last executing test programs: 5m51.853618527s ago: executing program 5 (id=1408): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000080)={0x0, 0x10, 0x3, "259ee9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 5m49.015492211s ago: executing program 5 (id=1424): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000640)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) 5m45.651252299s ago: executing program 5 (id=1435): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 5m43.797288474s ago: executing program 5 (id=1445): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5m41.28710392s ago: executing program 5 (id=1455): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 5m35.437230137s ago: executing program 32 (id=1477): syz_emit_ethernet(0x2e, &(0x7f0000000400)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x1, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {0x11, 0x0, 0x0, @broadcast}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/igmp\x00') read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) 5m34.063829247s ago: executing program 5 (id=1485): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) 5m32.655413289s ago: executing program 33 (id=1485): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) 3m38.491433506s ago: executing program 2 (id=1900): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000180)=0x8) 3m37.678042418s ago: executing program 2 (id=1906): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}], 0x10) 3m37.101191574s ago: executing program 2 (id=1911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000020000000000000000000a68000000060a09040000000000000000020000003c000480380001800b00010064796e73657400002800028008000440000000110900010073797a3100000000080003400000000108000940000300000900010073797a30000006000900020073797a32"], 0x90}}, 0x0) 3m36.335857565s ago: executing program 2 (id=1915): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002900)='./file1\x00', 0x2008010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6e1, &(0x7f0000002d00)="$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") syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04022420"], 0x7) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 3m34.056252402s ago: executing program 2 (id=1926): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 3m29.929064186s ago: executing program 4 (id=1944): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x200c9a, &(0x7f0000000280)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) truncate(&(0x7f0000000080)='./file1\x00', 0x40000) 3m29.608103026s ago: executing program 2 (id=1945): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @none, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 3m28.313311882s ago: executing program 34 (id=1945): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @none, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 3m28.293418765s ago: executing program 4 (id=1952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3m28.035174807s ago: executing program 4 (id=1957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x80000017}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 3m27.707380404s ago: executing program 4 (id=1960): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 3m27.362245732s ago: executing program 4 (id=1965): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x7e, 0xfffff038}, {0x20, 0x0, 0x1, 0xfffff034}, {0x6, 0x0, 0x5}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 3m24.544217421s ago: executing program 3 (id=1989): syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000780)={[{@allow_utime}, {@gid={'gid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@dmask={'dmask', 0x3d, 0x8001}}, {@gid}, {@discard}, {@utf8}, {@errors_continue}, {@umask={'umask', 0x3d, 0x2}}, {@allow_utime={'allow_utime', 0x3d, 0x6}}, {@errors_remount}, {@discard}]}, 0x1, 0x152d, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0, 0x0) 3m23.994171701s ago: executing program 3 (id=1991): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@usrjquota}, {@nombcache}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noload}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file1\x00', 0x20fe000002) 3m22.311673256s ago: executing program 3 (id=1996): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x0, 0x0, r1}, 0xc) 3m21.689982585s ago: executing program 36 (id=1996): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x0, 0x0, r1}, 0xc) 6.927814971s ago: executing program 0 (id=3837): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 6.49559285s ago: executing program 0 (id=3841): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f00000003c0)='./bus/file0\x00', &(0x7f0000000000)='./file0\x00') 5.357797923s ago: executing program 1 (id=3851): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) 4.179803188s ago: executing program 0 (id=3861): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) 3.57150594s ago: executing program 0 (id=3867): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6c733d63703933362c63726561746f723d762ae76f2c6e6f626172726965722c756d61736b3d303030303030303030303030303030303030303030302c00907b99c243555fdaa0fa82f76c7040e292995ad97add6fa99378b851e65fe4d778ac499b31b2675243e5ea2f1840cdf32686d7a44ea9a49acf89647d4da2267bfe88c9df34b3c06356bb7ea2c23196a9e84f73ae08b1725a8c11a363e846e9b1e32cf9d3b5ba96f7ee318325e2bf96a15d2cf49576e5cdd0d5f841afcffab8699de74d466901f310d66e8706ba6ccddf"], 0x1, 0x6b3, &(0x7f0000000780)="$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") syz_mount_image$exfat(0x0, &(0x7f0000004100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1905912, 0x0, 0xff, 0x0, &(0x7f0000001f80)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.489086884s ago: executing program 7 (id=3868): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xffffc, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.309936067s ago: executing program 1 (id=3871): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xffffffb7}], 0x1}}], 0x2, 0x0) 3.086720363s ago: executing program 7 (id=3873): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0xc400, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="e9a1e0876ff6405721a87b84550bc72d84303895bcc0be41007212e4981e040435348c6c"], 0x1, 0x297, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) sendfile(r0, r0, 0x0, 0xfffe82) 3.078286205s ago: executing program 0 (id=3874): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000000340)) 2.629504276s ago: executing program 1 (id=3888): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) 2.351915251s ago: executing program 7 (id=3878): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x3}, 0x2) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200080c0) 2.351531133s ago: executing program 6 (id=3879): syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x22001) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) 2.299601386s ago: executing program 1 (id=3880): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) 2.266873177s ago: executing program 0 (id=3881): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './bus/file0/../file0'}, 0x18) fallocate(r0, 0x0, 0x0, 0x1001f0) 2.10183577s ago: executing program 9 (id=3882): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.791684398s ago: executing program 1 (id=3883): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) 1.79123237s ago: executing program 8 (id=3884): r0 = socket(0x80000000000000a, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.57627701s ago: executing program 8 (id=3885): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.576100318s ago: executing program 9 (id=3886): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xffffc, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.570702113s ago: executing program 6 (id=3887): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}, 0x0) 1.356654972s ago: executing program 8 (id=3889): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1.339651355s ago: executing program 6 (id=3890): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 1.338066043s ago: executing program 1 (id=3891): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="f6", 0x1}], 0x1, 0x5, 0x1000) 1.276739953s ago: executing program 9 (id=3892): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x403, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/sysvipc/msg\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x200040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.176662118s ago: executing program 7 (id=3893): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a4, &(0x7f0000000700)={{@any, 0xffffffff}, @host, 0xd, 0x8000000000000000, 0x0, 0x0, 0x1000000005, 0x7, 0x4}) 1.095623334s ago: executing program 6 (id=3894): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000003800128009000100766c616e000000002800028006000100040000001c0003800c00010007000000010000000c000100f7ffffff0300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00('], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) 975.46561ms ago: executing program 8 (id=3895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 871.627747ms ago: executing program 9 (id=3896): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x400, @remote, 0x2}, 0x1c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 822.976134ms ago: executing program 7 (id=3897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000150a0102000000000000000000000020090001"], 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 676.559338ms ago: executing program 9 (id=3898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@tcp, 0x1}, 0x20) 635.443269ms ago: executing program 8 (id=3899): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 584.327324ms ago: executing program 6 (id=3900): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x210080, &(0x7f0000000440)={[{@gid}, {@nls={'nls', 0x3d, 'cp1250'}}, {@part={'part', 0x3d, 0x4}}, {@nodecompose}, {@force}, {@gid}, {@nobarrier}, {}]}, 0x44, 0x70f, &(0x7f00000005c0)="$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") setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200)=@random={'trusted.', 'R\xc12'}, 0x0, 0x0, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x86, 0xffffffff, 0x40}) llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/169, 0xd1) 400.710755ms ago: executing program 7 (id=3901): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 299.25409ms ago: executing program 6 (id=3902): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '#! ', 0x3a, '#! ', 0x3a, './file1'}, 0x2d) 282.84207ms ago: executing program 9 (id=3903): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}]}}) 0s ago: executing program 8 (id=3904): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "581128b7a0fc864e", "48c251f26e1aa20cab39324e9151330d67e80db2d30454014899c497851d3340", "772a983e", "dac799e4646ec028"}, 0x38) kernel console output (not intermixed with test programs): 494.606395][T10999] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 494.606461][T10999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 494.606505][T10999] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 494.606562][T10999] kill_f2fs_super+0x3e5/0x490 [ 494.606618][T10999] ? __pfx_kill_f2fs_super+0x10/0x10 [ 494.606694][T10999] ? lockdep_hardirqs_on+0x78/0x100 [ 494.606743][T10999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 494.606795][T10999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 494.606855][T10999] deactivate_locked_super+0xc1/0x1b0 [ 494.606920][T10999] deactivate_super+0xe7/0x110 [ 494.606957][T10999] cleanup_mnt+0x21f/0x450 [ 494.607005][T10999] task_work_run+0x150/0x240 [ 494.607066][T10999] ? __pfx_task_work_run+0x10/0x10 [ 494.607126][T10999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 494.607173][T10999] ? srso_alias_return_thunk+0x5/0xfbef5 [ 494.607226][T10999] exit_to_user_mode_loop+0x100/0x4a0 [ 494.607286][T10999] do_syscall_64+0x67c/0xf80 [ 494.607335][T10999] ? irqentry_exit+0x138/0x670 [ 494.607389][T10999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.607427][T10999] RIP: 0033:0x7f8b8f79d1d7 [ 494.607456][T10999] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 494.607491][T10999] RSP: 002b:00007fff554ffb68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 494.607527][T10999] RAX: 0000000000000000 RBX: 00007f8b8f831c3b RCX: 00007f8b8f79d1d7 [ 494.607550][T10999] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff554ffc20 [ 494.607574][T10999] RBP: 00007fff554ffc20 R08: 00007fff55500c20 R09: 00000000ffffffff [ 494.607598][T10999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff55500cb0 [ 494.607621][T10999] R13: 00007f8b8f831c3b R14: 0000000000078b43 R15: 00007fff55500cf0 [ 494.607670][T10999] [ 495.145358][T10999] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 495.276286][T13497] loop8: detected capacity change from 0 to 2048 [ 495.359319][T13497] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 495.404784][T13501] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.426800][T10378] udevd[10378]: incorrect nilfs2 checksum on /dev/loop8 [ 495.682878][T10458] udevd[10458]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 495.713345][T10367] udevd[10367]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 495.994768][ T30] audit: type=1326 audit(1771231559.723:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13514 comm="syz.6.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0776b9bf79 code=0x7ffc0000 [ 496.103146][ T30] audit: type=1326 audit(1771231559.723:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13514 comm="syz.6.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0776b9bf79 code=0x7ffc0000 [ 496.230879][ T30] audit: type=1326 audit(1771231559.763:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13514 comm="syz.6.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0776b9bf79 code=0x7ffc0000 [ 496.325440][ T30] audit: type=1326 audit(1771231559.763:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13514 comm="syz.6.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0776b9bce2 code=0x7ffc0000 [ 496.410490][T13515] loop6: detected capacity change from 0 to 8192 [ 496.419453][ T30] audit: type=1326 audit(1771231559.893:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13514 comm="syz.6.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0776b5c84e code=0x7ffc0000 [ 496.534178][ T30] audit: type=1326 audit(1771231560.153:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13514 comm="syz.6.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0776b9bda7 code=0x7ffc0000 [ 496.632510][T13526] loop9: detected capacity change from 0 to 256 [ 496.662650][ T30] audit: type=1326 audit(1771231560.153:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13514 comm="syz.6.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0776b5c84e code=0x7ffc0000 [ 496.737766][ T30] audit: type=1326 audit(1771231560.153:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13514 comm="syz.6.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0776b9bc0b code=0x7ffc0000 [ 496.865675][ T30] audit: type=1326 audit(1771231560.203:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13514 comm="syz.6.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0776b5c84e code=0x7ffc0000 [ 497.004220][T13535] netlink: 'syz.6.2872': attribute type 2 has an invalid length. [ 497.040717][T13540] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2872'. [ 497.044260][T13536] pimreg: entered allmulticast mode [ 497.381631][T13552] loop8: detected capacity change from 0 to 512 [ 497.461210][T13552] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 497.562474][T13552] EXT4-fs (loop8): 1 truncate cleaned up [ 497.635760][T13552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.820092][T13552] EXT4-fs: Ignoring removed orlov option [ 497.846284][T13552] EXT4-fs: Ignoring removed orlov option [ 497.889638][T13552] EXT4-fs (loop8): can't disable delalloc during remount [ 497.913232][T13571] loop0: detected capacity change from 0 to 256 [ 497.930870][T13571] exfat: Deprecated parameter 'namecase' [ 498.051734][T13571] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 498.182511][T10942] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.363516][ T5839] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 498.418371][ T5830] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 498.427601][ T5830] Bluetooth: hci1: Injecting HCI hardware error event [ 498.436482][ T5830] Bluetooth: hci1: hardware error 0x00 [ 498.513638][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 498.542602][ T5839] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.596069][ T5839] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.615317][ T5839] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 498.652938][ T5839] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10496, setting to 8 [ 498.697865][ T5839] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 498.714350][T13593] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 498.730310][ T5839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.767513][T13577] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 498.797345][ T5839] hub 10-1:1.0: bad descriptor, ignoring hub [ 498.845363][ T5839] hub 10-1:1.0: probe with driver hub failed with error -5 [ 498.892346][ T5839] cdc_wdm 10-1:1.0: skipping garbage [ 498.926163][ T5839] cdc_wdm 10-1:1.0: skipping garbage [ 498.963226][ T5839] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 498.977260][ T5839] cdc_wdm 10-1:1.0: Unknown control protocol [ 499.133330][T13603] loop0: detected capacity change from 0 to 512 [ 499.163089][T13603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.228349][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 499.235164][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 499.241687][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 499.248387][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 499.254903][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 499.261597][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 499.270632][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 499.277333][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 499.283778][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 499.290476][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 499.296922][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 499.303615][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 499.309970][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 499.322227][T13603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.385129][T13603] ext4 filesystem being mounted at /527/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.527770][ T5839] usb 10-1: USB disconnect, device number 8 [ 499.533133][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 499.533158][ T30] audit: type=1800 audit(1771231563.275:156): pid=13603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2902" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 499.803921][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.930209][T13622] loop1: detected capacity change from 0 to 22 [ 499.953399][T13622] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 499.992978][T13622] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 500.502244][ T5830] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 500.739713][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.748935][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.949241][T13649] loop8: detected capacity change from 0 to 64 [ 501.474440][T13662] ieee802154 phy0 wpan0: encryption failed: -126 [ 501.682152][T13673] macvlan0: entered promiscuous mode [ 501.787785][T13678] loop8: detected capacity change from 0 to 64 [ 502.167171][T13685] loop1: detected capacity change from 0 to 2048 [ 502.244150][T13685] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 502.383205][T13685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 502.416320][T13694] loop7: detected capacity change from 0 to 2048 [ 502.516105][T13694] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 502.633549][T10458] udevd[10458]: incorrect nilfs2 checksum on /dev/loop7 [ 502.654779][T13703] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 502.894148][T13709] netlink: 'syz.1.2944': attribute type 2 has an invalid length. [ 502.935009][T13712] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2944'. [ 502.968985][T13710] loop9: detected capacity change from 0 to 2048 [ 503.051879][T13714] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.666665][T13692] loop8: detected capacity change from 0 to 32768 [ 503.696791][T13692] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2938 (13692) [ 503.769655][T13692] BTRFS info (device loop8): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 503.800429][T13692] BTRFS info (device loop8): using xxhash64 checksum algorithm [ 503.909191][T13692] BTRFS info (device loop8): enabling ssd optimizations [ 503.930449][T13692] BTRFS info (device loop8): turning on async discard [ 503.978077][T13692] BTRFS info (device loop8): enabling free space tree [ 504.252268][T10942] BTRFS info (device loop8): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 505.020716][T13779] netlink: 'syz.0.2963': attribute type 2 has an invalid length. [ 505.039027][T13736] loop6: detected capacity change from 0 to 32768 [ 505.069465][T13779] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2963'. [ 505.639133][T13794] loop8: detected capacity change from 0 to 512 [ 505.716791][T13794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 505.815441][T13794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.878730][T13794] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 506.038173][ T5827] IPVS: starting estimator thread 0... [ 506.139476][T13810] IPVS: using max 22 ests per chain, 52800 per kthread [ 506.183023][ T30] audit: type=1800 audit(1771231569.928:157): pid=13794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2970" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 506.295790][T13813] loop6: detected capacity change from 0 to 256 [ 506.415829][T13813] FAT-fs (loop6): Directory bread(block 64) failed [ 506.420830][T10942] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.443272][T13813] FAT-fs (loop6): Directory bread(block 65) failed [ 506.487923][T13813] FAT-fs (loop6): Directory bread(block 66) failed [ 506.492163][T13816] loop1: detected capacity change from 0 to 512 [ 506.538111][T13813] FAT-fs (loop6): Directory bread(block 67) failed [ 506.548574][T13818] loop7: detected capacity change from 0 to 256 [ 506.608255][T13813] FAT-fs (loop6): Directory bread(block 68) failed [ 506.615025][T13813] FAT-fs (loop6): Directory bread(block 69) failed [ 506.631150][T13813] FAT-fs (loop6): Directory bread(block 70) failed [ 506.666905][T13818] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 506.687382][T13816] EXT4-fs (loop1): 1 orphan inode deleted [ 506.709054][T13813] FAT-fs (loop6): Directory bread(block 71) failed [ 506.715669][T13813] FAT-fs (loop6): Directory bread(block 72) failed [ 506.721237][T13816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.722433][ T1099] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 506.754966][T13816] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.818456][T13813] FAT-fs (loop6): Directory bread(block 73) failed [ 506.837304][ T1099] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 506.882158][ T5839] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 507.079676][ T5839] usb 10-1: Using ep0 maxpacket: 8 [ 507.120512][T11098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.130719][ T5839] usb 10-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 507.167536][ T5839] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 507.208964][ T5839] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 507.224372][ T5839] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 507.248616][ T5839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.301641][ T5839] usb 10-1: config 0 descriptor?? [ 507.523737][T10106] usb 10-1: USB disconnect, device number 9 [ 508.153446][T13859] loop7: detected capacity change from 0 to 128 [ 508.243904][T13859] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 508.276117][T13859] hpfs: filesystem error: improperly stopped [ 508.306823][T13859] hpfs: You really don't want any checks? You are crazy... [ 508.348563][T13859] hpfs: hpfs_map_sector(): read error [ 508.367048][T13859] hpfs: code page support is disabled [ 508.407407][T13859] hpfs: hpfs_map_4sectors(): unaligned read [ 508.428471][T13859] hpfs: hpfs_map_4sectors(): unaligned read [ 508.438740][T13859] hpfs: filesystem error: unable to find root dir [ 508.452243][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 509.037972][ T5827] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 509.121553][T13861] loop9: detected capacity change from 0 to 32768 [ 509.200274][T13861] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 509.217871][ T30] audit: type=1326 audit(1771231572.960:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe79bf79 code=0x7ffc0000 [ 509.248024][ T5827] usb 9-1: Using ep0 maxpacket: 32 [ 509.298297][ T5827] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 509.325165][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 509.345697][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 509.377370][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 509.395874][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 509.408668][ T30] audit: type=1326 audit(1771231573.000:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe79bf79 code=0x7ffc0000 [ 509.415787][ T5827] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 509.462912][ T5827] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.481230][ T5827] usb 9-1: Product: syz [ 509.497910][ T5827] usb 9-1: Manufacturer: syz [ 509.502538][ T5827] usb 9-1: SerialNumber: syz [ 509.560655][ T30] audit: type=1326 audit(1771231573.000:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe79bf79 code=0x7ffc0000 [ 509.629081][ T5827] usb 9-1: config 0 descriptor?? [ 509.631033][ T30] audit: type=1326 audit(1771231573.000:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe79bf79 code=0x7ffc0000 [ 509.662179][T13904] sock: sock_timestamping_bind_phc: sock not bind to device [ 509.717529][ T30] audit: type=1326 audit(1771231573.040:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f95fe79bf79 code=0x7ffc0000 [ 509.771210][ T30] audit: type=1326 audit(1771231573.040:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe79bf79 code=0x7ffc0000 [ 509.845414][T13861] XFS (loop9): Ending clean mount [ 509.881473][ T30] audit: type=1326 audit(1771231573.040:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe79bf79 code=0x7ffc0000 [ 509.980718][ T30] audit: type=1326 audit(1771231573.040:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.1.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe79bf79 code=0x7ffc0000 [ 510.015315][T13911] ieee802154 phy0 wpan0: encryption failed: -126 [ 510.184039][T10999] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 510.270084][ T5827] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 510.276267][ T5827] input input29: Device does not respond to id packet P [ 510.301281][ T5827] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 510.307406][ T5827] input input29: Device does not respond to id packet B [ 510.320906][ T5827] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 510.337144][ T5827] input input29: Device does not respond to id packet N [ 510.344488][ T5827] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 510.368762][ T5827] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 510.387592][ T5827] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 510.394369][ T5827] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 510.411782][ T5827] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input29 [ 510.535093][ T5827] usb 9-1: USB disconnect, device number 5 [ 510.596549][T13917] loop0: detected capacity change from 0 to 512 [ 510.630980][T13917] EXT4-fs: Ignoring removed nobh option [ 510.752559][T13917] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.3022: corrupted inode contents [ 510.797599][T13917] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 510.802253][T13917] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #3: comm syz.0.3022: mark_inode_dirty error [ 510.811688][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 510.811720][ C0] EXT4-fs (loop0): initial error at time 1771231574: ext4_do_update_inode:5569: inode 3 [ 510.811776][ C0] EXT4-fs (loop0): last error at time 1771231574: ext4_do_update_inode:5569: inode 3 [ 510.900783][T13917] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 510.946350][T13917] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.3022: corrupted inode contents [ 510.986458][T13909] loop7: detected capacity change from 0 to 32768 [ 511.057201][T13917] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 511.059579][T13917] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.3022: mark_inode_dirty error [ 511.086084][T13917] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 511.121035][T13917] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.3022: Failed to acquire dquot type 0 [ 511.150767][T13917] loop0: lost filesystem error report for type 5 error -117 [ 511.169265][T13917] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.3022: corrupted inode contents [ 511.192127][T13917] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 511.194794][T13917] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.3022: mark_inode_dirty error [ 511.248099][T13917] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 511.285031][T13917] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.3022: corrupted inode contents [ 511.356729][T13917] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 511.373461][T13917] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.3022: mark_inode_dirty error [ 511.440538][T13917] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 511.441058][T13917] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.3022: corrupted inode contents [ 511.510437][T13917] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 511.517918][T13917] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 511.581545][T13917] loop0: lost filesystem error report for type 5 error -117 [ 511.582003][T13917] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.3022: corrupted inode contents [ 511.613991][T13917] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 511.620701][T13917] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.3022: mark_inode_dirty error [ 511.668356][T13917] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 511.697840][T13917] loop0: lost filesystem error report for type 5 error -117 [ 511.731711][T13917] EXT4-fs (loop0): 1 truncate cleaned up [ 511.782892][T13917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.847752][T13917] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.876803][T13934] loop7: detected capacity change from 0 to 2048 [ 511.958401][T13939] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 512.016177][T13917] EXT4-fs warning (device loop0): ext4_es_cache_extent:1079: inode #3: comm syz.0.3022: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 512.016177][T13917] [ 512.052883][T13917] EXT4-fs error (device loop0): ext4_generic_delete_entry:2665: inode #12: block 13: comm syz.0.3022: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 512.110777][T13917] EXT4-fs error (device loop0) in ext4_delete_entry:2737: Corrupt filesystem [ 512.346833][ T12] __quota_error: 4 callbacks suppressed [ 512.346857][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 512.367770][T13926] comedi comedi2: reset error (fatal) [ 512.387054][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.416319][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 512.461472][ T12] loop0: lost filesystem error report for type 5 error -117 [ 512.613443][T13952] tipc: Enabled bearer , priority 10 [ 512.867606][T13959] loop0: detected capacity change from 0 to 2048 [ 512.907434][T13959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.946620][T13959] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.231729][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.493477][T13979] loop1: detected capacity change from 0 to 256 [ 513.508474][T13979] exfat: Deprecated parameter 'utf8' [ 513.539781][T13979] exfat: Deprecated parameter 'namecase' [ 513.565744][T13979] exfat: Deprecated parameter 'namecase' [ 513.585877][T13979] exfat: Deprecated parameter 'utf8' [ 513.653259][T13979] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 513.698503][T13979] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 513.947672][ T5839] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 514.043053][T13994] loop0: detected capacity change from 0 to 256 [ 514.116029][T13994] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 514.141961][ T5839] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 514.167144][T13998] loop7: detected capacity change from 0 to 1024 [ 514.186194][ T5839] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 514.187909][T14000] loop6: detected capacity change from 0 to 128 [ 514.245119][ T5839] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 514.274514][T13998] hfsplus: bad catalog entry type [ 514.304859][ T5839] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 514.324328][ T5839] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 514.336021][ T5839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.343265][T14000] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 514.360309][ T5839] usb 10-1: config 0 descriptor?? [ 514.429211][T14000] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 514.560970][ T12] hfsplus: b-tree write err: -5, ino 25 [ 514.591220][ T12] hfsplus: b-tree write err: -5, ino 4 [ 514.611375][ T12] hfsplus: b-tree write err: -5, ino 2 [ 514.631217][ T5839] hdpvr 10-1:0.0: firmware version 0x0 dated [ 514.651125][ T5839] hdpvr 10-1:0.0: untested firmware, the driver might not work. [ 514.754395][ T9545] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 515.102675][T14018] loop1: detected capacity change from 0 to 2048 [ 515.122090][ T5839] hdpvr 10-1:0.0: Could not setup controls [ 515.147972][T14018] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 515.149656][ T5839] hdpvr 10-1:0.0: registering videodev failed [ 515.228350][T14023] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.244859][ T5839] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -71 [ 515.294396][ T5839] usb 10-1: USB disconnect, device number 10 [ 515.376296][T14025] loop6: detected capacity change from 0 to 512 [ 515.457904][T14025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 515.622200][T14025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.716923][T14025] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.035150][ T9545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.136564][T14014] loop8: detected capacity change from 0 to 32768 [ 516.168858][T14043] loop9: detected capacity change from 0 to 512 [ 516.184595][T14014] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 516.212480][T14043] EXT4-fs warning (device loop9): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 516.266917][T14043] EXT4-fs warning (device loop9): dx_probe:848: Enable large directory feature to access it [ 516.278979][T14043] EXT4-fs warning (device loop9): dx_probe:933: inode #2: comm syz.9.3076: Corrupt directory, running e2fsck is recommended [ 516.299056][T14043] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 516.312589][T14014] XFS (loop8): Ending clean mount [ 516.340317][T14043] EXT4-fs error (device loop9): ext4_iget_extra_inode:5024: inode #15: comm syz.9.3076: corrupted in-inode xattr: invalid ea_ino [ 516.345601][ T5841] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 516.434170][T14043] fserror_report: 1 callbacks suppressed [ 516.434194][T14043] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 516.454082][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 516.469685][ C1] EXT4-fs (loop9): initial error at time 1771231580: ext4_iget_extra_inode:5024: inode 15 [ 516.479708][ C1] EXT4-fs (loop9): last error at time 1771231580: ext4_iget_extra_inode:5024: inode 15 [ 516.490820][T14043] EXT4-fs (loop9): Remounting filesystem read-only [ 516.501967][T14043] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.534121][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 516.541977][ T5841] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 516.581219][ T5841] usb 2-1: config 0 has no interface number 0 [ 516.605314][ T5841] usb 2-1: config 0 interface 129 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.654481][ T5841] usb 2-1: config 0 interface 129 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.659983][T14060] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3080'. [ 516.681009][T10942] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 516.691170][ T5841] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 516.710472][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.722247][T10999] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.778061][ T5841] usb 2-1: config 0 descriptor?? [ 517.040516][T14064] loop9: detected capacity change from 0 to 256 [ 517.103679][T14064] FAT-fs (loop9): Directory bread(block 64) failed [ 517.113838][T14064] FAT-fs (loop9): Directory bread(block 65) failed [ 517.122944][T14064] FAT-fs (loop9): Directory bread(block 66) failed [ 517.138742][T14066] loop0: detected capacity change from 0 to 128 [ 517.193798][T14064] FAT-fs (loop9): Directory bread(block 67) failed [ 517.233892][T14064] FAT-fs (loop9): Directory bread(block 68) failed [ 517.247841][ T5841] uclogic 0003:28BD:0071.003D: interface is invalid, ignoring [ 517.273900][T14064] FAT-fs (loop9): Directory bread(block 69) failed [ 517.309678][T14064] FAT-fs (loop9): Directory bread(block 70) failed [ 517.336656][T14064] FAT-fs (loop9): Directory bread(block 71) failed [ 517.343287][T14064] FAT-fs (loop9): Directory bread(block 72) failed [ 517.395431][T14064] FAT-fs (loop9): Directory bread(block 73) failed [ 517.467643][T14049] loop7: detected capacity change from 0 to 32768 [ 517.475790][ T5827] usb 2-1: USB disconnect, device number 23 [ 517.497635][T14049] xfs: Deprecated parameter 'attr2' [ 517.508108][T14049] XFS: attr2 mount option is deprecated. [ 517.562274][T14049] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 517.695368][T14079] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3087'. [ 517.713874][T14049] XFS (loop7): Ending clean mount [ 517.733492][ T5841] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 517.748750][T14049] XFS (loop7): Quotacheck needed: Please wait. [ 517.800746][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3089'. [ 517.880065][T14049] XFS (loop7): Quotacheck: Done. [ 517.902113][ T5841] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 517.956928][ T5841] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 518.002052][ T5841] usb 9-1: config 0 has no interface number 0 [ 518.030200][ T5841] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 518.082243][ T5841] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 518.123439][ T5841] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 518.136536][ T5841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.163359][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 518.196583][ T5841] usb 9-1: config 0 descriptor?? [ 518.207684][ T9578] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 518.864402][ T5841] usb 9-1: USB disconnect, device number 6 [ 519.458861][T14117] loop7: detected capacity change from 0 to 8192 [ 519.523176][T14117] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 519.565818][T14117] UDF-fs: Scanning with blocksize 512 failed [ 519.656745][T14117] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 519.725010][T14117] UDF-fs: Scanning with blocksize 1024 failed [ 519.769850][T14117] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 519.834448][T14117] UDF-fs: Scanning with blocksize 2048 failed [ 519.946664][T14117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.133296][ T30] audit: type=1800 audit(1771231583.855:168): pid=14117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3095" name="bus" dev="loop7" ino=824 res=0 errno=0 [ 520.277482][T14147] loop6: detected capacity change from 0 to 512 [ 520.304819][T14147] EXT4-fs: Ignoring removed mblk_io_submit option [ 520.342185][ T5839] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 520.421207][T14147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.544999][ T5839] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 520.573049][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.611533][ T5839] usb 1-1: config 0 descriptor?? [ 520.649605][ T5839] cp210x 1-1:0.0: cp210x converter detected [ 520.804778][ T9545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.028211][T14163] loop8: detected capacity change from 0 to 1024 [ 521.094992][ T5839] usb 1-1: cp210x converter now attached to ttyUSB0 [ 521.165185][T14163] hfsplus: bad catalog entry type [ 521.261821][T14172] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.3123'. [ 521.314194][ T5939] usb 1-1: USB disconnect, device number 25 [ 521.335048][ T5939] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 521.399288][ T5939] cp210x 1-1:0.0: device disconnected [ 521.409375][ T36] hfsplus: b-tree write err: -5, ino 25 [ 521.472079][ T36] hfsplus: b-tree write err: -5, ino 4 [ 521.496342][ T36] hfsplus: b-tree write err: -5, ino 2 [ 521.514460][T14176] loop9: detected capacity change from 0 to 128 [ 521.561729][T14176] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 521.636114][T14176] hpfs: filesystem error: improperly stopped [ 521.700396][T14176] hpfs: You really don't want any checks? You are crazy... [ 521.740734][T14176] hpfs: hpfs_map_sector(): read error [ 521.749425][T14176] hpfs: code page support is disabled [ 521.757728][T14176] hpfs: hpfs_map_4sectors(): unaligned read [ 521.771134][T14176] hpfs: hpfs_map_4sectors(): unaligned read [ 521.798264][T14141] loop1: detected capacity change from 0 to 32768 [ 521.811348][T14182] netlink: 'syz.8.3126': attribute type 3 has an invalid length. [ 521.829048][T14176] hpfs: filesystem error: unable to find root dir [ 521.830673][T14182] netlink: 'syz.8.3126': attribute type 3 has an invalid length. [ 521.872260][T14187] loop6: detected capacity change from 0 to 64 [ 521.887362][T14182] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3126'. [ 521.933577][T14141] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 522.251390][T14141] XFS (loop1): Ending clean mount [ 522.419328][T14209] loop6: detected capacity change from 0 to 64 [ 522.435148][T14207] netlink: 'syz.9.3134': attribute type 1 has an invalid length. [ 522.508347][T11098] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 522.531120][T14207] netlink: 16098 bytes leftover after parsing attributes in process `syz.9.3134'. [ 522.674080][T14211] loop7: detected capacity change from 0 to 1024 [ 522.743042][T14211] hfsplus: b-tree write err: -5, ino 2 [ 522.976749][T14213] loop6: detected capacity change from 0 to 1024 [ 522.997457][ T130] hfsplus: b-tree write err: -5, ino 25 [ 523.012616][ T130] hfsplus: b-tree write err: -5, ino 4 [ 523.041912][ T130] hfsplus: b-tree write err: -5, ino 2 [ 523.047498][ T130] hfsplus: b-tree write err: -5, ino 26 [ 523.162276][T14213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.303617][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 523.372774][T14213] EXT4-fs: Ignoring removed orlov option [ 523.436228][T14213] EXT4-fs (loop6): can't enable nombcache during remount [ 523.574918][T14208] loop8: detected capacity change from 0 to 32768 [ 523.785723][ T9545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.470188][ T5839] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 524.522819][ T5841] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 524.611718][T14250] loop6: detected capacity change from 0 to 4096 [ 524.648378][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 524.680043][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 524.683311][ T5839] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.705892][ T5841] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 524.717129][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 524.744555][ T5839] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 524.753698][T14252] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 524.755101][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.810003][ T5841] usb 1-1: Product: syz [ 524.817673][ T5841] usb 1-1: Manufacturer: syz [ 524.827164][ T5841] usb 1-1: SerialNumber: syz [ 524.837032][ T5841] usb 1-1: config 0 descriptor?? [ 524.848630][ T5841] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 524.868425][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.879348][ T5841] pctv452e: pctv452e_power_ctrl: 1 [ 524.879348][ T5841] [ 524.903424][ T5841] usb 1-1: selecting invalid altsetting 3 [ 524.921865][ T5839] usb 2-1: config 0 descriptor?? [ 524.929665][ T5841] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 524.929665][ T5841] [ 524.955448][ T5841] dvb-usb: bulk message failed: -22 (5/0) [ 525.018067][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 525.079206][T14240] dvb-usb: bulk message failed: -22 (7/0) [ 525.100444][T14240] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 525.107828][ T5841] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 525.143679][ T5841] usb 1-1: media controller created [ 525.163999][ T5841] dvb-usb: bulk message failed: -22 (8/0) [ 525.210085][ T5841] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 525.237502][ T5841] dvb-usb: MAC address reading failed. [ 525.299049][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.367991][ T5839] input: HID 28bd:1903 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:1903.003E/input/input31 [ 525.443064][T14264] loop8: detected capacity change from 0 to 2048 [ 525.491509][T14264] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 525.543918][ T5839] uclogic 0003:28BD:1903.003E: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.1-1/input0 [ 525.564473][T14266] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 525.642373][ T5841] DVB: Unable to find symbol stb0899_attach() [ 525.687557][ T5839] usb 2-1: USB disconnect, device number 24 [ 525.694260][ T5841] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 526.029360][ T5841] rc_core: IR keymap rc-tt-1500 not found [ 526.046082][ T5841] Registered IR keymap rc-empty [ 526.077893][T14270] fido_id[14270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 526.082421][ T5841] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 526.105158][T14274] loop8: detected capacity change from 0 to 512 [ 526.152693][T14274] EXT4-fs: Ignoring removed nobh option [ 526.172028][ T5841] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input32 [ 526.219444][ T5841] dvb-usb: schedule remote query interval to 100 msecs. [ 526.238449][T14274] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #3: comm syz.8.3163: corrupted inode contents [ 526.259257][ T5841] pctv452e: pctv452e_power_ctrl: 0 [ 526.259257][ T5841] [ 526.266723][ T5841] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 526.276826][T14274] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 526.277420][T14274] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #3: comm syz.8.3163: mark_inode_dirty error [ 526.278843][ T5841] usb 1-1: USB disconnect, device number 26 [ 526.286631][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 526.310196][ C0] EXT4-fs (loop8): initial error at time 1771231590: ext4_do_update_inode:5569: inode 3 [ 526.320010][ C0] EXT4-fs (loop8): last error at time 1771231590: ext4_do_update_inode:5569: inode 3 [ 526.413927][T14274] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 526.415242][T14274] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #3: comm syz.8.3163: corrupted inode contents [ 526.507998][T14274] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 526.509665][T14274] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #3: comm syz.8.3163: mark_inode_dirty error [ 526.529257][ T5841] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 526.583927][T14274] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 526.587467][T14274] Quota error (device loop8): write_blk: dquota write failed [ 526.650561][T14274] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 526.682573][T14274] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3163: Failed to acquire dquot type 0 [ 526.694472][T14274] loop8: lost filesystem error report for type 5 error -117 [ 526.718299][T14274] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.3163: corrupted inode contents [ 526.791393][T14274] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 526.792974][T14274] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #16: comm syz.8.3163: mark_inode_dirty error [ 526.801226][T14262] set_capacity_and_notify: 1 callbacks suppressed [ 526.801249][T14262] loop9: detected capacity change from 0 to 32768 [ 526.824178][T14285] loop1: detected capacity change from 0 to 1024 [ 526.849215][T14274] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 526.849709][T14274] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.3163: corrupted inode contents [ 526.890422][ T5841] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 526.892038][T14285] EXT4-fs: Ignoring removed bh option [ 526.898215][T14274] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 526.931136][T14274] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.3163: mark_inode_dirty error [ 526.971451][T14285] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 526.999620][T14274] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 527.000301][T14274] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.3163: corrupted inode contents [ 527.058882][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 527.080951][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 527.108853][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 527.138873][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 527.143331][T14274] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 527.151414][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 527.158373][T14285] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.3167: lblock 2 mapped to illegal pblock 2 (length 1) [ 527.161291][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 527.163970][ T5841] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 527.207092][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.216273][ T5841] usb 1-1: Product: syz [ 527.220656][T14285] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 527.228706][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 527.234011][T14274] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 527.237779][ C1] EXT4-fs (loop1): initial error at time 1771231590: ext4_map_blocks:776: inode 3: block 2 [ 527.262747][ C1] EXT4-fs (loop1): last error at time 1771231590: ext4_map_blocks:776: inode 3: block 2 [ 527.275030][T14274] loop8: lost filesystem error report for type 5 error -117 [ 527.285154][T14285] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 527.302460][T14274] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #16: comm syz.8.3163: corrupted inode contents [ 527.323000][T14274] EXT4-fs error (device loop8): ext4_truncate:4587: inode #16: comm syz.8.3163: mark_inode_dirty error [ 527.344601][T14285] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.3167: lblock 0 mapped to illegal pblock 48 (length 1) [ 527.361774][ T5841] usb 1-1: Manufacturer: syz [ 527.366387][ T5841] usb 1-1: SerialNumber: syz [ 527.400372][T14274] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 527.411458][ T5841] usb 1-1: config 0 descriptor?? [ 527.440844][T14285] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 527.460533][T14274] loop8: lost filesystem error report for type 5 error -117 [ 527.471189][T14274] EXT4-fs (loop8): 1 truncate cleaned up [ 527.488741][T14285] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3167: Failed to acquire dquot type 0 [ 527.522082][T14274] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.544869][T14285] loop1: lost filesystem error report for type 5 error -117 [ 527.560057][T14285] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 527.566174][T14274] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.578942][T14293] loop9: detected capacity change from 0 to 64 [ 527.633534][T14285] loop1: lost filesystem error report for type 5 error -117 [ 527.640199][T14285] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.3167: mark_inode_dirty error [ 527.788601][T14285] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 527.828519][T14285] EXT4-fs (loop1): 1 orphan inode deleted [ 527.849250][ T12] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 527.852893][T14285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.887709][T14274] EXT4-fs warning (device loop8): ext4_es_cache_extent:1079: inode #3: comm syz.8.3163: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 527.887709][T14274] [ 527.917943][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 527.980775][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 527.990328][T14274] EXT4-fs error (device loop8): ext4_generic_delete_entry:2665: inode #12: block 13: comm syz.8.3163: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 528.069893][T14285] EXT4-fs error (device loop1): __ext4_get_inode_loc:4781: comm syz.1.3167: Invalid inode table block 1 in block_group 0 [ 528.099534][T14274] EXT4-fs error (device loop8) in ext4_delete_entry:2737: Corrupt filesystem [ 528.119883][T14285] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 528.254864][ T5841] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 528.268249][ T5841] input input33: Device does not respond to id packet P [ 528.283782][ T5841] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 528.300765][ T5841] input input33: Device does not respond to id packet B [ 528.310937][T10942] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.321187][ T5841] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 528.327213][ T5841] input input33: Device does not respond to id packet N [ 528.342885][ T12] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 528.378408][ T12] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 528.391106][ T5841] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 528.404277][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 528.413053][ T12] loop8: lost filesystem error report for type 5 error -117 [ 528.426019][T14308] team0: Device gtp0 is of different type [ 528.449126][ T5841] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 528.459808][T11098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.471916][ T5841] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 528.495602][ T5841] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 528.508187][T11098] EXT4-fs error (device loop1): __ext4_get_inode_loc:4781: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 528.534160][ T5841] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 528.559314][T11098] loop1: lost filesystem error report for type 5 error -117 [ 528.569208][T11098] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 528.645056][ T5841] usb 1-1: USB disconnect, device number 27 [ 528.655549][T11098] loop1: lost filesystem error report for type 5 error -117 [ 528.656011][T11098] EXT4-fs error (device loop1): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 528.729860][T10367] udevd[10367]: setting mode of /dev/bus/usb/001/027 to 020664 failed: No such file or directory [ 528.789429][T10367] udevd[10367]: setting owner of /dev/bus/usb/001/027 to uid=0, gid=0 failed: No such file or directory [ 528.873738][T14314] loop6: detected capacity change from 0 to 256 [ 529.236966][T14325] loop8: detected capacity change from 0 to 64 [ 529.624948][T14338] loop6: detected capacity change from 0 to 512 [ 529.663944][T14338] EXT4-fs: Ignoring removed nobh option [ 529.734411][T14338] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.3190: corrupted inode contents [ 529.777421][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 529.783958][ C1] EXT4-fs (loop6): initial error at time 1771231593: ext4_do_update_inode:5569: inode 3 [ 529.793824][ C1] EXT4-fs (loop6): last error at time 1771231593: ext4_do_update_inode:5569: inode 3 [ 529.817687][T14338] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #3: comm syz.6.3190: mark_inode_dirty error [ 529.924792][T14338] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.3190: corrupted inode contents [ 530.002111][T14338] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.3190: mark_inode_dirty error [ 530.074847][T14338] Quota error (device loop6): write_blk: dquota write failed [ 530.094126][T14338] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 530.147394][T14338] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.3190: Failed to acquire dquot type 0 [ 530.187399][T14338] loop6: lost filesystem error report for type 5 error -117 [ 530.200648][T14338] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.3190: corrupted inode contents [ 530.293980][T14338] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.3190: mark_inode_dirty error [ 530.321539][T14338] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.3190: corrupted inode contents [ 530.359421][T14338] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.3190: mark_inode_dirty error [ 530.382538][T14338] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.3190: corrupted inode contents [ 530.417936][T14338] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 530.436766][T14338] loop6: lost filesystem error report for type 5 error -117 [ 530.441163][T14338] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.3190: corrupted inode contents [ 530.520563][T14338] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.3190: mark_inode_dirty error [ 530.566087][T14338] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 530.597681][T14338] EXT4-fs (loop6): 1 truncate cleaned up [ 530.619744][T14338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.685136][T14338] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.823850][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 530.982468][T14338] EXT4-fs warning (device loop6): ext4_es_cache_extent:1079: inode #3: comm syz.6.3190: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 530.982468][T14338] [ 531.013229][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 531.100511][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 531.119138][T14338] EXT4-fs error (device loop6): ext4_generic_delete_entry:2665: inode #12: block 13: comm syz.6.3190: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 531.174775][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 531.246488][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 531.263391][T14366] loop0: detected capacity change from 0 to 32768 [ 531.311166][T14366] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 531.320161][T14366] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 531.320300][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 531.340286][T14338] EXT4-fs error (device loop6) in ext4_delete_entry:2737: Corrupt filesystem [ 531.379211][T14366] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 1 71, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 442 [ 531.393504][T14366] gfs2: fsid=syz:syz.s: G: s:SH n:2/47 f:aqonN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 531.402822][T14366] gfs2: fsid=syz:syz.s: H: s:SH f:eEcH e:0 p:14366 [syz.0.3203] init_inodes+0xf43/0x27c0 [ 531.414956][T14366] gfs2: fsid=syz:syz.s: I: n:1/71 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 531.423494][T14366] CPU: 0 UID: 0 PID: 14366 Comm: syz.0.3203 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.423549][T14366] Tainted: [L]=SOFTLOCKUP [ 531.423562][T14366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.423584][T14366] Call Trace: [ 531.423596][T14366] [ 531.423609][T14366] dump_stack_lvl+0x100/0x190 [ 531.423668][T14366] gfs2_withdraw.cold+0xa/0xed [ 531.423710][T14366] inode_go_instantiate+0xee4/0x1310 [ 531.423773][T14366] ? __pfx_inode_go_instantiate+0x10/0x10 [ 531.423820][T14366] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 531.423886][T14366] gfs2_instantiate+0x16c/0x250 [ 531.423947][T14366] gfs2_glock_wait+0x214/0x330 [ 531.423982][T14366] ? __pfx_gfs2_glock_wait+0x10/0x10 [ 531.424020][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.424072][T14366] gfs2_glock_nq+0xa03/0x14f0 [ 531.424117][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.424171][T14366] check_journal_clean+0x123/0x2b0 [ 531.424213][T14366] ? __pfx_gfs2_lookupi+0x10/0x10 [ 531.424270][T14366] ? __pfx_check_journal_clean+0x10/0x10 [ 531.424323][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.424368][T14366] ? do_raw_spin_lock+0x128/0x260 [ 531.424402][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.424446][T14366] ? find_held_lock+0x2b/0x80 [ 531.424492][T14366] ? init_inodes+0xf43/0x27c0 [ 531.424539][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.424584][T14366] ? do_raw_spin_unlock+0x145/0x1e0 [ 531.424619][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.424665][T14366] ? _raw_spin_unlock+0x28/0x50 [ 531.424708][T14366] ? gfs2_jdesc_find+0xbf/0x100 [ 531.424771][T14366] init_inodes+0xf43/0x27c0 [ 531.424836][T14366] ? __pfx_init_inodes+0x10/0x10 [ 531.424893][T14366] ? gfs2_fill_super+0x1d3d/0x2cf0 [ 531.424940][T14366] ? init_sb+0xb83/0xfd0 [ 531.424997][T14366] ? __pfx_snprintf+0x10/0x10 [ 531.425065][T14366] ? gfs2_fill_super+0x1d3d/0x2cf0 [ 531.425112][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.425157][T14366] gfs2_fill_super+0x1d3d/0x2cf0 [ 531.425204][T14366] ? __pfx_vsnprintf+0x10/0x10 [ 531.425265][T14366] ? __pfx_gfs2_fill_super+0x10/0x10 [ 531.425313][T14366] ? __pfx_snprintf+0x10/0x10 [ 531.425363][T14366] ? gfs2_fill_super+0x19ba/0x2cf0 [ 531.425410][T14366] ? find_held_lock+0x2b/0x80 [ 531.425448][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.425494][T14366] ? set_blocksize+0x1cf/0x460 [ 531.425539][T14366] ? setup_bdev_super+0x337/0x730 [ 531.425604][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.425649][T14366] ? sb_set_blocksize+0x1fe/0x290 [ 531.425706][T14366] ? get_tree_bdev_flags+0x38c/0x620 [ 531.425744][T14366] get_tree_bdev_flags+0x38c/0x620 [ 531.425788][T14366] ? __pfx_gfs2_fill_super+0x10/0x10 [ 531.425839][T14366] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 531.425884][T14366] ? rcu_is_watching+0x12/0xc0 [ 531.425922][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.425967][T14366] ? apparmor_capable+0x1d7/0x4e0 [ 531.426010][T14366] gfs2_get_tree+0x4e/0x280 [ 531.426060][T14366] vfs_get_tree+0x92/0x320 [ 531.426115][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.426164][T14366] path_mount+0x7d0/0x23d0 [ 531.426226][T14366] ? __pfx_path_mount+0x10/0x10 [ 531.426277][T14366] ? lockdep_hardirqs_on+0x78/0x100 [ 531.426326][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.426377][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.426422][T14366] ? kmem_cache_free+0x124/0x6a0 [ 531.426494][T14366] ? __x64_sys_mount+0x293/0x310 [ 531.426552][T14366] __x64_sys_mount+0x293/0x310 [ 531.426609][T14366] ? __pfx___x64_sys_mount+0x10/0x10 [ 531.426666][T14366] ? do_user_addr_fault+0x8d6/0x12f0 [ 531.426705][T14366] ? srso_alias_return_thunk+0x5/0xfbef5 [ 531.426765][T14366] do_syscall_64+0x106/0xf80 [ 531.426814][T14366] ? irqentry_exit+0x138/0x670 [ 531.426869][T14366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.426908][T14366] RIP: 0033:0x7fc4ea99d20a [ 531.426937][T14366] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.426974][T14366] RSP: 002b:00007fc4eb93be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 531.427009][T14366] RAX: ffffffffffffffda RBX: 00007fc4eb93bee0 RCX: 00007fc4ea99d20a [ 531.427034][T14366] RDX: 0000200000000000 RSI: 0000200000037f80 RDI: 00007fc4eb93bea0 [ 531.427059][T14366] RBP: 0000200000000000 R08: 00007fc4eb93bee0 R09: 0000000000000010 [ 531.427083][T14366] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000037f80 [ 531.427106][T14366] R13: 00007fc4eb93bea0 R14: 0000000000037f6a R15: 0000200000000040 [ 531.427156][T14366] [ 531.876453][T14366] gfs2: fsid=syz:syz.s: Error -5 locking journal for spectator mount. [ 531.911110][T14375] loop9: detected capacity change from 0 to 256 [ 531.936392][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 532.029099][ T130] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 532.051962][ T9545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.069436][T14375] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 532.084411][ T24] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 532.136323][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.144485][ T24] usb 2-1: Product: syz [ 532.155653][ T130] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 1 [ 532.248739][ T24] usb 2-1: Manufacturer: syz [ 532.253382][ T24] usb 2-1: SerialNumber: syz [ 532.280912][ T130] fserror_report: 1 callbacks suppressed [ 532.280935][ T130] loop6: lost filesystem error report for type 5 error -117 [ 532.351004][ T24] usb 2-1: config 0 descriptor?? [ 532.690655][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3209'. [ 532.826987][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3209'. [ 532.846019][T14384] netlink: 'syz.6.3209': attribute type 15 has an invalid length. [ 533.062518][T14393] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3216'. [ 533.139348][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 533.159032][ T24] input input34: Device does not respond to id packet P [ 533.185091][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 533.201424][ T24] input input34: Device does not respond to id packet B [ 533.247160][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 533.253275][ T24] input input34: Device does not respond to id packet N [ 533.318358][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 533.350156][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 533.374117][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 533.462871][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 533.477902][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 [ 533.552006][ T24] usb 2-1: USB disconnect, device number 25 [ 534.613664][T14440] loop9: detected capacity change from 0 to 2048 [ 534.764703][T14439] loop0: detected capacity change from 0 to 1024 [ 534.800694][T14441] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.859129][T14439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.385879][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.728597][T14452] loop8: detected capacity change from 0 to 1024 [ 535.966645][T14423] loop6: detected capacity change from 0 to 32768 [ 536.033949][T14423] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3231 (14423) [ 536.059957][ T12] hfsplus: b-tree write err: -5, ino 25 [ 536.104479][ T12] hfsplus: b-tree write err: -5, ino 4 [ 536.134913][ T12] hfsplus: b-tree write err: -5, ino 2 [ 536.295729][T14423] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 536.380115][T14448] loop9: detected capacity change from 0 to 131072 [ 536.391145][T14448] F2FS-fs (loop9): Allow to mount readonly mode only [ 536.404219][T14423] BTRFS info (device loop6): using blake2b checksum algorithm [ 536.681801][T14463] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 536.941934][ T30] audit: type=1400 audit(1771231600.694:169): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14465 comm="syz.1.3242" [ 537.053510][T14423] BTRFS info (device loop6): enabling ssd optimizations [ 537.116856][T14423] BTRFS info (device loop6): turning on async discard [ 537.123679][T14423] BTRFS info (device loop6): enabling free space tree [ 537.161916][T14423] BTRFS info (device loop6): use zstd compression, level 3 [ 537.309713][T10106] IPVS: starting estimator thread 0... [ 537.315486][T14481] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 537.403781][T14482] IPVS: using max 22 ests per chain, 52800 per kthread [ 537.452582][ T9545] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 537.514995][T14484] loop1: detected capacity change from 0 to 2048 [ 537.529049][T14484] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576 [ 537.697235][T14484] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.936663][T14494] sp0: Synchronizing with TNC [ 538.393955][T14504] loop9: detected capacity change from 0 to 128 [ 538.425838][T14504] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 538.483226][T14504] hpfs: filesystem error: improperly stopped [ 538.524025][T14504] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 538.531796][T14504] hpfs: You really don't want any checks? You are crazy... [ 538.583473][T14504] hpfs: hpfs_map_sector(): read error [ 538.588881][T14504] hpfs: code page support is disabled [ 538.632129][T14504] hpfs: hpfs_map_4sectors(): unaligned read [ 538.654315][T14504] hpfs: hpfs_map_4sectors(): unaligned read [ 538.660228][T14504] hpfs: filesystem error: unable to find root dir [ 538.961310][T14490] loop8: detected capacity change from 0 to 32768 [ 539.066591][T14490] [ 539.066591][T14490] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 539.066591][T14490] [ 539.079873][T14512] loop1: detected capacity change from 0 to 1024 [ 539.335627][T14499] loop0: detected capacity change from 0 to 32768 [ 539.382984][T14499] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3255 (14499) [ 539.441708][T14499] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 539.455429][T10942] [ 539.455429][T10942] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 539.455429][T10942] [ 539.498584][T14499] BTRFS info (device loop0): using sha256 checksum algorithm [ 539.518698][T10942] [ 539.518698][T10942] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 539.518698][T10942] [ 539.738330][T14499] BTRFS info (device loop0): enabling ssd optimizations [ 539.755838][T14499] BTRFS info (device loop0): turning on async discard [ 539.782516][T14499] BTRFS info (device loop0): enabling free space tree [ 539.783324][ T36] hfsplus: b-tree write err: -5, ino 25 [ 539.852607][ T36] hfsplus: b-tree write err: -5, ino 4 [ 539.870602][ T36] hfsplus: b-tree write err: -5, ino 2 [ 539.908850][ T36] hfsplus: b-tree write err: -5, ino 17 [ 540.196544][T14540] loop9: detected capacity change from 0 to 4096 [ 540.218097][ T5819] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 540.278920][T14540] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.301810][T14543] loop7: detected capacity change from 0 to 2048 [ 540.362194][T14543] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 540.444854][T10367] udevd[10367]: incorrect nilfs2 checksum on /dev/loop7 [ 540.500341][T14547] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 540.582486][T14540] EXT4-fs: Ignoring removed i_version option [ 540.599011][T14540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 540.750270][T14540] EXT4-fs (loop9): stripe (253) is not aligned with cluster size (16), stripe is disabled [ 540.773031][T14518] loop6: detected capacity change from 0 to 32768 [ 540.822128][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3270'. [ 540.846806][T14540] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 540.857483][T14549] loop8: detected capacity change from 0 to 4096 [ 540.884376][T14518] JBD2: Ignoring recovery information on journal [ 541.109551][T14556] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 541.143764][ T5827] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 541.158329][T10999] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.225208][T14518] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 541.257774][ T30] audit: type=1800 audit(1771231605.026:170): pid=14549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3265" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 541.344131][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.406886][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.428356][T14518] OCFS2: ERROR (device loop6): ocfs2_xattr_find_entry: corrupted xattr entries [ 541.428435][T14518] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 541.503896][ T5827] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 541.551721][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.582305][T14518] OCFS2: File system is now read-only. [ 541.702491][ T5827] usb 2-1: config 0 descriptor?? [ 541.941534][ T9545] ocfs2: Unmounting device (7,6) on (node local) [ 542.274601][ T5827] arvo 0003:1E7D:30D4.003F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 542.470615][ T5827] arvo 0003:1E7D:30D4.003F: couldn't init struct arvo_device [ 542.520802][ T5827] arvo 0003:1E7D:30D4.003F: couldn't install keyboard [ 542.554320][ T5827] arvo 0003:1E7D:30D4.003F: probe with driver arvo failed with error -71 [ 542.576567][T14578] loop9: detected capacity change from 0 to 4096 [ 542.626637][ T5827] usb 2-1: USB disconnect, device number 26 [ 542.646242][T14580] loop7: detected capacity change from 0 to 4096 [ 542.783587][T14580] ntfs3(loop7): ino=b, mi_enum_attr [ 542.796714][T14580] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 542.830698][T14580] ntfs3(loop7): Failed to load $Extend (-22). [ 542.848644][T14580] ntfs3(loop7): Failed to initialize $Extend. [ 542.943012][ T24] kernel write not supported for file /radio3 (pid: 24 comm: kworker/1:0) [ 543.413511][T14599] loop1: detected capacity change from 0 to 512 [ 543.445201][T14599] EXT4-fs: Ignoring removed bh option [ 543.452639][T14599] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 543.466345][T14599] EXT4-fs (loop1): 1 truncate cleaned up [ 543.476091][T14599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.511810][ T5827] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 543.620069][T14605] loop7: detected capacity change from 0 to 256 [ 543.644727][T11098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.683922][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.716332][ T5827] usb 9-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 543.729817][T14605] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 543.757979][ T5827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.812412][ T5827] usb 9-1: config 0 descriptor?? [ 544.291044][ T5827] sony 0003:1345:3008.0040: unbalanced collection at end of report description [ 544.327256][ T5827] sony 0003:1345:3008.0040: parse failed [ 544.353897][ T5827] sony 0003:1345:3008.0040: probe with driver sony failed with error -22 [ 544.522322][ T5839] usb 9-1: USB disconnect, device number 7 [ 545.740492][T14624] loop9: detected capacity change from 0 to 32768 [ 545.828299][T14624] ERROR: (device loop9): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 545.828299][T14624] [ 545.870956][T14624] ERROR: (device loop9): remounting filesystem as read-only [ 545.905849][T14624] ERROR: (device loop9): txAbort: [ 545.905849][T14624] [ 545.960442][T14624] ERROR: (device loop9): remounting filesystem as read-only [ 546.008720][T14660] loop8: detected capacity change from 0 to 256 [ 546.129672][T10999] ERROR: (device loop9): xtTruncate: xt_getpage: xtree page corrupt [ 546.129672][T10999] [ 546.724040][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3325'. [ 546.786070][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3325'. [ 547.117292][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3325'. [ 547.167818][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3325'. [ 547.373102][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3333'. [ 547.401113][T14698] loop0: detected capacity change from 0 to 64 [ 548.248942][T14709] loop1: detected capacity change from 0 to 4096 [ 548.570115][ T36] kworker/u8:2: attempt to access beyond end of device [ 548.570115][ T36] loop0: rw=8388609, sector=65, nr_sectors = 1 limit=64 [ 548.607032][ T36] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 548.667130][ T36] kworker/u8:2: attempt to access beyond end of device [ 548.667130][ T36] loop0: rw=8388609, sector=66, nr_sectors = 1 limit=64 [ 548.696478][ T36] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 548.705143][ T36] kworker/u8:2: attempt to access beyond end of device [ 548.705143][ T36] loop0: rw=8388609, sector=67, nr_sectors = 1 limit=64 [ 548.722397][ T36] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 548.732602][ T36] kworker/u8:2: attempt to access beyond end of device [ 548.732602][ T36] loop0: rw=8388609, sector=68, nr_sectors = 1 limit=64 [ 548.804372][ T36] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 548.841867][ T36] kworker/u8:2: attempt to access beyond end of device [ 548.841867][ T36] loop0: rw=8388609, sector=72, nr_sectors = 1 limit=64 [ 548.917903][ T791] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 548.928797][ T5839] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 548.936686][ T36] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 548.967671][ T36] kworker/u8:2: attempt to access beyond end of device [ 548.967671][ T36] loop0: rw=8388609, sector=73, nr_sectors = 1 limit=64 [ 548.983200][ T36] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 549.000583][ T36] kworker/u8:2: attempt to access beyond end of device [ 549.000583][ T36] loop0: rw=8388609, sector=76, nr_sectors = 1 limit=64 [ 549.068392][ T36] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 549.092327][ T36] kworker/u8:2: attempt to access beyond end of device [ 549.092327][ T36] loop0: rw=8388609, sector=77, nr_sectors = 1 limit=64 [ 549.118244][ T36] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 549.130558][ T5839] usb 10-1: Using ep0 maxpacket: 16 [ 549.138283][ T5839] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 549.155476][ T791] usb 9-1: Using ep0 maxpacket: 8 [ 549.164298][ T36] kworker/u8:2: attempt to access beyond end of device [ 549.164298][ T36] loop0: rw=1, sector=78, nr_sectors = 2064 limit=64 [ 549.179249][ T5839] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 549.180431][T14741] loop1: detected capacity change from 0 to 1024 [ 549.199283][ T5839] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 549.212951][ T36] kworker/u8:2: attempt to access beyond end of device [ 549.212951][ T36] loop0: rw=1, sector=2142, nr_sectors = 2024 limit=64 [ 549.236426][ T5839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.248707][ T791] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 549.259014][T14741] EXT4-fs: inline encryption not supported [ 549.270448][ T791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.280395][ T36] Buffer I/O error on dev loop0, logical block 4166, lost async page write [ 549.292925][ T791] usb 9-1: Product: syz [ 549.297288][ T791] usb 9-1: Manufacturer: syz [ 549.303179][ T36] Buffer I/O error on dev loop0, logical block 4167, lost async page write [ 549.316676][T14741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.327021][ T5839] usb 10-1: config 0 descriptor?? [ 549.334315][ T791] usb 9-1: SerialNumber: syz [ 549.362829][ T791] usb 9-1: config 0 descriptor?? [ 549.604098][ T791] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 549.636705][T14736] loop6: detected capacity change from 0 to 32768 [ 549.638827][T11098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.655453][T14736] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3353 (14736) [ 549.701561][T14736] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 549.715627][T14736] BTRFS info (device loop6): using sha256 checksum algorithm [ 549.779540][ T5839] lg-g15 0003:046D:C222.0041: unknown main item tag 0x0 [ 549.786601][ T5839] lg-g15 0003:046D:C222.0041: unknown main item tag 0x0 [ 549.812795][ T5839] lg-g15 0003:046D:C222.0041: unknown main item tag 0x0 [ 549.830753][ T5839] lg-g15 0003:046D:C222.0041: unknown main item tag 0x0 [ 549.838039][ T5839] lg-g15 0003:046D:C222.0041: unknown main item tag 0x0 [ 549.849157][ T5839] lg-g15 0003:046D:C222.0041: hidraw0: USB HID v0.05 Device [HID 046d:c222] on usb-dummy_hcd.9-1/input0 [ 549.973563][T14736] BTRFS info (device loop6): enabling ssd optimizations [ 550.005703][T14736] BTRFS info (device loop6): turning on async discard [ 550.013891][ T791] usb write operation failed. (-71) [ 550.042172][T14736] BTRFS info (device loop6): enabling free space tree [ 550.056161][ T5839] usb 10-1: USB disconnect, device number 11 [ 550.065194][ T791] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 550.129034][ T791] dvbdev: DVB: registering new adapter (Terratec H7) [ 550.157317][ T791] usb 9-1: media controller created [ 550.169845][ T791] usb read operation failed. (-71) [ 550.189143][ T791] usb write operation failed. (-71) [ 550.210657][T14761] fido_id[14761]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 550.257221][ T791] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 550.315372][ T791] usb 9-1: USB disconnect, device number 8 [ 550.408545][ T9545] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 551.002089][T14783] loop0: detected capacity change from 0 to 512 [ 551.083053][T14787] loop7: detected capacity change from 0 to 256 [ 551.091658][T14786] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.3365'. [ 551.128348][T14783] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3349: couldn't read orphan inode 26 (err -116) [ 551.232638][T14783] loop0: lost filesystem error report for type 5 error -116 [ 551.236688][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 551.250512][ C1] EXT4-fs (loop0): initial error at time 1771231615: ext4_orphan_get:1394 [ 551.259097][ C1] EXT4-fs (loop0): last error at time 1771231615: ext4_orphan_get:1394 [ 551.292908][T14783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.332452][T14783] ext4 filesystem being mounted at /603/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.377900][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3367'. [ 551.703972][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.757156][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3370'. [ 551.845748][T14802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3373'. [ 552.400025][T14822] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3381'. [ 552.679333][T14832] loop1: detected capacity change from 0 to 256 [ 552.800002][T14832] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 553.108977][T14839] loop8: detected capacity change from 0 to 4096 [ 553.171486][T14839] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.238196][T14839] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz.8.3389: invalid fast symlink length 131109 [ 553.267624][T14824] loop7: detected capacity change from 0 to 32768 [ 553.283889][T14824] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3383 (14824) [ 553.354202][T14824] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 553.397133][T14824] BTRFS info (device loop7): using sha256 checksum algorithm [ 553.402048][T10942] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.504642][T14824] BTRFS info (device loop7): rebuilding free space tree [ 553.571835][T14824] BTRFS info (device loop7): disabling free space tree [ 553.611133][T14824] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 553.680849][T14824] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 553.744095][T14824] BTRFS info (device loop7): enabling ssd optimizations [ 553.796601][T14824] BTRFS info (device loop7): turning on async discard [ 553.890100][T14869] loop1: detected capacity change from 0 to 512 [ 553.900310][T14824] BTRFS info (device loop7): force clearing of disk cache [ 553.932980][T14824] BTRFS info (device loop7): enabling auto defrag [ 553.966099][T14824] BTRFS info (device loop7): max_inline set to 4096 [ 554.041193][T14869] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.3393: Parent and EA inode have the same ino 15 [ 554.085645][T14869] loop1: lost filesystem error report for type 5 error -117 [ 554.095257][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 554.109009][ C1] EXT4-fs (loop1): initial error at time 1771231617: ext4_xattr_inode_iget:436 [ 554.118001][ C1] EXT4-fs (loop1): last error at time 1771231617: ext4_xattr_inode_iget:436 [ 554.161425][T14869] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.3393: Parent and EA inode have the same ino 15 [ 554.230198][T14869] loop1: lost filesystem error report for type 5 error -117 [ 554.235571][T14869] EXT4-fs (loop1): 1 orphan inode deleted [ 554.293368][T14869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.412437][T14882] loop0: detected capacity change from 0 to 4096 [ 554.506783][T14884] loop6: detected capacity change from 0 to 512 [ 554.525166][T14885] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 554.538485][T14884] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 554.550537][ T9578] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 554.597656][T14884] EXT4-fs (loop6): 1 orphan inode deleted [ 554.643864][T14884] EXT4-fs (loop6): 1 truncate cleaned up [ 554.681954][T11098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.703376][T14884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.877167][T14884] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 554.976578][T14884] EXT4-fs (loop6): Remounting filesystem read-only [ 555.020075][T14884] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 17, error -30) [ 555.238180][ T9545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.254172][T14896] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3405'. [ 555.312502][T14894] loop0: detected capacity change from 0 to 4096 [ 555.320429][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3405'. [ 555.355913][T14894] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 555.441547][T14894] ntfs3(loop0): ino=19, mi_enum_attr [ 555.464603][T14894] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 555.519482][T14894] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 555.651492][T14905] loop9: detected capacity change from 0 to 128 [ 555.704368][T14905] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 555.799566][T14905] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 555.827002][T14905] fscrypt (loop9, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 555.937080][T10999] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 556.384291][T14925] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3418'. [ 556.450398][T14928] sch_tbf: peakrate 7836759490224633571 is lower than or equals to rate 15540063224392467819 ! [ 556.569390][T14934] netlink: 'syz.9.3421': attribute type 8 has an invalid length. [ 556.880056][T14941] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3425'. [ 557.045197][T14946] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 557.073107][T14946] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 557.095173][T14946] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 557.975412][T14977] loop9: detected capacity change from 0 to 2048 [ 558.051385][T14977] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.073022][T14977] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.131499][T14977] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 558.139223][T14977] overlayfs: failed to verify index dir 'upper' xattr [ 558.147339][T14977] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 558.370350][T14980] loop7: detected capacity change from 0 to 8192 [ 558.434039][T10999] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.575487][ T5839] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 558.767974][ T5839] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 558.787559][ T5839] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 558.836601][ T5839] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.881704][ T5839] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 558.914040][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 558.922162][ T5839] usb 2-1: Product: syz [ 558.954655][ T5839] usb 2-1: Manufacturer: syz [ 558.969589][ T5839] usb 2-1: SerialNumber: syz [ 559.163926][T15011] loop8: detected capacity change from 0 to 256 [ 559.221626][ T5839] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 559.471244][ T5839] usb 2-1: USB disconnect, device number 27 [ 559.505811][ T5839] usblp0: removed [ 560.482462][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3474'. [ 560.737072][T15054] loop6: detected capacity change from 0 to 256 [ 561.184762][T15041] loop1: detected capacity change from 0 to 32768 [ 561.245368][T15041] JBD2: Ignoring recovery information on journal [ 561.365571][T15041] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 561.562786][ T5839] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 561.719520][T15049] loop8: detected capacity change from 0 to 32768 [ 561.763622][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 561.814352][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.844031][ T30] audit: type=1800 audit(1771231625.616:171): pid=15049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3475" name="file1" dev="loop8" ino=7 res=0 errno=0 [ 561.866097][T11098] ocfs2: Unmounting device (7,1) on (node local) [ 561.889809][ T5839] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 561.924682][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.994295][ T5839] usb 1-1: config 0 descriptor?? [ 562.130276][T15078] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3488'. [ 562.163038][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.169396][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.479970][ T5839] isku 0003:1E7D:319C.0042: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 562.519499][T15090] loop7: detected capacity change from 0 to 128 [ 562.572161][T15090] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 562.628870][T15090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.953925][T10106] usb 1-1: USB disconnect, device number 28 [ 563.493144][T15109] vcan0: tx address claim with dlc 0 [ 563.962105][T15121] loop8: detected capacity change from 0 to 1024 [ 564.057034][ T30] audit: type=1800 audit(1771231627.827:172): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3505" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 564.459961][T15135] loop1: detected capacity change from 0 to 256 [ 564.515212][T15135] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 564.554037][ T5827] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 564.594021][ T5842] Bluetooth: hci3: unexpected event for opcode 0x2029 [ 564.768467][ T5827] usb 1-1: Using ep0 maxpacket: 32 [ 564.800715][ T5827] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 564.814910][ T5827] usb 1-1: config 0 has no interface number 0 [ 564.844378][ T5827] usb 1-1: config 0 interface 12 has no altsetting 0 [ 564.858629][T15144] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3514'. [ 564.892683][ T5827] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 564.905141][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.918604][ T5827] usb 1-1: Product: syz [ 564.923428][ T5827] usb 1-1: Manufacturer: syz [ 564.970565][ T5827] usb 1-1: SerialNumber: syz [ 565.016852][ T5827] usb 1-1: config 0 descriptor?? [ 565.040284][T15146] loop6: detected capacity change from 0 to 2048 [ 565.093746][T15146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 565.908919][ T5827] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 565.924086][T10106] kernel write not supported for file /snd/midiC2D0 (pid: 10106 comm: kworker/1:8) [ 565.941716][ T5827] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 565.976709][ T5827] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 566.015716][ T5827] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 566.079179][ T5827] usb 1-1: USB disconnect, device number 29 [ 566.356580][T15179] loop7: detected capacity change from 0 to 512 [ 566.373974][T15177] loop1: detected capacity change from 0 to 2048 [ 566.412003][T15177] udf: Unknown parameter 'vo' [ 566.418860][T15179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.461819][ T5842] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 566.578691][T15187] loop1: detected capacity change from 0 to 1024 [ 566.665191][T15187] EXT4-fs: Ignoring removed bh option [ 566.710524][T15187] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 566.771533][T15189] loop0: detected capacity change from 0 to 64 [ 566.781523][ T9578] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.904268][T15187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.042321][T15196] loop7: detected capacity change from 0 to 128 [ 567.099419][T15196] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 567.153663][T15196] hpfs: filesystem error: improperly stopped [ 567.191406][T15196] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 567.216757][T15196] hpfs: You really don't want any checks? You are crazy... [ 567.228401][T11098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.272120][T15196] hpfs: hpfs_map_sector(): read error [ 567.277532][T15196] hpfs: code page support is disabled [ 567.399041][T15196] hpfs: hpfs_map_4sectors(): unaligned read [ 567.405476][T15196] hpfs: hpfs_map_4sectors(): unaligned read [ 567.467989][T15196] hpfs: filesystem error: unable to find root dir [ 567.749955][T15210] netlink: 512 bytes leftover after parsing attributes in process `syz.9.3544'. [ 568.117632][T15226] loop9: detected capacity change from 0 to 512 [ 568.158445][T15226] EXT4-fs (loop9): Test dummy encryption mode enabled [ 568.183565][T15229] loop8: detected capacity change from 0 to 128 [ 568.224479][T15229] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 568.241868][T15226] EXT4-fs (loop9): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.366390][T15229] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 568.423233][T15226] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.3551: Directory hole found for htree leaf block 0 [ 568.534296][T15226] EXT4-fs (loop9): Remounting filesystem read-only [ 568.541864][T15236] bond1: invalid ARP target 0.0.0.0 specified for addition [ 568.541901][T15236] bond1: option arp_ip_target: invalid value (0) [ 568.559369][T15236] bond1 (unregistering): Released all slaves [ 568.619160][ T5842] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 568.629830][ T5842] Bluetooth: hci3: Injecting HCI hardware error event [ 568.640920][ T5842] Bluetooth: hci3: hardware error 0x00 [ 568.708198][ T12] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 568.727073][T10999] EXT4-fs (loop9): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 569.300790][T15250] loop1: detected capacity change from 0 to 128 [ 569.866537][T15259] loop9: detected capacity change from 0 to 2048 [ 569.944673][T15259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.040355][T15259] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.200375][T15259] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 570.229044][T15259] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 570.425929][T10999] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.583345][T15281] loop8: detected capacity change from 0 to 1756 [ 570.634339][T15283] loop9: detected capacity change from 0 to 16 [ 570.649869][T15283] erofs (device loop9): mounted with root inode @ nid 36. [ 570.778134][ T5842] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 571.426289][T15303] loop1: detected capacity change from 0 to 1024 [ 571.522175][T15303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 571.578615][T15303] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.625944][ T30] audit: type=1800 audit(1771231635.401:173): pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3583" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 571.649344][T15303] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.3583: lblock 0 mapped to illegal pblock 0 (length 1) [ 571.674246][T15303] EXT4-fs error (device loop1): ext4_ext_remove_space:2956: inode #15: comm syz.1.3583: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 571.882534][T11098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 572.207518][T15323] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 572.297171][T15327] loop6: detected capacity change from 0 to 64 [ 572.819953][T15340] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3597'. [ 573.051693][T15347] loop7: detected capacity change from 0 to 64 [ 573.707227][T15358] loop9: detected capacity change from 0 to 4096 [ 573.796805][T15358] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0002] [ 573.827666][T15358] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.070874][T10999] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.466252][T15392] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.3622'. [ 574.535106][T15392] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.3622'. [ 575.061812][T15410] Context (ID=0x1) not attached to queue pair (handle=0x1:0x3) [ 575.285795][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3633'. [ 575.387393][T15414] loop6: detected capacity change from 0 to 2048 [ 575.413808][T15414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 576.080975][T15432] loop0: detected capacity change from 0 to 512 [ 576.178472][T15432] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 576.279176][T15432] EXT4-fs (loop0): 1 truncate cleaned up [ 576.353255][T15432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.498573][ T30] audit: type=1800 audit(1771231640.273:174): pid=15432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3642" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 576.589836][ T30] audit: type=1800 audit(1771231640.273:175): pid=15432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3642" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 576.692642][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.971723][T15428] loop6: detected capacity change from 0 to 32768 [ 578.343717][T15479] loop0: detected capacity change from 0 to 8192 [ 578.438561][T15485] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3665'. [ 578.571805][T15494] loop1: detected capacity change from 0 to 512 [ 578.611563][T15494] EXT4-fs (loop1): Test dummy encryption mode enabled [ 578.643041][T15494] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 578.739440][T15494] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3669: bad orphan inode 131083 [ 578.792952][T15494] loop1: lost filesystem error report for type 5 error -117 [ 578.802889][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 578.810416][T15500] loop7: detected capacity change from 0 to 256 [ 578.816647][ C1] EXT4-fs (loop1): initial error at time 1771231642: ext4_orphan_get:1417 [ 578.824704][T15500] exfat: Deprecated parameter 'utf8' [ 578.831366][ C1] EXT4-fs (loop1): last error at time 1771231642: ext4_orphan_get:1417 [ 578.847189][T15500] exfat: Deprecated parameter 'utf8' [ 578.879037][T15494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.947649][T15500] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 578.960452][T15494] EXT4-fs error (device loop1): ext4_find_dest_de:2049: inode #2: block 13: comm syz.1.3669: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 579.247316][T11098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.420944][T15516] loop7: detected capacity change from 0 to 2048 [ 579.457325][T15516] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 579.533642][T15519] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 579.644942][T15521] loop8: detected capacity change from 0 to 136 [ 579.883506][T15527] loop1: detected capacity change from 0 to 512 [ 579.984255][T15527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.021912][T15527] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 580.087545][T15532] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 580.236260][T11098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.955322][T15557] loop8: detected capacity change from 0 to 64 [ 581.124560][T15537] loop9: detected capacity change from 0 to 32768 [ 581.141355][T15537] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3688 (15537) [ 581.261725][T15537] BTRFS info (device loop9): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 581.272294][T15559] loop8: detected capacity change from 0 to 512 [ 581.307905][T15537] BTRFS info (device loop9): using blake2b checksum algorithm [ 581.363352][T15559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.382331][T15559] ext4 filesystem being mounted at /266/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.536850][ T30] audit: type=1800 audit(1771231645.326:176): pid=15559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3699" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 581.572367][T15537] BTRFS info (device loop9): enabling ssd optimizations [ 581.579430][T15537] BTRFS info (device loop9): turning on async discard [ 581.586526][ T30] audit: type=1800 audit(1771231645.366:177): pid=15559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3699" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 581.612605][T15537] BTRFS info (device loop9): enabling free space tree [ 581.743806][T10942] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.771831][ T30] audit: type=1326 audit(1771231645.556:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.1.3702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f95fe79bf79 code=0x0 [ 581.948881][T10999] BTRFS info (device loop9): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 582.275869][T15592] loop0: detected capacity change from 0 to 2048 [ 582.376014][T15592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.379436][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3708'. [ 582.520531][T15596] loop8: detected capacity change from 0 to 4096 [ 582.560500][T15592] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 582.602351][T15592] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 582.621899][T15592] EXT4-fs (loop0): This should not happen!! Data will be lost [ 582.621899][T15592] [ 582.633493][T15592] EXT4-fs (loop0): Total free blocks count 0 [ 582.640190][T15592] EXT4-fs (loop0): Free/Dirty block details [ 582.695255][T15592] EXT4-fs (loop0): free_blocks=2415919504 [ 582.703372][T15592] EXT4-fs (loop0): dirty_blocks=48 [ 582.712578][T15592] EXT4-fs (loop0): Block reservation details [ 582.742296][T15592] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 582.796270][T15606] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 582.797443][T15596] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 582.854041][T15596] ntfs3(loop8): Failed to load $Extend (-22). [ 582.869339][T15596] ntfs3(loop8): Failed to initialize $Extend. [ 582.947050][T15610] openvswitch: netlink: Duplicate key (type 1). [ 584.084019][T15634] loop1: detected capacity change from 0 to 4096 [ 584.110086][T15637] loop6: detected capacity change from 0 to 4096 [ 584.126971][T15634] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 584.174990][T15639] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 584.243201][T15642] delete_channel: no stack [ 584.263666][T15634] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 584.272311][ T30] audit: type=1800 audit(1771231648.047:179): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3724" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 584.310647][T15634] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 584.350893][T15633] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 584.564615][T15645] loop0: detected capacity change from 0 to 4096 [ 584.585900][ T36] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 584.610737][T15645] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 584.612399][T11098] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 584.628459][T15647] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 584.680279][T11098] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 584.707593][T11098] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 584.741279][ T130] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 584.876917][ T30] audit: type=1800 audit(1771231648.658:180): pid=15645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3727" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 585.255390][T15661] loop1: detected capacity change from 0 to 256 [ 585.334400][T15661] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 585.350288][T15664] netlink: 7 bytes leftover after parsing attributes in process `syz.9.3736'. [ 585.816853][T15681] ieee802154 phy0 wpan0: encryption failed: -126 [ 585.953868][T15675] loop8: detected capacity change from 0 to 512 [ 586.032736][T15675] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #13: comm syz.8.3744: invalid indirect mapped block 32768 (level 0) [ 586.047137][T15675] fserror_report: 17 callbacks suppressed [ 586.047160][T15675] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 586.059244][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 586.074877][ C1] EXT4-fs (loop8): initial error at time 1771231649: ext4_free_branches:1020: inode 13 [ 586.084597][ C1] EXT4-fs (loop8): last error at time 1771231649: ext4_free_branches:1020: inode 13 [ 586.157056][T15675] EXT4-fs error (device loop8): ext4_clear_blocks:874: inode #13: comm syz.8.3744: attempt to clear invalid blocks 1024 len 1 [ 586.185409][T15675] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 586.187106][T15675] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 586.257276][T15675] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #13: comm syz.8.3744: invalid indirect mapped block 1819213824 (level 0) [ 586.346108][T15675] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 586.346590][T15675] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #13: comm syz.8.3744: invalid indirect mapped block 33554432 (level 2) [ 586.380864][T15675] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 586.383090][T15675] EXT4-fs (loop8): 1 truncate cleaned up [ 586.426963][T15675] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.682717][T10942] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.770359][T15705] loop1: detected capacity change from 0 to 4096 [ 586.795467][T15705] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 586.888660][T15705] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 587.765781][T15700] loop0: detected capacity change from 0 to 32768 [ 587.839900][T15700] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 587.917440][T15745] loop1: detected capacity change from 0 to 1024 [ 588.070379][T15700] XFS (loop0): Ending clean mount [ 588.182213][T15700] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 588.402340][ T5819] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 588.782902][ T30] audit: type=1326 audit(1771231652.570:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.9.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b8f79bf79 code=0x7fc00000 [ 588.817637][T15758] loop8: detected capacity change from 0 to 1024 [ 588.891891][T15758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 588.916969][T15758] System zones: 0-1, 3-36 [ 588.935463][T15758] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3773: bad orphan inode 134217728 [ 589.026270][T15758] loop8: lost filesystem error report for type 5 error -117 [ 589.027758][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 589.041559][ C1] EXT4-fs (loop8): initial error at time 1771231652: ext4_orphan_get:1417 [ 589.050132][ C1] EXT4-fs (loop8): last error at time 1771231652: ext4_orphan_get:1417 [ 589.109615][T15758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.217679][ T30] audit: type=1800 audit(1771231652.980:182): pid=15758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3773" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 589.304518][ T30] audit: type=1804 audit(1771231653.000:183): pid=15758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3773" name="/newroot/279/bus/bus" dev="loop8" ino=18 res=1 errno=0 [ 589.386378][T10942] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.537647][ T30] audit: type=1326 audit(1771231653.320:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.9.3772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b8f79bf79 code=0x7fc00000 [ 589.662499][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3778'. [ 589.701950][T15775] openvswitch: netlink: nsh attr 240 is out of range max 3 [ 589.761589][ T5827] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 589.939720][ T5827] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 589.958132][ T5827] usb 1-1: config 0 has no interface number 0 [ 589.974019][ T5827] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 590.025189][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.038841][T15785] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3784'. [ 590.059354][ T5827] usb 1-1: Product: syz [ 590.069266][ T5827] usb 1-1: Manufacturer: syz [ 590.078279][T15785] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3784'. [ 590.117305][ T5827] usb 1-1: SerialNumber: syz [ 590.126706][ T5827] usb 1-1: config 0 descriptor?? [ 590.379441][ T5827] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 590.427683][ T5827] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 590.467600][ T5827] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 590.501876][ T5827] usb 1-1: media controller created [ 590.560532][T15769] loop7: detected capacity change from 0 to 32768 [ 590.564134][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.678870][ T5827] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 590.833018][ T5827] usb 1-1: USB disconnect, device number 30 [ 590.877758][ T5839] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 590.940480][ T1099] read_mapping_page failed! [ 590.968824][ T1099] ERROR: (device loop7): txAbort: [ 590.968824][ T1099] [ 590.999880][ T1099] jfs_write_inode: jfs_commit_inode failed! [ 591.067579][ T5839] usb 10-1: Using ep0 maxpacket: 16 [ 591.083967][ T5839] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 591.118800][ T5839] usb 10-1: config 0 has no interface number 0 [ 591.125020][ T5839] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 591.199210][ T5839] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 591.202210][T15813] netlink: 'syz.7.3796': attribute type 4 has an invalid length. [ 591.222918][ T5839] usb 10-1: config 0 interface 41 has no altsetting 0 [ 591.228413][T15811] loop6: detected capacity change from 0 to 1024 [ 591.256229][T15811] EXT4-fs: inline encryption not supported [ 591.314408][ T5839] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 591.347332][T15811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.376531][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.384681][ T5839] usb 10-1: Product: syz [ 591.427343][ T5839] usb 10-1: Manufacturer: syz [ 591.432074][ T5839] usb 10-1: SerialNumber: syz [ 591.441024][ T5839] usb 10-1: config 0 descriptor?? [ 591.447117][T15801] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 591.454386][T15801] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 591.582407][T15811] EXT4-fs error (device loop6): mb_free_blocks:2044: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 591.654908][T15811] EXT4-fs (loop6): Remounting filesystem read-only [ 591.678588][T15801] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 591.698844][T15801] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 591.709528][T15824] EXT4-fs (loop6): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 15; err -30 [ 591.804305][ T9545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.411719][T15821] loop8: detected capacity change from 0 to 32768 [ 592.427881][ T5839] sr9700 10-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.9-1, CoreChip SR9700 USB Ethernet, 86:b7:3c:e6:e5:f4 [ 592.427905][T15841] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3808'. [ 592.433783][ T5839] usb 10-1: USB disconnect, device number 12 [ 592.530546][ T5839] sr9700 10-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.9-1, CoreChip SR9700 USB Ethernet [ 592.542459][ T30] audit: type=1800 audit(1771231656.331:185): pid=15821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3799" name="file1" dev="loop8" ino=4 res=0 errno=0 [ 592.990173][T15855] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 592.996732][T15855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 593.076747][T15855] vhci_hcd vhci_hcd.0: Device attached [ 593.096345][ T5839] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 593.222939][T15864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3816'. [ 593.269707][ T5839] usb 2-1: config index 0 descriptor too short (expected 1314, got 34) [ 593.316899][ T5839] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 593.326745][ T5829] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 593.346481][ T5827] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 593.360629][ T5839] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 593.416556][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.471378][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 593.540769][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 593.551822][ T5827] usb 9-1: Using ep0 maxpacket: 16 [ 593.563133][ T5827] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.610932][ T5827] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 593.620636][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 593.661548][ T5827] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 593.675244][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 593.698260][ T5827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.720652][ T5839] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 593.744959][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.768889][ T5839] usb 2-1: Product: syz [ 593.773075][ T5839] usb 2-1: Manufacturer: syz [ 593.784863][ T5839] usb 2-1: SerialNumber: syz [ 593.837423][ T5827] usb 9-1: config 0 descriptor?? [ 593.843877][ T5839] usb 2-1: config 0 descriptor?? [ 594.087072][ T5827] usb 9-1: USB disconnect, device number 9 [ 594.151986][T15856] usb 49-1: recv xbuf, 0 [ 594.158617][ T130] vhci_hcd vhci_hcd.8: stop threads [ 594.164877][ T130] vhci_hcd vhci_hcd.8: release socket [ 594.189533][ T24] usb 2-1: USB disconnect, device number 28 [ 594.194665][ T130] vhci_hcd vhci_hcd.8: disconnect device [ 594.225838][ T5829] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 594.636725][T15891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3823'. [ 595.501629][T15920] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3835'. [ 595.680953][T15926] loop7: detected capacity change from 0 to 512 [ 595.790343][T15926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 595.909524][T15926] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.985605][T15926] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.267231][ T9578] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.847326][T15956] loop6: detected capacity change from 0 to 4096 [ 596.966264][T15956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.098414][T15956] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz.6.3846: invalid fast symlink length 131109 [ 597.493328][ T9545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.704074][T15942] loop0: detected capacity change from 0 to 32768 [ 597.778470][T15942] JBD2: Ignoring recovery information on journal [ 598.001846][T15942] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 598.385603][ T5819] ocfs2: Unmounting device (7,0) on (node local) [ 598.613873][T15997] netlink: 'syz.0.3861': attribute type 5 has an invalid length. [ 598.774961][T16001] loop7: detected capacity change from 0 to 64 [ 599.060358][T16007] loop0: detected capacity change from 0 to 1024 [ 599.188651][T16007] hfsplus: b-tree write err: -5, ino 2 [ 599.412896][T16011] loop8: detected capacity change from 0 to 4096 [ 599.439821][ T1099] hfsplus: b-tree write err: -5, ino 25 [ 599.462853][T16011] EXT4-fs (loop8): Test dummy encryption mode enabled [ 599.502789][ T1099] hfsplus: b-tree write err: -5, ino 4 [ 599.525894][ T1099] hfsplus: b-tree write err: -5, ino 2 [ 599.539388][T16018] loop7: detected capacity change from 0 to 64 [ 599.553464][T16011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.588109][T16019] netlink: 190972 bytes leftover after parsing attributes in process `syz.9.3872'. [ 599.597693][ T1099] hfsplus: b-tree write err: -5, ino 26 [ 599.737768][ T30] audit: type=1800 audit(1771231663.535:186): pid=16018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3873" name="file1" dev="loop7" ino=22 res=0 errno=0 [ 600.065626][T10942] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.742961][T16046] loop1: detected capacity change from 0 to 128 [ 600.790115][T16046] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 600.841255][T16046] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 600.979277][T16046] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 601.204440][T11098] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 601.419471][T16062] fuse: Bad value for 'fd' [ 601.454713][ T5839] kernel read not supported for file /sysvipc/msg (pid: 5839 comm: kworker/0:5) [ 601.601950][T16068] vlan2: entered allmulticast mode [ 601.607125][T16068] veth0_to_bond: entered allmulticast mode [ 601.680096][T16071] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3895'. [ 601.784937][T16038] loop0: detected capacity change from 0 to 32768 [ 601.814730][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3897'. [ 601.846885][T16038] (syz.0.3881,16038,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 601.909253][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3897'. [ 601.918341][T16038] (syz.0.3881,16038,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 602.082745][T16038] JBD2: Ignoring recovery information on journal [ 602.094124][T16082] loop6: detected capacity change from 0 to 1024 [ 602.199316][ T50] hfsplus: b-tree write err: -5, ino 25 [ 602.236904][ T50] hfsplus: b-tree write err: -5, ino 4 [ 602.243527][ T50] hfsplus: b-tree write err: -5, ino 2 [ 602.282028][T16038] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 602.286394][ T50] hfsplus: b-tree write err: -5, ino 20 [ 602.519354][T16038] [ 602.521715][T16038] ====================================================== [ 602.528729][T16038] WARNING: possible circular locking dependency detected [ 602.535772][T16038] syzkaller #0 Tainted: G L [ 602.541756][T16038] ------------------------------------------------------ [ 602.548776][T16038] syz.0.3881/16038 is trying to acquire lock: [ 602.554837][T16038] ffff8880551f5c78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x35b/0x840 [ 602.564192][T16038] [ 602.564192][T16038] but task is already holding lock: [ 602.571544][T16038] ffff8880376190e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x5c8/0x920 [ 602.581887][T16038] [ 602.581887][T16038] which lock already depends on the new lock. [ 602.581887][T16038] [ 602.592276][T16038] [ 602.592276][T16038] the existing dependency chain (in reverse order) is: [ 602.601281][T16038] [ 602.601281][T16038] -> #4 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 602.609814][T16038] down_read+0x99/0x460 [ 602.614514][T16038] ocfs2_start_trans+0x5c8/0x920 [ 602.619993][T16038] ocfs2_mknod+0x1643/0x27d0 [ 602.625111][T16038] ocfs2_create+0xf4/0x460 [ 602.630057][T16038] lookup_open.isra.0+0xc47/0x11b0 [ 602.635691][T16038] path_openat+0x2291/0x31a0 [ 602.640813][T16038] do_file_open+0x20e/0x430 [ 602.645846][T16038] do_sys_openat2+0x10d/0x1e0 [ 602.651061][T16038] __x64_sys_openat+0x12d/0x210 [ 602.656578][T16038] do_syscall_64+0x106/0xf80 [ 602.661707][T16038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.668135][T16038] [ 602.668135][T16038] -> #3 (sb_internal#5){.+.+}-{0:0}: [ 602.675684][T16038] ocfs2_start_trans+0x4b7/0x920 [ 602.681173][T16038] ocfs2_mknod+0x1643/0x27d0 [ 602.686306][T16038] ocfs2_create+0xf4/0x460 [ 602.691252][T16038] lookup_open.isra.0+0xc47/0x11b0 [ 602.696885][T16038] path_openat+0x2291/0x31a0 [ 602.702005][T16038] do_file_open+0x20e/0x430 [ 602.707039][T16038] do_sys_openat2+0x10d/0x1e0 [ 602.712253][T16038] __x64_sys_openat+0x12d/0x210 [ 602.717641][T16038] do_syscall_64+0x106/0xf80 [ 602.722862][T16038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.729282][T16038] [ 602.729282][T16038] -> #2 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 602.739901][T16038] down_write+0x8b/0x1f0 [ 602.744694][T16038] ocfs2_reserve_local_alloc_bits+0xea/0xc00 [ 602.751202][T16038] ocfs2_reserve_clusters_with_limit+0x55a/0xe80 [ 602.758066][T16038] ocfs2_mknod+0x11c3/0x27d0 [ 602.763181][T16038] ocfs2_create+0xf4/0x460 [ 602.768125][T16038] lookup_open.isra.0+0xc47/0x11b0 [ 602.773844][T16038] path_openat+0x2291/0x31a0 [ 602.778969][T16038] do_file_open+0x20e/0x430 [ 602.784003][T16038] do_sys_openat2+0x10d/0x1e0 [ 602.789218][T16038] __x64_sys_openat+0x12d/0x210 [ 602.794603][T16038] do_syscall_64+0x106/0xf80 [ 602.799751][T16038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.806175][T16038] [ 602.806175][T16038] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 602.816885][T16038] down_write+0x8b/0x1f0 [ 602.821671][T16038] ocfs2_reserve_suballoc_bits+0x11c/0x4be0 [ 602.828098][T16038] ocfs2_reserve_new_metadata_blocks+0x506/0xbe0 [ 602.834963][T16038] ocfs2_xattr_set+0x18b3/0x2be0 [ 602.840428][T16038] __vfs_setxattr+0x175/0x1e0 [ 602.845635][T16038] __vfs_setxattr_noperm+0x127/0x660 [ 602.851453][T16038] __vfs_setxattr_locked+0x127/0x2b0 [ 602.857335][T16038] vfs_setxattr+0x14a/0x390 [ 602.862371][T16038] do_setxattr+0x145/0x180 [ 602.867320][T16038] filename_setxattr+0x167/0x1d0 [ 602.872796][T16038] path_setxattrat+0x1ff/0x3b0 [ 602.878093][T16038] __x64_sys_lsetxattr+0xc9/0x140 [ 602.883657][T16038] do_syscall_64+0x106/0xf80 [ 602.888784][T16038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.895208][T16038] [ 602.895208][T16038] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 602.903227][T16038] __lock_acquire+0x14b8/0x2630 [ 602.908666][T16038] lock_acquire+0x1cf/0x380 [ 602.913712][T16038] down_read+0x99/0x460 [ 602.918421][T16038] ocfs2_init_acl+0x35b/0x840 [ 602.923639][T16038] ocfs2_mknod+0x1772/0x27d0 [ 602.928779][T16038] ocfs2_create+0xf4/0x460 [ 602.933745][T16038] lookup_open.isra.0+0xc47/0x11b0 [ 602.939386][T16038] path_openat+0x2291/0x31a0 [ 602.944512][T16038] do_file_open+0x20e/0x430 [ 602.949550][T16038] do_sys_openat2+0x10d/0x1e0 [ 602.954768][T16038] __x64_sys_open+0xfe/0x1d0 [ 602.959898][T16038] do_syscall_64+0x106/0xf80 [ 602.965112][T16038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.971536][T16038] [ 602.971536][T16038] other info that might help us debug this: [ 602.971536][T16038] [ 602.981769][T16038] Chain exists of: [ 602.981769][T16038] &oi->ip_xattr_sem --> sb_internal#5 --> &journal->j_trans_barrier [ 602.981769][T16038] [ 602.995718][T16038] Possible unsafe locking scenario: [ 602.995718][T16038] [ 603.003166][T16038] CPU0 CPU1 [ 603.008519][T16038] ---- ---- [ 603.013872][T16038] rlock(&journal->j_trans_barrier); [ 603.019250][T16038] lock(sb_internal#5); [ 603.026034][T16038] lock(&journal->j_trans_barrier); [ 603.033846][T16038] rlock(&oi->ip_xattr_sem); [ 603.038524][T16038] [ 603.038524][T16038] *** DEADLOCK *** [ 603.038524][T16038] [ 603.046657][T16038] 8 locks held by syz.0.3881/16038: [ 603.051846][T16038] #0: ffff88807c524420 (sb_writers#14){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 603.061221][T16038] #1: ffff8880551f5f40 (&type->i_mutex_dir_key#20){++++}-{4:4}, at: path_openat+0x220c/0x31a0 [ 603.071635][T16038] #2: ffff88805533a640 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x11c/0x4be0 [ 603.085433][T16038] #3: ffff8880553389c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x11c/0x4be0 [ 603.099313][T16038] #4: ffff888055339800 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0xea/0xc00 [ 603.113194][T16038] #5: ffff88807c524610 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0x1643/0x27d0 [ 603.122563][T16038] #6: ffff8880376190e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x5c8/0x920 [ 603.133336][T16038] #7: ffff888034f04950 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 603.143170][T16038] [ 603.143170][T16038] stack backtrace: [ 603.149054][T16038] CPU: 1 UID: 0 PID: 16038 Comm: syz.0.3881 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.149103][T16038] Tainted: [L]=SOFTLOCKUP [ 603.149116][T16038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 603.149138][T16038] Call Trace: [ 603.149149][T16038] [ 603.149161][T16038] dump_stack_lvl+0x100/0x190 [ 603.149212][T16038] print_circular_bug.cold+0x178/0x1c7 [ 603.149270][T16038] check_noncircular+0x146/0x160 [ 603.149323][T16038] __lock_acquire+0x14b8/0x2630 [ 603.149377][T16038] ? __ocfs2_mknod_locked.isra.0+0xb71/0x1f40 [ 603.149420][T16038] lock_acquire+0x1cf/0x380 [ 603.149467][T16038] ? ocfs2_init_acl+0x35b/0x840 [ 603.149509][T16038] ? __pfx___might_resched+0x10/0x10 [ 603.149570][T16038] down_read+0x99/0x460 [ 603.149623][T16038] ? ocfs2_init_acl+0x35b/0x840 [ 603.149663][T16038] ? __pfx_down_read+0x10/0x10 [ 603.149714][T16038] ? dquot_alloc_inode+0x448/0xb10 [ 603.149747][T16038] ? dquot_alloc_inode+0x448/0xb10 [ 603.149778][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.149826][T16038] ocfs2_init_acl+0x35b/0x840 [ 603.149870][T16038] ? __pfx_ocfs2_init_acl+0x10/0x10 [ 603.149914][T16038] ? ocfs2_block_signals+0x88/0xc0 [ 603.149969][T16038] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 603.150036][T16038] ocfs2_mknod+0x1772/0x27d0 [ 603.150081][T16038] ? __pfx_ocfs2_mknod+0x10/0x10 [ 603.150126][T16038] ? __lock_acquire+0x4a5/0x2630 [ 603.150174][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.150217][T16038] ? find_held_lock+0x2b/0x80 [ 603.150254][T16038] ? d_splice_alias_ops+0x58c/0x1320 [ 603.150289][T16038] ? d_splice_alias_ops+0x58c/0x1320 [ 603.150325][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.150372][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.150413][T16038] ? do_raw_spin_lock+0x128/0x260 [ 603.150444][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.150485][T16038] ? find_held_lock+0x2b/0x80 [ 603.150526][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.150568][T16038] ? do_raw_spin_unlock+0x145/0x1e0 [ 603.150600][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.150641][T16038] ? _raw_spin_unlock+0x28/0x50 [ 603.150683][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.150726][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.150771][T16038] ocfs2_create+0xf4/0x460 [ 603.150808][T16038] ? __pfx_ocfs2_lookup+0x10/0x10 [ 603.150843][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.150886][T16038] ? __pfx_ocfs2_create+0x10/0x10 [ 603.150922][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.150964][T16038] ? security_inode_create+0xc4/0x280 [ 603.151013][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.151058][T16038] ? may_o_create+0x46/0x3a0 [ 603.151112][T16038] ? __pfx_ocfs2_create+0x10/0x10 [ 603.151150][T16038] lookup_open.isra.0+0xc47/0x11b0 [ 603.151188][T16038] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 603.151226][T16038] ? __pfx___might_resched+0x10/0x10 [ 603.151281][T16038] ? mnt_get_write_access+0x52/0x2f0 [ 603.151341][T16038] ? __pfx_down_write+0x10/0x10 [ 603.151391][T16038] ? mnt_get_write_access+0x1e9/0x2f0 [ 603.151450][T16038] path_openat+0x2291/0x31a0 [ 603.151495][T16038] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 603.151533][T16038] ? __pfx_path_openat+0x10/0x10 [ 603.151595][T16038] do_file_open+0x20e/0x430 [ 603.151638][T16038] ? __pfx_do_file_open+0x10/0x10 [ 603.151697][T16038] ? _raw_spin_unlock+0x28/0x50 [ 603.151735][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.151777][T16038] ? alloc_fd+0x476/0x790 [ 603.151825][T16038] do_sys_openat2+0x10d/0x1e0 [ 603.151874][T16038] ? __pfx_do_sys_openat2+0x10/0x10 [ 603.151932][T16038] __x64_sys_open+0xfe/0x1d0 [ 603.151980][T16038] ? __pfx___x64_sys_open+0x10/0x10 [ 603.152037][T16038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 603.152084][T16038] do_syscall_64+0x106/0xf80 [ 603.152130][T16038] ? irqentry_exit+0x138/0x670 [ 603.152178][T16038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.152213][T16038] RIP: 0033:0x7fc4ea99bf79 [ 603.152239][T16038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.152273][T16038] RSP: 002b:00007fc4eb93c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 603.152304][T16038] RAX: ffffffffffffffda RBX: 00007fc4eac15fa0 RCX: 00007fc4ea99bf79 [ 603.152328][T16038] RDX: 0000000000000000 RSI: 000000000014927e RDI: 0000200000000180 [ 603.152350][T16038] RBP: 00007fc4eaa327e0 R08: 0000000000000000 R09: 0000000000000000 [ 603.152372][T16038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.152393][T16038] R13: 00007fc4eac16038 R14: 00007fc4eac15fa0 R15: 00007ffd672d9d38 [ 603.152429][T16038] [ 603.835411][T16086] loop7: detected capacity change from 0 to 40427 [ 603.862234][T16086] F2FS-fs (loop7): build fault injection rate: 174 [ 603.886740][T16086] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 603.939899][T16086] F2FS-fs (loop7): invalid crc value [ 604.035881][ T5819] ocfs2: Unmounting device (7,0) on (node local) [ 604.228080][T16086] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 604.256128][T16086] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 604.292431][T16086] F2FS-fs (loop7): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x1a5d/0x4bd0 [ 604.358809][ T9578] bio_check_eod: 117 callbacks suppressed [ 604.358836][ T9578] syz-executor: attempt to access beyond end of device [ 604.358836][ T9578] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 604.388416][ T9578] CPU: 0 UID: 0 PID: 9578 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 604.388474][ T9578] Tainted: [L]=SOFTLOCKUP [ 604.388488][ T9578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.388512][ T9578] Call Trace: [ 604.388524][ T9578] [ 604.388538][ T9578] dump_stack_lvl+0x100/0x190 [ 604.388597][ T9578] f2fs_handle_critical_error+0x5d7/0x970 [ 604.388643][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.388689][ T9578] ? f2fs_build_fault_attr+0x53/0x280 [ 604.388756][ T9578] f2fs_write_end_io+0xc3f/0xf30 [ 604.388812][ T9578] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 604.388855][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.388900][ T9578] ? rcu_is_watching+0x12/0xc0 [ 604.388941][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.388986][ T9578] ? lock_release+0x263/0x320 [ 604.389043][ T9578] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 604.389088][ T9578] bio_endio+0x7a3/0x910 [ 604.389128][ T9578] submit_bio_noacct+0x64c/0x2010 [ 604.389188][ T9578] f2fs_submit_write_bio+0x133/0x350 [ 604.389230][ T9578] __submit_merged_bio+0x331/0x7b0 [ 604.389280][ T9578] __submit_merged_write_cond+0x3fe/0x510 [ 604.389334][ T9578] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 604.389389][ T9578] ? __pfx___might_resched+0x10/0x10 [ 604.389456][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.389509][ T9578] f2fs_write_cache_pages+0x21c0/0x2720 [ 604.389579][ T9578] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 604.389638][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.389684][ T9578] ? stack_trace_save+0x8e/0xc0 [ 604.389727][ T9578] ? __pfx_stack_trace_save+0x10/0x10 [ 604.389774][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.389821][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.389865][ T9578] ? stack_depot_save_flags+0x27/0x9d0 [ 604.389913][ T9578] ? rcu_is_watching+0x12/0xc0 [ 604.389962][ T9578] ? kfree+0x38f/0x6b0 [ 604.390011][ T9578] ? tomoyo_realpath_from_path+0x19c/0x690 [ 604.390065][ T9578] ? tomoyo_check_open_permission+0x2af/0x3c0 [ 604.390108][ T9578] ? tomoyo_file_open+0x6b/0x90 [ 604.390177][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.390223][ T9578] ? rcu_is_watching+0x12/0xc0 [ 604.390282][ T9578] ? lock_release+0x263/0x320 [ 604.390334][ T9578] ? bpf_ksym_find+0x124/0x1c0 [ 604.390386][ T9578] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 604.390433][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.390479][ T9578] ? rcu_is_watching+0x12/0xc0 [ 604.390518][ T9578] f2fs_write_data_pages+0x799/0x16d0 [ 604.390572][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.390617][ T9578] ? arch_stack_walk+0xa6/0xf0 [ 604.390663][ T9578] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 604.390723][ T9578] ? rcu_is_watching+0x12/0xc0 [ 604.390765][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.390815][ T9578] ? lock_release+0x263/0x320 [ 604.390868][ T9578] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 604.390925][ T9578] do_writepages+0x278/0x600 [ 604.390977][ T9578] ? __pfx_do_writepages+0x10/0x10 [ 604.391025][ T9578] ? do_raw_spin_unlock+0x145/0x1e0 [ 604.391061][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.391107][ T9578] ? _raw_spin_unlock+0x28/0x50 [ 604.391156][ T9578] filemap_writeback+0x22d/0x2e0 [ 604.391208][ T9578] ? __pfx_filemap_writeback+0x10/0x10 [ 604.391291][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.391337][ T9578] ? f2fs_sync_dirty_inodes+0x38f/0x990 [ 604.391393][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.391438][ T9578] ? rcu_is_watching+0x12/0xc0 [ 604.391473][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.391519][ T9578] ? lock_release+0x263/0x320 [ 604.391598][ T9578] f2fs_sync_dirty_inodes+0x452/0x990 [ 604.391665][ T9578] block_operations+0x2a6/0xfc0 [ 604.391727][ T9578] ? __pfx_block_operations+0x10/0x10 [ 604.391824][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.391869][ T9578] ? rcu_is_watching+0x12/0xc0 [ 604.391906][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.391951][ T9578] ? trace_irq_enable.constprop.0+0x13c/0x180 [ 604.392002][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.392047][ T9578] ? rcu_is_watching+0x12/0xc0 [ 604.392088][ T9578] f2fs_write_checkpoint+0x582/0x5550 [ 604.392147][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.392196][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.392241][ T9578] ? _raw_spin_unlock_irq+0x2e/0x50 [ 604.392285][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.392331][ T9578] ? __wait_for_common+0x1f3/0x4c0 [ 604.392381][ T9578] ? __pfx_schedule_timeout+0x10/0x10 [ 604.392423][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.392468][ T9578] ? try_to_wake_up+0x644/0x1a80 [ 604.392512][ T9578] ? __pfx___wait_for_common+0x10/0x10 [ 604.392562][ T9578] ? trace_irq_enable.constprop.0+0x13c/0x180 [ 604.392611][ T9578] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 604.392668][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.392721][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.392773][ T9578] ? rcu_is_watching+0x12/0xc0 [ 604.392809][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.392855][ T9578] ? kthread_stop+0x280/0x680 [ 604.392911][ T9578] kill_f2fs_super+0x3e5/0x490 [ 604.392966][ T9578] ? __pfx_kill_f2fs_super+0x10/0x10 [ 604.393036][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.393094][ T9578] deactivate_locked_super+0xc1/0x1b0 [ 604.393159][ T9578] deactivate_super+0xe7/0x110 [ 604.393195][ T9578] cleanup_mnt+0x21f/0x450 [ 604.393241][ T9578] task_work_run+0x150/0x240 [ 604.393301][ T9578] ? __pfx_task_work_run+0x10/0x10 [ 604.393361][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.393409][ T9578] ? srso_alias_return_thunk+0x5/0xfbef5 [ 604.393454][ T9578] ? rcu_is_watching+0x12/0xc0 [ 604.393495][ T9578] exit_to_user_mode_loop+0x100/0x4a0 [ 604.393555][ T9578] do_syscall_64+0x67c/0xf80 [ 604.393604][ T9578] ? irqentry_exit+0x138/0x670 [ 604.393659][ T9578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.393697][ T9578] RIP: 0033:0x7f8f2899d1d7 [ 604.393727][ T9578] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 604.393772][ T9578] RSP: 002b:00007fff95e39758 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 604.393808][ T9578] RAX: 0000000000000000 RBX: 00007f8f28a31c3b RCX: 00007f8f2899d1d7 [ 604.393834][ T9578] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff95e39810 [ 604.393857][ T9578] RBP: 00007fff95e39810 R08: 00007fff95e3a810 R09: 00000000ffffffff [ 604.393883][ T9578] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff95e3a8a0 [ 604.393907][ T9578] R13: 00007f8f28a31c3b R14: 00000000000938f3 R15: 00007fff95e3a8e0 [ 604.393949][ T9578] [ 605.040749][ T9578] F2FS-fs (loop7): Stopped filesystem due to reason: 3