 16 [ 244.189519][ T4958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.207053][T10365] hfs: walked past end of dir [ 244.248746][ T4958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.269981][ T4958] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.290737][ T4958] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.332797][ T4958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.369785][ T4958] usb 4-1: config 0 descriptor?? [ 244.851018][ T4958] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 244.879354][T10372] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2223 (10372) [ 244.901124][ T4958] microsoft 0003:045E:07DA.0015: unsupported Resolution Multiplier 0 [ 244.933423][ T4958] microsoft 0003:045E:07DA.0015: implement() called with n (152) > 32! (kworker/0:8) [ 245.009762][T10372] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 245.061493][T10372] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 245.069441][ T4958] microsoft 0003:045E:07DA.0015: unsupported Resolution Multiplier 0 [ 245.099364][T10372] BTRFS info (device loop5): use zstd compression, level 3 [ 245.110088][ T4958] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 245.121063][T10372] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 245.152586][ T4958] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 245.159187][T10372] BTRFS info (device loop5): trying to use backup root at mount time [ 245.191540][ T4958] microsoft 0003:045E:07DA.0015: no inputs found [ 245.208314][ T4958] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 245.224979][T10372] BTRFS info (device loop5): enabling auto defrag [ 245.250340][T10372] BTRFS info (device loop5): disabling free space tree [ 245.257557][T10372] BTRFS error (device loop5): cannot disable free space tree [ 245.289606][ T4958] usb 4-1: USB disconnect, device number 19 [ 245.328610][T10372] BTRFS error (device loop5): open_ctree failed: -22 [ 245.468854][T10393] fido_id[10393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 245.591927][T10397] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 245.649058][T10397] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.695207][T10383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2227 (10383) [ 245.805695][T10383] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 245.833826][T10383] BTRFS info (device loop1): turning on sync discard [ 245.884085][T10383] BTRFS info (device loop1): force zlib compression, level 3 [ 245.926145][T10383] BTRFS info (device loop1): turning on async discard [ 245.969427][T10383] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 245.972833][T10403] set_capacity_and_notify: 5 callbacks suppressed [ 245.972849][T10403] loop4: detected capacity change from 0 to 8192 [ 246.029245][T10383] BTRFS info (device loop1): trying to use backup root at mount time [ 246.060461][T10383] BTRFS info (device loop1): using free space tree [ 246.067023][T10383] BTRFS info (device loop1): has skinny extents [ 246.076092][T10412] loop5: detected capacity change from 0 to 1024 [ 246.238719][T10424] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 246.281681][T10428] netlink: 984 bytes leftover after parsing attributes in process `syz.6.2243'. [ 246.524547][ T154] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 246.584058][T10383] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 246.620396][ T4275] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 246.685327][T10383] BTRFS warning (device loop1): couldn't read tree root [ 246.714463][T10383] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 246.736540][T10448] loop5: detected capacity change from 0 to 164 [ 246.829754][T10383] BTRFS warning (device loop1): couldn't read tree root [ 246.860109][T10450] loop6: detected capacity change from 0 to 4096 [ 246.888360][T10383] BTRFS info (device loop1): enabling ssd optimizations [ 246.946424][T10383] BTRFS info (device loop1): clearing free space tree [ 246.989360][T10383] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 247.021972][T10465] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.042269][T10383] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 247.192306][T10383] BTRFS info (device loop1): creating free space tree [ 247.237372][T10474] loop5: detected capacity change from 0 to 1024 [ 247.281145][T10383] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 247.346074][T10383] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 247.489960][T10485] loop6: detected capacity change from 0 to 64 [ 247.516085][T10487] loop5: detected capacity change from 0 to 128 [ 247.978811][T10487] sysv_free_block: trying to free block not in datazone [ 248.069425][ T4271] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 248.327001][ T5147] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 248.379361][ T4271] usb 4-1: Using ep0 maxpacket: 32 [ 248.386744][T10508] loop4: detected capacity change from 0 to 8192 [ 248.527401][T10508] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 248.529334][ T4271] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 248.556262][T10508] REISERFS (device loop4): using ordered data mode [ 248.563667][T10508] reiserfs: using flush barriers [ 248.570393][T10508] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 248.699866][T10508] REISERFS (device loop4): checking transaction log (loop4) [ 249.071668][T10508] REISERFS (device loop4): Using tea hash to sort names [ 249.090624][T10508] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 249.334823][T10523] loop5: detected capacity change from 0 to 131072 [ 249.343089][ T4271] usb 4-1: config 0 has no interface number 0 [ 249.349287][ T4271] usb 4-1: config 0 interface 12 has no altsetting 0 [ 249.446472][T10523] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 249.454630][T10523] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 249.469234][T10523] F2FS-fs (loop5): invalid crc value [ 249.500754][T10540] loop1: detected capacity change from 0 to 736 [ 249.513455][T10523] F2FS-fs (loop5): Found nat_bits in checkpoint [ 249.545153][ T4271] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 249.597128][T10523] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 249.604325][T10523] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 249.631834][ T4271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.642916][ T4271] usb 4-1: Product: syz [ 249.668292][ T4271] usb 4-1: Manufacturer: syz [ 249.679252][ T4271] usb 4-1: SerialNumber: syz [ 249.700062][ T4271] usb 4-1: config 0 descriptor?? [ 249.853548][T10555] misc userio: Can't change port type on an already running userio instance [ 249.954354][T10558] netlink: 'syz.1.2285': attribute type 7 has an invalid length. [ 250.002611][T10561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2286'. [ 250.013153][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2286'. [ 250.029335][T10561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2286'. [ 250.038471][T10561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2286'. [ 250.289403][ T21] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 250.390087][T10581] sctp: [Deprecated]: syz.6.2292 (pid 10581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.390087][T10581] Use struct sctp_sack_info instead [ 250.466411][T10585] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.579399][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 250.719656][ T21] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 250.744796][ T21] usb 5-1: config 0 has no interface number 0 [ 250.764145][ T21] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 250.804866][ T21] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 250.848455][ T21] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 250.889355][ T4271] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 250.907521][ T4271] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 250.923027][ T21] usb 5-1: config 0 interface 196 has no altsetting 0 [ 250.930546][ T4271] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 250.938492][ T4271] f81534: probe of 4-1:0.12 failed with error -71 [ 250.951276][ T4271] usb 4-1: USB disconnect, device number 20 [ 250.967510][T10598] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.991267][T10598] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.056189][T10598] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.2295: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.119482][ T21] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 251.136017][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.156630][ T21] usb 5-1: Product: syz [ 251.161597][ T21] usb 5-1: Manufacturer: syz [ 251.172926][ T21] usb 5-1: SerialNumber: syz [ 251.190006][ T21] usb 5-1: config 0 descriptor?? [ 251.229464][T10559] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 251.443082][T10610] tipc: Started in network mode [ 251.448108][T10610] tipc: Node identity ac14140f, cluster identity 4711 [ 251.468844][T10610] tipc: New replicast peer: 255.255.255.255 [ 251.488960][T10610] tipc: Enabled bearer , priority 10 [ 251.517105][ T21] ipheth 5-1:0.196: Unable to find endpoints [ 251.534274][ T21] usb 5-1: USB disconnect, device number 20 [ 252.081861][T10662] set_capacity_and_notify: 2 callbacks suppressed [ 252.081876][T10662] loop1: detected capacity change from 0 to 256 [ 252.142020][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2313'. [ 252.312170][T10662] FAT-fs (loop1): Directory bread(block 64) failed [ 252.349522][T10662] FAT-fs (loop1): Directory bread(block 65) failed [ 252.356897][T10662] FAT-fs (loop1): Directory bread(block 66) failed [ 252.407243][T10662] FAT-fs (loop1): Directory bread(block 67) failed [ 252.442623][T10662] FAT-fs (loop1): Directory bread(block 68) failed [ 252.462751][T10662] FAT-fs (loop1): Directory bread(block 69) failed [ 252.472931][T10662] FAT-fs (loop1): Directory bread(block 70) failed [ 252.479805][ T21] tipc: Node number set to 2886997007 [ 252.496668][T10662] FAT-fs (loop1): Directory bread(block 71) failed [ 252.535037][T10662] FAT-fs (loop1): Directory bread(block 72) failed [ 252.561232][T10662] FAT-fs (loop1): Directory bread(block 73) failed [ 252.699378][ T9744] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 252.765423][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2320'. [ 252.835073][T10653] loop3: detected capacity change from 0 to 32768 [ 252.847228][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2320'. [ 252.977250][T10699] loop6: detected capacity change from 0 to 128 [ 253.035290][T10653] JBD2: Ignoring recovery information on journal [ 253.059436][ T9744] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.073860][ T9744] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.098434][ T9744] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 253.111730][T10699] sysv_free_block: trying to free block not in datazone [ 253.122371][ T9744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.134832][ T9744] usb 5-1: config 0 descriptor?? [ 253.150876][T10653] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 253.253678][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 253.305517][ T9625] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 253.432140][T10714] loop3: detected capacity change from 0 to 2048 [ 253.502470][ T9744] usb 5-1: USB disconnect, device number 21 [ 253.595587][T10714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.653465][T10729] netlink: 884 bytes leftover after parsing attributes in process `syz.6.2332'. [ 254.278940][T10743] loop6: detected capacity change from 0 to 8192 [ 254.405500][T10743] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 254.443359][T10743] REISERFS (device loop6): using ordered data mode [ 254.484544][T10743] reiserfs: using flush barriers [ 254.571300][T10743] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.681914][T10743] REISERFS (device loop6): checking transaction log (loop6) [ 254.738578][T10743] REISERFS (device loop6): Using r5 hash to sort names [ 254.790022][T10743] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 254.848484][T10743] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 254.895874][T10743] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 254.957373][T10738] loop5: detected capacity change from 0 to 32768 [ 255.010425][T10743] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 255.036286][T10743] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 255.052968][ T150] block nbd0: Possible stuck request ffff888021818000: control (read@0,4096B). Runtime 120 seconds [ 255.067457][T10738] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2336 (10738) [ 255.172303][T10738] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 255.199560][T10738] BTRFS info (device loop5): setting nodatasum [ 255.226200][T10738] BTRFS info (device loop5): disabling tree log [ 255.278695][T10738] BTRFS info (device loop5): max_inline at 0 [ 255.315135][T10738] BTRFS info (device loop5): using free space tree [ 255.343801][T10738] BTRFS info (device loop5): has skinny extents [ 255.559954][T10760] loop3: detected capacity change from 0 to 8192 [ 255.692526][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.698939][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.721101][T10760] loop3: p1 p2 p3 [ 255.727607][T10760] loop3: partition table partially beyond EOD, truncated [ 255.799360][T10738] BTRFS info (device loop5): enabling ssd optimizations [ 255.948813][T10738] BTRFS error (device loop5): balance: invalid convert metadata profile raid10 [ 255.964657][T10760] loop3: p1 start 51379968 is beyond EOD, truncated [ 256.021846][T10760] loop3: p3 size 100663552 extends beyond EOD, truncated [ 256.036609][T10826] loop1: detected capacity change from 0 to 4096 [ 256.129852][T10826] NILFS (loop1): invalid segment: Checksum error in segment payload [ 256.142051][T10826] NILFS (loop1): trying rollback from an earlier position [ 256.262887][T10826] NILFS (loop1): recovery complete [ 256.330589][T10836] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.366793][T10838] loop6: detected capacity change from 0 to 512 [ 256.622978][T10838] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 256.669246][T10838] FAT-fs (loop6): Filesystem has been set read-only [ 256.711754][T10838] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 256.776492][T10838] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 256.981139][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 256.997352][ T9391] udevd[9391]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 257.057331][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 257.138362][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 257.279676][T10835] loop4: detected capacity change from 0 to 32768 [ 257.352641][T10835] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2353 (10835) [ 257.388489][T10858] loop5: detected capacity change from 0 to 512 [ 257.479937][T10858] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=continue,acl,,errors=continue. Quota mode: none. [ 257.566060][T10835] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 257.566704][T10852] loop3: detected capacity change from 0 to 32768 [ 257.615464][T10835] BTRFS info (device loop4): using free space tree [ 257.664808][T10835] BTRFS info (device loop4): has skinny extents [ 257.704453][T10858] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #2: block 3: comm syz.5.2362: lblock 0 mapped to illegal pblock 3 (length 1) [ 257.758601][T10852] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 257.806246][T10858] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.2362: error -117 reading directory block [ 257.833265][T10875] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #2: block 3: comm syz.5.2362: lblock 0 mapped to illegal pblock 3 (length 1) [ 257.897661][T10885] loop1: detected capacity change from 0 to 256 [ 257.983606][T10835] BTRFS info (device loop4): enabling ssd optimizations [ 257.989056][T10875] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.2362: error -117 reading directory block [ 258.030739][T10885] exfat: Deprecated parameter 'utf8' [ 258.123052][T10885] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 258.161597][ T4189] ocfs2: Unmounting device (7,3) on (node local) [ 258.873710][T10918] loop3: detected capacity change from 0 to 8 [ 259.173696][T10931] loop1: detected capacity change from 0 to 8 [ 259.237794][T10934] loop5: detected capacity change from 0 to 1024 [ 259.440245][T10939] pim6reg0: tun_chr_ioctl cmd 2147767520 [ 259.525716][ T155] hfsplus: b-tree write err: -5, ino 3 [ 259.592895][T10942] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 259.715145][T10951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2393'. [ 259.804973][T10957] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 260.154466][T10976] loop1: detected capacity change from 0 to 764 [ 260.173747][ C0] Illegal XDP return value 16128, expect packet loss! [ 260.279325][ T9743] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 260.290360][T10976] rock: directory entry would overflow storage [ 260.296646][T10976] rock: sig=0x4654, size=5, remaining=4 [ 260.344877][T10988] overlayfs: upper fs does not support tmpfile. [ 260.436327][T10990] loop4: detected capacity change from 0 to 512 [ 260.519317][ T9743] usb 7-1: Using ep0 maxpacket: 16 [ 260.540931][T10994] loop5: detected capacity change from 0 to 256 [ 260.544901][T10990] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 260.581215][T10990] EXT4-fs (loop4): Remounting filesystem read-only [ 260.588399][T10990] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2412: invalid indirect mapped block 4278190080 (level 0) [ 260.605676][T10990] EXT4-fs (loop4): Remounting filesystem read-only [ 260.613472][T10990] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2412: invalid indirect mapped block 1 (level 1) [ 260.627503][T10990] EXT4-fs (loop4): Remounting filesystem read-only [ 260.664512][T10990] EXT4-fs (loop4): 1 truncate cleaned up [ 260.710245][T10990] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 260.748185][T10994] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 260.799454][ T9743] usb 7-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 260.831969][ T9743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.859405][ T9743] usb 7-1: Product: syz [ 260.873946][ T9743] usb 7-1: Manufacturer: syz [ 260.892161][ T9743] usb 7-1: SerialNumber: syz [ 261.037701][T11004] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 261.142385][T11004] EXT4-fs (loop1): 1 truncate cleaned up [ 261.148100][T11004] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,noblock_validity,. Quota mode: none. [ 261.224422][T11013] erspan0 speed is unknown, defaulting to 1000 [ 261.239973][T11004] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.2419: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 261.249361][T11013] erspan0 speed is unknown, defaulting to 1000 [ 261.283365][T11015] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 261.310936][T11004] EXT4-fs (loop1): Remounting filesystem read-only [ 261.409170][T11004] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 261.420171][T11013] erspan0 speed is unknown, defaulting to 1000 [ 261.441829][T11004] EXT4-fs (loop1): Remounting filesystem read-only [ 261.448442][T11004] EXT4-fs warning (device loop1): ext4_rename_delete:3792: inode #2: comm syz.1.2419: Deleting old file: nlink 4, error=-117 [ 261.515019][T11013] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.625624][T11013] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 261.660184][ T9743] snd-usb-audio: probe of 7-1:222.0 failed with error -2 [ 261.725874][ T9391] udevd[9391]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.850778][ T6590] usb 7-1: USB disconnect, device number 2 [ 261.876882][T11013] erspan0 speed is unknown, defaulting to 1000 [ 261.895433][T11013] erspan0 speed is unknown, defaulting to 1000 [ 261.916054][T11013] erspan0 speed is unknown, defaulting to 1000 [ 261.930346][T11013] erspan0 speed is unknown, defaulting to 1000 [ 261.947943][T11013] erspan0 speed is unknown, defaulting to 1000 [ 261.965279][T11013] erspan0 speed is unknown, defaulting to 1000 [ 262.177378][T11020] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2425 (11020) [ 262.205448][T11020] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 262.226766][T11020] BTRFS info (device loop3): turning on sync discard [ 262.248222][T11020] BTRFS info (device loop3): force zlib compression, level 3 [ 262.272670][T11020] BTRFS info (device loop3): turning on async discard [ 262.291567][T11022] set_capacity_and_notify: 3 callbacks suppressed [ 262.291582][T11022] loop5: detected capacity change from 0 to 32768 [ 262.307039][T11020] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 262.332392][T11020] BTRFS info (device loop3): trying to use backup root at mount time [ 262.350621][T11020] BTRFS info (device loop3): using free space tree [ 262.365133][T11020] BTRFS info (device loop3): has skinny extents [ 262.462110][T11022] XFS (loop5): Mounting V5 Filesystem [ 262.478818][ T4244] BTRFS warning (device loop3): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 262.495628][T11020] BTRFS warning (device loop3): failed to read root (objectid=2): -5 [ 262.504734][ T9691] BTRFS warning (device loop3): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 262.542247][T11020] BTRFS warning (device loop3): couldn't read tree root [ 262.549209][ T9745] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 262.579598][T11020] BTRFS error (device loop3): parent transid verify failed on 5255168 wanted 5 found 7 [ 262.609506][T11020] BTRFS warning (device loop3): couldn't read tree root [ 262.633692][T11020] BTRFS info (device loop3): enabling ssd optimizations [ 262.641608][T11020] BTRFS info (device loop3): clearing free space tree [ 262.648461][T11020] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 262.659054][T11020] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 262.710126][T11020] BTRFS info (device loop3): creating free space tree [ 262.724614][T11020] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 262.772360][T11068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2431'. [ 262.796634][T11022] XFS (loop5): Ending clean mount [ 262.806841][T11022] XFS (loop5): Quotacheck needed: Please wait. [ 262.809320][T11020] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 262.909546][ T9745] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.935922][ T9745] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 262.960945][ T9745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.010223][ T9745] usb 5-1: config 0 descriptor?? [ 263.018624][T11022] XFS (loop5): Quotacheck: Done. [ 263.055527][ T9745] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 263.274804][ T9745] usb 5-1: USB disconnect, device number 22 [ 263.303464][ T5147] XFS (loop5): Unmounting Filesystem [ 263.389153][ T6590] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 263.591571][T11074] loop1: detected capacity change from 0 to 32768 [ 263.680904][ T6590] usb 7-1: Using ep0 maxpacket: 8 [ 263.865470][T11074] XFS (loop1): Mounting V5 Filesystem [ 263.874543][ T6590] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 263.892914][ T6590] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.966191][ T6590] pvrusb2: Hardware description: Terratec Grabster AV400 [ 263.971014][T11074] XFS (loop1): Ending clean mount [ 263.985952][ T6590] pvrusb2: ********** [ 263.990714][ T6590] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 264.004164][T11084] loop3: detected capacity change from 0 to 8192 [ 264.021530][ T6590] pvrusb2: Important functionality might not be entirely working. [ 264.050769][T11084] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 264.061952][T11084] REISERFS (device loop3): using ordered data mode [ 264.067925][ T6590] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 264.068699][T11084] reiserfs: using flush barriers [ 264.080813][T11084] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 264.102463][T11084] REISERFS (device loop3): checking transaction log (loop3) [ 264.105702][ T6590] pvrusb2: ********** [ 264.158365][T11074] XFS (loop1): Quotacheck needed: Please wait. [ 264.214841][ T2424] pvrusb2: Invalid write control endpoint [ 264.257093][T11084] REISERFS (device loop3): Using tea hash to sort names [ 264.273652][T11084] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 264.290676][T11074] XFS (loop1): Quotacheck: Done. [ 264.292608][ T2424] pvrusb2: Invalid write control endpoint [ 264.302847][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 264.312853][ T9742] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 264.320661][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 264.328312][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 264.351482][ T2424] pvrusb2: Device being rendered inoperable [ 264.357726][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 264.372206][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 264.384005][ T4188] XFS (loop1): Unmounting Filesystem [ 264.399842][ T2424] pvrusb2: Attached sub-driver cx25840 [ 264.405504][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 264.444979][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 264.491126][ T6590] usb 7-1: USB disconnect, device number 3 [ 264.589381][ T9742] usb 5-1: Using ep0 maxpacket: 8 [ 264.724457][ T9742] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.734959][ T9742] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.772004][ T9742] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.782346][ T9742] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.795875][ T9742] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.819297][ T9742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.845009][T11100] loop5: detected capacity change from 0 to 512 [ 264.906271][T11100] EXT4-fs (loop5): orphan cleanup on readonly fs [ 265.042083][T11100] EXT4-fs (loop5): 1 orphan inode deleted [ 265.048695][T11100] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 265.108650][T11107] loop6: detected capacity change from 0 to 256 [ 265.115335][ T9742] usb 5-1: GET_CAPABILITIES returned 0 [ 265.121097][ T9742] usbtmc 5-1:16.0: can't read capabilities [ 265.236813][T11107] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 265.372091][ T1110] usb 5-1: USB disconnect, device number 23 [ 265.515834][T11122] netlink: 'syz.6.2450': attribute type 12 has an invalid length. [ 265.584909][T11122] netlink: 'syz.6.2450': attribute type 29 has an invalid length. [ 265.629189][T11122] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2450'. [ 265.648805][T11122] netlink: 'syz.6.2450': attribute type 1 has an invalid length. [ 265.675790][T11122] netlink: 'syz.6.2450': attribute type 2 has an invalid length. [ 265.690088][T11126] netlink: 'syz.1.2454': attribute type 1 has an invalid length. [ 265.800424][T11132] loop1: detected capacity change from 0 to 16 [ 265.846469][T11132] erofs: (device loop1): mounted with root inode @ nid 36. [ 265.899605][ T6590] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 265.916004][T11132] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 265.978226][T11134] loop6: detected capacity change from 0 to 1024 [ 265.992867][T11132] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 266.027202][T11115] loop5: detected capacity change from 0 to 32768 [ 266.121931][T11115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2448 (11115) [ 266.202459][ T6590] usb 4-1: Using ep0 maxpacket: 16 [ 266.255000][T11115] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 266.279651][T11115] BTRFS info (device loop5): turning on sync discard [ 266.294573][T11115] BTRFS info (device loop5): force zlib compression, level 3 [ 266.329585][ T6590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.349759][ T6590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.361411][T11115] BTRFS info (device loop5): turning on async discard [ 266.368250][T11115] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 266.385588][ T6590] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 266.399057][T11115] BTRFS info (device loop5): trying to use backup root at mount time [ 266.424905][ T6590] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 266.434368][T11115] BTRFS info (device loop5): using free space tree [ 266.458072][ T6590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.474510][T11115] BTRFS info (device loop5): has skinny extents [ 266.506750][ T6590] usb 4-1: config 0 descriptor?? [ 266.777993][ T4236] BTRFS warning (device loop5): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 266.873805][T11115] BTRFS warning (device loop5): failed to read root (objectid=2): -5 [ 266.911784][ T9691] BTRFS warning (device loop5): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 266.981480][ T6590] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 267.000431][T11115] BTRFS warning (device loop5): couldn't read tree root [ 267.011775][T11115] BTRFS error (device loop5): parent transid verify failed on 5255168 wanted 5 found 7 [ 267.016484][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.030782][T11115] BTRFS warning (device loop5): couldn't read tree root [ 267.049437][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.056741][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.079221][ T9742] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 267.114141][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.121758][T11115] BTRFS info (device loop5): enabling ssd optimizations [ 267.139390][T11115] BTRFS info (device loop5): clearing free space tree [ 267.146257][T11115] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 267.158081][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.171551][T11115] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 267.199631][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.230198][T11115] BTRFS info (device loop5): creating free space tree [ 267.251574][T11115] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 267.257097][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.269308][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.276565][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.295068][T11115] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 267.304490][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.319238][ T9742] usb 5-1: Using ep0 maxpacket: 16 [ 267.328595][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.348860][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.394666][ T6590] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 267.439617][ T6590] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 267.483690][ T6590] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 267.535592][ T6590] microsoft 0003:045E:07DA.0016: no inputs found [ 267.555220][ T6590] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 267.599389][ T9742] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 267.644196][ T9742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.686384][ T9742] usb 5-1: Product: syz [ 267.711366][ T9742] usb 5-1: Manufacturer: syz [ 267.739056][ T9742] usb 5-1: SerialNumber: syz [ 267.760549][ T9742] r8152-cfgselector 5-1: config 0 descriptor?? [ 267.807445][T11205] loop1: detected capacity change from 0 to 2048 [ 267.872107][ T6590] usb 4-1: USB disconnect, device number 21 [ 267.892288][T11205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.059383][ T9742] r8152-cfgselector 5-1: Unknown version 0x0000 [ 268.070874][T11212] program syz.6.2484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.319619][ T9742] r8152-cfgselector 5-1: Unknown version 0x0000 [ 268.343430][ T9742] r8152-cfgselector 5-1: USB disconnect, device number 24 [ 268.520889][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2488'. [ 268.869314][T11240] loop5: detected capacity change from 0 to 256 [ 268.891766][T11239] loop1: detected capacity change from 0 to 1024 [ 268.909226][ T1110] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 269.016831][T11239] hfsplus: xattr searching failed [ 269.088713][T11246] loop6: detected capacity change from 0 to 1024 [ 269.105859][ T4236] hfsplus: bad catalog file entry [ 269.112014][ T4236] hfsplus: b-tree write err: -5, ino 3 [ 269.195017][ T1110] usb 4-1: Using ep0 maxpacket: 16 [ 269.349608][ T1110] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.391675][ T1110] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.421667][ T1110] usb 4-1: config 0 interface 0 has no altsetting 0 [ 269.436257][ T1110] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 269.456069][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.477613][ T1110] usb 4-1: config 0 descriptor?? [ 269.633520][T11264] loop5: detected capacity change from 0 to 512 [ 269.708446][T11264] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 269.776447][T11269] program syz.6.2509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.777663][T11264] EXT4-fs (loop5): 1 truncate cleaned up [ 269.827201][T11264] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,noquota,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none. [ 269.901833][T11271] loop6: detected capacity change from 0 to 512 [ 269.919522][T11264] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2508: invalid indirect mapped block 4294901760 (level 0) [ 269.975069][ T1110] hid (null): unknown global tag 0xe [ 269.995564][ T1110] hid (null): unknown global tag 0xd [ 270.013376][ T1110] hid (null): unknown global tag 0xe [ 270.025621][T11256] loop1: detected capacity change from 0 to 32768 [ 270.052432][T11264] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2508: invalid indirect mapped block 2185560079 (level 0) [ 270.145618][ T26] audit: type=1800 audit(1784813796.424:100): pid=11256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2504" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 270.193025][ T1110] usb 4-1: USB disconnect, device number 22 [ 270.234873][T11271] [ 270.237250][T11271] ====================================================== [ 270.244273][T11271] WARNING: possible circular locking dependency detected [ 270.251311][T11271] syzkaller #0 Not tainted [ 270.255729][T11271] ------------------------------------------------------ [ 270.262746][T11271] syz.6.2510/11271 is trying to acquire lock: [ 270.268817][T11271] ffff88805e56cce8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 270.277373][T11277] loop4: detected capacity change from 0 to 32768 [ 270.277741][T11271] [ 270.277741][T11271] but task is already holding lock: [ 270.277749][T11271] ffff8880602bb450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 270.300821][T11271] [ 270.300821][T11271] which lock already depends on the new lock. [ 270.300821][T11271] [ 270.311215][T11271] [ 270.311215][T11271] the existing dependency chain (in reverse order) is: [ 270.320219][T11271] [ 270.320219][T11271] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 270.328021][T11271] down_read+0x44/0x2e0 [ 270.332704][T11271] ext4_map_blocks+0x350/0x1a50 [ 270.338059][T11271] ext4_getblk+0x176/0x670 [ 270.342979][T11271] ext4_bread+0x26/0x180 [ 270.347730][T11271] ext4_quota_read+0x1ac/0x390 [ 270.353002][T11271] find_tree_dqentry+0x187/0xb30 [ 270.358443][T11271] find_tree_dqentry+0x3e8/0xb30 [ 270.363885][T11271] qtree_read_dquot+0x122/0x690 [ 270.369243][T11271] v2_read_dquot+0xc0/0x110 [ 270.374252][T11271] dquot_acquire+0x152/0x520 [ 270.379348][T11271] ext4_acquire_dquot+0x2e3/0x4a0 [ 270.384882][T11271] dqget+0x713/0xbb0 [ 270.389278][T11271] __dquot_initialize+0x324/0xd00 [ 270.394810][T11271] ext4_process_orphan+0x4c/0x2e0 [ 270.400340][T11271] ext4_orphan_cleanup+0xad8/0x1320 [ 270.406043][T11271] ext4_fill_super+0x8c65/0x93f0 [ 270.411489][T11271] mount_bdev+0x28a/0x3c0 [ 270.416326][T11271] legacy_get_tree+0xe6/0x180 [ 270.421510][T11271] vfs_get_tree+0x88/0x270 [ 270.426437][T11271] do_new_mount+0x247/0xa40 [ 270.431447][T11271] __se_sys_mount+0x2e3/0x3d0 [ 270.436630][T11271] do_syscall_64+0x4c/0xa0 [ 270.441583][T11271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.447986][T11271] [ 270.447986][T11271] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 270.456072][T11271] down_read+0x44/0x2e0 [ 270.460749][T11271] v2_read_dquot+0x4a/0x110 [ 270.465762][T11271] dquot_acquire+0x152/0x520 [ 270.470858][T11271] ext4_acquire_dquot+0x2e3/0x4a0 [ 270.476391][T11271] dqget+0x713/0xbb0 [ 270.480792][T11271] __dquot_initialize+0x324/0xd00 [ 270.486323][T11271] ext4_process_orphan+0x4c/0x2e0 [ 270.491851][T11271] ext4_orphan_cleanup+0xad8/0x1320 [ 270.497555][T11271] ext4_fill_super+0x8c65/0x93f0 [ 270.503003][T11271] mount_bdev+0x28a/0x3c0 [ 270.507838][T11271] legacy_get_tree+0xe6/0x180 [ 270.513023][T11271] vfs_get_tree+0x88/0x270 [ 270.517976][T11271] do_new_mount+0x247/0xa40 [ 270.522989][T11271] __se_sys_mount+0x2e3/0x3d0 [ 270.528173][T11271] do_syscall_64+0x4c/0xa0 [ 270.533098][T11271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.539498][T11271] [ 270.539498][T11271] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 270.547124][T11271] __lock_acquire+0x2c66/0x7b50 [ 270.552490][T11271] lock_acquire+0x19e/0x400 [ 270.557500][T11271] __mutex_lock_common+0x1e5/0x2400 [ 270.563207][T11271] mutex_lock_nested+0x17/0x20 [ 270.568480][T11271] dquot_commit+0x5a/0x410 [ 270.573401][T11271] ext4_write_dquot+0x1f0/0x360 [ 270.578760][T11271] mark_all_dquot_dirty+0x1e3/0x400 [ 270.584464][T11271] __dquot_free_space+0x7c3/0xb80 [ 270.589998][T11271] ext4_free_blocks+0x1b1b/0x24c0 [ 270.595627][T11271] ext4_ext_remove_space+0x2106/0x41a0 [ 270.601611][T11271] ext4_ext_truncate+0x182/0x230 [ 270.607078][T11271] ext4_truncate+0xa41/0x1190 [ 270.612265][T11271] ext4_evict_inode+0xb0f/0x1050 [ 270.617705][T11271] evict+0x4b6/0x8b0 [ 270.622105][T11271] ext4_orphan_cleanup+0xad8/0x1320 [ 270.627815][T11271] ext4_fill_super+0x8c65/0x93f0 [ 270.633259][T11271] mount_bdev+0x28a/0x3c0 [ 270.638096][T11271] legacy_get_tree+0xe6/0x180 [ 270.643279][T11271] vfs_get_tree+0x88/0x270 [ 270.648204][T11271] do_new_mount+0x247/0xa40 [ 270.653231][T11271] __se_sys_mount+0x2e3/0x3d0 [ 270.658417][T11271] do_syscall_64+0x4c/0xa0 [ 270.663434][T11271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.669833][T11271] [ 270.669833][T11271] other info that might help us debug this: [ 270.669833][T11271] [ 270.680044][T11271] Chain exists of: [ 270.680044][T11271] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 270.680044][T11271] [ 270.693673][T11271] Possible unsafe locking scenario: [ 270.693673][T11271] [ 270.701112][T11271] CPU0 CPU1 [ 270.706464][T11271] ---- ---- [ 270.711807][T11271] lock(&ei->i_data_sem/2); [ 270.716384][T11271] lock(&s->s_dquot.dqio_sem); [ 270.723732][T11271] lock(&ei->i_data_sem/2); [ 270.730829][T11271] lock(&dquot->dq_lock); [ 270.735228][T11271] [ 270.735228][T11271] *** DEADLOCK *** [ 270.735228][T11271] [ 270.743377][T11271] 4 locks held by syz.6.2510/11271: [ 270.748559][T11271] #0: ffff8880791360e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x200/0x970 [ 270.758649][T11271] #1: ffff888079136650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x41f/0x1050 [ 270.768137][T11271] #2: ffff8880602bb450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x994/0x1190 [ 270.777867][T11271] #3: ffffffff8c441798 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 270.787025][T11271] [ 270.787025][T11271] stack backtrace: [ 270.792940][T11271] CPU: 0 PID: 11271 Comm: syz.6.2510 Not tainted syzkaller #0 [ 270.800419][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 270.810461][T11271] Call Trace: [ 270.814277][T11271] [ 270.817198][T11271] dump_stack_lvl+0x188/0x250 [ 270.821868][T11271] ? load_image+0x410/0x410 [ 270.826361][T11271] ? show_regs_print_info+0x20/0x20 [ 270.831555][T11271] ? print_circular_bug+0x12b/0x1a0 [ 270.836749][T11271] check_noncircular+0x296/0x330 [ 270.841677][T11271] ? add_chain_block+0x9b0/0x9b0 [ 270.846627][T11271] ? lockdep_lock+0xf1/0x1f0 [ 270.851210][T11271] ? mark_lock+0x94/0x320 [ 270.855522][T11271] ? _find_first_zero_bit+0xd1/0xf0 [ 270.860710][T11271] __lock_acquire+0x2c66/0x7b50 [ 270.865554][T11271] ? __lock_acquire+0x7b50/0x7b50 [ 270.870573][T11271] ? verify_lock_unused+0x140/0x140 [ 270.875786][T11271] ? check_path+0x21/0x40 [ 270.880116][T11271] ? check_noncircular+0x189/0x330 [ 270.885236][T11271] ? add_chain_block+0x9b0/0x9b0 [ 270.890205][T11271] ? lockdep_lock+0xf1/0x1f0 [ 270.894786][T11271] lock_acquire+0x19e/0x400 [ 270.899275][T11271] ? dquot_commit+0x5a/0x410 [ 270.903854][T11271] ? __might_sleep+0xf0/0xf0 [ 270.908432][T11271] ? read_lock_is_recursive+0x10/0x10 [ 270.913798][T11271] __mutex_lock_common+0x1e5/0x2400 [ 270.918989][T11271] ? dquot_commit+0x5a/0x410 [ 270.923571][T11271] ? dquot_commit+0x5a/0x410 [ 270.928148][T11271] ? __might_sleep+0xf0/0xf0 [ 270.932733][T11271] ? mutex_lock_io_nested+0x60/0x60 [ 270.937925][T11271] mutex_lock_nested+0x17/0x20 [ 270.942676][T11271] dquot_commit+0x5a/0x410 [ 270.947097][T11271] ext4_write_dquot+0x1f0/0x360 [ 270.951935][T11271] mark_all_dquot_dirty+0x1e3/0x400 [ 270.957121][T11271] __dquot_free_space+0x7c3/0xb80 [ 270.962139][T11271] ext4_free_blocks+0x1b1b/0x24c0 [ 270.967170][T11271] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 270.974534][T11271] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 270.980590][T11271] ? ext4_inode_journal_mode+0x189/0x460 [ 270.986211][T11271] ? ext4_ext_remove_space+0x2001/0x41a0 [ 270.991834][T11271] ext4_ext_remove_space+0x2106/0x41a0 [ 270.997298][T11271] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 271.003094][T11271] ? ext4_es_remove_extent+0x29f/0x430 [ 271.008565][T11271] ext4_ext_truncate+0x182/0x230 [ 271.013488][T11271] ext4_truncate+0xa41/0x1190 [ 271.018153][T11271] ? __ext4_mark_inode_dirty+0x6c0/0x6c0 [ 271.023774][T11271] ? __ext4_mark_inode_dirty+0x4b4/0x6c0 [ 271.029393][T11271] ext4_evict_inode+0xb0f/0x1050 [ 271.034323][T11271] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 271.040231][T11271] ? do_raw_spin_unlock+0x11d/0x230 [ 271.045417][T11271] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 271.051300][T11271] evict+0x4b6/0x8b0 [ 271.055187][T11271] ? proc_nr_inodes+0x320/0x320 [ 271.060024][T11271] ? do_raw_spin_unlock+0x11d/0x230 [ 271.065214][T11271] ? _raw_spin_unlock+0x24/0x40 [ 271.070061][T11271] ? iput+0x6ea/0x880 [ 271.074034][T11271] ext4_orphan_cleanup+0xad8/0x1320 [ 271.079227][T11271] ? ext4_orphan_del+0xc90/0xc90 [ 271.084159][T11271] ? errseq_check_and_advance+0x62/0x120 [ 271.089785][T11271] ext4_fill_super+0x8c65/0x93f0 [ 271.094712][T11271] ? format_decode+0x8b1/0x1330 [ 271.099560][T11271] ? ext4_mount+0x40/0x40 [ 271.103879][T11271] ? set_blocksize+0x1f1/0x360 [ 271.108632][T11271] ? sb_set_blocksize+0xa5/0xe0 [ 271.113470][T11271] mount_bdev+0x28a/0x3c0 [ 271.117795][T11271] ? ext4_mount+0x40/0x40 [ 271.122119][T11271] legacy_get_tree+0xe6/0x180 [ 271.126790][T11271] ? ext4_errno_to_code+0x160/0x160 [ 271.131983][T11271] vfs_get_tree+0x88/0x270 [ 271.136394][T11271] do_new_mount+0x247/0xa40 [ 271.140889][T11271] __se_sys_mount+0x2e3/0x3d0 [ 271.145583][T11271] ? __x64_sys_mount+0xc0/0xc0 [ 271.150335][T11271] ? lockdep_hardirqs_on+0x94/0x140 [ 271.155633][T11271] ? __x64_sys_mount+0x1c/0xc0 [ 271.160401][T11271] do_syscall_64+0x4c/0xa0 [ 271.164830][T11271] ? clear_bhb_loop+0x30/0x80 [ 271.169492][T11271] ? clear_bhb_loop+0x30/0x80 [ 271.174156][T11271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.180036][T11271] RIP: 0033:0x7f600384210a [ 271.184479][T11271] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.204072][T11271] RSP: 002b:00007f6001a98e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 271.212476][T11271] RAX: ffffffffffffffda RBX: 00007f6001a98ee0 RCX: 00007f600384210a [ 271.220457][T11271] RDX: 0000200000000040 RSI: 0000200000000200 RDI: 00007f6001a98ea0 [ 271.228417][T11271] RBP: 0000200000000040 R08: 00007f6001a98ee0 R09: 0000000003000000 [ 271.236380][T11271] R10: 0000000003000000 R11: 0000000000000246 R12: 0000200000000200 [ 271.244340][T11271] R13: 00007f6001a98ea0 R14: 0000000000000521 R15: 0000200000000600 [ 271.252305][T11271] [ 271.261129][T11271] EXT4-fs (loop6): 1 orphan inode deleted [ 271.275250][T11271] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 271.283127][T11264] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #13: comm syz.5.2508: corrupted inode contents [ 271.297466][T11271] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.340136][T11277] XFS (loop4): Mounting V5 Filesystem [ 271.350466][T11271] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 271.389990][T11277] XFS (loop4): Ending clean mount [ 271.426046][T11264] EXT4-fs error (device loop5): ext4_dirty_inode:6077: inode #13: comm syz.5.2508: mark_inode_dirty error [ 271.440097][ T4195] XFS (loop4): Unmounting Filesystem [ 271.485263][T11264] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2508: invalid indirect mapped block 65535 (level 2) [ 271.519990][T11264] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #13: comm syz.5.2508: corrupted inode contents [ 271.532156][T11264] EXT4-fs error (device loop5): ext4_truncate:4286: inode #13: comm syz.5.2508: mark_inode_dirty error [ 271.552301][T11264] EXT4-fs error (device loop5): ext4_evict_inode:295: comm syz.5.2508: couldn't truncate inode 13 (err -117) [ 274.680574][ T3557] udevd[3557]: worker [4759] /devices/virtual/block/nbd0 is taking a long time