last executing test programs: 3m17.443023273s ago: executing program 3 (id=33): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) 3m17.212710216s ago: executing program 3 (id=35): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 3m16.535451106s ago: executing program 3 (id=37): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7, @vifc_lcl_addr=@local, @multicast1}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x8, 0x9, @vifc_lcl_addr=@remote, @rand_addr=0x64010100}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000008c0)=0x4, 0x4) 3m16.212706421s ago: executing program 3 (id=40): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x808, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f0000000500)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1c0) getdents(r0, 0xfffffffffffffffd, 0x58) 3m15.521122961s ago: executing program 3 (id=43): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setfsgid(0xffffffffffffffff) 3m14.457032367s ago: executing program 3 (id=50): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"}) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 3m14.006439744s ago: executing program 32 (id=50): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "30af0128ffffb70800000000000000ff7800"}) r1 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 2m23.498653032s ago: executing program 0 (id=450): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x2, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x400, 0x1003, 0x8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800]}) 2m23.134637028s ago: executing program 0 (id=453): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)=""/162, 0x38}, {0x0}], 0x2}, 0x9}], 0x2, 0x2102, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x1) 2m22.637578055s ago: executing program 0 (id=466): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 2m22.196517522s ago: executing program 0 (id=470): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x3, 0x51e, &(0x7f0000000680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') stat(&(0x7f0000000400)='./file2\x00', 0x0) 2m21.027939679s ago: executing program 0 (id=471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2m20.30595877s ago: executing program 0 (id=476): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x9, @mcast1}, r1}}, 0x48) 2m19.764383518s ago: executing program 33 (id=476): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x9, @mcast1}, r1}}, 0x48) 52.683826539s ago: executing program 5 (id=1133): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1000c090) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 52.435727612s ago: executing program 5 (id=1136): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27) 52.242727995s ago: executing program 5 (id=1137): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) 51.952327439s ago: executing program 5 (id=1140): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 51.529525826s ago: executing program 5 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01050000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 50.919728015s ago: executing program 5 (id=1150): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ptype\x00') read$FUSE(r0, &(0x7f0000006480)={0x2020}, 0x2020) preadv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) 50.57529657s ago: executing program 34 (id=1150): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ptype\x00') read$FUSE(r0, &(0x7f0000006480)={0x2020}, 0x2020) preadv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000016c0)={0x2020}, 0x2020) 22.119440072s ago: executing program 1 (id=1336): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xff8d}], 0x600, 0x0, 0x0) 21.55810775s ago: executing program 1 (id=1338): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c00078008000600000000002400078008000500000000000800060000000000080005000000000008000600000000003c0007800c000580"], 0x108}}, 0x0) 20.998877898s ago: executing program 1 (id=1341): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000800)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0xf, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 20.659626333s ago: executing program 1 (id=1342): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000002c0)={[{@errors_remount}, {@namecase}, {@gid}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@errors_continue}, {@gid}, {@sys_tz}, {@umask={'umask', 0x3d, 0x3ff}}, {@dmask}]}, 0x1, 0x1542, &(0x7f00000037c0)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000200)=""/52, 0x34) 19.964163004s ago: executing program 1 (id=1345): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setregid(0xee01, 0xffffffffffffffff) 18.903756079s ago: executing program 1 (id=1351): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 18.229989139s ago: executing program 35 (id=1351): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 14.482827995s ago: executing program 7 (id=1378): syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYBLOB="010000006e6963622c7365737369056e08003030303030303030303030303030303030ff352c00d7808e6e236432d3fbb4968c752de87f59ab926797bdff06d621dc952f80d8238fe78cb47f676e865510ab9302ec401b423065c52385212fef316368d445d7a8e517d1f18a5ec3225e06365c673bddb7c06002fbfb2683d1883640b97678eb7a95ae6d59fd14337c5785207ce9fdee8308a9f1e9fac5eea67c450f75d119f6073151f80c62dd7b86ad45b323b28b2cd5986ea91a4c067114dfdebc0aee4841c8099064d618b40c3e988e8333f9e9b9233638285c413478beb765aeeabd11bf093dad5345792c69d6dc5c71e9c1b21075eb4103edf84cc4dc5b8836c8cea780a7398a19226c0e7aa456de72560deddd4af6984a6ebff75f8fa8469c7c1f5af9"], 0x2, 0xc47, &(0x7f0000001c40)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 13.887895794s ago: executing program 7 (id=1382): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000040), 0x0, 0x20000000}, 0x48090) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 13.558834028s ago: executing program 7 (id=1384): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8985b0808aa78", 0x14}], 0x1}, 0x0) 11.813727085s ago: executing program 4 (id=1391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 11.673097627s ago: executing program 4 (id=1392): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000001c0)=@newqdisc={0x148, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x8000) 11.104246045s ago: executing program 7 (id=1395): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@norecovery}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) 11.086296755s ago: executing program 4 (id=1396): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x500, 0x0) dup3(r1, r0, 0x0) 10.852536799s ago: executing program 4 (id=1397): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 9.802395704s ago: executing program 7 (id=1404): r0 = io_uring_setup(0x175c, &(0x7f000009df80)={0x0, 0x0, 0x0, 0x200, 0x10}) r1 = socket$phonet(0x23, 0x2, 0x1) read(r1, &(0x7f00000000c0)=""/174, 0xae) close_range(r0, 0xffffffffffffffff, 0x0) 9.670169006s ago: executing program 4 (id=1406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000000008000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r0}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 8.667624051s ago: executing program 4 (id=1410): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x5, 0x2, 0x7, 0x2020, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.144446069s ago: executing program 36 (id=1410): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x5, 0x2, 0x7, 0x2020, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.811179763s ago: executing program 6 (id=1428): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 3.551333097s ago: executing program 6 (id=1430): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.39696741s ago: executing program 7 (id=1431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5d3bf4aa}, @TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x71}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x3}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}]}}]}, 0x70}}, 0x0) 3.39631899s ago: executing program 2 (id=1432): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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") io_setup(0x9, &(0x7f00000001c0)=0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x18, 0x8, 0x5, r1, 0x0}]) 2.873279667s ago: executing program 37 (id=1431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5d3bf4aa}, @TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x71}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x3}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}]}}]}, 0x70}}, 0x0) 2.858095127s ago: executing program 6 (id=1434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000000000f5000040"]) 2.562692712s ago: executing program 6 (id=1435): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0xbee9, 0x6070, 0x0, 0x0, 0xb, 0x7}}, @TCA_CHOKE_STAB={0x104, 0x2, "8aec66424438d0e3c90c0e2d91d3b097a8ed038b05e00de189f43516fc747cc47ee406b0200bd79e8b4e733e1ef880d94fa5ac7d9040d407b98d930cee01f2ab1daeb92726648d8c35d2be4219081974944ccf1895fab6403ff52b8eb4f93ac13a17e0598e46cff7f765909fd35a2e1c5e7f71e65973683ad0ebf0598230145059a6eb8fbf4987f6ba436c1b6669d07dd624506c1df71ec9bb06cff97f1d1c58e44b96f4b68409f73884af677d2548b6846d23d495e0deb264ed1f395233011aeacbbbcd63918ec99c14ea0f5044fb0302c0cf541d9d81bfe7efba2e2653c881b02e565a730960433f7e82dc389715c1d7f898e832af2b7bfabf985f100aa6f3"}]}}]}, 0x154}}, 0x0) 2.445815423s ago: executing program 2 (id=1436): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x2, 0xc38, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/82, 0x52) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.944696261s ago: executing program 2 (id=1437): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) 455.543263ms ago: executing program 6 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xc2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x5e}]}]}, 0x30}}, 0x0) 408.159914ms ago: executing program 2 (id=1439): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) splice(r0, 0x0, r0, &(0x7f0000000240)=0x7ff, 0xf5, 0x4) 233.168626ms ago: executing program 6 (id=1440): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0xa, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 194.625847ms ago: executing program 2 (id=1441): io_uring_setup(0xc8e, &(0x7f0000000380)={0x0, 0x0, 0x80, 0xfffffffc, 0x361}) r0 = io_uring_setup(0x3d66, &(0x7f0000000400)={0x0, 0x1cb5, 0x2, 0x1, 0x7e}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r0, 0x1283, 0x0, 0x1f, 0x0, 0xfffffe2e) 0s ago: executing program 2 (id=1442): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) shutdown(r0, 0x1) syz_emit_vhci(&(0x7f0000003980)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc8}}}, 0x6) kernel console output (not intermixed with test programs): t to 512 [ 165.885647][ T4253] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 165.886591][ T6230] usb 41-1: recv xbuf, 0 [ 165.895754][ T4253] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 165.919678][ T4253] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 165.929551][ T4344] vhci_hcd: stop threads [ 165.939448][ T4344] vhci_hcd: release socket [ 165.951638][ T4344] vhci_hcd: disconnect device [ 165.958442][ T4253] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.002956][ T4490] vhci_hcd: vhci_device speed not set [ 166.003228][ T4253] usb 5-1: USB disconnect, device number 5 [ 166.148274][ T4253] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 166.226875][ T4253] ftdi_sio 5-1:0.0: device disconnected [ 166.305458][ T4269] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 166.570735][ T5559] gspca_sunplus: reg_r err -71 [ 166.575628][ T5559] sunplus: probe of 7-1:0.0 failed with error -71 [ 166.603101][ T5559] usb 7-1: USB disconnect, device number 2 [ 166.603725][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.584'. [ 167.934225][ T6316] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 168.009807][ T6290] loop2: detected capacity change from 0 to 32768 [ 168.039546][ T6290] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 168.068456][ T6290] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 168.163000][ T4490] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 168.221791][ T6325] loop1: detected capacity change from 0 to 256 [ 168.304336][ T4256] ocfs2: Unmounting device (7,2) on (node local) [ 168.389453][ T4490] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 168.428294][ T4490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.461046][ T4490] usb 5-1: config 0 descriptor?? [ 168.497373][ T4490] cp210x 5-1:0.0: cp210x converter detected [ 168.542483][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.623710][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.630922][ T6330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.703648][ T6335] netlink: 'syz.1.605': attribute type 6 has an invalid length. [ 168.889059][ T4490] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 168.924329][ T4490] usb 5-1: cp210x converter now attached to ttyUSB0 [ 169.125929][ T4490] usb 5-1: USB disconnect, device number 6 [ 169.159341][ T4490] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 169.172329][ T4490] cp210x 5-1:0.0: device disconnected [ 169.200264][ T6342] loop1: detected capacity change from 0 to 4096 [ 169.238530][ T6348] loop2: detected capacity change from 0 to 8 [ 169.267842][ T6342] NILFS (loop1): invalid segment: Checksum error in segment payload [ 169.322421][ T6342] NILFS (loop1): trying rollback from an earlier position [ 169.420160][ T6342] NILFS (loop1): recovery complete [ 169.461466][ T6351] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.418241][ T6376] loop5: detected capacity change from 0 to 512 [ 170.441109][ T6378] loop1: detected capacity change from 0 to 512 [ 170.465021][ T6376] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 170.506756][ T6376] EXT4-fs (loop5): invalid journal inode [ 170.515171][ T6378] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802c198, mo2=0002] [ 170.531061][ T6376] EXT4-fs (loop5): can't get journal size [ 170.587532][ T5557] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 170.621203][ T6378] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.621: inode #1: comm syz.1.621: iget: illegal inode # [ 170.690759][ T6376] EXT4-fs (loop5): 1 truncate cleaned up [ 170.718833][ T6378] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.621: error while reading EA inode 1 err=-117 [ 170.739615][ T6376] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 170.749037][ T6378] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.621: inode #1: comm syz.1.621: iget: illegal inode # [ 170.785129][ T5557] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 170.799091][ T6378] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.621: error while reading EA inode 1 err=-117 [ 170.821000][ T5557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.860188][ T6378] EXT4-fs (loop1): 1 orphan inode deleted [ 170.873857][ T6378] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 170.887937][ T5557] usb 5-1: config 0 descriptor?? [ 170.948690][ T5557] cp210x 5-1:0.0: cp210x converter detected [ 171.095404][ T4544] EXT4-fs (loop5): unmounting filesystem. [ 171.230609][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 171.348439][ T5557] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 171.366717][ T5557] usb 5-1: cp210x converter now attached to ttyUSB0 [ 171.567247][ T127] usb 5-1: USB disconnect, device number 7 [ 171.581604][ T127] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 171.619579][ T127] cp210x 5-1:0.0: device disconnected [ 171.986407][ T6416] tap0: tun_chr_ioctl cmd 2147767507 [ 172.285516][ T6426] loop6: detected capacity change from 0 to 64 [ 172.408439][ T6424] loop5: detected capacity change from 0 to 4096 [ 172.483928][ T6424] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 172.519795][ T6424] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 172.630236][ T6424] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 172.724505][ T6424] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 172.763969][ T6424] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 172.841076][ T6424] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 172.872194][ T6424] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 172.969999][ T6424] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 172.989089][ T6424] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 173.079659][ T6424] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 173.130002][ T6424] ntfs: volume version 3.1. [ 173.415034][ T6421] loop2: detected capacity change from 0 to 32768 [ 173.460721][ T6421] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.634 (6421) [ 173.533660][ T6421] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 173.572982][ T6421] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 173.607092][ T6421] BTRFS info (device loop2): using free space tree [ 173.730859][ T6435] loop4: detected capacity change from 0 to 32768 [ 173.872663][ T6435] XFS (loop4): Mounting V5 Filesystem [ 173.957390][ T6435] XFS (loop4): Ending clean mount [ 174.041597][ T6421] BTRFS info (device loop2): enabling ssd optimizations [ 174.310307][ T4263] XFS (loop4): Unmounting Filesystem [ 174.438495][ T6496] loop6: detected capacity change from 0 to 8 [ 174.447798][ T4256] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 174.629719][ T5219] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.145406][ T6502] loop1: detected capacity change from 0 to 16 [ 175.224513][ T6502] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.250754][ T6506] input: syz1 as /devices/virtual/input/input17 [ 175.591645][ T6493] loop5: detected capacity change from 0 to 32768 [ 175.634253][ T6514] program syz.6.658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.726340][ T6493] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 175.921034][ T6523] loop6: detected capacity change from 0 to 512 [ 175.966614][ T6523] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 175.989210][ T4544] (syz-executor,4544,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 176.041593][ T6523] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.660: bad orphan inode 131083 [ 176.080052][ T4253] kernel read not supported for file /dsp1 (pid: 4253 comm: kworker/1:3) [ 176.112477][ T6523] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 176.154464][ T4544] ocfs2: Unmounting device (7,5) on (node local) [ 176.390098][ T5897] EXT4-fs (loop6): unmounting filesystem. [ 176.664690][ T6535] loop6: detected capacity change from 0 to 1024 [ 176.709190][ T6532] loop2: detected capacity change from 0 to 8192 [ 176.803344][ T6532] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.836750][ T6511] loop4: detected capacity change from 0 to 32768 [ 176.867809][ T6532] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 176.903570][ T6538] loop5: detected capacity change from 0 to 4096 [ 176.917125][ T6511] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.656 (6511) [ 176.923083][ T6532] REISERFS (device loop2): using ordered data mode [ 176.963014][ T6532] reiserfs: using flush barriers [ 176.970003][ T9] hfsplus: b-tree write err: -5, ino 4 [ 177.016017][ T6532] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.085285][ T6511] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.091985][ T6542] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.158732][ T6511] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 177.163645][ T6532] REISERFS (device loop2): checking transaction log (loop2) [ 177.225915][ T6511] BTRFS info (device loop4): setting nodatacow, compression disabled [ 177.255076][ T6532] REISERFS (device loop2): Using r5 hash to sort names [ 177.285863][ T6532] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 177.295149][ T6511] BTRFS info (device loop4): setting datacow [ 177.301189][ T6511] BTRFS info (device loop4): doing ref verification [ 177.374032][ T6511] BTRFS info (device loop4): force clearing of disk cache [ 177.423590][ T6511] BTRFS info (device loop4): turning off barriers [ 177.436886][ T6525] loop1: detected capacity change from 0 to 32768 [ 177.453162][ T6511] BTRFS info (device loop4): turning on flush-on-commit [ 177.473777][ T6511] BTRFS info (device loop4): turning on sync discard [ 177.511843][ T6511] BTRFS info (device loop4): using free space tree [ 177.573586][ T6525] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 177.911174][ T4251] ocfs2: Unmounting device (7,1) on (node local) [ 177.981915][ T6511] BTRFS info (device loop4): enabling ssd optimizations [ 178.036560][ T6511] BTRFS info (device loop4): rebuilding free space tree [ 178.218034][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 178.218050][ T26] audit: type=1800 audit(1747750115.502:1008): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.656" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 178.578798][ T4263] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 178.773229][ T6591] loop5: detected capacity change from 0 to 2048 [ 178.796853][ T4408] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (4408) [ 178.804132][ T6591] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 178.807033][ T6591] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 178.807063][ T6591] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 178.807078][ T6591] UDF-fs: Scanning with blocksize 512 failed [ 178.845762][ T6591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.186004][ T6599] loop2: detected capacity change from 0 to 16 [ 179.205046][ T6599] erofs: (device loop2): mounted with root inode @ nid 36. [ 179.699073][ T5557] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 179.769011][ T6616] loop1: detected capacity change from 0 to 64 [ 179.877134][ T5557] usb 6-1: Using ep0 maxpacket: 32 [ 179.884169][ T5557] usb 6-1: config 0 interface 0 has no altsetting 0 [ 179.911139][ T5557] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 179.946457][ T5557] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.964664][ T5557] usb 6-1: Product: syz [ 179.993200][ T5557] usb 6-1: Manufacturer: syz [ 180.005654][ T5557] usb 6-1: SerialNumber: syz [ 180.026249][ T5557] usb 6-1: config 0 descriptor?? [ 180.438570][ T5557] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 180.582754][ T6614] loop6: detected capacity change from 0 to 32768 [ 180.657893][ T6618] loop2: detected capacity change from 0 to 32768 [ 180.688955][ T4574] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 180.712472][ T6614] XFS (loop6): Mounting V5 Filesystem [ 180.735559][ T6618] XFS (loop2): Mounting V5 Filesystem [ 180.829025][ T6618] XFS (loop2): Ending clean mount [ 180.836344][ T6618] XFS (loop2): Quotacheck needed: Please wait. [ 180.838801][ T5557] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 180.865533][ T6625] loop1: detected capacity change from 0 to 32768 [ 180.881693][ T5557] usb 6-1: USB disconnect, device number 3 [ 180.882974][ T6614] XFS (loop6): Ending clean mount [ 180.910827][ T4574] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 180.948132][ T4574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.964240][ T4574] usb 5-1: Product: syz [ 180.969140][ T4574] usb 5-1: Manufacturer: syz [ 180.973894][ T4574] usb 5-1: SerialNumber: syz [ 180.985303][ T4574] usb 5-1: config 0 descriptor?? [ 180.987284][ T6625] XFS (loop1): Mounting V5 Filesystem [ 180.997352][ T6614] XFS (loop6): Quotacheck needed: Please wait. [ 181.038947][ T6618] XFS (loop2): Quotacheck: Done. [ 181.148707][ T6614] XFS (loop6): Quotacheck: Done. [ 181.268230][ T6625] XFS (loop1): Ending clean mount [ 181.285249][ T6625] XFS (loop1): Quotacheck needed: Please wait. [ 181.351462][ T6625] XFS (loop1): Quotacheck: Done. [ 181.366708][ T5897] XFS (loop6): Unmounting Filesystem [ 181.374816][ T4256] XFS (loop2): Unmounting Filesystem [ 181.410308][ T4574] airspy 5-1:0.0: Board ID: 00 [ 181.419258][ T4574] airspy 5-1:0.0: Firmware version: [ 181.431824][ T6625] XFS (loop1): User initiated shutdown received. [ 181.462777][ T6625] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 181.487738][ T6625] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 181.604780][ T4251] XFS (loop1): Unmounting Filesystem [ 181.644954][ T6656] loop5: detected capacity change from 0 to 512 [ 181.737425][ T6656] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802c198, mo2=0002] [ 181.770112][ T6656] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.691: inode #1: comm syz.5.691: iget: illegal inode # [ 181.801334][ T6656] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.691: error while reading EA inode 1 err=-117 [ 181.816906][ T4574] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 181.889509][ T4574] airspy 5-1:0.0: Registered as swradio24 [ 181.895760][ T4574] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 181.927085][ T6656] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.691: inode #1: comm syz.5.691: iget: illegal inode # [ 181.940050][ T4574] usb 5-1: USB disconnect, device number 8 [ 182.092206][ T6656] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.691: error while reading EA inode 1 err=-117 [ 182.136233][ T6656] EXT4-fs (loop5): 1 orphan inode deleted [ 182.142037][ T6656] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 182.331454][ T4544] EXT4-fs (loop5): unmounting filesystem. [ 182.744053][ T6660] loop6: detected capacity change from 0 to 32768 [ 182.916950][ T6681] loop4: detected capacity change from 0 to 1024 [ 182.993884][ T6681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 183.213775][ T6681] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 183.273198][ T6681] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 183.285589][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 183.317443][ T6681] EXT4-fs (loop4): This should not happen!! Data will be lost [ 183.317443][ T6681] [ 183.345098][ T6681] EXT4-fs (loop4): Total free blocks count 0 [ 183.359653][ T6681] EXT4-fs (loop4): Free/Dirty block details [ 183.390717][ T6681] EXT4-fs (loop4): free_blocks=68451041280 [ 183.405437][ T6681] EXT4-fs (loop4): dirty_blocks=16 [ 183.410686][ T6681] EXT4-fs (loop4): Block reservation details [ 183.453985][ T6681] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 183.635231][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 183.885501][ T6708] loop5: detected capacity change from 0 to 512 [ 183.949916][ T6708] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 184.025884][ T6708] EXT4-fs (loop5): orphan cleanup on readonly fs [ 184.092258][ T6708] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.705: inode #255: comm syz.5.705: iget: illegal inode # [ 184.188939][ T6716] loop2: detected capacity change from 0 to 1024 [ 184.251134][ T26] audit: type=1800 audit(1747750121.587:1009): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.710" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 184.314406][ T6708] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.705: error while reading EA inode 255 err=-117 [ 184.419044][ T6708] EXT4-fs (loop5): 1 orphan inode deleted [ 184.424863][ T6708] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 184.554924][ T6708] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.5.705: path (unknown): bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 184.671214][ T4544] EXT4-fs (loop5): unmounting filesystem. [ 184.740642][ T6725] loop2: detected capacity change from 0 to 8192 [ 184.813096][ T26] audit: type=1804 audit(1747750122.151:1010): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.711" name="/newroot/141/file1/bus" dev="loop2" ino=1048630 res=1 errno=0 [ 184.917096][ T26] audit: type=1800 audit(1747750122.181:1011): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.711" name="bus" dev="loop2" ino=1048630 res=0 errno=0 [ 185.418113][ T6738] loop1: detected capacity change from 0 to 4096 [ 185.475526][ T6738] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 185.528533][ T6742] loop2: detected capacity change from 0 to 1024 [ 185.594726][ T6742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.175633][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 186.192949][ T6732] loop5: detected capacity change from 0 to 32768 [ 186.294966][ T26] audit: type=1800 audit(1747750123.652:1012): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.714" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 186.380945][ T6732] syz.5.714: attempt to access beyond end of device [ 186.380945][ T6732] loop5: rw=34817, sector=4680064, nr_sectors = 120 limit=32768 [ 186.520144][ T107] blkno = 8ed30, nblocks = f [ 186.566422][ T107] ERROR: (device loop5): dbFree: block to be freed is outside the map [ 186.566422][ T107] [ 186.589518][ T107] ERROR: (device loop5): remounting filesystem as read-only [ 187.443788][ T6783] loop2: detected capacity change from 0 to 8 [ 187.984682][ T6793] loop2: detected capacity change from 0 to 4096 [ 188.021541][ T6793] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 188.109829][ T6773] loop6: detected capacity change from 0 to 32768 [ 188.149458][ T6773] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.732 (6773) [ 188.163352][ T6793] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 188.235161][ T6773] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.288871][ T6773] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 188.327160][ T6773] BTRFS info (device loop6): max_inline at 0 [ 188.359146][ T6773] BTRFS info (device loop6): enabling disk space caching [ 188.419888][ T6773] BTRFS info (device loop6): turning off barriers [ 188.469485][ T6773] BTRFS info (device loop6): turning on flush-on-commit [ 188.531070][ T6773] BTRFS info (device loop6): doing ref verification [ 188.537758][ T6773] BTRFS info (device loop6): force clearing of disk cache [ 188.590223][ T6773] BTRFS info (device loop6): enabling ssd optimizations [ 188.627070][ T6773] BTRFS info (device loop6): max_inline at 4096 [ 188.678692][ T6773] BTRFS info (device loop6): disk space caching is enabled [ 188.986103][ T6773] BTRFS info (device loop6): rebuilding free space tree [ 189.042019][ T6773] BTRFS info (device loop6): disabling free space tree [ 189.096005][ T6773] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 189.147342][ T6773] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.348259][ T6856] Bluetooth: MGMT ver 1.22 [ 189.396716][ T26] audit: type=1800 audit(1747750126.770:1013): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.732" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 189.828082][ T5897] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.427493][ T6842] loop1: detected capacity change from 0 to 40427 [ 190.471208][ T6842] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 190.497014][ T6842] F2FS-fs (loop1): invalid crc value [ 190.551949][ T6842] F2FS-fs (loop1): Found nat_bits in checkpoint [ 190.621791][ T6861] loop4: detected capacity change from 0 to 32768 [ 190.749035][ T6842] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 190.934997][ T6842] syz.1.748: attempt to access beyond end of device [ 190.934997][ T6842] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 191.262356][ T4251] syz-executor: attempt to access beyond end of device [ 191.262356][ T4251] loop1: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 192.529301][ T6941] raw_sendmsg: syz.6.779 forgot to set AF_INET. Fix it! [ 192.542649][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.780'. [ 192.589560][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.780'. [ 192.641515][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.780'. [ 192.678682][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.780'. [ 192.719938][ T6940] netlink: 'syz.5.780': attribute type 6 has an invalid length. [ 192.801571][ T6948] loop2: detected capacity change from 0 to 764 [ 193.115893][ T6955] loop5: detected capacity change from 0 to 1024 [ 193.187844][ T6955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.755110][ T6969] loop1: detected capacity change from 0 to 8192 [ 193.766832][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.773163][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.839133][ T6969] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 193.970416][ T6969] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 194.024660][ T6969] REISERFS (device loop1): using ordered data mode [ 194.031284][ T6969] reiserfs: using flush barriers [ 194.060870][ T6969] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 194.078051][ T6967] loop4: detected capacity change from 0 to 32768 [ 194.116320][ T6969] REISERFS (device loop1): checking transaction log (loop1) [ 194.134334][ T6967] JBD2: Ignoring recovery information on journal [ 194.159819][ T6986] loop6: detected capacity change from 0 to 2048 [ 194.183228][ T6969] REISERFS (device loop1): Using r5 hash to sort names [ 194.189490][ T6986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.191599][ T6969] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 194.240647][ T6967] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 194.431230][ T6995] loop5: detected capacity change from 0 to 64 [ 194.463501][ T6967] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74) [ 194.594258][ T6967] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 194.687091][ T6967] OCFS2: File system is now read-only. [ 194.781186][ T6967] (syz.4.790,6967,1):ocfs2_search_one_group:1684 ERROR: status = -30 [ 194.873974][ T7002] loop5: detected capacity change from 0 to 512 [ 194.904098][ T7002] EXT4-fs: Ignoring removed oldalloc option [ 194.913715][ T6967] (syz.4.790,6967,1):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 195.008871][ T7002] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.801: Parent and EA inode have the same ino 15 [ 195.116225][ T6967] (syz.4.790,6967,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 195.145294][ T7002] EXT4-fs (loop5): Remounting filesystem read-only [ 195.155352][ T6967] (syz.4.790,6967,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 195.195755][ T6967] (syz.4.790,6967,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 195.238901][ T7002] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.801: Parent and EA inode have the same ino 15 [ 195.259919][ T6967] (syz.4.790,6967,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 195.319588][ T6967] (syz.4.790,6967,0):ocfs2_symlink:1941 ERROR: status = -30 [ 195.327725][ T6967] (syz.4.790,6967,0):ocfs2_symlink:2065 ERROR: status = -30 [ 195.384384][ T7002] EXT4-fs (loop5): Remounting filesystem read-only [ 195.395870][ T7010] loop6: detected capacity change from 0 to 4096 [ 195.408455][ T7002] EXT4-fs (loop5): 1 orphan inode deleted [ 195.417529][ T7002] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 195.496007][ T7015] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.538980][ T26] audit: type=1800 audit(1747750132.937:1014): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.801" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 195.540210][ T7002] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.801: deleted inode referenced: 15 [ 195.723854][ T7002] EXT4-fs (loop5): Remounting filesystem read-only [ 195.798869][ T7019] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 524288 [ 195.816046][ T4263] ocfs2: Unmounting device (7,4) on (node local) [ 195.858238][ T7019] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=15) [ 195.947513][ T7019] Remounting filesystem read-only [ 195.972939][ T7019] NILFS (loop6): error -5 truncating bmap (ino=15) [ 196.012355][ T7010] syz.6.803 (7010) used greatest stack depth: 18336 bytes left [ 196.052637][ T4544] EXT4-fs (loop5): unmounting filesystem. [ 196.244815][ T5897] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 196.529541][ T7032] loop6: detected capacity change from 0 to 2048 [ 196.573373][ T7034] loop4: detected capacity change from 0 to 2048 [ 196.623638][ T7032] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.654104][ T7034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.773031][ T7034] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 196.812971][ T7034] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 196.874697][ T7034] EXT4-fs (loop4): This should not happen!! Data will be lost [ 196.874697][ T7034] [ 196.951814][ T7034] EXT4-fs (loop4): Total free blocks count 0 [ 196.958345][ T7014] loop1: detected capacity change from 0 to 40427 [ 197.026500][ T7014] F2FS-fs (loop1): invalid crc value [ 197.059157][ T7014] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.079917][ T7034] EXT4-fs (loop4): Free/Dirty block details [ 197.127895][ T7034] EXT4-fs (loop4): free_blocks=2415919504 [ 197.172726][ T7034] EXT4-fs (loop4): dirty_blocks=48 [ 197.187833][ T7034] EXT4-fs (loop4): Block reservation details [ 197.223162][ T7034] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 197.251481][ T7044] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 197.297096][ T7014] F2FS-fs (loop1): Start checkpoint disabled! [ 197.340442][ T7014] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 197.631416][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.814'. [ 197.640473][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 197.683833][ T7061] loop6: detected capacity change from 0 to 16 [ 197.716979][ T7061] erofs: (device loop6): mounted with root inode @ nid 36. [ 197.724407][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.813'. [ 197.779840][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 197.836431][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.813'. [ 197.897342][ T7059] netlink: 'syz.2.813': attribute type 6 has an invalid length. [ 197.926631][ T5897] erofs: (device loop6): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 197.961992][ T4316] kworker/u4:6: attempt to access beyond end of device [ 197.961992][ T4316] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 197.967944][ T5897] erofs: (device loop6): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 198.292723][ T7076] loop4: detected capacity change from 0 to 128 [ 198.341053][ T7076] EXT4-fs: Ignoring removed nobh option [ 198.409444][ T7076] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 198.438264][ T7076] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.695757][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 199.234911][ T7073] loop2: detected capacity change from 0 to 32768 [ 199.294793][ T7073] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 199.747272][ T4408] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 199.878908][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.837'. [ 200.220000][ T7128] loop4: detected capacity change from 0 to 4096 [ 200.315947][ T7134] loop1: detected capacity change from 0 to 256 [ 200.326281][ T7136] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.455314][ T7138] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 524288 [ 200.523378][ T7138] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 200.584298][ T7138] Remounting filesystem read-only [ 200.589389][ T7138] NILFS (loop4): error -5 truncating bmap (ino=15) [ 200.603841][ T4295] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 200.779458][ T4263] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 200.804419][ T4295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.835842][ T4295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.880921][ T4295] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 200.934063][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 200.940189][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 200.954120][ T4295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.968496][ T4295] usb 7-1: config 0 descriptor?? [ 201.321073][ T7163] use of bytesused == 0 is deprecated and will be removed in the future, [ 201.360390][ T7163] use the actual size instead. [ 201.385115][ T4295] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 201.413769][ T4295] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 201.547905][ T7172] netlink: 'syz.2.855': attribute type 5 has an invalid length. [ 201.585314][ T4295] cp2112 0003:10C4:EA90.0008: error requesting version [ 201.607032][ T4295] cp2112: probe of 0003:10C4:EA90.0008 failed with error -71 [ 201.645748][ T4295] usb 7-1: USB disconnect, device number 3 [ 201.925991][ T7174] fido_id[7174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 202.029728][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 202.105492][ T7182] loop4: detected capacity change from 0 to 8192 [ 202.166192][ T7182] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.180519][ T7182] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 202.196890][ T7182] REISERFS (device loop4): using ordered data mode [ 202.203987][ T7182] reiserfs: using flush barriers [ 202.218148][ T7182] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.247529][ T7182] REISERFS (device loop4): checking transaction log (loop4) [ 202.273352][ T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 202.332197][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.365933][ T7] usb 6-1: Product: syz [ 202.377014][ T7158] loop1: detected capacity change from 0 to 40427 [ 202.387917][ T7] usb 6-1: Manufacturer: syz [ 202.406581][ T7182] REISERFS (device loop4): Using tea hash to sort names [ 202.410707][ T7] usb 6-1: SerialNumber: syz [ 202.425158][ T7158] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 202.458983][ T7182] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 202.487211][ T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 202.498092][ T7182] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 202.507317][ T7158] F2FS-fs (loop1): invalid crc value [ 202.550574][ T7158] F2FS-fs (loop1): Found nat_bits in checkpoint [ 202.648461][ T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 202.847281][ T7158] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 203.131630][ T26] audit: type=1800 audit(1747750140.549:1015): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.851" name="bus" dev="loop1" ino=14 res=0 errno=0 [ 203.231061][ T4251] syz-executor: attempt to access beyond end of device [ 203.231061][ T4251] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 203.294417][ T4574] usb 6-1: USB disconnect, device number 4 [ 203.446345][ T5557] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 203.640246][ T5557] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 203.666007][ T5557] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.691530][ T5557] usb 7-1: Product: syz [ 203.706077][ T5557] usb 7-1: Manufacturer: syz [ 203.710919][ T5557] usb 7-1: SerialNumber: syz [ 203.726770][ T5557] usb 7-1: config 0 descriptor?? [ 203.885681][ T7] usb 6-1: Service connection timeout for: 256 [ 203.896197][ T7] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 203.933073][ T7] ath9k_htc: Failed to initialize the device [ 203.947418][ T4574] usb 6-1: ath9k_htc: USB layer deinitialized [ 204.044158][ T7223] loop2: detected capacity change from 0 to 4096 [ 204.129279][ T7223] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 204.549721][ T4256] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 204.589035][ T5557] usb 7-1: Firmware version (0.0) predates our first public release. [ 204.611939][ T5557] usb 7-1: Please update to version 0.2 or newer [ 204.719549][ T5557] usb 7-1: USB disconnect, device number 4 [ 205.359228][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.883'. [ 205.454292][ T7233] loop5: detected capacity change from 0 to 32768 [ 205.610864][ T7233] XFS (loop5): Mounting V5 Filesystem [ 205.728590][ T7233] XFS (loop5): Ending clean mount [ 205.782507][ T7246] loop2: detected capacity change from 0 to 32768 [ 205.796386][ T7246] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.882 (7246) [ 205.798497][ T7233] XFS (loop5): Quotacheck needed: Please wait. [ 205.833944][ T7241] loop4: detected capacity change from 0 to 32768 [ 205.868938][ T7246] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.913111][ T7241] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 205.931203][ T7246] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 205.945137][ T7246] BTRFS info (device loop2): using free space tree [ 205.952311][ T7233] XFS (loop5): Quotacheck: Done. [ 205.997331][ T7241] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 206.033174][ T7241] BTRFS info (device loop4): enabling auto defrag [ 206.071349][ T7241] BTRFS info (device loop4): use no compression [ 206.077840][ T7241] BTRFS info (device loop4): force clearing of disk cache [ 206.141095][ T7241] BTRFS info (device loop4): max_inline at 4096 [ 206.147436][ T7241] BTRFS info (device loop4): disabling free space tree [ 206.251106][ T4544] XFS (loop5): Unmounting Filesystem [ 206.384817][ T7246] BTRFS info (device loop2): enabling ssd optimizations [ 206.490807][ T7245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.511488][ T7298] netlink: 'syz.1.888': attribute type 32 has an invalid length. [ 206.689575][ T7241] BTRFS info (device loop4): enabling ssd optimizations [ 206.758031][ T7241] BTRFS info (device loop4): rebuilding free space tree [ 206.826557][ T7307] loop1: detected capacity change from 0 to 512 [ 206.839139][ T7241] BTRFS info (device loop4): disabling free space tree [ 206.859761][ T7241] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 206.893045][ T7241] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 206.971042][ T7307] Quota error (device loop1): write_blk: dquota write failed [ 206.979716][ T7307] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 207.019849][ T7307] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.890: Failed to acquire dquot type 1 [ 207.046032][ T7307] EXT4-fs (loop1): 1 truncate cleaned up [ 207.053564][ T7307] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 207.062735][ T7307] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.119832][ T7307] Quota error (device loop1): write_blk: dquota write failed [ 207.142840][ T7314] loop5: detected capacity change from 0 to 65 [ 207.150887][ T7307] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 207.178139][ T7307] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.890: Failed to acquire dquot type 1 [ 207.200514][ T4256] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.239955][ T7314] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 207.690391][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 207.699562][ T11] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 207.719733][ T4263] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 207.741749][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1 [ 208.253795][ T26] audit: type=1326 audit(1747750145.679:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.2.892" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb834f8e969 code=0x0 [ 208.434654][ T7338] loop6: detected capacity change from 0 to 2048 [ 208.495812][ T7338] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 208.584732][ T7338] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 208.647779][ T7338] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 208.724077][ T7338] EXT4-fs (loop6): This should not happen!! Data will be lost [ 208.724077][ T7338] [ 208.776965][ T7338] EXT4-fs (loop6): Total free blocks count 0 [ 208.806636][ T7338] EXT4-fs (loop6): Free/Dirty block details [ 208.813377][ T7338] EXT4-fs (loop6): free_blocks=2415919504 [ 208.826785][ T7338] EXT4-fs (loop6): dirty_blocks=48 [ 208.831954][ T7338] EXT4-fs (loop6): Block reservation details [ 208.877161][ T7338] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 208.894769][ T7344] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 209.212991][ T7339] loop4: detected capacity change from 0 to 32768 [ 209.242417][ T7356] loop6: detected capacity change from 0 to 512 [ 209.256098][ T7339] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.893 (7339) [ 209.275837][ T7356] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 209.312373][ T7339] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.339528][ T7356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 209.350243][ T7339] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 209.366042][ T7339] BTRFS info (device loop4): max_inline at 0 [ 209.372101][ T7339] BTRFS info (device loop4): enabling disk space caching [ 209.444029][ T7356] System zones: 1-12 [ 209.454370][ T7356] EXT4-fs (loop6): 1 truncate cleaned up [ 209.455561][ T7339] BTRFS info (device loop4): turning off barriers [ 209.474928][ T7339] BTRFS info (device loop4): turning on flush-on-commit [ 209.485941][ T7339] BTRFS info (device loop4): doing ref verification [ 209.493629][ T7339] BTRFS info (device loop4): force clearing of disk cache [ 209.505882][ T7339] BTRFS info (device loop4): enabling ssd optimizations [ 209.513972][ T7339] BTRFS info (device loop4): max_inline at 4096 [ 209.523243][ T7339] BTRFS info (device loop4): disk space caching is enabled [ 209.534856][ T7356] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 209.638888][ T7339] BTRFS info (device loop4): rebuilding free space tree [ 209.742623][ T7339] BTRFS info (device loop4): disabling free space tree [ 209.765660][ T7356] EXT4-fs warning (device loop6): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 209.795210][ T7339] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 209.841267][ T7339] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.960351][ T5897] EXT4-fs (loop6): unmounting filesystem. [ 210.045642][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 210.071399][ T26] audit: type=1800 audit(1747750147.501:1017): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.893" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 210.102451][ T7395] loop2: detected capacity change from 0 to 64 [ 210.231593][ T7395] hfs: request for non-existent node 131072 in B*Tree [ 210.264574][ T7395] hfs: request for non-existent node 131072 in B*Tree [ 210.359466][ T4263] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.453041][ T7400] binder: binder_mmap: 7399 200000000000-200000600000 bad vm_flags failed -1 [ 210.691946][ T4408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop4 scanned by udevd (4408) [ 211.069842][ T7408] loop1: detected capacity change from 0 to 8192 [ 211.114305][ T7408] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 211.150653][ T7408] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 211.160584][ T7408] REISERFS (device loop1): using ordered data mode [ 211.168146][ T7408] reiserfs: using flush barriers [ 211.178001][ T7408] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 211.195229][ T7408] REISERFS (device loop1): checking transaction log (loop1) [ 211.267438][ T7420] loop6: detected capacity change from 0 to 128 [ 211.372448][ T7420] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 211.381056][ T26] audit: type=1326 audit(1747750148.813:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.5.930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb4998e969 code=0x0 [ 211.408668][ T7420] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.409796][ T7408] REISERFS (device loop1): Using tea hash to sort names [ 211.429575][ T26] audit: type=1800 audit(1747750148.863:1019): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.929" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 211.453985][ T7408] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 211.632084][ T5897] EXT4-fs (loop6): unmounting filesystem. [ 211.857586][ T7433] syz.4.934[7433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.857713][ T7433] syz.4.934[7433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.172287][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.6.936'. [ 212.211559][ T7412] loop2: detected capacity change from 0 to 40427 [ 212.247572][ T7412] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 212.284484][ T7412] F2FS-fs (loop2): invalid crc value [ 212.351533][ T7412] F2FS-fs (loop2): Found nat_bits in checkpoint [ 212.557134][ T7412] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 212.891600][ T4256] syz-executor: attempt to access beyond end of device [ 212.891600][ T4256] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.359774][ T7476] loop1: detected capacity change from 0 to 65 [ 213.369437][ T7474] loop6: detected capacity change from 0 to 1024 [ 213.398072][ T7474] EXT4-fs: Ignoring removed orlov option [ 213.420951][ T7474] EXT4-fs: Ignoring removed oldalloc option [ 213.449951][ T7476] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 213.459366][ T7474] EXT4-fs (loop6): Test dummy encryption mode enabled [ 213.581666][ T7474] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 213.641397][ T7486] loop2: detected capacity change from 0 to 1024 [ 213.681738][ T7486] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.695942][ T7486] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.792737][ T7486] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 213.897962][ T7486] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 213.936129][ T5897] EXT4-fs (loop6): unmounting filesystem. [ 213.976421][ T7486] EXT4-fs (loop2): This should not happen!! Data will be lost [ 213.976421][ T7486] [ 214.021748][ T7486] EXT4-fs (loop2): Total free blocks count 0 [ 214.055972][ T7486] EXT4-fs (loop2): Free/Dirty block details [ 214.075636][ T7486] EXT4-fs (loop2): free_blocks=4293918720 [ 214.106168][ T7486] EXT4-fs (loop2): dirty_blocks=48 [ 214.121385][ T7496] loop6: detected capacity change from 0 to 1024 [ 214.134715][ T7486] EXT4-fs (loop2): Block reservation details [ 214.151330][ T7486] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 214.343131][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 214.502539][ T7500] loop6: detected capacity change from 0 to 1024 [ 214.558880][ T7506] loop2: detected capacity change from 0 to 128 [ 214.559100][ T7500] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 214.697080][ T7506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 214.714359][ T5897] EXT4-fs (loop6): unmounting filesystem. [ 214.753345][ T7506] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.012997][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 215.058290][ T7517] loop5: detected capacity change from 0 to 512 [ 215.116467][ T7517] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 215.176694][ T7517] EXT4-fs (loop5): invalid journal inode [ 215.187736][ T7517] EXT4-fs (loop5): can't get journal size [ 215.205536][ T7517] EXT4-fs (loop5): 1 truncate cleaned up [ 215.217195][ T7517] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 215.422479][ T4544] EXT4-fs (loop5): unmounting filesystem. [ 215.761641][ T7536] vivid-004: disconnect [ 215.791121][ T7535] vivid-004: reconnect [ 216.092474][ T7548] netlink: 164 bytes leftover after parsing attributes in process `syz.4.984'. [ 216.244762][ T7515] loop1: detected capacity change from 0 to 40427 [ 216.297798][ T7515] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 216.334934][ T7515] F2FS-fs (loop1): invalid crc value [ 216.356562][ T7557] loop4: detected capacity change from 0 to 8 [ 216.393284][ T7515] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.454458][ T7559] loop5: detected capacity change from 0 to 2048 [ 216.463827][ T7557] SQUASHFS error: Unable to read directory block [629:46] [ 216.511298][ T7559] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 216.575209][ T7515] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 216.586890][ T7561] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.715683][ T7564] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 216.827669][ T7515] syz.1.968: attempt to access beyond end of device [ 216.827669][ T7515] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 217.102299][ T7572] loop2: detected capacity change from 0 to 1024 [ 217.174894][ T7546] loop6: detected capacity change from 0 to 32768 [ 217.306836][ T5551] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 217.375117][ T7546] XFS (loop6): Mounting V5 Filesystem [ 217.519079][ T5551] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.543515][ T5551] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.550814][ T5555] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 217.580609][ T5551] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 217.600350][ T5551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.635787][ T5551] usb 6-1: config 0 descriptor?? [ 217.668651][ T7546] XFS (loop6): Ending clean mount [ 217.683035][ T7546] XFS (loop6): Quotacheck needed: Please wait. [ 217.754532][ T7546] XFS (loop6): Quotacheck: Done. [ 217.754603][ T5555] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 217.783572][ T5555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.802267][ T5555] usb 5-1: config 0 descriptor?? [ 217.823931][ T5555] cp210x 5-1:0.0: cp210x converter detected [ 217.976141][ T5897] XFS (loop6): Unmounting Filesystem [ 218.099498][ T5551] kye 0003:0458:5013.0009: ignoring exceeding usage max [ 218.142403][ T5551] kye 0003:0458:5013.0009: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 218.173320][ T5551] kye 0003:0458:5013.0009: tablet-enabling feature report not found [ 218.197570][ T5551] kye 0003:0458:5013.0009: tablet enabling failed [ 218.233554][ T5555] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 218.265206][ T5555] usb 5-1: cp210x converter now attached to ttyUSB0 [ 218.390494][ T5555] usb 6-1: USB disconnect, device number 5 [ 218.457043][ T5551] usb 5-1: USB disconnect, device number 9 [ 218.479683][ T5551] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 218.490387][ T7595] fido_id[7595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 218.517771][ T5551] cp210x 5-1:0.0: device disconnected [ 218.677246][ T7592] loop2: detected capacity change from 0 to 40427 [ 218.693699][ T7592] F2FS-fs (loop2): inline encryption not supported [ 218.711945][ T7592] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 218.734613][ T7592] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 218.766333][ T7592] F2FS-fs (loop2): invalid crc value [ 218.791548][ T7592] F2FS-fs (loop2): Found nat_bits in checkpoint [ 218.906318][ T7592] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 219.109296][ T7607] netem: incorrect ge model size [ 219.125091][ T7607] netem: change failed [ 219.312746][ T4256] syz-executor: attempt to access beyond end of device [ 219.312746][ T4256] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 219.825748][ T7623] loop1: detected capacity change from 0 to 1024 [ 219.913274][ T7625] loop6: detected capacity change from 0 to 512 [ 219.985974][ T7625] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 220.044775][ T2882] hfsplus: b-tree write err: -5, ino 4 [ 220.056456][ T7625] EXT4-fs (loop6): 1 truncate cleaned up [ 220.062178][ T7625] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 220.130233][ T7611] loop4: detected capacity change from 0 to 32768 [ 220.158525][ T7629] loop5: detected capacity change from 0 to 64 [ 220.219278][ T7633] loop1: detected capacity change from 0 to 1024 [ 220.226948][ T7637] EXT4-fs error (device loop6): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 220.290222][ T7611] XFS (loop4): Mounting V5 Filesystem [ 220.382084][ T7611] XFS (loop4): Ending clean mount [ 220.412685][ T7611] XFS (loop4): Quotacheck needed: Please wait. [ 220.510928][ T7611] XFS (loop4): Quotacheck: Done. [ 220.676349][ T5897] EXT4-fs (loop6): unmounting filesystem. [ 220.846782][ T4263] XFS (loop4): Unmounting Filesystem [ 221.458644][ T7669] device ip6gretap0 entered promiscuous mode [ 221.761210][ T7679] loop2: detected capacity change from 0 to 64 [ 221.965889][ T7685] PKCS8: Unsupported PKCS#8 version [ 222.529225][ T7667] loop5: detected capacity change from 0 to 40427 [ 222.584939][ T7667] F2FS-fs (loop5): Found nat_bits in checkpoint [ 222.706912][ T7667] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 222.735706][ T7682] loop4: detected capacity change from 0 to 32768 [ 222.891106][ T7682] XFS (loop4): Mounting V5 Filesystem [ 222.976313][ T7694] loop2: detected capacity change from 0 to 32768 [ 222.988188][ T7682] XFS (loop4): Ending clean mount [ 222.995650][ T7682] XFS (loop4): Quotacheck needed: Please wait. [ 223.044938][ T4544] syz-executor: attempt to access beyond end of device [ 223.044938][ T4544] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.110258][ T7682] XFS (loop4): Quotacheck: Done. [ 223.144374][ T7692] loop6: detected capacity change from 0 to 40427 [ 223.156449][ T7694] XFS (loop2): Mounting V5 Filesystem [ 223.166023][ T7692] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 223.175000][ T7692] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 223.197270][ T7692] F2FS-fs (loop6): invalid crc value [ 223.232922][ T7692] F2FS-fs (loop6): Found nat_bits in checkpoint [ 223.343554][ T7694] XFS (loop2): Ending clean mount [ 223.502879][ T7692] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 223.521072][ T4263] XFS (loop4): Unmounting Filesystem [ 223.648026][ T7692] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 223.662235][ T7692] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 223.745283][ T4256] XFS (loop2): Unmounting Filesystem [ 223.920583][ T7726] loop1: detected capacity change from 0 to 2048 [ 223.959891][ T7726] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 224.067712][ T7727] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.324815][ T7731] loop4: detected capacity change from 0 to 1764 [ 224.618820][ T7736] loop4: detected capacity change from 0 to 512 [ 224.653420][ T7736] EXT4-fs: Ignoring removed bh option [ 224.668887][ T7736] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 224.701521][ T7736] EXT4-fs (loop4): invalid journal inode [ 224.728779][ T7736] EXT4-fs (loop4): can't get journal size [ 224.806220][ T7736] EXT4-fs (loop4): 1 truncate cleaned up [ 224.821417][ T7736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 224.867610][ T7742] loop6: detected capacity change from 0 to 2048 [ 224.899507][ T7742] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 224.962056][ T7742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.182019][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 225.459397][ T7734] loop1: detected capacity change from 0 to 32768 [ 225.519934][ T7734] XFS (loop1): Mounting V5 Filesystem [ 225.562707][ T7750] loop4: detected capacity change from 0 to 4096 [ 225.620816][ T5551] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 225.694942][ T7734] XFS (loop1): Ending clean mount [ 225.726903][ T7734] XFS (loop1): Quotacheck needed: Please wait. [ 225.801051][ T7734] XFS (loop1): Quotacheck: Done. [ 225.815108][ T5551] usb 7-1: Using ep0 maxpacket: 32 [ 225.824230][ T5551] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.870954][ T5551] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.887962][ T7734] xfs: Unexpected value for 'discard' [ 225.903962][ T5551] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 225.944338][ T5551] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.986917][ T5551] usb 7-1: config 0 descriptor?? [ 226.019205][ T4251] XFS (loop1): Unmounting Filesystem [ 226.404122][ T7746] loop5: detected capacity change from 0 to 32768 [ 226.446799][ T5551] kone 0003:1E7D:2CED.000A: unknown main item tag 0x7 [ 226.488822][ T5551] kone 0003:1E7D:2CED.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0 [ 226.608103][ T7760] loop2: detected capacity change from 0 to 32768 [ 226.645821][ T5551] kone 0003:1E7D:2CED.000A: couldn't init struct kone_device [ 226.666167][ T7770] loop4: detected capacity change from 0 to 64 [ 226.670987][ T5551] kone 0003:1E7D:2CED.000A: couldn't install mouse [ 226.705632][ T5551] kone: probe of 0003:1E7D:2CED.000A failed with error -5 [ 226.715507][ T3625] udevd[3625]: worker [4408] terminated by signal 33 (Unknown signal 33) [ 226.727091][ T5551] usb 7-1: USB disconnect, device number 5 [ 226.733341][ T3625] udevd[3625]: worker [4408] failed while handling '/devices/virtual/block/loop5' [ 226.746894][ T7760] XFS (loop2): Mounting V5 Filesystem [ 226.819167][ T7760] XFS (loop2): Ending clean mount [ 226.868459][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1066'. [ 226.985616][ T4256] XFS (loop2): Unmounting Filesystem [ 227.268264][ T7784] fido_id[7784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 227.918991][ T7806] loop5: detected capacity change from 0 to 256 [ 228.630163][ T7819] loop2: detected capacity change from 0 to 1024 [ 228.728362][ T7819] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 228.748520][ T7819] hfsplus: xattr searching failed [ 228.775405][ T7791] loop6: detected capacity change from 0 to 40427 [ 228.819827][ T7791] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff [ 228.838545][ T7791] F2FS-fs (loop6): invalid crc value [ 228.874624][ T7791] F2FS-fs (loop6): Found nat_bits in checkpoint [ 229.004796][ T7791] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 229.168430][ T26] audit: type=1326 audit(1747750166.607:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.2.1077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb834f8e969 code=0x0 [ 229.277773][ T7832] loop2: detected capacity change from 0 to 164 [ 229.314598][ T7834] loop4: detected capacity change from 0 to 736 [ 229.319625][ T5897] syz-executor: attempt to access beyond end of device [ 229.319625][ T5897] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.395085][ T7832] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82 [ 229.439769][ T7814] loop5: detected capacity change from 0 to 32768 [ 230.220045][ T7847] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1085'. [ 230.925361][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 231.187730][ T7852] loop1: detected capacity change from 0 to 40427 [ 231.216199][ T7852] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 231.246148][ T7852] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 231.326285][ T7852] F2FS-fs (loop1): Found nat_bits in checkpoint [ 231.386819][ T7878] loop6: detected capacity change from 0 to 512 [ 231.473811][ T7878] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 231.487241][ T7852] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 231.520430][ T7852] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 231.576085][ T7878] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 231.637253][ T7878] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.1098: corrupted in-inode xattr [ 231.729678][ T7878] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1098: couldn't read orphan inode 15 (err -117) [ 231.756596][ T7878] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 231.793843][ T26] audit: type=1800 audit(1747750169.238:1021): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1087" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 231.991212][ T5897] EXT4-fs (loop6): unmounting filesystem. [ 233.297412][ T7926] loop6: detected capacity change from 0 to 512 [ 233.359735][ T7926] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 233.393578][ T7926] fs-verity: sha256 using implementation "sha256-avx2" [ 233.423766][ T7932] loop5: detected capacity change from 0 to 256 [ 233.523471][ T7926] EXT4-fs warning (device loop6): ext4_begin_enable_verity:137: inode #15: comm syz.6.1118: verity is only allowed on extent-based files [ 233.708197][ T5897] EXT4-fs (loop6): unmounting filesystem. [ 233.841009][ T7920] loop1: detected capacity change from 0 to 32768 [ 233.870554][ T7920] XFS: ikeep mount option is deprecated. [ 233.884573][ T7938] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1122'. [ 233.951273][ T7920] XFS (loop1): Mounting V5 Filesystem [ 233.955250][ T7919] loop4: detected capacity change from 0 to 32768 [ 233.988438][ T7946] loop5: detected capacity change from 0 to 512 [ 233.996823][ T7946] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 234.035288][ T7952] netlink: 'syz.6.1124': attribute type 3 has an invalid length. [ 234.050755][ T7946] EXT4-fs (loop5): 1 orphan inode deleted [ 234.065793][ T7946] EXT4-fs (loop5): 1 truncate cleaned up [ 234.080388][ T7946] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 234.085460][ T7919] XFS (loop4): Mounting V5 Filesystem [ 234.155763][ T7920] XFS (loop1): Ending clean mount [ 234.166315][ T7920] XFS (loop1): Quotacheck needed: Please wait. [ 234.244931][ T7919] XFS (loop4): Ending clean mount [ 234.276473][ T7920] XFS (loop1): Quotacheck: Done. [ 234.318029][ T7919] XFS (loop4): Quotacheck needed: Please wait. [ 234.335376][ T4544] EXT4-fs (loop5): unmounting filesystem. [ 234.515755][ T7919] XFS (loop4): Quotacheck: Done. [ 234.592347][ T4251] XFS (loop1): Unmounting Filesystem [ 234.724950][ T4263] XFS (loop4): Unmounting Filesystem [ 234.796634][ T7967] program syz.5.1129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.242135][ T7979] loop1: detected capacity change from 0 to 64 [ 235.515632][ T7987] loop5: detected capacity change from 0 to 64 [ 235.765905][ T7992] loop5: detected capacity change from 0 to 8 [ 235.954295][ T7992] SQUASHFS error: Failed to read block 0x2d7: -5 [ 235.961507][ T7992] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 236.098567][ T4544] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 236.117578][ T4544] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 236.720927][ T5551] kernel read not supported for file /cpu/0/msr (pid: 5551 comm: kworker/1:12) [ 236.790010][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.831371][ T4494] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 236.962883][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.067429][ T4494] usb 5-1: unable to get BOS descriptor or descriptor too short [ 237.085780][ T4494] usb 5-1: not running at top speed; connect to a high speed hub [ 237.113200][ T4494] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 237.127637][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.144511][ T4494] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 237.160700][ T4494] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.179670][ T4494] usb 5-1: config 1 interface 0 has no altsetting 0 [ 237.199536][ T4494] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.236545][ T4494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.256271][ T4494] usb 5-1: Product: syz [ 237.263668][ T4494] usb 5-1: Manufacturer: syz [ 237.275990][ T4494] usb 5-1: SerialNumber: syz [ 237.297958][ T8005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.305575][ T8005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.321309][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.474162][ T8027] loop1: detected capacity change from 0 to 512 [ 237.593339][ T4494] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 237.605455][ T8027] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 237.623626][ T8027] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.693016][ T4494] usb 5-1: USB disconnect, device number 10 [ 237.819858][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.837008][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.849673][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.863785][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.873769][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 237.882697][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.059996][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 238.491069][ T8047] loop1: detected capacity change from 0 to 764 [ 238.561114][ T8047] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 238.710900][ T8030] loop2: detected capacity change from 0 to 32768 [ 238.919351][ T8030] XFS (loop2): Mounting V5 Filesystem [ 238.963544][ T8033] chnl_net:caif_netlink_parms(): no params data found [ 239.163296][ T8030] XFS (loop2): Ending clean mount [ 239.190453][ T8030] XFS (loop2): Quotacheck needed: Please wait. [ 239.411090][ T8044] loop4: detected capacity change from 0 to 40427 [ 239.481081][ T8030] XFS (loop2): Quotacheck: Done. [ 239.536475][ T8044] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 239.574803][ T8044] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 239.625711][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.633473][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.660884][ T8033] device bridge_slave_0 entered promiscuous mode [ 239.675056][ T8044] F2FS-fs (loop4): Found nat_bits in checkpoint [ 239.719145][ T8081] loop1: detected capacity change from 0 to 1024 [ 239.826869][ T4256] XFS (loop2): Unmounting Filesystem [ 239.877095][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.884255][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.917239][ T8033] device bridge_slave_1 entered promiscuous mode [ 239.936129][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 239.973076][ T8044] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 239.986223][ T8044] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 240.147374][ T26] audit: type=1800 audit(1747750177.600:1022): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1161" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 240.193130][ T8093] loop1: detected capacity change from 0 to 64 [ 240.225216][ T8033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.526135][ T8033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.631828][ T8033] team0: Port device team_slave_0 added [ 240.661260][ T8033] team0: Port device team_slave_1 added [ 240.883183][ T8087] loop6: detected capacity change from 0 to 32768 [ 241.106989][ T8087] XFS (loop6): Mounting V5 Filesystem [ 241.148934][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.195394][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.218872][ T8087] XFS (loop6): Ending clean mount [ 241.295834][ T8033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.307591][ T8087] XFS (loop6): Quotacheck needed: Please wait. [ 241.362671][ T9] device hsr_slave_0 left promiscuous mode [ 241.404814][ T9] device hsr_slave_1 left promiscuous mode [ 241.426535][ T8087] XFS (loop6): Quotacheck: Done. [ 241.466085][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.496380][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.531547][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.584299][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.610402][ T9] device bridge_slave_1 left promiscuous mode [ 241.631301][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.676818][ T9] device bridge_slave_0 left promiscuous mode [ 241.683110][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.730388][ T5897] XFS (loop6): Unmounting Filesystem [ 241.961503][ T8131] loop1: detected capacity change from 0 to 128 [ 241.988359][ T9] device veth1_macvtap left promiscuous mode [ 242.008880][ T9] device veth0_macvtap left promiscuous mode [ 242.015061][ T9] device veth1_vlan left promiscuous mode [ 242.021235][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 242.044009][ T9] device veth0_vlan left promiscuous mode [ 242.444801][ T8142] loop4: detected capacity change from 0 to 64 [ 242.520570][ T8142] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 243.318609][ T26] audit: type=1326 audit(1747750180.751:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a658e969 code=0x7ffc0000 [ 243.385102][ T26] audit: type=1326 audit(1747750180.751:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f94a658e969 code=0x7ffc0000 [ 243.435876][ T26] audit: type=1326 audit(1747750180.751:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a658e969 code=0x7ffc0000 [ 243.506012][ T26] audit: type=1326 audit(1747750180.751:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a658e969 code=0x7ffc0000 [ 243.531265][ T8165] loop4: detected capacity change from 0 to 256 [ 243.585300][ T26] audit: type=1326 audit(1747750180.751:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f94a658e969 code=0x7ffc0000 [ 243.668486][ T26] audit: type=1326 audit(1747750180.751:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a658e969 code=0x7ffc0000 [ 243.765264][ T26] audit: type=1326 audit(1747750180.751:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a658e969 code=0x7ffc0000 [ 243.852955][ T8153] loop2: detected capacity change from 0 to 32768 [ 243.879803][ T26] audit: type=1326 audit(1747750180.751:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f94a658e969 code=0x7ffc0000 [ 243.982656][ T26] audit: type=1326 audit(1747750180.751:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.6.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a658e969 code=0x7ffc0000 [ 244.055535][ T8153] XFS (loop2): Mounting V5 Filesystem [ 244.095562][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 244.172637][ T8164] loop6: detected capacity change from 0 to 32768 [ 244.226854][ T8153] XFS (loop2): Ending clean mount [ 244.243594][ T8179] loop4: detected capacity change from 0 to 256 [ 244.294021][ T8153] XFS (loop2): Quotacheck needed: Please wait. [ 244.298189][ T8179] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 244.477120][ T8153] XFS (loop2): Quotacheck: Done. [ 244.558552][ T8153] xfs: Unexpected value for 'discard' [ 244.706631][ T4256] XFS (loop2): Unmounting Filesystem [ 244.962430][ T9] team0 (unregistering): Port device team_slave_1 removed [ 245.157540][ T9] team0 (unregistering): Port device team_slave_0 removed [ 245.262639][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.380433][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.629003][ T7] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 245.817132][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.834748][ T7] usb 3-1: config 0 has no interface number 0 [ 245.843203][ T7] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 245.852475][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.853010][ T8197] loop6: detected capacity change from 0 to 16 [ 245.873289][ T7] usb 3-1: config 0 descriptor?? [ 245.898506][ T7] usb 3-1: selecting invalid altsetting 1 [ 245.912279][ T8197] erofs: (device loop6): mounted with root inode @ nid 36. [ 245.920362][ T7] dvb_ttusb_budget: ttusb_init_controller: error [ 245.941165][ T7] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 246.178124][ T7] DVB: Unable to find symbol cx22700_attach() [ 246.178148][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 246.291531][ T7] DVB: Unable to find symbol tda10046_attach() [ 246.302639][ T7] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 246.316972][ T9] bond0 (unregistering): Released all slaves [ 246.336865][ T7] usb 3-1: USB disconnect, device number 8 [ 246.401710][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.409177][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.436031][ T5557] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 246.444098][ T8033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.622285][ T8033] device hsr_slave_0 entered promiscuous mode [ 246.632163][ T8033] device hsr_slave_1 entered promiscuous mode [ 246.659865][ T5557] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 246.682282][ T5557] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.715330][ T5557] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 246.756156][ T5557] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 246.803552][ T5557] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 246.842500][ T5557] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.858002][ T8207] loop4: detected capacity change from 0 to 4096 [ 246.864468][ T5557] usb 7-1: Product: syz [ 246.882968][ T5557] usb 7-1: Manufacturer: syz [ 246.895858][ T8207] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 246.912110][ T5557] usb 7-1: SerialNumber: syz [ 246.963419][ T5557] usb 7-1: config 0 descriptor?? [ 247.211475][ T5557] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 247.479212][ T4574] usb 7-1: USB disconnect, device number 6 [ 247.521900][ T8033] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 247.601526][ T8033] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 247.631352][ T8033] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 247.691014][ T8033] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 247.727906][ T8223] loop2: detected capacity change from 0 to 512 [ 247.791749][ T8223] EXT4-fs: Ignoring removed bh option [ 247.854996][ T8223] EXT4-fs: Ignoring removed oldalloc option [ 247.910826][ T8208] loop1: detected capacity change from 0 to 32768 [ 247.965559][ T8223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.989153][ T8208] XFS (loop1): Mounting V5 Filesystem [ 248.001056][ T8223] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.024520][ T8033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.090024][ T8033] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.097787][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.171523][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.178171][ T8208] XFS (loop1): Ending clean mount [ 248.190031][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.199688][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.209728][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.213634][ T8208] XFS (loop1): Quotacheck needed: Please wait. [ 248.216881][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.218580][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.254771][ T47] Bluetooth: hci1: command 0x0405 tx timeout [ 248.282300][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.291130][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.298292][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.363252][ T8208] XFS (loop1): Quotacheck: Done. [ 248.365044][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.384806][ T4494] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 248.409264][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.436440][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.485913][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.519114][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.568934][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.577813][ T4494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.604543][ T4494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.618409][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.635231][ T4251] XFS (loop1): Unmounting Filesystem [ 248.671809][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.684718][ T4494] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 248.707280][ T8033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.724536][ T4494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.744936][ T8033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.769606][ T4494] usb 3-1: config 0 descriptor?? [ 248.771788][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.792968][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.811149][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.872728][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.892522][ T2882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.207237][ T4494] arvo 0003:1E7D:30D4.000B: item fetching failed at offset 5/7 [ 249.245028][ T4494] arvo 0003:1E7D:30D4.000B: parse failed [ 249.250754][ T4494] arvo: probe of 0003:1E7D:30D4.000B failed with error -22 [ 249.436129][ T4494] usb 3-1: USB disconnect, device number 9 [ 249.792603][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.817889][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.859674][ T8033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.017828][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 250.429527][ T8269] loop4: detected capacity change from 0 to 32768 [ 250.541891][ T8269] XFS (loop4): Mounting V5 Filesystem [ 250.554526][ T4574] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 250.764394][ T4574] usb 7-1: Using ep0 maxpacket: 32 [ 250.772989][ T4574] usb 7-1: config 0 has an invalid interface number: 154 but max is 0 [ 250.807681][ T8269] XFS (loop4): Ending clean mount [ 250.832639][ T4574] usb 7-1: config 0 has no interface number 0 [ 250.880044][ T4574] usb 7-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=c4.04 [ 250.927634][ T4574] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.964508][ T4574] usb 7-1: Product: syz [ 250.974633][ T4574] usb 7-1: Manufacturer: syz [ 250.990561][ T4574] usb 7-1: SerialNumber: syz [ 251.026912][ T4574] usb 7-1: config 0 descriptor?? [ 251.116137][ T4263] XFS (loop4): Unmounting Filesystem [ 251.320598][ T8318] loop2: detected capacity change from 0 to 1024 [ 251.356952][ T8318] EXT4-fs: inline encryption not supported [ 251.362897][ T8318] EXT4-fs: Ignoring removed orlov option [ 251.434012][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.465310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.512118][ T8318] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 251.540438][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.553233][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.562830][ T8318] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 251.597128][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 251.597144][ T26] audit: type=1800 audit(1747750189.052:1033): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1232" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 251.633127][ T8033] device veth0_vlan entered promiscuous mode [ 251.685005][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.703342][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.719746][ T8033] device veth1_vlan entered promiscuous mode [ 251.850967][ T4574] asix 7-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 251.873857][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 251.882204][ T4574] asix 7-1:0.154 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 251.903695][ T4574] asix: probe of 7-1:0.154 failed with error -71 [ 251.918861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 251.957942][ T4574] usb 7-1: USB disconnect, device number 7 [ 251.964798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.015158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.074514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.086239][ T8033] device veth0_macvtap entered promiscuous mode [ 252.127941][ T8033] device veth1_macvtap entered promiscuous mode [ 252.181684][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.221853][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.231910][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.242499][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.253131][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.263874][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.292081][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.302643][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.348786][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.374559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.387428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.426276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.465610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.511272][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.557973][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.604180][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.636624][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.671417][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.692421][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.710042][ T8033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.731608][ T8033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.773213][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.813289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.839652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.665393][ T8033] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.729040][ T8033] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.775571][ T8033] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.864180][ T8033] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.303521][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.376980][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.508213][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.560427][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.640365][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.673642][ T8357] loop6: detected capacity change from 0 to 32768 [ 254.725839][ T8357] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 12 [ 254.731645][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.805597][ T8350] loop4: detected capacity change from 0 to 262144 [ 254.834435][ T8350] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.1240 (8350) [ 254.863932][ T8350] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 254.874222][ T8350] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 254.883538][ T8350] BTRFS info (device loop4): enabling ssd optimizations [ 254.890562][ T8350] BTRFS info (device loop4): using spread ssd allocation scheme [ 254.898309][ T8350] BTRFS info (device loop4): use zlib compression, level 3 [ 254.905601][ T8350] BTRFS info (device loop4): using free space tree [ 254.930733][ T8383] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 255.137383][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.143742][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.341571][ T5219] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (5219) [ 255.491238][ T8413] sch_fq: defrate 0 ignored. [ 255.709442][ T4263] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 256.629747][ T8446] loop6: detected capacity change from 0 to 164 [ 256.753794][ T47] Bluetooth: hci1: command 0x0411 tx timeout [ 257.443153][ T8462] loop1: detected capacity change from 0 to 4096 [ 257.511029][ T8467] loop7: detected capacity change from 0 to 256 [ 258.027967][ T8478] loop4: detected capacity change from 0 to 1024 [ 258.200091][ T8478] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 258.208885][ T8478] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.299007][ T8478] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1279: bg 0: block 393: padding at end of block bitmap is not set [ 258.330583][ T8444] loop2: detected capacity change from 0 to 32768 [ 258.438751][ T8490] loop1: detected capacity change from 0 to 128 [ 258.478477][ T8444] XFS (loop2): Mounting V5 Filesystem [ 258.486105][ T8490] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 258.527529][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 258.651325][ T8460] loop6: detected capacity change from 0 to 32768 [ 258.703858][ T8444] XFS (loop2): Ending clean mount [ 258.722099][ T8460] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1272 (8460) [ 258.741929][ T8444] XFS (loop2): Quotacheck needed: Please wait. [ 258.831882][ T8460] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 258.912121][ T8444] XFS (loop2): Quotacheck: Done. [ 258.934399][ T8460] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 258.993802][ T8460] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 259.043869][ T8460] BTRFS info (device loop6): use zstd compression, level 3 [ 259.051438][ T8460] BTRFS info (device loop6): using free space tree [ 259.237475][ T8514] loop7: detected capacity change from 0 to 128 [ 259.271481][ T4256] XFS (loop2): Unmounting Filesystem [ 259.395888][ T8514] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 259.476031][ T8514] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.508462][ T8460] BTRFS info (device loop6): enabling ssd optimizations [ 259.685674][ T8033] EXT4-fs (loop7): unmounting filesystem. [ 259.784174][ T5897] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 260.196370][ T8541] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1292'. [ 261.521200][ T8582] loop2: detected capacity change from 0 to 1024 [ 261.712062][ T33] hfsplus: b-tree write err: -5, ino 4 [ 261.806806][ T8563] loop4: detected capacity change from 0 to 32768 [ 261.934517][ T8563] XFS (loop4): Mounting V5 Filesystem [ 262.159771][ T8563] XFS (loop4): Ending clean mount [ 262.176575][ T8563] XFS (loop4): Quotacheck needed: Please wait. [ 262.291839][ T8563] XFS (loop4): Quotacheck: Done. [ 262.314498][ T8610] binder: 8609:8610 ioctl 400c620e 2000000014c0 returned -22 [ 262.391995][ T8612] loop6: detected capacity change from 0 to 512 [ 262.440934][ T8612] EXT4-fs: Ignoring removed nobh option [ 262.476846][ T8612] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.570967][ T8612] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1314: invalid indirect mapped block 256 (level 2) [ 262.659798][ T4263] XFS (loop4): Unmounting Filesystem [ 262.696989][ T8612] EXT4-fs (loop6): 2 truncates cleaned up [ 262.743856][ T8612] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 263.015601][ T8622] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1314: bg 0: block 5: invalid block bitmap [ 263.145337][ T8622] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 584 with error 28 [ 263.223995][ T8622] EXT4-fs (loop6): This should not happen!! Data will be lost [ 263.223995][ T8622] [ 263.283493][ T8622] EXT4-fs (loop6): Total free blocks count 0 [ 263.289555][ T8622] EXT4-fs (loop6): Free/Dirty block details [ 263.323559][ T8622] EXT4-fs (loop6): free_blocks=0 [ 263.328574][ T8622] EXT4-fs (loop6): dirty_blocks=584 [ 263.363748][ T8622] EXT4-fs (loop6): Block reservation details [ 263.375778][ T8622] EXT4-fs (loop6): i_reserved_data_blocks=584 [ 263.512443][ T5897] EXT4-fs (loop6): unmounting filesystem. [ 264.539989][ T8633] loop4: detected capacity change from 0 to 131072 [ 264.631289][ T8633] F2FS-fs (loop4): Found nat_bits in checkpoint [ 264.698634][ T8633] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 265.174512][ T8671] loop6: detected capacity change from 0 to 2048 [ 265.231897][ T8671] UDF-fs: bad mount option "01777777777777777777777ÿÿ18446744073709551615" or missing value [ 265.968247][ T8681] device syz_tun entered promiscuous mode [ 265.969248][ T8663] loop2: detected capacity change from 0 to 32768 [ 266.054301][ T8663] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 266.075028][ T8681] device syz_tun left promiscuous mode [ 266.107754][ T8663] (syz.2.1329,8663,0):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 266.107754][ T8663] found = 2, set = 0, taken = 0, off = 0 [ 266.136858][ T8663] (syz.2.1329,8663,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 266.140106][ T8667] loop7: detected capacity change from 0 to 32768 [ 266.164704][ T8663] (syz.2.1329,8663,0):ocfs2_check_volume:2461 ERROR: status = -22 [ 266.172572][ T8663] (syz.2.1329,8663,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 266.188584][ T8667] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1330 (8667) [ 266.219255][ T8663] (syz.2.1329,8663,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 266.232813][ T8685] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1338'. [ 266.264573][ T8663] (syz.2.1329,8663,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 266.269763][ T8685] netlink: 'syz.1.1338': attribute type 5 has an invalid length. [ 266.300171][ T8685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1338'. [ 266.318577][ T8667] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 266.371709][ T8667] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 266.412681][ T8667] BTRFS info (device loop7): setting nodatacow, compression disabled [ 266.462475][ T8667] BTRFS info (device loop7): force clearing of disk cache [ 266.513404][ T8667] BTRFS info (device loop7): enabling ssd optimizations [ 266.520414][ T8667] BTRFS info (device loop7): using spread ssd allocation scheme [ 266.638952][ T8667] BTRFS info (device loop7): doing ref verification [ 266.699252][ T8667] BTRFS info (device loop7): force zlib compression, level 3 [ 266.746072][ T8667] BTRFS info (device loop7): not using ssd optimizations [ 266.793013][ T8692] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 266.806208][ T8667] BTRFS info (device loop7): not using spread ssd allocation scheme [ 266.839563][ T8667] BTRFS info (device loop7): using free space tree [ 267.043407][ T5558] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 267.112770][ T8706] loop1: detected capacity change from 0 to 256 [ 267.207086][ T8706] exfat: Deprecated parameter 'namecase' [ 267.233376][ T5558] usb 3-1: Using ep0 maxpacket: 8 [ 267.240469][ T5558] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 267.267877][ T5558] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 267.291288][ T8667] BTRFS info (device loop7): rebuilding free space tree [ 267.298692][ T5558] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.353962][ T5558] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.373174][ T8706] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xda9fba55, utbl_chksum : 0xe619d30d) [ 267.423508][ T5558] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.453303][ T5558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.717767][ T5558] usb 3-1: GET_CAPABILITIES returned 0 [ 267.723864][ T5558] usbtmc 3-1:16.0: can't read capabilities [ 267.916322][ T8033] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 267.967651][ T8690] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71 [ 268.184738][ T8710] loop4: detected capacity change from 0 to 32768 [ 268.242407][ T5219] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop7 scanned by udevd (5219) [ 268.385159][ T4493] usb 3-1: USB disconnect, device number 10 [ 268.477666][ T8710] XFS (loop4): Mounting V5 Filesystem [ 268.712821][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.840947][ T8710] XFS (loop4): Ending clean mount [ 268.884737][ T8710] XFS (loop4): Quotacheck needed: Please wait. [ 269.050631][ T8710] XFS (loop4): Quotacheck: Done. [ 269.117756][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.284560][ T4263] XFS (loop4): Unmounting Filesystem [ 269.385159][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.707759][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.780527][ T8767] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1359'. [ 270.433016][ T8781] loop7: detected capacity change from 0 to 4096 [ 270.448158][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.459827][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.468219][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.468945][ T8781] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 270.494034][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.503923][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.512899][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.621251][ T8781] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 271.298476][ T8776] loop6: detected capacity change from 0 to 32768 [ 271.388311][ T8776] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 271.464791][ T8776] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 271.738092][ T8782] chnl_net:caif_netlink_parms(): no params data found [ 271.781680][ T5897] ocfs2: Unmounting device (7,6) on (node local) [ 271.991212][ T8820] loop4: detected capacity change from 0 to 512 [ 272.077166][ T8820] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 272.493623][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.500777][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.507920][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074224000: rx timeout, send abort [ 272.573509][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 272.573559][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 272.591851][ T8782] device bridge_slave_0 entered promiscuous mode [ 272.626002][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.633434][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.642281][ T8782] device bridge_slave_1 entered promiscuous mode [ 272.688013][ T33] device hsr_slave_0 left promiscuous mode [ 272.690557][ T8836] loop4: detected capacity change from 0 to 4096 [ 272.700681][ T33] device hsr_slave_1 left promiscuous mode [ 272.712067][ T8836] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 272.744065][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.751557][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.760586][ T8836] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 272.772941][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.777819][ T8836] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 272.800669][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.809152][ T33] device bridge_slave_1 left promiscuous mode [ 272.822749][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.836884][ T8836] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 272.850307][ T33] device bridge_slave_0 left promiscuous mode [ 272.854883][ T8836] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 272.867053][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.904850][ T8836] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 272.923391][ T8836] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 272.966284][ T8836] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 272.985513][ T8836] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 273.009657][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074224000: abort rx timeout. Force session deactivation [ 273.012989][ T8836] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 273.070770][ T8836] ntfs: volume version 3.1. [ 273.078762][ T33] device veth1_macvtap left promiscuous mode [ 273.101594][ T33] device veth0_macvtap left promiscuous mode [ 273.128670][ T33] device veth1_vlan left promiscuous mode [ 273.129351][ T8838] loop2: detected capacity change from 0 to 256 [ 273.163596][ T33] device veth0_vlan left promiscuous mode [ 273.175484][ T8838] exfat: Deprecated parameter 'utf8' [ 273.218830][ T8838] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d) [ 273.266431][ T8840] loop7: detected capacity change from 0 to 2048 [ 273.335005][ T8840] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.197308][ T8851] loop4: detected capacity change from 0 to 8192 [ 274.233109][ T8851] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 274.293409][ T8851] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 274.302679][ T8851] REISERFS (device loop4): using ordered data mode [ 274.328574][ T8851] reiserfs: using flush barriers [ 274.335808][ T8851] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 274.352717][ T8851] REISERFS (device loop4): checking transaction log (loop4) [ 274.462750][ T8851] REISERFS (device loop4): Using tea hash to sort names [ 274.487489][ T8851] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 274.522011][ T8851] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 274.653684][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 275.005547][ T8857] loop2: detected capacity change from 0 to 2048 [ 275.042904][ T33] team0 (unregistering): Port device team_slave_1 removed [ 275.071684][ T8857] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 275.112373][ T8857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.219532][ T33] team0 (unregistering): Port device team_slave_0 removed [ 275.374335][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.477598][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.296763][ T33] bond0 (unregistering): Released all slaves [ 276.451198][ T8782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.564139][ T8782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.691615][ T8883] loop7: detected capacity change from 0 to 512 [ 276.716250][ T8883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.733277][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 276.806552][ T8782] team0: Port device team_slave_0 added [ 276.825519][ T8782] team0: Port device team_slave_1 added [ 276.912578][ T8887] loop4: detected capacity change from 0 to 512 [ 276.923653][ T8883] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 276.945561][ T8887] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.953358][ T8883] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 276.972542][ T8883] EXT4-fs (loop7): orphan cleanup on readonly fs [ 277.011487][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.043512][ T8883] EXT4-fs warning (device loop7): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 277.077508][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.123021][ T8883] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 277.149259][ T8883] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1395: bg 0: block 40: padding at end of block bitmap is not set [ 277.149560][ T8887] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 277.227215][ T8887] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1397: attempt to clear invalid blocks 2 len 1 [ 277.254031][ T8782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.282628][ T8883] EXT4-fs (loop7): Remounting filesystem read-only [ 277.290162][ T8887] EXT4-fs (loop4): Remounting filesystem read-only [ 277.300174][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.313559][ T8883] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 277.324689][ T8887] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 277.363153][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.389973][ T8883] EXT4-fs (loop7): Remounting filesystem read-only [ 277.403171][ T8883] EXT4-fs (loop7): 1 truncate cleaned up [ 277.408883][ T8883] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 277.437703][ T8887] EXT4-fs (loop4): Remounting filesystem read-only [ 277.445478][ T8887] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1397: invalid indirect mapped block 1819239214 (level 0) [ 277.473011][ T8782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.485305][ T8887] EXT4-fs (loop4): Remounting filesystem read-only [ 277.492861][ T8887] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1397: invalid indirect mapped block 1819239214 (level 1) [ 277.526988][ T8887] EXT4-fs (loop4): Remounting filesystem read-only [ 277.541478][ T8887] EXT4-fs (loop4): 1 truncate cleaned up [ 277.588866][ T8883] EXT4-fs error (device loop7): ext4_encrypted_get_link:46: inode #16: comm syz.7.1395: bad symlink. [ 277.603531][ T8887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 277.665382][ T8782] device hsr_slave_0 entered promiscuous mode [ 277.712138][ T8782] device hsr_slave_1 entered promiscuous mode [ 277.748885][ T8782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.771924][ T8782] Cannot create hsr debugfs directory [ 277.932555][ T4263] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 278.011443][ T4263] EXT4-fs (loop4): Remounting filesystem read-only [ 278.061360][ T4263] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz-executor: corrupted in-inode xattr [ 278.109177][ T4263] EXT4-fs (loop4): Remounting filesystem read-only [ 278.158299][ T4263] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz-executor: corrupted in-inode xattr [ 278.231584][ T4263] EXT4-fs (loop4): Remounting filesystem read-only [ 278.689996][ T8782] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 278.722907][ T8782] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 278.794224][ T8782] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 278.805444][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 278.813728][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 278.848481][ T8782] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 279.201424][ T8782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.263072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.303780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.327734][ T8782] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.364837][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.384157][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.433316][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.440564][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.513379][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.556077][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.593412][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.612317][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.619507][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.691032][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.747076][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.813933][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.836577][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.864519][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.883924][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.901700][ T8945] loop2: detected capacity change from 0 to 1024 [ 279.903616][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.941212][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.983996][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.031440][ T8782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.066821][ T8945] hfsplus: xattr search failed [ 280.067213][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.155760][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.174101][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.367595][ T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.507055][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.518447][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.526992][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.536485][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.544463][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.581233][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.664720][ T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.971845][ T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.983628][ T8958] loop2: detected capacity change from 0 to 4096 [ 281.132473][ T8958] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 281.176107][ T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.216983][ T8958] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 281.280583][ T8958] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 281.553546][ T4256] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 281.587783][ T4256] ntfs3: loop2: ntfs_evict_inode r=9 failed, -22. [ 281.766275][ T8953] chnl_net:caif_netlink_parms(): no params data found [ 281.784671][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.792173][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.984699][ T8973] netlink: 'syz.2.1419': attribute type 4 has an invalid length. [ 281.995412][ T8782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.430196][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.447885][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.469180][ T8953] device bridge_slave_0 entered promiscuous mode [ 282.563045][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.570283][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.581546][ T8953] device bridge_slave_1 entered promiscuous mode [ 282.663881][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 282.771001][ T8992] loop6: detected capacity change from 0 to 64 [ 282.841720][ T8953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.929832][ T8992] overlayfs: upper fs needs to support d_type. [ 282.931517][ T8953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.961906][ T8992] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 282.983167][ T8992] overlayfs: failed to set xattr on upper [ 282.988942][ T8992] overlayfs: ...falling back to index=off,metacopy=off. [ 283.092535][ T8953] team0: Port device team_slave_0 added [ 283.247352][ T8953] team0: Port device team_slave_1 added [ 283.277167][ T5897] Trying to free block not in datazone [ 283.617518][ T9008] mmap: syz.6.1427 (9008) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 283.663907][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.674336][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.750664][ T8953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.850244][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.874492][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.914211][ T8953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.921222][ T8953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.992940][ T8953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.090772][ T8033] EXT4-fs (loop7): unmounting filesystem. [ 284.248526][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.265348][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.296706][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1430'. [ 284.324171][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.334565][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.485891][ T33] device hsr_slave_0 left promiscuous mode [ 284.522971][ T33] device hsr_slave_1 left promiscuous mode [ 284.549318][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.559353][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.590531][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.620106][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.631848][ T33] device bridge_slave_1 left promiscuous mode [ 284.661676][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.684172][ T33] device bridge_slave_0 left promiscuous mode [ 284.692483][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.733347][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 284.790187][ T33] device veth1_macvtap left promiscuous mode [ 284.818467][ T33] device veth0_macvtap left promiscuous mode [ 284.845117][ T33] device veth1_vlan left promiscuous mode [ 284.851000][ T33] device veth0_vlan left promiscuous mode [ 284.902446][ T9025] loop2: detected capacity change from 0 to 32768 [ 284.942193][ T9025] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 285.010830][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 285.010847][ T26] audit: type=1800 audit(1747750222.463:1034): pid=9025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1432" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 285.191118][ T4256] ocfs2: Unmounting device (7,2) on (node local) [ 285.369387][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.374617][ T9036] loop2: detected capacity change from 0 to 2048 [ 285.390115][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.410091][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.418345][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.426163][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.433825][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.440982][ T9036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.516878][ T9036] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (255) does not match entry length (44) [ 285.535806][ T9036] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (255) does not match entry length (44) [ 286.086374][ T33] team0 (unregistering): Port device team_slave_1 removed [ 286.143633][ T33] team0 (unregistering): Port device team_slave_0 removed [ 286.212020][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.275891][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.818946][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 286.924877][ T33] bond0 (unregistering): Released all slaves [ 287.048629][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.056916][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 287.121981][ T8782] device veth0_vlan entered promiscuous mode [ 287.178622][ T8953] device hsr_slave_0 entered promiscuous mode [ 287.192761][ T8953] device hsr_slave_1 entered promiscuous mode [ 287.235104][ T8953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.247170][ T8953] Cannot create hsr debugfs directory [ 287.454036][ T8782] device veth1_vlan entered promiscuous mode [ 287.535444][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 287.628063][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 287.684689][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 287.742737][ T8782] device veth0_macvtap entered promiscuous mode [ 287.870055][ T8782] device veth1_macvtap entered promiscuous mode [ 287.979706][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.009571][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.032431][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.037144][ T9048] loop6: detected capacity change from 0 to 32768 [ 288.061599][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.078819][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.085594][ T9048] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 288.105850][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.127866][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.140155][ T9048] [ 288.142609][ T9048] ====================================================== [ 288.147625][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.149621][ T9048] WARNING: possible circular locking dependency detected [ 288.149641][ T9048] 6.1.139-syzkaller #0 Not tainted [ 288.149651][ T9048] ------------------------------------------------------ [ 288.149657][ T9048] syz.6.1440/9048 is trying to acquire lock: [ 288.149667][ T9048] ffff8880725c5108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xad6/0x11e0 [ 288.149729][ T9048] [ 288.149729][ T9048] but task is already holding lock: [ 288.149735][ T9048] ffff8880725c6ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 288.149784][ T9048] [ 288.149784][ T9048] which lock already depends on the new lock. [ 288.149784][ T9048] [ 288.149790][ T9048] [ 288.149790][ T9048] the existing dependency chain (in reverse order) is: [ 288.149797][ T9048] [ 288.149797][ T9048] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 288.149825][ T9048] down_read+0x42/0x2d0 [ 288.149848][ T9048] ocfs2_init_acl+0x2fb/0x720 [ 288.189083][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.197519][ T9048] ocfs2_mknod+0x1463/0x2350 [ 288.197555][ T9048] ocfs2_create+0x1b6/0x4a0 [ 288.237876][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.241582][ T9048] path_openat+0x1187/0x2e70 [ 288.263982][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.266381][ T9048] do_filp_open+0x1c1/0x3c0 [ 288.283286][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.286926][ T9048] do_sys_openat2+0x142/0x490 [ 288.316438][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.317350][ T9048] __x64_sys_openat+0x135/0x160 [ 288.332632][ T9048] do_syscall_64+0x4c/0xa0 [ 288.337776][ T9048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.342441][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.344212][ T9048] [ 288.344212][ T9048] -> #1 (jbd2_handle){++++}-{0:0}: [ 288.344247][ T9048] jbd2_journal_lock_updates+0xa7/0x380 [ 288.364627][ T8782] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.364787][ T9048] __ocfs2_flush_truncate_log+0x2cd/0x11d0 [ 288.377905][ T8782] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.379763][ T9048] ocfs2_flush_truncate_log+0x4b/0x60 [ 288.394386][ T9048] ocfs2_sync_fs+0x113/0x310 [ 288.399544][ T9048] sync_filesystem+0x1be/0x220 [ 288.401144][ T8782] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.404844][ T9048] generic_shutdown_super+0x6b/0x340 [ 288.404872][ T9048] kill_block_super+0x7c/0xe0 [ 288.424579][ T9048] deactivate_locked_super+0x93/0xf0 [ 288.426762][ T8782] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.430403][ T9048] cleanup_mnt+0x463/0x4f0 [ 288.444053][ T9048] task_work_run+0x1ca/0x250 [ 288.449198][ T9048] exit_to_user_mode_loop+0xe6/0x110 [ 288.455046][ T9048] exit_to_user_mode_prepare+0xb1/0x140 [ 288.461169][ T9048] syscall_exit_to_user_mode+0x16/0x40 [ 288.467180][ T9048] do_syscall_64+0x58/0xa0 [ 288.472205][ T9048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.478663][ T9048] [ 288.478663][ T9048] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 288.489222][ T9048] __lock_acquire+0x2cf8/0x7c50 [ 288.494639][ T9048] lock_acquire+0x1b4/0x490 [ 288.499700][ T9048] down_write+0x36/0x60 [ 288.504413][ T9048] ocfs2_xattr_set+0xad6/0x11e0 [ 288.509820][ T9048] __vfs_setxattr+0x3e0/0x420 [ 288.515069][ T9048] __vfs_setxattr_noperm+0x129/0x5e0 [ 288.520905][ T9048] vfs_setxattr+0x168/0x2f0 [ 288.525970][ T9048] setxattr+0x2b2/0x2d0 [ 288.530684][ T9048] path_setxattr+0x142/0x280 [ 288.535845][ T9048] __x64_sys_lsetxattr+0xb4/0xd0 [ 288.541346][ T9048] do_syscall_64+0x4c/0xa0 [ 288.546320][ T9048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.552772][ T9048] [ 288.552772][ T9048] other info that might help us debug this: [ 288.552772][ T9048] [ 288.563024][ T9048] Chain exists of: [ 288.563024][ T9048] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle --> &oi->ip_xattr_sem [ 288.563024][ T9048] [ 288.578798][ T9048] Possible unsafe locking scenario: [ 288.578798][ T9048] [ 288.586271][ T9048] CPU0 CPU1 [ 288.591656][ T9048] ---- ---- [ 288.597044][ T9048] lock(&oi->ip_xattr_sem); [ 288.601665][ T9048] lock(jbd2_handle); [ 288.608276][ T9048] lock(&oi->ip_xattr_sem); [ 288.615409][ T9048] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 288.622731][ T9048] [ 288.622731][ T9048] *** DEADLOCK *** [ 288.622731][ T9048] [ 288.630902][ T9048] 3 locks held by syz.6.1440/9048: [ 288.636033][ T9048] #0: ffff88805f258460 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 288.645302][ T9048] #1: ffff8880725c6d88 (&sb->s_type->i_mutex_key#36){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 [ 288.655802][ T9048] #2: ffff8880725c6ab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 288.665777][ T9048] [ 288.665777][ T9048] stack backtrace: [ 288.671701][ T9048] CPU: 0 PID: 9048 Comm: syz.6.1440 Not tainted 6.1.139-syzkaller #0 [ 288.679788][ T9048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 288.687291][ T9077] loop2: detected capacity change from 0 to 8192 [ 288.689867][ T9048] Call Trace: [ 288.699495][ T9048] [ 288.702458][ T9048] dump_stack_lvl+0x168/0x22e [ 288.707180][ T9048] ? load_image+0x3b0/0x3b0 [ 288.711712][ T9048] ? show_regs_print_info+0x12/0x12 [ 288.716960][ T9048] ? print_circular_bug+0x12b/0x1a0 [ 288.722198][ T9048] check_noncircular+0x274/0x310 [ 288.727175][ T9048] ? add_chain_block+0x940/0x940 [ 288.732149][ T9048] ? lockdep_lock+0xdc/0x1e0 [ 288.733502][ T26] audit: type=1800 audit(1747750226.143:1035): pid=9077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1443" name="file1" dev="loop2" ino=1048647 res=0 errno=0 [ 288.736756][ T9048] ? lockdep_unlock+0x133/0x2d0 [ 288.762557][ T9048] ? lockdep_lock+0x1e0/0x1e0 [ 288.767267][ T9048] ? _find_first_zero_bit+0xcf/0x100 [ 288.772582][ T9048] __lock_acquire+0x2cf8/0x7c50 [ 288.777483][ T9048] ? verify_lock_unused+0x140/0x140 [ 288.782726][ T9048] ? vfs_setxattr+0x168/0x2f0 [ 288.787485][ T9048] ? __rwlock_init+0x140/0x140 [ 288.792291][ T9048] lock_acquire+0x1b4/0x490 [ 288.796843][ T9048] ? ocfs2_xattr_set+0xad6/0x11e0 [ 288.801900][ T9048] ? ocfs2_xattr_block_find+0x150/0x4b0 [ 288.807469][ T9048] ? __might_sleep+0xd0/0xd0 [ 288.812098][ T9048] ? preempt_count_add+0x8d/0x190 [ 288.817149][ T9048] ? read_lock_is_recursive+0x10/0x10 [ 288.822548][ T9048] ? rwsem_write_trylock+0x12f/0x1b0 [ 288.827858][ T9048] ? ocfs2_xattr_ibody_find+0x7c0/0x7c0 [ 288.833428][ T9048] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 288.838918][ T9048] down_write+0x36/0x60 [ 288.843103][ T9048] ? ocfs2_xattr_set+0xad6/0x11e0 [ 288.848154][ T9048] ocfs2_xattr_set+0xad6/0x11e0 [ 288.853045][ T9048] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 288.858812][ T9048] ? aa_get_newest_label+0xf4/0x5c0 [ 288.864046][ T9048] ? verify_lock_unused+0x140/0x140 [ 288.869274][ T9048] ? end_current_label_crit_section+0x170/0x170 [ 288.875546][ T9048] ? evm_protected_xattr_common+0x170/0x190 [ 288.881470][ T9048] ? evm_protect_xattr+0x7a0/0x990 [ 288.886618][ T9048] ? ocfs2_xattr_security_get+0x40/0x40 [ 288.892195][ T9048] __vfs_setxattr+0x3e0/0x420 [ 288.896917][ T9048] __vfs_setxattr_noperm+0x129/0x5e0 [ 288.902240][ T9048] vfs_setxattr+0x168/0x2f0 [ 288.906780][ T9048] ? xattr_permission+0x500/0x500 [ 288.911842][ T9048] ? _copy_from_user+0x10b/0x170 [ 288.916812][ T9048] ? setxattr+0x243/0x2d0 [ 288.921172][ T9048] setxattr+0x2b2/0x2d0 [ 288.925362][ T9048] ? path_setxattr+0x280/0x280 [ 288.930173][ T9048] ? __mnt_want_write+0x21f/0x2a0 [ 288.935224][ T9048] path_setxattr+0x142/0x280 [ 288.939847][ T9048] ? simple_xattr_list_add+0xf0/0xf0 [ 288.945165][ T9048] ? lock_chain_count+0x20/0x20 [ 288.950084][ T9048] __x64_sys_lsetxattr+0xb4/0xd0 [ 288.955056][ T9048] do_syscall_64+0x4c/0xa0 [ 288.959505][ T9048] ? clear_bhb_loop+0x60/0xb0 [ 288.964216][ T9048] ? clear_bhb_loop+0x60/0xb0 [ 288.968920][ T9048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.974853][ T9048] RIP: 0033:0x7f94a658e969 [ 288.979299][ T9048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.998938][ T9048] RSP: 002b:00007f94a73f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 289.007384][ T9048] RAX: ffffffffffffffda RBX: 00007f94a67b5fa0 RCX: 00007f94a658e969 [ 289.015389][ T9048] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000002c0 [ 289.023455][ T9048] RBP: 00007f94a6610ab1 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 289.031462][ T9048] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 289.039466][ T9048] R13: 0000000000000000 R14: 00007f94a67b5fa0 R15: 00007ffcaaa01688 [ 289.047490][ T9048] [ 289.056689][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 289.107428][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.150759][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.164756][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.192148][ T5897] ocfs2: Unmounting device (7,6) on (node local) [ 289.195296][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.209080][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.218241][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.489746][ T33] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.613481][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 289.756741][ T33] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.977543][ T33] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.126422][ T33] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.948728][ T33] device hsr_slave_0 left promiscuous mode [ 290.954975][ T33] device hsr_slave_1 left promiscuous mode [ 290.961174][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.968649][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.977824][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.986198][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.993798][ T33] device bridge_slave_1 left promiscuous mode [ 290.999954][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.008466][ T33] device bridge_slave_0 left promiscuous mode [ 291.015144][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.025752][ T33] device veth1_macvtap left promiscuous mode [ 291.031756][ T33] device veth0_macvtap left promiscuous mode [ 291.037891][ T33] device veth1_vlan left promiscuous mode [ 291.043982][ T33] device veth0_vlan left promiscuous mode [ 291.225446][ T33] team0 (unregistering): Port device team_slave_1 removed [ 291.256348][ T33] team0 (unregistering): Port device team_slave_0 removed [ 291.289418][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.321207][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.375762][ T33] bond0 (unregistering): Released all slaves [ 291.829739][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.898514][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.948229][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.988456][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.080965][ T33] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.128719][ T33] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.184135][ T33] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.247441][ T33] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.341080][ T33] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.387341][ T33] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.447650][ T33] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.497895][ T33] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.857683][ T33] device hsr_slave_0 left promiscuous mode [ 293.866380][ T33] device hsr_slave_1 left promiscuous mode [ 293.872726][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.881349][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.891198][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.898771][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.907915][ T33] device bridge_slave_1 left promiscuous mode [ 293.914412][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.924443][ T33] device bridge_slave_0 left promiscuous mode [ 293.930663][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.942510][ T33] device hsr_slave_0 left promiscuous mode [ 293.950436][ T33] device hsr_slave_1 left promiscuous mode [ 293.956947][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.967777][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.975581][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.984751][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.992445][ T33] device bridge_slave_1 left promiscuous mode [ 293.998690][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.008230][ T33] device bridge_slave_0 left promiscuous mode [ 294.014638][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.027285][ T33] device hsr_slave_0 left promiscuous mode [ 294.033680][ T33] device hsr_slave_1 left promiscuous mode [ 294.039868][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.047707][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.055290][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.062675][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.070374][ T33] device bridge_slave_1 left promiscuous mode [ 294.077201][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.085236][ T33] device bridge_slave_0 left promiscuous mode [ 294.091408][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.102281][ T33] device hsr_slave_0 left promiscuous mode [ 294.108795][ T33] device hsr_slave_1 left promiscuous mode [ 294.115118][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.122962][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.130423][ T33] device bridge_slave_1 left promiscuous mode [ 294.136903][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.145134][ T33] device bridge_slave_0 left promiscuous mode [ 294.151278][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.164063][ T33] device veth1_macvtap left promiscuous mode [ 294.170078][ T33] device veth0_macvtap left promiscuous mode [ 294.176386][ T33] device veth1_vlan left promiscuous mode [ 294.182143][ T33] device veth0_vlan left promiscuous mode [ 294.190063][ T33] device veth1_macvtap left promiscuous mode [ 294.196141][ T33] device veth0_macvtap left promiscuous mode [ 294.202182][ T33] device veth1_vlan left promiscuous mode [ 294.208123][ T33] device veth0_vlan left promiscuous mode [ 294.216996][ T33] device veth1_macvtap left promiscuous mode [ 294.223055][ T33] device veth0_macvtap left promiscuous mode [ 294.229095][ T33] device veth1_vlan left promiscuous mode [ 294.235089][ T33] device veth0_vlan left promiscuous mode [ 294.498720][ T33] team0 (unregistering): Port device team_slave_1 removed [ 294.509806][ T33] team0 (unregistering): Port device team_slave_0 removed [ 294.541114][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.574523][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.638052][ T33] bond0 (unregistering): Released all slaves [ 294.789636][ T33] team0 (unregistering): Port device team_slave_1 removed [ 294.819543][ T33] team0 (unregistering): Port device team_slave_0 removed [ 294.848638][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.880429][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.942005][ T33] bond0 (unregistering): Released all slaves [ 295.118153][ T33] team0 (unregistering): Port device team_slave_1 removed [ 295.147585][ T33] team0 (unregistering): Port device team_slave_0 removed [ 295.158427][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.171435][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.223963][ T33] bond0 (unregistering): Released all slaves [ 295.270998][ T33] bond0 (unregistering): Released all slaves [ 295.369800][ T33] team0 (unregistering): Port device team_slave_1 removed [ 295.398035][ T33] team0 (unregistering): Port device team_slave_0 removed [ 295.408346][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.420753][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.468690][ T33] bond0 (unregistering): Released all slaves