last executing test programs: 3.994859522s ago: executing program 3 (id=1418): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16, @ANYBLOB="01080004"], 0x58}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 3.867392896s ago: executing program 3 (id=1420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7b}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4048890}, 0x24000000) 3.74703899s ago: executing program 3 (id=1421): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) 3.502932418s ago: executing program 3 (id=1423): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000400)={0x3, 0x0, 0x84, 0x9, "b75fc47f994d6d4056b9b835c0a5dd0fcd70131cb9a8f007512701d3987e5821"}) 3.13868844s ago: executing program 0 (id=1426): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x2}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 3.11243001s ago: executing program 1 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050) 2.947002135s ago: executing program 1 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0xd8, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xb0, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "223f3d7bd1e60fea7f9c6c4404997b6a6abd1c4b8aeeb0907cbfefa3d9e23144"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x73}}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 2.927154546s ago: executing program 0 (id=1430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000280)={r0}) 1.782795213s ago: executing program 3 (id=1431): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8002, &(0x7f00000000c0)=ANY=[], 0x9, 0x627b, &(0x7f0000010200)="$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") creat(&(0x7f0000000000)='./file1\x00', 0x96) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f00000028c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd23724e0390b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e72bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf252aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8fbe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcae0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c00"/4083, @ANYRESDEC, @ANYRESHEX, @ANYRES16=0x0], 0xb, 0x0, &(0x7f0000000000)) 1.782092463s ago: executing program 0 (id=1439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, 'E]'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 1.780833953s ago: executing program 1 (id=1440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.644667998s ago: executing program 2 (id=1433): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c840}, 0x840) 1.629553878s ago: executing program 0 (id=1434): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0xfffffff6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 1.5687414s ago: executing program 1 (id=1435): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {0x0, 0x80000000}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000200)={{0x80000000, r1, 0x0, [0x4, 0x9]}, {r2, 0x0, 0x0, [0x8, 0xe7]}, 0x1, [0x3, 0xffffb4b5]}) 1.452546454s ago: executing program 0 (id=1436): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x2a00000, &(0x7f0000000440)=ANY=[], 0x1, 0x6224, &(0x7f0000007240)="$eJzs3c1vHGcdB/DfvvolbWr1UJUIITctL6U0iZMSAgXaHuDApQeUK0rkulVECigJKK0s4soXDpz4C0BIHBHiiDjwB/TAlRsnTkSykUA9MdXYzxPPbnazdm3vrD2fj+TM/OaZ9T7j786+ZGb2CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgfvD9H660IuLGL9KCpYinohPRjlgo6+WIWFheyut3I+L52GmO5yKiNxdR3n7nn2ciXouIj89GbG2vr5aLL++zH9/70z9+/6Mzb//9j72L//vzvfHr3b//6//+5cFhthgAAACapyiKopU+5p9Ln+/bdXcKAJiK/PpfJHn5qa9/86+3/zpL/VGr1eoZqvsxW/1RH11dVYz2oFpExEb1NuV7BofjAeCE2YhP6u4CNZJ/o3Uj4kzdnQBmWqvuDnAstrbXV1sp31b19WB5tz2fCzKQ/0br0fUd46aTDJ9jMq3H12Z04tkx/VmYUh9mSc6/PZz/jd32flrvuPOflnH593cvfWqcnH9nOP8hpyf/9sj8myrn3z1Q/h35AwAAAADADMv//79U8/HfucNvyr486fjv8pT6AAAAAAAAAABH7bDj/z1ypOP/dV4ft57x/wAAAODgys/qpd+e3Vs27rvYyuXXWxFPD60PNEy6WGax7n4AAAAAAAAAAAAAQJN0d8/hvd6K6EXE04uLRVGUP1XD9UEd9vYnXdO3H5qs7id5AADY9fHZoWv5WxHzEXE9fddfb3FxsSjmFxaLxWJhLr+f7c/NFwuVz7V5Wi6b6+/jDXG3X5S/bL5yu6pJn5cntQ//vvK++kVnHx07Ir301xzTXFPYAJDsvhpteUU6ZYrimXFvPmCA/f8UWoqluh9XzL66H6YAAADA8SuKomilr/M+l475t+vuFAAwFfn1f/i4wKHq9pj2iKP5/Wq1Wq1Wqz9TXVWM9qBaRMRG9TblewbD8QPACbMRn9TdBWok/0brRsTzdXcCmGmtujvAsdjaXl9tpXxb1deDNL57PhdkIP+N1s7t8u1HTScZPsdkWo+vzejEs2P689yU+jBLcv7t4fxv7Lb303rHnf+0jMu/v3PJXPPk/DvD+Q85Pfm3R+bfVDn/7oHy78gfAAAAAABmWP7//yXHf/MmAwAAAAAAAMCJs7W9vpqve83H/z8/Yj3Xf55OOf/WQfNfSPPyP9Fy/u2h/L8ytF6nMv/wrb39/z/b66t/uPfvz+XpfvOfyzOt9MhqpUdEK91Tq5umh9m6QU+V+fc6/fKeeq12p5vO+Sl678atuB1rcWlg/Xb6e+y1rwy0lz3tDbRfHmjvPtZ+ZaC9l753oFjI7RdiNX4at+OdnfaybW7C9s9PaC8mtOf8O57/Gynn3638lPkvpvbW0LT08KP2Y/t9dTrqft689YVfXTr+zZloMzqPtq2q3L7zNfRn529yph8/v7t258L9m/fu3VmJNBlYejnS5Ijl/Hs7P3N7z/8v7rbn5/3q/vrwo/6B858Vm9Edm/+Llflye1+ect/qkPPvp5+c/zupffT+f5LzH7//v1JDfwAAAAAAAAAAAAAAAOBJiqLYuUT0zYi4mq7/qevaTABguvLrf5Hk5Wq1Wq1Wq09fXVWM9ka1iIi/VW9Tvmf45ahfBgDMsv9HxD/r7gS1kX+D5e/7K6cv1d0ZYKrufvDhj2/evr12527dPQEAAAAAAAAAPqs8/udyZfznlyJiaWi9gfFf34rlw47/2c0zjwYYPcKBvp9gs93vtCvDjb8QO+NzXxg3/vf5eHz87zwmbqe6HWP0JrT3J7TPTWifH7l0L62RF3pU5PxfqIx3XuZ/bmj49SaM/zo85n0T5PzPVx7PZf5fHlqvmn/xu5nLf2O/K25GeyD/i/fe/9nFux98+Oqt92++t/be2k+urKxcunL16rVr1y6+e+v22qXdf4+n1zMg55/HvnYeaLPk/HPm8m+WnP8XUy3/Zsn5fynV8m+WnH9+vyf/Zsn5588+8m+WnP/LqZZ/s+T8v5pq+TfL1vb6XJn/K6mWf7Pk/f9rqZZ/s+T8X021/Jsl538h1fJvlpz/xVTvI39fD3+K5PzzES77f7Pk/FdSLf9myflfTrX8myXnfyXV8m+WnP9rqZZ/s+T8v55q+TdLzv9qquXfLDn/b6Ra/s2S87+Wavk3S87/m6mWf7Pk/L+Vavk3S87/9VTLv1ly/t9OtfybJef/nVTLv1ly/t9NtfybJef/Rqrl3yx73/9vxowZM3mm7mcmAAAAAAAAAAAAAGDYNE4nrnsbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27i5GrrO+H/iZ9a69dhJiIAQnfwObxISQbLJrO/EL/6aY8NoApUBCoS84rndtFvyG1y6BItk0UKJiBKqoSC/aAkJtpKoiqrigFaW5qPpyVdoLelPRVqJqVAUUUJHaimarOed5np2ZnZ2Ztce7Z875fKTktztzZs6ZM2dm97vr7x4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrd8vr5TzeyLGv+l/9ve5Zd2/x469T2/LLXbPQWAgAAAFfqf/P/P3d9uuDQADdqWeavX/53X19aWlrK3rvptye+sLSUrpjKsoktWZZfFz31r+9rtC4TPJZNNsZaPh/rs/pNfa4f73P9RJ/rN/e5fkuf6yf7XL9iB6ywtfh5TH5nu/IPtxe7NLshm8iv29XlVo81toyNxZ/l5Br5bZYmjmUL2YlsPpttW75YtpEv/81bmut6SxbXNdayrp3NI+SHHz8at6ER9vGutnUt32f0/ddlUz/64ceP/sG5Z2/qNvvuhrb7K7bzjlub2/nJcEmxrY1sS9oncTvHWrZzZ5fnZFPbdjby2zU/7tzO5wbczk3Lm7muOp/zyWws//jb+X4ab/2xXtpPO8Nl/3VblmUXlze7c5kV68rGsm1tl4wtPz+TxRHZvI/mofSibHxNx+ktAxynzTm3q/047XxNxOf/lnC78VW2ofVp+v4nNq943td6nEbNR73aa6XzGBz2a6Usx2A8Lr6dP+jHux6Du8Lj//jtqx+DXY+dLsdgetwtx+Ct/Y7Bsc2b8m1OT0Ijv83yMbi7bflN+Zoa+Xzm9t7H4My5k2dmFj/6sbsXTh45Pn98/tTe3btn9+7bd+DAgZljCyfmZ4v/X+beLr9t2Vh6Ddwa9l18DbyqY9nWQ3Xpy8N7HU72eB1u71h22K/D8c4H11ifF+TKY7p4bTzU3OmTl8ayVV5j+fNz55W/DtPjbnkdjre8Drt+TenyOhwf4HXYXObMnYN9zzLe8l+3bbhaXwu2txyDnd+PdB6Dw/5+pCzH4GQ4Lv7pztW/FuwM2/v49Fq/H9m04hhMDze89zQvSd/vTx7IR7fj8ubmFddszs4vzp+959Ej586d3Z2FsS5e3HKsdB6v21oeU7bieB1b8/F6aOHlj9/c5fLtYV9N3t383+Sqz1VzmXvv6f1c5V/duu/Ptkv3ZGEM2Xrvz25fzZv7M2XJHvuzucwnZ678e/GUS1vefydWef+Nuf/5Yn3prh7bNDFevH43pb0z0fZ+3P5UjefvXY183c/NDPZ+PBH+W+/34xt6vB/v6Fh22O/HE50PLr4fN/r9tOPKdD6fk+E4OTHb+/24ucyOPWs9Jsd7vh/fFmYj7P9Xh6SQclHLsbPacZvWNT4+ER7XeFxD+3G6t235iZDNmut6cs/lHad33Fbc16b06Jat13E61bHssI/T9H612nHa6PfTt8vT+XxOhuPihr29j9PmMk/fe+XvnVvjhy3vnZv7HYMTmzY3t3kiHYTF+/3S1ngM3pMdzU5nJ7K5/NrN+fHUyNc1fd9gx+Dm8N96v1fu6HEM3tGx7LCPwfR1bLVjrzG+8sEPQefzORmOiyfu630MNpd5w/7hfu96R7gkLdPyvWvnz9dW+5nXzR276Wr+zKu5nX+5v/fPZpvLnDiw1pzZez/dFS65pst+6nz9rvaamsvWZz/tCNv57IHV91Nze5rLfOHggMfToSzLLnz4gfznveH3K39y/jtfb/u9S7ff6Vz48AM/uO7YX61l+wEYfc8XY1vxta7lN1OD/P4fAAAAGAkx94+Fmcj/AAAAUBkx98d/FZ7I/wAAAFAZMfePh5mE/N/vb9iNuh1veHbh+QtZauYvBfH69GOQB4vlYsd1Nnw+tbSsefkDX53/8Z9dGGzdY1mW/eTBX+u6/I4H43YVpsJ2PvXG9stX3vDCQOt/5OHl5Vr7618K9x8fz6A/BupWwZ3Nsuyb1382X8/U+y7l8+kHH8nnuy4+/lhzmecOFp/H2z/z4mL53w3l30PHjrTd/pmwH74X5uxbu++PeLuvXXr1zv3vWV5fvF3j1hfkD/uJ9xf3G/9OzucfK5aP+3m17f/zzzz5tebyj76y+/ZfGOu+/U+G+/1qmP/9smL51ueg+Xm83afC9sf1xdvd85Vvdd3+pz5dLH/mTcVyj4QZ139H+HzXm55daN1fjzaOtD2u7M3FcnH9s9/5XH59vL94/53bP3n4Utv+6Dw+nv6H4n5mOpaPl8f1RH/asf7m/bQen3H9T/7GI237ud/6n3rXMy9r3m/n+u/qWG5Tx+07/2LT733qs13XF7fn0B+faXs8h94ZXsdh/U+8PxyP4fr/eeqzbeuNHnln+/tPXP5L2y+0PZ7oLT8q1v/Ua4/n89+nfvw711x73QsuvqK577Ls2+8u7q/f+o///um27f/yjXfmz0e8Pnb0O9e/mrj+sx+ZPnV68fzCXMtezf92ztuK7dkyuXVbc3uvD++tHZ9vOXz63Afmz07NTs1m2VR1/4TeZftKmD8oxsW13v7Oh8PzefMXv7nt9r//TLz8Hx8qLr/01uLr1qvCcp8Pl28vnr+lxhWu/4lbbsxf342ni8/beuxDsHPXfxwYaMHw+Du/L4jH+5mXfCDfD83r8q8b8XV9hdv/3bnifr4R9utS+MvMt964vL7W5ePfRrj07uL1fsX7L7zNxef1D8Pz/fbvFfcftys+3u+G72O+taP9/S4eH9+4MNZ5//lf8bgY3k+yi8X1cam4vy89d2PXzYt/hyS7eFP++W+l+7lpTQ9zNYsfXZw5sXDq/KMz5+YXz80sfvRjh0+ePn/q3OH8b3ke/mC/2y+/P23L35/m5vfdm81uzbLsdDa7Dm9YV2f7mx8Ntv1nHj46t3/29rn5Y0fOHzv38Jn5s8ePLi4enZ9bvP3IsWPzH+l3+4W5+3fvObh3/57p4wtz9x84eHDvwemFU6ebm1FsVB/7Zj80fers4fwmi/ffe3D3fffdOzt98vTc/P37Z2enz/e7ff61abp561+dPjt/4si5hZPz04sLH5u/f/fBffv29P1rgCfPHFucmjl7/tTM+cX5szPFY5k6l1/c/NrX7/ZU0+I/F9/PdmoUf4gve8dd+9LfZ2366idWvatikY4/IPps+Fs0f/vCMwcG+Tzm/okwE7//BwAAgMqIuX9zmIn8DwAAAJURc/+WMBP5HwAAACoj5v7JMJOa5H/9f/3/wfr/xfX6//Xq/5/5cNErHfX+f+zPV6T/v6T/39sG9/+veP36//r/1ev/D96fH/Xt1//X/2elsvX/Y+7fmmW1zP8AAABQBzH3bwszkf8BAACgMmLuvybMRP4HAACAyoi5/9owk5rkf/3/gfr/e/oVrqrf/3f+f/3/bDT7//HJ0f+vjTX379/zUNun+v+B/v+A/f/f1P9vof+v/6//T7uJVa/ZqP5/zP3XhZnUJP8DAABAHcTc/4IwE/kfAAAAKiPm/uvDTOR/AAAAqIyY+7eHmdQk/+v/O///hvX/G/r/+v8jcP7/lo3R/x8Nzv/fm/5/H5d9/v9J/f9R7P9PDHf7y93/77v5+v9cFWU7/3/M/S8MM6lJ/gcAAIA6iLn/RWEm8j8AAABURsz9Lw4zkf8BAACgMmLuvyHMpCb5X/9f/79c5///4t3NPa//X9D/L2xo/7/n+f+Lj/T/y0X/vzf9/z4uu//v/P/ZKPb/h7z95e7/D/v8/xNv7Ly9/j/dlK3/H3P/S8JMapL/AQAAoA5i7r8xzET+BwAAgMqIuf+lYSbyPwAAAFRGzP07wkxqkv/1//X/y9X/d/5//f9R6v8X9P/LRf+/N/3/PvT/9f/1/wfr/3f55lf/n27K1v+Puf+mMJOa5H8AAACog5j7bw4zkf8BAACgMmLu/39hJvI/AAAAVEbM/TvDTGqS//X/9f/1/+vV/79rs/6//n+16f/3pv/fh/6//r/+/4Dn/19pLf3/Lf3ujMooW/8/5v6XhZnUJP8DAABAHcTc//IwE/kfAAAAKiPm/leEmcj/AAAAUBkx90+FmdQk/+v/V6v//0d/8cQrMv1//f8+669o/z8eBvr/Naf/35v+fx/6//r/+v/r0v+nPsrW/4+5/5Ywk5rkfwAAAKiDmPtvDTOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/V5hJTfK//n+1+v+R/r/+f6/1V7T/n+j/15v+fxctL1L9/z70//X/a9//j9/96v8zHGXr/8fc/8owk5rkfwAAAKiDmPtvDzOR/wEAAKAyYu5/VZiJ/A8AAACVEXP/HWEmNcn/+v/6//r/+v/6/93Xr/8/mvT/e1tr/3+z/r/+v/5/zfr/zv/PcG18/7/4zi1+HnP/q8NMapL/AQAAoA5i7r8zzET+BwAAgMqI/36z+Hev8j8AAABUUcz902EmI5r/u/XQe9H/1/+vU/+/of+v/6//X3n6/705/38f+v/6//r/+v8M1cb3/9s/j7n/7jCTEc3/AAAAwEox998TZiL/AwAAQGXE3D8TZiL/AwAAQGXE3D8bZpLn/4kN2qr1o/+v/1+n/r/z/+v/6/9Xn/5/b/r/fej/6/9Xrf+fZfr/bKiy9f9j7t8dZuL3/wAAAFAZMffvCTOR/wEAAKAyYu7fG2Yi/wMAAEBlxNx/b5hJTfK//r/+v/5/lfv/n/u3buvX/9f/rzL9/970//vQ/9f/r1r/3/n/2WBl6//H3H9fmElN8j8AAADUQcz9+8JM5H8AAACojJj794eZhPzf7d91AwAAAKMl5v4DYSY1+f2//n9F+v+//jdt69b/1//vtf7h9P+36v+Hqf9fLsv9+/x4rUr/v/Nlcdn0//vQ/9f/1//X/2eoytb/j7n/YJhJTfI/AAAA1EHM/a8JM5H/AQAAoDJi7v//YSbyPwAAAFRGzP0/FWZSk/yv/1+R/n8H/X/9/17rd/5//f8qc/7/3irV/x/T/9f/L9f26//r/7PS1e//x48G6//H3H9/mElN8j8AAADUQcz9Px1mIv8DAABAZcTc/9owE/kfAAAAKiPm/kNhJjXJ//r/+v/6//r/V6f//9qsUxn7/82DR/+/WvT/e6tU/9/5//X/S7b9+v/6/6xUtvP/x9z/ujCTmuR/AAAAqIOY+x8IM5H/AQAAoDJi7n99mIn8DwAAAJURc/8bwkxqkv/1//X/9f/1/53/v/v69f9Hk/5/b/r/fej/6//r/+v/M1Rl6//H3P/GMJOa5H8AAACog5j73xRmIv8DAABAZcTc/+YwE/kfAAAAKiPm/reEmdQk/+v/6//r/+v/6/93X/+g/f/sX/T/y6TG/f+JQRbS/+9D/1//X/9f/5+hKlv/P+b+nwkzqUn+BwAAgDqIuf/BMBP5HwAAACoj5v63hpnI/wAAAFAZMfe/LcykJvlf/1//X/9/mP3/7m1f/f9wPFS0/+/8/+Uyiv3/61o+dv5//X/9/9Hdfv1//X9WKlv/P+b+t4eZ1CT/AwAAQB3E3P+zYSbyPwAAAFRGzP3vCDOR/wEAAKC8uhWxe4i5/+fCTGqS//X/9f/L1f9futB6u9Hr/zv/f1bW/n/zRvr/tTCK/f9W+v/l6/9v0f/X/9f/1//nspWt/x9z/zvDTGqS/wEAAKAOYu5/V5iJ/A8AAACjYaL/IjH3vzvMRP4HAACAyoi5/6Ewk5rkf/3/Wvb/00MuX/9/1M//r/+flbX/7/z/taH/35v+fx/O/z+k/vy1+v/6//r/5MrW/4+5/+Ewk5rkfwAAAKiDmPvfE2Yi/wMAAEBlxNz/82Em8j8AAABURsz97w0zqUn+1/+vZf+/xOf/r1r/f7zt+KhT/3+y5flMx6X+v/7/OtD/703/vw/9f+f/L3P/PxzNW1e5vf4/ZVS2/n/M/e8LM6lJ/gcAAIA6iLn/F8JM5H8AAACojJj4f7HtM/kfAAAAqiTm/l8KM6lJ/tf/1//X/3f+f+f/775+/f/RpP/fm/5/H/r/+v9l7v/3of9PGZWt/x9z/y+Hmawa/H7wnwM8TAAAAKBEYu5/f5hJTX7/DwAAAHUQc//hMBP5HwAAACoj5v5Hwkxqkv/1/zv7//GMqvr/+v/6//r/+v+jaHj9/5del2X6//r/+v/6//r/+v9cibL1/2PuPxJmUpP8DwAAAHUQc/+vhJnI/wAAAFAZMfcfDTOR/wEAAKAyYu6fCzOpSf7fwP7/RDn7/87/f7n9/5/o/+v/B/r/3en/rw/n/+9N/78P/X/9f/1//X+Gqmz9/5j758NMapL/AQAAoMLSj4Nj7j8WZiL/AwAAQGXE3H88zET+BwAAgMqIuf8DYSY1yf/O/6//7/z/G9H/H29bXv+/oP+v/z8M+v+96f/3of+v/6//r//PUJWt/x9z/0KYSU3yPwAAANRBzP0fDDOR/wEAAKAyYu7/UJiJ/A8AAACVEXP/iTCTmuR//X/9/7r3/xtZdtH5//X/u61f/3806f/3pv/fh/6//r/+v/4/Q1W2/n/M/SfDTGqS//+Pvftosuus9jh8LKw0go/AmBFDGJmPwJQZVYzJJgfb5Awm52BMzpgcTc45Z5Mx2ZhoqBLl1lpLap3Te6vVu/vs/b7PM1lXKsl9BA23/lf3Vy8AAAD0IHf//eIW+x8AAACakbv//nGL/Q8AAADNyN3/gLhlqfv/1P5+uf5f/997/7/ayvv/u3+9/v8s/b/+fwpr/f3lm3/dXlH4nv3/Xe925b31//r/afr/k/Vj/f+ktv359f/6f9bNrf/P3f/AuGWp+x8AAABYk7v/QXGL/Q8AAADNyN3/4LjF/gcAAIBm5O6/Mm7pZP933f+fOvc5kv5f/7/zEz33/zfq//X/y+b9/2H6/xHe/9f/6//1/0xqbv1/7v6HxC2d7H8AAADoQe7+h8Yt9j8AAAA0I3f/w+IW+x8AAACakbv/4XFLJ/u/6/7f+//6/7CM/v+E9/8v+PPo//X/m+j/h+n/R+j/9f/6f/0/k5pb/5+7/xFxSyf7HwAAAHqQu/+RcYv9DwAAAM3I3f+ouMX+BwAAgGbk7n903NLJ/tf/6//1/0vp/4/o/X/9v/5/4a5bnfvvBP3/Ov3/iJH+f7XS/w+56H5+8x9vOZ9/D/p//T/r5tb/5+5/TNxyj9XqxKX+IQEAAIBZyd3/2Lilk7//BwAAgB7k7r8qbrH/AQAAoBm5+6+OWzrZ//p//b/+X/+v/9/89fX/y+T9/2EH7//vcqf73qff/t/7/8O8/z91/3/7d4b+n2WbW/+fu/+auKWT/Q8AAAA9yN3/uLjF/gcAAIBm5O5/fNxi/wMAAEAzcvc/IW7pZP/r/1vr/++w6/ed1//v1C76f/2//l//3zr9/zDv/4/Y+a+50/VD/b/+3/v/5/f/w6+j6//ZZG79f+7+J8Ytnex/AAAA6EHu/ifFLfY/AAAANCN3/5PjFvsfAAAAmpG7/ylxSyf7/2j6/81Bvv7f+//6f/2//l//PzX9/zD9/4hW3v+/xO+abffzB7Xtz99+/z9M/88mc+v/c/c/NW7pZP8DAABAD3L3Py1usf8BAACgGbn7nx632P8AAADQjNz9z4hbOtn/3v/X/y+j/8+voP/X/x9+/5/0/8uk/x+m/x/RSv9/ibbdzy/98+v/9f+sm1v/n7v/mXFLJ/sfAAAAepC7/1lxi/0PAAAAzcjd/+y4xf4HAACAZuTuf07c0sn+1//r/5fR/3v/X//v/X/9/8XR/w/T/4/Q/+v/9f979f+jf379P5vMrf/P3X9t3NLJ/gcAAIAe5O5/btxi/wMAAEAzcvc/L26x/wEAAKAZufufH7d0sv+30f8fO+/q//X/+n/9v/5f/z8l/f8w/f8I/b/+X//v/X8mNaP+/7zfdWr1grilk/0PAAAAPcjd/8K4xf4HAACAZuTuf1HcYv8DAABAM3L3vzhu6WT/e/9/Nv3/Ts7XVv9/erVa6f9Xnfb/p8/797O+L/X/+v8joP8ftv/+/+brz37nnqX/1/8P0f/r//X/XGhG/f/Oj3P3vyRu6WT/AwAAQA9y9780brH/AQAAoBm5+18Wt9j/AAAA0Izc/S+PWzrZ//r/2fT/O9rq/73/f+H3R0/9v/f/1+n/j4b+f5j3/0fo//X/+n/9P5OaW/+fu/8VcdOJ45f8RwQAAABmJnf/K+OWTv7+HwAAAHqQu/9VcYv9DwAAAAt17drP5O5/ddzSyf7X/0/b/5847+f0//r/C78/9P/6f/3/4dP/D9P/j9D/6//1//p/JjW3/j93/2vilk72PwAAAPQgd/91cYv9DwAAAM3I3f/auMX+BwAAgGbk7r8+bulk/+v/vf+v/9f/6/83f339/zLp/4fp/0fo//X/2+3/T577H/X/tGEf/f+ZM2euOvT+P3f/6+KWTvY/AAAA9CB3/+vjFvsfAAAAmpG7/w1xi/0PAAAAzcjd/8a4pZP9r//vtP/Pb/Vl9f9Xr1b6f/2//l//P0z/P0z/P0L/r//3/r/+n0nN7f3/3P1vils62f8AAADQg9z9b45b7H8AAABoRu7+t8Qt9j8AAAA0I3f/W+OWTva//r/T/t/7//p//f9R9/+3rfT/R2IR/f/pvb/+3Pv/a/T/+v8B3fX/97z7rh/q//X/rJtb/5+7/21xSyf7HwAAAHqQu//tcYv9DwAAAM3I3f+OuMX+BwAAgGbk7n9n3HR5J/tf/6//1//r//X/m7/+Eb//f2K1Wun/J7CI/n/A3Pv/ad7/v/A/5efo//X/S/78+n/9P+vm1v/n7n9X3NLJ/gcAAIAe5O5/d9xi/wMAAEAzcvffELfY/wAAANCM3P3viVs62f/6f/2//n+6/v+yPb4f9P/x/bCt/v+aRfT/3v+fiP5/2Dz6/73p//X/S/78+n/9PxdvW/1/7v73xi2d7H8AAADoQe7+98Ut9j8AAAA0I3f/++MW+x8AAACakbv/A3FLJ/tf/6//30//n59T/9/W+/8nZ9f/n9r1z+vk/X/9/0T0/8P0/yP0//p//f+1+n+mNLf3/3P3fzBu6WT/AwAAQA9y938obv2fbu1/AAAAaEbu/g/HLfY/AAAANCN3/0filk72v/5f/+/9/8X0/5flP2p+7//fsuvnZ/f+v/6/K/r/Yfr/Efr/Q+jnb//U+v8F9f/e/2dSc+v/c/d/NG7pZP8DAABAD3L3fyxusf8BAACgGbn7Px632P8AAADQjNz9N8Ytnex//b/+X/+/mP7/0N7/P3j/v9sS+/9j+v9m6P+HHU3/f1r/r/+vfv6y+E+B/l//P/b7adPc+v/c/Z+IWzrZ/wAAANCD3P2fjFvsfwAAAGhG7v5PxS32PwAAACzS5Rt+Lnf/p+OWTva//l//r//X/+v/N399/f8ybaX/z28K/b/3/0M//f+dd/3ooP38UX/+C//3l/5f/8/05tb/5+7/TNzSyf4HAACAHuTu/2zcYv8DAABAM3L3fy5usf8BAACgGbn7Px+3dLL/9f/L6P/zO1P/r//X/+v/9f/DvP8/TP8/Qv9/Mf38DXv9/qX1/1N/fv2//p91c+v/c/d/IW7pZP8DAABAD3L3fzFusf8BAACgGbn7vxS32P8AAADQjJ3dn3FZh/tf/7+M/t/7//p//b/+X/9/cfT/w/T/I/T/W+3nl/759f/6f9bNrf//8s7vOrX6StzSyf4HAACAHuTu/2rcYv8DAADALO39/yqwt9z9X4tb7H8AAABoRu7+r8ctnex//b/+fxn9/5kzZ67S/+v/d/95zvX/N+n/Kfr/Yfr/Efp//b/+X//PpObW/+fu/0bc0sn+BwAAgB7k7v9m3GL/AwAAQDNy938rbrH/AQAAoBm5+78dt3Sy//X/M+j/T+n/vf+v/195/1//PxH9/zD9/4gW+/9TF//H33Y/f1Db/vz6f/0/6+bW/+fu/07c0sn+BwAAgB7k7v9u3GL/AwAAQDNy938vbrH/AQAAoBm5+78ft3Sy//X/R9f/3/6vXS/v/59ebf78+n/9v/5f/3/Y9P/D9P8jWuz/92Hb/fzSP7/+X//Purn1/7n7fxC37B5+x/f3pwQAAADmJHf/D+OWTv7+HwAAAHqQu/9HcYv9DwAAAM3I3f/juKWT/a//n8H7/w32/97/3/z9of+fdf9/TP/fBv3/MP3/CP2//l//P1H/n9/N+v/eza3/z93/k7ilk/0PAAAAPcjd/9O4xf4HAACAZuTu/1ncYv8DAABAM3L33xS3nLf/N7XdrdD/6//1//p//f/mr6//Xyb9/7CL7f9Prg7W/yf9v/5f/99r/+/9f86aW/+fu//ncYu//wcAAIDFOb7Hz+fu/0XcYv8DAABAM3L3/zJusf8BAACgGbn7fxW33HpsWx/pSOn/9f/6f/2//n/z19f/L5P+f5j3/0ds6v9X+v999vNX6P/b6P9XK/0/Bze3/j93/6/jFn//DwAAAM3I3f+buMX+BwAAgGbk7v9t3GL/AwAAQDNy9/8ubulk/+v/9f8H7P930kz9/1n6/7P0/5vp/4+G/n+Y/n+E9/+9/6//9/4/k5pb/5+7/+a4pZP9DwAAAD3I3f/7uMX+BwAAgGbk7v9D3GL/AwAAQDNy9/8xbulk/2+t/49/qfX/i+//vf+v/9f/6/9nRf8/TP8/Qv+v/9f/6/+Z1Nz6/9z9f4pbOtn/AAAA0IPc/X+OW+x/AAAAaEbu/r/ELfY/AAAANCN3/1/jlk72v/f/D9r/nw1U9P+7P7/+fzf9f3w/6P/1/0dA/z9M/79Z/Rul/9f/6//1/0xqbv1/7v5b4pZO9j8AAAD0IHf/3+IW+x8AAACakbv/1rjF/gcAAIBm5O7/e9zSyf7X/3v/X/+v/9f/b/76+v9l0v8P22b/f687jn/ZZb7/f3ztH7Pg/j8/gv5f/6//ZxJz6/9z9/8jbulk/wMAAEAPcvf/M26x/wEAAKAZufv/FbfY/wAAANCM3P3/jls62f8j/f/J+oX6/0H6/92fX/+/+ftD/6//1/8fPv3/MO//j/D+v/f/9f/6fyY1t/4/d/9/4pZO9j8AAAD0IHf/bXGL/Q8AAADNyN3/37jF/gcAAIBm5O7/X9zSyf73/v+S+v8r9P/6f/2//l//P0L/P0z/P0L/r//X/+v/mdTc+v/c/f8PAAD//xhsRHk=") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f0000000880)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x5}}, {@nomblk_io_submit}, {@grpjquota}, {@sb={'sb', 0x3d, 0x64}}, {@orlov}, {@quota}, {@data_err_abort}, {@bsdgroups}, {@dax_inode}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 1.388987246s ago: executing program 1 (id=1437): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) 1.325720617s ago: executing program 2 (id=1438): mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mlock2(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) 1.25941781s ago: executing program 1 (id=1441): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x1000f) 1.155215573s ago: executing program 2 (id=1442): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@nombcache}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) 627.03132ms ago: executing program 2 (id=1443): r0 = socket(0xa, 0x2400000001, 0x0) setresuid(0xee01, 0xee00, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000200)={'sit0\x00', 0x0}) 298.746811ms ago: executing program 2 (id=1444): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019001c000400000007fd17e5ffff8800040000000000000000", 0x39}], 0x1) 191.040754ms ago: executing program 0 (id=1445): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xffff, 0x6d7, 0x0, 0x79, 0x3, "5acf8f53872ebc82"}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000480)="b9e94d05d9adf5e171261092d920194b9c340d", 0x13}], 0x1) 178.775304ms ago: executing program 3 (id=1446): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000017f00000101"], 0x10) 0s ago: executing program 2 (id=1447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[], 0x8) kernel console output (not intermixed with test programs): Directory bread(block 71) failed [ 162.110612][ T7337] FAT-fs (loop3): Directory bread(block 72) failed [ 162.137776][ T7337] FAT-fs (loop3): Directory bread(block 73) failed [ 162.815804][ T7350] netlink: 'syz.2.607': attribute type 5 has an invalid length. [ 162.823620][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 162.840346][ T7331] loop0: detected capacity change from 0 to 40427 [ 162.878081][ T7331] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 162.891432][ T7331] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 162.930669][ T7331] F2FS-fs (loop0): invalid crc value [ 162.976005][ T7331] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.169256][ T7331] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 163.195649][ T7331] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.299443][ T7364] loop2: detected capacity change from 0 to 128 [ 163.345941][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.549886][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 163.572640][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 163.602984][ T8] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 163.620321][ T8] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 163.644021][ T8] usb 4-1: Product: syz [ 163.658947][ T8] usb 4-1: Manufacturer: syz [ 163.678496][ T8] usb 4-1: SerialNumber: syz [ 163.696579][ T8] usb 4-1: config 0 descriptor?? [ 163.702679][ T7356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 163.862044][ T7375] futex_wake_op: syz.1.618 tries to shift op by 32; fix this program [ 163.925918][ T5826] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.988480][ T5807] usb 4-1: USB disconnect, device number 4 [ 164.129075][ T5826] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.155956][ T5826] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.176233][ T5826] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.195730][ T5826] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 164.223212][ T5826] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 164.242022][ T5826] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.254311][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.264228][ T5826] usb 3-1: Product: syz [ 164.269212][ T5826] usb 3-1: Manufacturer: syz [ 164.283969][ T5826] cdc_wdm 3-1:1.0: skipping garbage [ 164.293038][ T5826] cdc_wdm 3-1:1.0: skipping garbage [ 164.301816][ T5826] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 164.308258][ T5826] cdc_wdm 3-1:1.0: Unknown control protocol [ 165.033222][ T7400] loop3: detected capacity change from 0 to 512 [ 165.071497][ T7400] EXT4-fs: inline encryption not supported [ 165.132997][ T7400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.220214][ T7400] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.389997][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.553075][ T7409] loop0: detected capacity change from 0 to 64 [ 165.563198][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 166.582354][ T7415] loop0: detected capacity change from 0 to 32768 [ 166.650537][ T7415] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 166.672360][ T5840] usb 3-1: USB disconnect, device number 5 [ 166.715565][ T7415] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 166.840827][ T7415] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 166.878928][ T5807] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 166.891650][ T5807] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 166.967274][ T7436] loop2: detected capacity change from 0 to 256 [ 166.974716][ T7436] exfat: Deprecated parameter 'utf8' [ 167.025913][ T7436] exfat: Deprecated parameter 'namecase' [ 167.031873][ T7436] exfat: Deprecated parameter 'namecase' [ 167.077396][ T5807] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 185ms [ 167.102428][ T7436] exfat: Deprecated parameter 'utf8' [ 167.120875][ T5807] gfs2: fsid=syz:syz.0: jid=0: Done [ 167.139657][ T7415] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 167.171151][ T7436] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 167.228165][ T7440] loop3: detected capacity change from 0 to 2048 [ 167.287235][ T7440] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 167.330503][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 167.330520][ T27] audit: type=1800 audit(1774955116.396:29): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.643" name="file1" dev="loop2" ino=1048639 res=0 errno=0 [ 167.340844][ T7444] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.393503][ T7445] loop1: detected capacity change from 0 to 164 [ 167.602765][ T7445] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 167.663001][ T7415] gfs2: fsid=syz:syz.0: found 1 quota changes [ 167.894686][ T7415] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 167.894686][ T7415] inode = 11 2339 [ 167.894686][ T7415] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 167.964801][ T7454] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 167.992724][ T7415] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 168.014784][ T7415] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:7415 [syz.0.635] gfs2_quota_sync+0x411/0x5a0 [ 168.038785][ T7415] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 168.075589][ T7415] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 168.134316][ T7415] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 168.157632][ T7415] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 168.180654][ T7415] gfs2: fsid=syz:syz.0: File system withdrawn [ 168.189438][ T7415] CPU: 0 PID: 7415 Comm: syz.0.635 Not tainted syzkaller #0 [ 168.196881][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.207772][ T7415] Call Trace: [ 168.211266][ T7415] [ 168.214597][ T7415] dump_stack_lvl+0x18c/0x250 [ 168.219797][ T7415] ? kobject_uevent_env+0x363/0x8b0 [ 168.225332][ T7415] ? show_regs_print_info+0x20/0x20 [ 168.231110][ T7415] ? load_image+0x400/0x400 [ 168.235856][ T7415] ? kobject_uevent_env+0x363/0x8b0 [ 168.241140][ T7415] gfs2_withdraw+0xb24/0x13d0 [ 168.245992][ T7415] ? gfs2_lm+0x240/0x240 [ 168.251188][ T7415] ? preempt_schedule+0xc0/0xd0 [ 168.256115][ T7415] ? gfs2_consist_inode_i+0xf5/0x110 [ 168.261545][ T7415] gfs2_inode_refresh+0xb89/0x1000 [ 168.266717][ T7415] ? gfs2_inode_metasync+0xf0/0xf0 [ 168.272156][ T7415] ? gfs2_glock_nq+0xd4f/0x1420 [ 168.277091][ T7415] gfs2_instantiate+0x162/0x220 [ 168.282217][ T7415] gfs2_glock_wait+0x1d4/0x2a0 [ 168.287106][ T7415] do_sync+0x4c6/0xe50 [ 168.291335][ T7415] ? gfs2_quota_sync+0x411/0x5a0 [ 168.296426][ T7415] ? bh_get+0x760/0x760 [ 168.300631][ T7415] ? gfs2_quota_sync+0x31a/0x5a0 [ 168.305721][ T7415] ? gfs2_quota_sync+0x411/0x5a0 [ 168.310701][ T7415] ? do_raw_spin_unlock+0x121/0x230 [ 168.315958][ T7415] ? do_raw_spin_unlock+0x121/0x230 [ 168.321392][ T7415] gfs2_quota_sync+0x411/0x5a0 [ 168.326492][ T7415] gfs2_sync_fs+0x4c/0xb0 [ 168.330874][ T7415] sync_filesystem+0xea/0x220 [ 168.335606][ T7415] gfs2_reconfigure+0xbb/0xb10 [ 168.340654][ T7415] ? hook_sb_remount+0x1b/0xc0 [ 168.345577][ T7415] ? bpf_lsm_sb_remount+0x9/0x10 [ 168.350667][ T7415] reconfigure_super+0x21e/0x8a0 [ 168.355868][ T7415] vfs_fsconfig_locked+0x16c/0x320 [ 168.361179][ T7415] __se_sys_fsconfig+0x70d/0x850 [ 168.366356][ T7415] ? __x64_sys_fsconfig+0xc0/0xc0 [ 168.371538][ T7415] ? lockdep_hardirqs_on+0x98/0x150 [ 168.377233][ T7415] ? __x64_sys_fsconfig+0x20/0xc0 [ 168.382411][ T7415] do_syscall_64+0x55/0xa0 [ 168.386965][ T7415] ? clear_bhb_loop+0x40/0x90 [ 168.391779][ T7415] ? clear_bhb_loop+0x40/0x90 [ 168.396646][ T7415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.402956][ T7415] RIP: 0033:0x7fe885d9c819 [ 168.407426][ T7415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.427578][ T7415] RSP: 002b:00007fe886b7a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 168.436147][ T7415] RAX: ffffffffffffffda RBX: 00007fe886015fa0 RCX: 00007fe885d9c819 [ 168.444282][ T7415] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 168.452308][ T7415] RBP: 00007fe885e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 168.461026][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.469131][ T7415] R13: 00007fe886016038 R14: 00007fe886015fa0 R15: 00007ffef202e598 [ 168.477264][ T7415] [ 168.581818][ T7468] loop3: detected capacity change from 0 to 512 [ 168.720453][ T7468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.763897][ T7468] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.046329][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.500362][ T7488] Illegal XDP return value 3074254081 on prog (id 36) dev N/A, expect packet loss! [ 170.015786][ T7504] loop0: detected capacity change from 0 to 1024 [ 170.179019][ T49] hfsplus: b-tree write err: -5, ino 25 [ 170.186771][ T49] hfsplus: b-tree write err: -5, ino 4 [ 170.198163][ T49] hfsplus: b-tree write err: -5, ino 2 [ 170.883585][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.923446][ T7528] loop0: detected capacity change from 0 to 4096 [ 170.957380][ T7528] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 171.029201][ T7533] netlink: 60 bytes leftover after parsing attributes in process `syz.3.687'. [ 171.076012][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 171.098323][ T8] usb 3-1: config 157 has too many interfaces: 246, using maximum allowed: 32 [ 171.114635][ T7528] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 171.127062][ T8] usb 3-1: config 157 has 1 interface, different from the descriptor's value: 246 [ 171.165595][ T8] usb 3-1: config 157 has no interface number 0 [ 171.194628][ T8] usb 3-1: config 157 interface 224 has no altsetting 0 [ 171.222852][ T7537] loop3: detected capacity change from 0 to 128 [ 171.223905][ T8] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 171.259759][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.267003][ T7537] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 171.280105][ T8] usb 3-1: Product: syz [ 171.286171][ T7537] hpfs: filesystem error: improperly stopped [ 171.292610][ T7537] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 171.311135][ T2927] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 171.320696][ T8] usb 3-1: Manufacturer: syz [ 171.333101][ T8] usb 3-1: SerialNumber: syz [ 171.340726][ T7537] hpfs: You really don't want any checks? You are crazy... [ 171.344570][ T5765] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 171.369431][ T5765] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 171.375156][ T7537] hpfs: Code page index out of array [ 171.382988][ T5765] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 171.387064][ T7537] hpfs: code page support is disabled [ 171.390355][ T2927] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 171.430088][ T7537] hpfs: hpfs_map_4sectors(): unaligned read [ 171.462640][ T7537] hpfs: hpfs_map_4sectors(): unaligned read [ 171.475952][ T7537] hpfs: filesystem error: unable to find root dir [ 171.587740][ T8] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 172.274422][ T7545] loop1: detected capacity change from 0 to 32768 [ 172.299873][ T7545] [ 172.299873][ T7545] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.299873][ T7545] [ 172.307652][ T8] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 172.383685][ T7545] [ 172.383685][ T7545] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.383685][ T7545] [ 172.402959][ T7545] [ 172.402959][ T7545] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.402959][ T7545] [ 172.421021][ T7545] [ 172.421021][ T7545] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.421021][ T7545] [ 172.431920][ T5826] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 172.435860][ T7545] [ 172.435860][ T7545] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.435860][ T7545] [ 172.451129][ T7545] [ 172.451129][ T7545] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.451129][ T7545] [ 172.466151][ T7560] [ 172.466151][ T7560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.466151][ T7560] [ 172.478849][ T114] [ 172.478849][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.478849][ T114] [ 172.490458][ T76] [ 172.490458][ T76] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.490458][ T76] [ 172.501788][ T76] [ 172.501788][ T76] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.501788][ T76] [ 172.514415][ T76] [ 172.514415][ T76] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.514415][ T76] [ 172.526657][ T7560] [ 172.526657][ T7560] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.526657][ T7560] [ 172.577614][ T5766] [ 172.577614][ T5766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.577614][ T5766] [ 172.592672][ T5766] [ 172.592672][ T5766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.592672][ T5766] [ 172.637831][ T5826] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.646263][ T969] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 172.656138][ T5826] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 172.676411][ T5826] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 172.701341][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.717513][ T5826] usb 1-1: config 0 descriptor?? [ 172.727916][ T5826] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 172.745348][ T5826] dvb-usb: bulk message failed: -22 (3/0) [ 172.757950][ T5826] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 172.760023][ T8] usb 3-1: failed to restore interface 224 altsetting 169 (error=-71) [ 172.786332][ T5826] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 172.792743][ T8] ueagle-atm 3-1:157.224: usbatm_usb_probe: bind failed: -19! [ 172.794162][ T5826] usb 1-1: media controller created [ 172.814954][ T8] usb 3-1: USB disconnect, device number 6 [ 172.840281][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.846354][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 172.858525][ T969] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 172.880885][ T5826] dvb-usb: bulk message failed: -22 (6/0) [ 172.886011][ T969] usb 4-1: config 0 has no interface number 0 [ 172.901846][ T969] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.913861][ T969] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.920127][ T5826] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 172.942557][ T969] usb 4-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.961603][ T5826] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 172.971926][ T969] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 173.000879][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.024647][ T5826] dvb-usb: schedule remote query interval to 150 msecs. [ 173.033292][ T5826] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 173.046740][ T969] usb 4-1: config 0 descriptor?? [ 173.095973][ T5826] usb 1-1: USB disconnect, device number 7 [ 173.161701][ T5826] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 173.494139][ T969] logitech-djreceiver 0003:046D:C537.0007: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.3-1/input6 [ 173.662389][ T7562] loop1: detected capacity change from 0 to 32768 [ 173.680483][ T7562] XFS: attr2 mount option is deprecated. [ 173.713004][ T5826] usb 4-1: USB disconnect, device number 5 [ 173.768454][ T7562] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.934654][ T7562] XFS (loop1): Ending clean mount [ 173.973681][ T7562] XFS (loop1): Quotacheck needed: Please wait. [ 174.057663][ T7585] loop0: detected capacity change from 0 to 128 [ 174.084779][ T7585] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 174.115478][ T7562] XFS (loop1): Quotacheck: Done. [ 174.153719][ T7587] loop2: detected capacity change from 0 to 1024 [ 174.204411][ T7585] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.345137][ T7585] ext2 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.358917][ T7587] hfsplus: bad catalog entry type [ 174.421561][ T5766] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.438131][ T49] hfsplus: b-tree write err: -5, ino 25 [ 174.452358][ T49] hfsplus: b-tree write err: -5, ino 4 [ 174.473680][ T49] hfsplus: b-tree write err: -5, ino 2 [ 174.621902][ T5765] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.294643][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 175.505598][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 175.513183][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.544417][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.572204][ T8] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 175.592015][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.609773][ T8] usb 4-1: config 0 descriptor?? [ 176.117338][ T8] waltop 0003:172F:0034.0008: item fetching failed at offset 2/41 [ 176.123328][ T7595] syz.2.720 (7595): drop_caches: 2 [ 176.134563][ T8] waltop: probe of 0003:172F:0034.0008 failed with error -22 [ 176.214128][ T7613] loop1: detected capacity change from 0 to 40427 [ 176.232559][ T7613] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 176.240549][ T7613] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 176.277388][ T7613] F2FS-fs (loop1): invalid crc value [ 176.318529][ T7613] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.378857][ T8] usb 4-1: USB disconnect, device number 6 [ 176.479743][ T7613] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 176.505538][ T7613] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 176.614690][ T7624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.723'. [ 177.206068][ T7630] loop2: detected capacity change from 0 to 4096 [ 177.285730][ T7633] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.392789][ T27] audit: type=1800 audit(1774955126.456:30): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.726" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 177.503945][ T7635] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 177.536037][ T7635] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 177.546709][ T7635] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 177.553558][ T7635] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 177.586137][ T7635] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 177.613672][ T7635] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 177.656640][ T7635] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 177.663467][ T7635] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 177.715681][ T7635] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 177.722468][ T7635] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 177.748088][ T7635] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 177.763327][ T7635] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 177.795550][ T7635] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 177.796783][ T7626] loop0: detected capacity change from 0 to 40427 [ 177.802605][ T7635] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 177.852896][ T7626] F2FS-fs (loop0): invalid crc value [ 177.855565][ T7635] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 177.907777][ T7626] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.915585][ T7635] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 177.955500][ T7635] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 178.002286][ T7635] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 178.025725][ T7635] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 178.049416][ T7642] loop1: detected capacity change from 0 to 4096 [ 178.108768][ T7644] loop2: detected capacity change from 0 to 512 [ 178.125266][ T7626] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.149195][ T7646] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.164819][ T7644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.195194][ T7644] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.257886][ T7642] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 178.430564][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.446726][ T5765] syz-executor: attempt to access beyond end of device [ 178.446726][ T5765] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.496478][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 178.668034][ T7656] program syz.2.734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.898861][ T7659] ipvlan3: entered allmulticast mode [ 178.904402][ T7659] veth0: entered allmulticast mode [ 179.416772][ T7653] loop1: detected capacity change from 0 to 32768 [ 179.520455][ T7653] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 179.636129][ T7653] XFS (loop1): Ending clean mount [ 179.972331][ T5766] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 180.353048][ T7696] loop0: detected capacity change from 0 to 64 [ 180.472787][ T7681] loop2: detected capacity change from 0 to 32768 [ 180.510265][ T7698] warning: `syz.3.751' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 180.571061][ T7681] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.848619][ T7681] XFS (loop2): Ending clean mount [ 181.042372][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.093750][ T7721] loop3: detected capacity change from 0 to 2048 [ 181.106695][ T7722] loop1: detected capacity change from 0 to 1024 [ 181.131030][ T7721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.160728][ T7722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.316879][ T7722] CIFS: iocharset name too long [ 181.428218][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.665544][ T7730] netlink: 128 bytes leftover after parsing attributes in process `syz.3.761'. [ 181.674981][ T7730] netlink: 'syz.3.761': attribute type 5 has an invalid length. [ 181.831366][ T27] audit: type=1326 audit(1774955130.886:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe885d9c819 code=0x7ffc0000 [ 181.895835][ T27] audit: type=1326 audit(1774955130.886:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe885d9c819 code=0x7ffc0000 [ 181.923605][ T27] audit: type=1326 audit(1774955130.886:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe885d9c819 code=0x7ffc0000 [ 181.937652][ T7740] loop3: detected capacity change from 0 to 256 [ 182.025385][ T27] audit: type=1326 audit(1774955130.896:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe885d9c819 code=0x7ffc0000 [ 182.119254][ T27] audit: type=1326 audit(1774955130.896:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe885d9c819 code=0x7ffc0000 [ 182.152645][ T7746] comedi comedi3: das16m1: I/O port conflict (0x4f27,16) [ 182.234992][ T27] audit: type=1326 audit(1774955130.896:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fe885d9c819 code=0x7ffc0000 [ 182.317934][ T27] audit: type=1326 audit(1774955130.946:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe885d9c819 code=0x7ffc0000 [ 182.378374][ T27] audit: type=1326 audit(1774955130.946:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe885d9c819 code=0x7ffc0000 [ 182.448873][ T27] audit: type=1326 audit(1774955130.946:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe885d9c819 code=0x7ffc0000 [ 182.526453][ T27] audit: type=1326 audit(1774955130.946:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7735 comm="syz.0.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe885d9c819 code=0x7ffc0000 [ 182.616301][ T7755] loop1: detected capacity change from 0 to 4096 [ 182.647548][ T7755] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 182.726225][ T7755] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 182.780585][ T7755] ntfs3: loop1: ino=5, "/" directory corrupted [ 182.803945][ T7764] loop3: detected capacity change from 0 to 256 [ 182.842827][ T7764] exfat: Deprecated parameter 'utf8' [ 182.884102][ T7764] exfat: Deprecated parameter 'namecase' [ 182.914581][ T7764] exfat: Deprecated parameter 'namecase' [ 182.917942][ T7767] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 182.934498][ T7764] exfat: Deprecated parameter 'utf8' [ 182.964120][ T7767] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 182.989925][ T7764] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 183.084495][ T27] audit: type=1800 audit(1774955132.146:41): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.776" name="file1" dev="loop3" ino=1048640 res=0 errno=0 [ 183.505599][ T5805] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 183.670626][ T7780] loop1: detected capacity change from 0 to 1024 [ 183.698270][ T7780] hfsplus: invalid length 32517 has been corrected to 255 [ 183.699699][ T5805] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.727252][ T5805] usb 1-1: config 0 has no interface number 0 [ 183.763545][ T5805] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 183.787850][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.823020][ T5805] usb 1-1: Product: syz [ 183.833128][ T5805] usb 1-1: Manufacturer: syz [ 183.845603][ T5805] usb 1-1: SerialNumber: syz [ 183.863159][ T7782] loop2: detected capacity change from 0 to 4096 [ 183.871140][ T5805] usb 1-1: config 0 descriptor?? [ 183.887504][ T5805] usb 1-1: selecting invalid altsetting 1 [ 183.893556][ T5805] dvb_ttusb_budget: ttusb_init_controller: error [ 183.905604][ T76] hfsplus: b-tree write err: -5, ino 20 [ 183.911048][ T7774] loop3: detected capacity change from 0 to 40427 [ 183.926138][ T5805] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 183.943588][ T7774] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 183.990691][ T7785] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.993351][ T7774] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 184.090613][ T7774] F2FS-fs (loop3): invalid crc value [ 184.125044][ T7774] F2FS-fs (loop3): Found nat_bits in checkpoint [ 184.138006][ T7782] NILFS (loop2): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 184.182650][ T5805] DVB: Unable to find symbol stv0299_attach() [ 184.366241][ T7774] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 184.390631][ T7774] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 184.399214][ T5805] DVB: Unable to find symbol tda8083_attach() [ 184.406797][ T5805] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 184.450893][ T5805] usb 1-1: USB disconnect, device number 8 [ 184.558753][ T7798] loop2: detected capacity change from 0 to 256 [ 184.579636][ T7798] exfat: Deprecated parameter 'utf8' [ 184.585223][ T7798] exfat: Deprecated parameter 'utf8' [ 184.640479][ T7798] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 184.959477][ T7802] loop1: detected capacity change from 0 to 4096 [ 185.045686][ T7805] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.164072][ T7802] NILFS (loop1): nilfs_sufile_do_free: segment 7 is already clean [ 185.187989][ T7802] NILFS (loop1): nilfs_sufile_do_free: segment 8 is already clean [ 185.743621][ T7825] netlink: 68 bytes leftover after parsing attributes in process `syz.0.800'. [ 185.762469][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'. [ 185.788916][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'. [ 186.069389][ T7835] loop2: detected capacity change from 0 to 2048 [ 186.135349][ T7835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.249374][ T7842] loop0: detected capacity change from 0 to 512 [ 186.263233][ T7842] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (47215!=33349) [ 186.275322][ T7842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 186.284345][ T7842] EXT4-fs (loop0): orphan cleanup on readonly fs [ 186.291781][ T7842] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.807: bad orphan inode 3 [ 186.309428][ T7842] EXT4-fs (loop0): Remounting filesystem read-only [ 186.357209][ T7842] EXT4-fs (loop0): mounted filesystem ff0f0000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 186.447867][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.604463][ T5765] EXT4-fs (loop0): unmounting filesystem ff0f0000-0000-0000-0000-000000000007. [ 186.655196][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 186.801078][ T7857] netlink: 'syz.0.814': attribute type 3 has an invalid length. [ 186.823612][ T7859] erofs: (device loop1): mounted with root inode @ nid 36. [ 186.944718][ T7859] erofs: (device loop1): z_erofs_readahead: readahead error at folio 461 @ nid 36 [ 187.006709][ T7859] erofs: (device loop1): z_erofs_readahead: readahead error at folio 460 @ nid 36 [ 187.044232][ T7859] erofs: (device loop1): z_erofs_readahead: readahead error at folio 340 @ nid 36 [ 187.073717][ T7859] syz.1.815: attempt to access beyond end of device [ 187.073717][ T7859] loop1: rw=524288, sector=22873858832, nr_sectors = 16 limit=16 [ 187.124069][ T7859] syz.1.815: attempt to access beyond end of device [ 187.124069][ T7859] loop1: rw=524288, sector=22873858840, nr_sectors = 16 limit=16 [ 187.162564][ T7859] syz.1.815: attempt to access beyond end of device [ 187.162564][ T7859] loop1: rw=524288, sector=14519143264, nr_sectors = 16 limit=16 [ 187.206592][ T7859] syz.1.815: attempt to access beyond end of device [ 187.206592][ T7859] loop1: rw=524288, sector=14519143272, nr_sectors = 16 limit=16 [ 187.222089][ T7859] syz.1.815: attempt to access beyond end of device [ 187.222089][ T7859] loop1: rw=524288, sector=63675288, nr_sectors = 16 limit=16 [ 187.239872][ T7859] syz.1.815: attempt to access beyond end of device [ 187.239872][ T7859] loop1: rw=524288, sector=63675296, nr_sectors = 16 limit=16 [ 187.261814][ T7859] syz.1.815: attempt to access beyond end of device [ 187.261814][ T7859] loop1: rw=524288, sector=16240345096, nr_sectors = 16 limit=16 [ 187.325757][ T7859] syz.1.815: attempt to access beyond end of device [ 187.325757][ T7859] loop1: rw=524288, sector=16240345104, nr_sectors = 16 limit=16 [ 187.348517][ T7859] syz.1.815: attempt to access beyond end of device [ 187.348517][ T7859] loop1: rw=524288, sector=16438238104, nr_sectors = 16 limit=16 [ 187.364014][ T7859] syz.1.815: attempt to access beyond end of device [ 187.364014][ T7859] loop1: rw=524288, sector=16438238112, nr_sectors = 16 limit=16 [ 187.434589][ T7875] set_capacity_and_notify: 1 callbacks suppressed [ 187.434607][ T7875] loop3: detected capacity change from 0 to 16 [ 187.503192][ T7875] erofs: (device loop3): mounted with root inode @ nid 36. [ 187.578088][ T7875] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 187.794930][ T7879] loop0: detected capacity change from 0 to 4096 [ 187.871841][ T7885] mkiss: ax0: crc mode is auto. [ 187.910791][ T7879] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 187.976853][ T7879] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 188.015535][ T7879] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 188.061591][ T7879] ntfs: volume version 3.1. [ 188.087217][ T5769] Bluetooth: hci2: command tx timeout [ 188.118411][ T7879] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 188.161570][ T7879] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 188.220191][ T7879] ntfs: (device loop0): load_and_init_quota(): Failed to load $Quota/$Q index. [ 188.261474][ T7879] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 188.752430][ T7908] netlink: 'syz.3.838': attribute type 3 has an invalid length. [ 188.935711][ T7897] loop2: detected capacity change from 0 to 32768 [ 189.866277][ T5807] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 189.879885][ T7914] loop3: detected capacity change from 0 to 40427 [ 189.902154][ T7914] F2FS-fs (loop3): invalid crc value [ 189.910109][ T7914] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.970903][ T7914] F2FS-fs (loop3): Start checkpoint disabled! [ 189.985370][ T7914] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 190.078041][ T5807] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 190.097507][ T5807] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.126355][ T5807] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.176602][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.203863][ T5807] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.223654][ T5807] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.266947][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.296082][ T5807] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.316435][ T5807] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.336386][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.353730][ T7938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.850'. [ 190.354734][ T5807] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.387078][ T5807] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.415481][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.427916][ T5807] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.455669][ T5807] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.495925][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.513538][ T7940] ip6tnl1: entered allmulticast mode [ 190.516214][ T5807] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.538727][ T5807] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.565767][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.597721][ T5807] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.627206][ T5807] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.663780][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.677372][ T5807] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.712228][ T5807] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.747910][ T5807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 190.808362][ T5807] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 190.840702][ T5807] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 190.880399][ T7946] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 190.885470][ T5807] usb 2-1: Product: syz [ 190.896620][ T5807] usb 2-1: Manufacturer: syz [ 190.901368][ T5807] usb 2-1: SerialNumber: syz [ 190.911989][ T7948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 190.937274][ T5807] usb 2-1: config 0 descriptor?? [ 190.973580][ T5807] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 191.191681][ T5807] usb 2-1: USB disconnect, device number 8 [ 191.208119][ T5807] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 191.212184][ T7953] loop3: detected capacity change from 0 to 4096 [ 191.264359][ T7953] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 191.290003][ T7955] loop2: detected capacity change from 0 to 2048 [ 191.367166][ T7955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.632155][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.860'. [ 192.441392][ T7989] loop0: detected capacity change from 0 to 512 [ 192.485777][ T7989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.510375][ T7989] EXT4-fs (loop0): 1 truncate cleaned up [ 192.529901][ T7989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.580257][ T7989] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.874: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 192.621987][ T7989] EXT4-fs (loop0): Remounting filesystem read-only [ 192.687674][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.991851][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 193.124488][ T8009] loop0: detected capacity change from 0 to 64 [ 193.702709][ T8003] loop1: detected capacity change from 0 to 32768 [ 193.779662][ T8003] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.089606][ T8003] XFS (loop1): Ending clean mount [ 194.187915][ T8045] loop3: detected capacity change from 0 to 256 [ 194.206018][ T8045] exfat: Deprecated parameter 'namecase' [ 194.212165][ T8045] exfat: Deprecated parameter 'utf8' [ 194.269079][ T5766] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.349830][ T8045] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 194.616054][ T8045] overlay: filesystem on ./bus not supported [ 194.651254][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.659059][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.807320][ T8] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 194.835659][ T5807] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 195.015328][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 195.029710][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.052000][ T5807] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 195.052327][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.073848][ T5807] usb 3-1: config 0 has no interface number 0 [ 195.081852][ T5807] usb 3-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.093947][ T8] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 195.114293][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.119863][ T5807] usb 3-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.123186][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 195.146019][ T5807] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 195.164231][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.169029][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.177745][ T8] usb 1-1: config 0 descriptor?? [ 195.243924][ T5807] usb 3-1: config 0 descriptor?? [ 195.279886][ T8069] loop1: detected capacity change from 0 to 256 [ 195.663354][ T8] ryos 0003:1E7D:3138.0009: ignoring exceeding usage max [ 195.675347][ T8076] loop3: detected capacity change from 0 to 1024 [ 195.677029][ T5807] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 195.687208][ T8] ryos 0003:1E7D:3138.0009: unbalanced delimiter at end of report description [ 195.708168][ T8] ryos 0003:1E7D:3138.0009: parse failed [ 195.726384][ T8] ryos: probe of 0003:1E7D:3138.0009 failed with error -22 [ 195.732916][ T5807] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 195.756640][ T5807] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 195.764715][ T5807] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 195.788995][ T8076] hfsplus: b-tree write err: -5, ino 2 [ 195.796855][ T5807] uclogic 0003:5543:0522.000A: unknown main item tag 0x0 [ 195.811304][ T5807] uclogic 0003:5543:0522.000A: No inputs registered, leaving [ 195.852076][ T5807] uclogic 0003:5543:0522.000A: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input17 [ 195.897300][ T5807] usb 3-1: USB disconnect, device number 7 [ 195.917445][ T5805] usb 1-1: USB disconnect, device number 9 [ 196.017773][ T49] hfsplus: b-tree write err: -5, ino 25 [ 196.024944][ T49] hfsplus: b-tree write err: -5, ino 4 [ 196.050725][ T49] hfsplus: b-tree write err: -5, ino 2 [ 196.053756][ T8080] fido_id[8080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 196.069736][ T49] hfsplus: b-tree write err: -5, ino 22 [ 196.162817][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'. [ 196.587287][ T5805] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 196.629403][ T8098] loop0: detected capacity change from 0 to 128 [ 196.789780][ T5805] usb 4-1: Using ep0 maxpacket: 16 [ 196.811308][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.825098][ T8] hid-generic 0004:00A9:0000.000B: unknown main item tag 0x0 [ 196.838833][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.848925][ T8] hid-generic 0004:00A9:0000.000B: unknown main item tag 0x2 [ 196.859391][ T5805] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.872426][ T8] hid-generic 0004:00A9:0000.000B: unknown main item tag 0xe [ 196.875562][ T5807] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 196.882833][ T5805] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 196.903520][ T8] hid-generic 0004:00A9:0000.000B: hidraw0: HID v1.01 Device [syz1] on syz0 [ 196.921314][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.940767][ T5805] usb 4-1: config 0 descriptor?? [ 197.088605][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.100989][ T8107] fido_id[8107]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 197.109936][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.147305][ T5807] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 197.157782][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.182689][ T8113] loop0: detected capacity change from 0 to 16 [ 197.204579][ T5807] usb 2-1: config 0 descriptor?? [ 197.224609][ T8113] erofs: (device loop0): mounted with root inode @ nid 36. [ 197.392592][ T5805] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 197.418022][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.427523][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.439275][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.448159][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.463994][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.477140][ T8117] loop0: detected capacity change from 0 to 512 [ 197.491110][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.503553][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.517801][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.525355][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.538773][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.548654][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.561739][ T8117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.585547][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.589683][ T8117] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.602445][ T5805] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 197.613242][ T5805] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 197.640539][ T5805] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 197.663459][ T5807] arvo 0003:1E7D:30D4.000D: item fetching failed at offset 5/7 [ 197.676921][ T5807] arvo 0003:1E7D:30D4.000D: parse failed [ 197.682488][ T5805] microsoft 0003:045E:07DA.000C: no inputs found [ 197.682951][ T5807] arvo: probe of 0003:1E7D:30D4.000D failed with error -22 [ 197.718103][ T5805] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 197.751573][ T5805] usb 4-1: USB disconnect, device number 7 [ 197.822015][ T8121] fido_id[8121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 197.848686][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.010591][ T5807] usb 2-1: USB disconnect, device number 9 [ 198.332284][ T8131] loop2: detected capacity change from 0 to 4096 [ 198.350608][ T8131] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 198.731627][ T8135] loop3: detected capacity change from 0 to 4096 [ 198.803481][ T8140] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.837150][ T8139] loop2: detected capacity change from 0 to 2048 [ 198.898334][ T8139] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 198.975782][ T8139] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 199.016197][ T8139] UDF-fs: Scanning with blocksize 512 failed [ 199.070786][ T8139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.270521][ T8133] loop0: detected capacity change from 0 to 32768 [ 199.322951][ T8133] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 199.372038][ T8133] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.654122][ T8133] XFS (loop0): Ending clean mount [ 199.671522][ T8133] XFS (loop0): Quotacheck needed: Please wait. [ 199.748495][ T8133] XFS (loop0): Quotacheck: Done. [ 199.876211][ T28] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 199.956486][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.946'. [ 200.096071][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 200.122821][ T28] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 200.133699][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.154885][ T28] usb 4-1: Product: syz [ 200.165760][ T28] usb 4-1: Manufacturer: syz [ 200.170686][ T28] usb 4-1: SerialNumber: syz [ 200.181991][ T5765] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.192713][ T28] usb 4-1: config 0 descriptor?? [ 200.212154][ T28] dw2102: su3000_identify_state [ 200.225550][ T28] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 200.241575][ T28] dw2102: su3000_power_ctrl: 1, initialized 0 [ 200.249857][ T28] dvb-usb: bulk message failed: -22 (2/0) [ 200.287291][ T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.301629][ T28] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 200.312491][ T28] usb 4-1: media controller created [ 200.323749][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 200.358485][ T28] dw2102: i2c transfer failed. [ 200.386218][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 200.395522][ T28] dw2102: i2c transfer failed. [ 200.429352][ T8164] dvb-usb: bulk message failed: -22 (4/0) [ 200.439828][ T8164] dw2102: i2c transfer failed. [ 200.449338][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 200.457765][ T28] dw2102: i2c transfer failed. [ 200.463309][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 200.469807][ T28] dw2102: i2c transfer failed. [ 200.477010][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 200.482969][ T28] dw2102: i2c transfer failed. [ 200.488907][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 200.494849][ T28] dw2102: i2c transfer failed. [ 200.500351][ T28] dvb-usb: MAC address: 02:02:02:02:02:02 [ 200.532245][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.565972][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 200.571870][ T28] dw2102: command 0x0e transfer failed. [ 200.595489][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 200.601551][ T28] dw2102: command 0x0e transfer failed. [ 200.677264][ T8178] loop0: detected capacity change from 0 to 16 [ 200.687058][ T8178] erofs: (device loop0): mounted with root inode @ nid 36. [ 200.751145][ T8178] erofs: (device loop0): z_erofs_readahead: readahead error at folio 461 @ nid 36 [ 200.762246][ T8178] erofs: (device loop0): z_erofs_readahead: readahead error at folio 460 @ nid 36 [ 200.800713][ T8178] erofs: (device loop0): z_erofs_readahead: readahead error at folio 340 @ nid 36 [ 200.812577][ T8178] bio_check_eod: 20 callbacks suppressed [ 200.812595][ T8178] syz.0.950: attempt to access beyond end of device [ 200.812595][ T8178] loop0: rw=524288, sector=22873858832, nr_sectors = 16 limit=16 [ 200.836372][ T8178] syz.0.950: attempt to access beyond end of device [ 200.836372][ T8178] loop0: rw=524288, sector=22873858840, nr_sectors = 16 limit=16 [ 200.923063][ T8178] syz.0.950: attempt to access beyond end of device [ 200.923063][ T8178] loop0: rw=524288, sector=14519143264, nr_sectors = 16 limit=16 [ 200.944503][ T8184] loop1: detected capacity change from 0 to 512 [ 200.948785][ T8178] syz.0.950: attempt to access beyond end of device [ 200.948785][ T8178] loop0: rw=524288, sector=14519143272, nr_sectors = 16 limit=16 [ 200.965603][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 200.972454][ T28] dw2102: command 0x0e transfer failed. [ 201.011164][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 201.020904][ T8184] EXT4-fs (loop1): 1 truncate cleaned up [ 201.026009][ T8178] syz.0.950: attempt to access beyond end of device [ 201.026009][ T8178] loop0: rw=524288, sector=63675288, nr_sectors = 16 limit=16 [ 201.053307][ T8178] syz.0.950: attempt to access beyond end of device [ 201.053307][ T8178] loop0: rw=524288, sector=63675296, nr_sectors = 16 limit=16 [ 201.075239][ T28] dw2102: command 0x0e transfer failed. [ 201.102241][ T8184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.134356][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 201.149564][ T8178] syz.0.950: attempt to access beyond end of device [ 201.149564][ T8178] loop0: rw=524288, sector=16240345096, nr_sectors = 16 limit=16 [ 201.168836][ T28] dw2102: command 0x51 transfer failed. [ 201.226403][ T8178] syz.0.950: attempt to access beyond end of device [ 201.226403][ T8178] loop0: rw=524288, sector=16240345104, nr_sectors = 16 limit=16 [ 201.275570][ T8178] syz.0.950: attempt to access beyond end of device [ 201.275570][ T8178] loop0: rw=524288, sector=16438238104, nr_sectors = 16 limit=16 [ 201.340226][ T8178] syz.0.950: attempt to access beyond end of device [ 201.340226][ T8178] loop0: rw=524288, sector=16438238112, nr_sectors = 16 limit=16 [ 201.374394][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.412437][ T28] DVB: Unable to find symbol ds3000_attach() [ 201.432972][ T28] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 201.677425][ T28] rc_core: IR keymap rc-su3000 not found [ 201.683143][ T28] Registered IR keymap rc-empty [ 201.705332][ T28] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 201.737655][ T28] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7 [ 201.759731][ T28] dvb-usb: schedule remote query interval to 150 msecs. [ 201.767052][ T28] dw2102: su3000_power_ctrl: 0, initialized 1 [ 201.773758][ T28] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 201.793197][ T28] usb 4-1: USB disconnect, device number 8 [ 201.948135][ T8205] loop0: detected capacity change from 0 to 64 [ 202.007380][ T28] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 202.673381][ T8201] loop3: detected capacity change from 0 to 40427 [ 202.712867][ T8201] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 202.746541][ T8201] F2FS-fs (loop3): invalid crc value [ 202.786932][ T8201] F2FS-fs (loop3): Found nat_bits in checkpoint [ 202.797914][ T8203] loop2: detected capacity change from 0 to 40427 [ 202.832759][ T8203] F2FS-fs (loop2): invalid crc value [ 202.846062][ T8203] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.966003][ T8203] F2FS-fs (loop2): Start checkpoint disabled! [ 202.972380][ T8201] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 203.008019][ T8203] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 203.161876][ T5767] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 203.385938][ T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 203.398262][ T8211] loop1: detected capacity change from 0 to 40427 [ 203.416654][ T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 203.452373][ T8211] F2FS-fs (loop1): invalid crc value [ 203.498874][ T8211] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.722339][ T8211] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 204.006260][ T5766] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 204.711157][ T8250] loop1: detected capacity change from 0 to 1024 [ 204.768768][ T8250] hfsplus: keylen 65060 too large [ 204.774364][ T8250] hfsplus: xattr searching failed [ 204.791999][ T8250] hfsplus: keylen 65060 too large [ 204.798959][ T8250] hfsplus: xattr searching failed [ 204.896301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.268213][ T8242] loop2: detected capacity change from 0 to 32768 [ 205.300711][ T8242] (syz.2.975,8242,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.320477][ T8242] (syz.2.975,8242,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.357531][ T8265] loop1: detected capacity change from 0 to 2048 [ 205.365656][ T8242] JBD2: Ignoring recovery information on journal [ 205.406420][ T8265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.429409][ T8242] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 205.455692][ T28] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 205.686908][ T28] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.696414][ T28] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 205.707711][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.718008][ T28] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 205.729720][ T28] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 205.730192][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 205.743346][ T28] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.758034][ T28] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.767321][ T28] usb 4-1: Product: syz [ 205.777926][ T28] usb 4-1: Manufacturer: syz [ 205.796112][ T28] cdc_wdm 4-1:1.0: skipping garbage [ 205.815625][ T28] cdc_wdm 4-1:1.0: skipping garbage [ 205.830000][ T28] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 205.847159][ T28] cdc_wdm 4-1:1.0: Unknown control protocol [ 206.150071][ T8272] loop1: detected capacity change from 0 to 2048 [ 206.186573][ T8272] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 206.209866][ T8276] loop0: detected capacity change from 0 to 164 [ 206.252557][ T8277] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.297823][ T8276] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 206.688585][ T8283] loop0: detected capacity change from 0 to 4096 [ 206.758584][ T8285] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.970943][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 206.970965][ T5082] Bluetooth: hci3: command 0x0406 tx timeout [ 206.971052][ T5082] Bluetooth: hci0: command 0x0406 tx timeout [ 207.151487][ T8294] loop1: detected capacity change from 0 to 1024 [ 207.269617][ T8294] hfsplus: b-tree write err: -5, ino 2 [ 207.393437][ T8300] netlink: 32 bytes leftover after parsing attributes in process `syz.2.999'. [ 207.417674][ T8299] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.461734][ T8299] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 207.470313][ T8299] EXT4-fs (loop0): orphan cleanup on readonly fs [ 207.479150][ T8299] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 207.492050][ T8299] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 207.508781][ T8299] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 207.521456][ T8299] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 207.542080][ T8299] EXT4-fs (loop0): Remounting filesystem read-only [ 207.549478][ T8299] EXT4-fs (loop0): 1 truncate cleaned up [ 207.557351][ T8299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.623837][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.654732][ T36] hfsplus: b-tree write err: -5, ino 25 [ 207.672028][ T36] hfsplus: b-tree write err: -5, ino 4 [ 207.712832][ T36] hfsplus: b-tree write err: -5, ino 2 [ 207.751042][ T36] hfsplus: b-tree write err: -5, ino 22 [ 208.041760][ T8311] set_capacity_and_notify: 2 callbacks suppressed [ 208.041812][ T8311] loop1: detected capacity change from 0 to 128 [ 208.083321][ T8311] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 208.154299][ T8311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.206169][ T5840] usb 4-1: USB disconnect, device number 9 [ 208.580380][ T8325] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 209.055535][ T5805] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 209.247245][ T5805] usb 1-1: Using ep0 maxpacket: 16 [ 209.259146][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.270837][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.315805][ T5805] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 209.359720][ T5805] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 209.385610][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.412857][ T5805] usb 1-1: config 0 descriptor?? [ 209.650269][ T8337] loop1: detected capacity change from 0 to 32768 [ 209.857413][ T5805] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 209.886746][ T5805] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 209.894059][ T5805] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 209.922417][ T5805] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 209.945819][ T5805] appleir 0003:05AC:8241.000E: item fetching failed at offset 4/5 [ 209.974965][ T5805] appleir 0003:05AC:8241.000E: parse failed [ 209.989669][ T5805] appleir: probe of 0003:05AC:8241.000E failed with error -22 [ 210.072421][ T5840] usb 1-1: USB disconnect, device number 10 [ 210.129463][ T8357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1027'. [ 211.226002][ T5826] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 211.358049][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 211.469919][ T5826] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.501586][ T5826] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.535522][ T5826] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.565644][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.588868][ T8373] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 211.609424][ T5826] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 211.793786][ T8391] loop1: detected capacity change from 0 to 256 [ 211.825025][ T8391] exfat: Deprecated parameter 'utf8' [ 211.855899][ T8369] loop0: detected capacity change from 0 to 32768 [ 211.910400][ T8391] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 211.932345][ T8369] [ 211.932345][ T8369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 211.932345][ T8369] [ 211.987290][ T5826] usb 3-1: USB disconnect, device number 8 [ 212.051921][ T8369] [ 212.051921][ T8369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.051921][ T8369] [ 212.064363][ T8369] [ 212.064363][ T8369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.064363][ T8369] [ 212.075018][ T8369] [ 212.075018][ T8369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.075018][ T8369] [ 212.119686][ T8369] [ 212.119686][ T8369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.119686][ T8369] [ 212.158027][ T8393] [ 212.158027][ T8393] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.158027][ T8393] [ 212.203171][ T8369] [ 212.203171][ T8369] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.203171][ T8369] [ 212.244513][ T8395] loop1: detected capacity change from 0 to 128 [ 212.253802][ T8393] [ 212.253802][ T8393] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.253802][ T8393] [ 212.282199][ T8395] EXT4-fs: Ignoring removed nobh option [ 212.287734][ T114] [ 212.287734][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.287734][ T114] [ 212.351465][ T8395] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.370807][ T8395] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.408274][ T49] [ 212.408274][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.408274][ T49] [ 212.440996][ T5766] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.460426][ T49] [ 212.460426][ T49] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.460426][ T49] [ 212.503351][ T5765] [ 212.503351][ T5765] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.503351][ T5765] [ 212.527763][ T113] [ 212.527763][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.527763][ T113] [ 212.556612][ T5765] [ 212.556612][ T5765] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 212.556612][ T5765] [ 212.824594][ T8387] loop3: detected capacity change from 0 to 32768 [ 212.870177][ T8387] XFS: attr2 mount option is deprecated. [ 212.952180][ T8387] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.025879][ T8387] XFS (loop3): Ending clean mount [ 213.037346][ T8387] XFS (loop3): Quotacheck needed: Please wait. [ 213.130304][ T8387] XFS (loop3): Quotacheck: Done. [ 213.370528][ T5767] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.603571][ T8419] loop1: detected capacity change from 0 to 4096 [ 213.698916][ T8401] loop2: detected capacity change from 0 to 32768 [ 213.705955][ T8425] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.797383][ T8419] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 213.814214][ T8401] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.830541][ T8419] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 213.889507][ T8434] loop0: detected capacity change from 0 to 16 [ 213.939385][ T8434] erofs: (device loop0): mounted with root inode @ nid 36. [ 214.050675][ T8434] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 214.096217][ T8434] bio_check_eod: 24 callbacks suppressed [ 214.096236][ T8434] syz.0.1055: attempt to access beyond end of device [ 214.096236][ T8434] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 214.102019][ T8401] XFS (loop2): Ending clean mount [ 214.152928][ T8434] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 214.193917][ T8434] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 214.205714][ T8401] XFS (loop2): Quotacheck needed: Please wait. [ 214.329701][ T8401] XFS (loop2): Quotacheck: Done. [ 214.548481][ T8443] loop3: detected capacity change from 0 to 2048 [ 214.894940][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.922204][ T8452] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1062'. [ 214.924626][ T8443] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 214.948377][ T8444] syz.1.1058 (8444): drop_caches: 2 [ 214.988710][ T8443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.121184][ T8454] loop0: detected capacity change from 0 to 1024 [ 215.715661][ T8464] loop2: detected capacity change from 0 to 64 [ 215.750176][ T8466] [U] [ 215.753259][ T8466] [U] [ 215.755994][ T8466] [U] [ 215.758732][ T8466] [U] [ 215.761458][ T8466] [U] [ 215.764195][ T8466] [U] [ 215.766930][ T8466] [U] [ 215.769748][ T8466] [U] [ 215.851673][ T8466] [U] [ 215.854454][ T8466] [U] [ 215.857183][ T8466] [U] [ 215.892422][ T8465] [U] [ 215.913352][ T27] audit: type=1800 audit(1774955164.976:42): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1060" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 216.187982][ T8478] loop2: detected capacity change from 0 to 128 [ 216.198752][ T8478] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 216.265188][ T8482] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1076'. [ 216.333003][ T8478] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.414431][ T8478] ext2 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.692022][ T5768] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.786685][ T8496] netlink: 'syz.3.1081': attribute type 4 has an invalid length. [ 216.808966][ T8496] netlink: 'syz.3.1081': attribute type 3 has an invalid length. [ 216.831717][ T8496] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.1081'. [ 217.265834][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 217.297139][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 217.311559][ T8510] loop2: detected capacity change from 0 to 128 [ 217.316636][ T8508] netlink: 'syz.3.1087': attribute type 14 has an invalid length. [ 217.357058][ T8508] netlink: 'syz.3.1087': attribute type 12 has an invalid length. [ 217.484136][ T8492] loop0: detected capacity change from 0 to 32768 [ 217.508491][ T8492] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1080 (8492) [ 217.569209][ T8492] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.603356][ T8492] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 217.619064][ T8492] BTRFS info (device loop0): enabling auto defrag [ 217.659286][ T8492] BTRFS info (device loop0): use no compression [ 217.685641][ T8492] BTRFS info (device loop0): force clearing of disk cache [ 217.694268][ T8492] BTRFS info (device loop0): max_inline at 4096 [ 217.726430][ T8492] BTRFS info (device loop0): disabling free space tree [ 217.908758][ T8492] BTRFS info (device loop0): enabling ssd optimizations [ 217.916620][ T8492] BTRFS info (device loop0): auto enabling async discard [ 217.928590][ T8492] BTRFS info (device loop0): rebuilding free space tree [ 218.068338][ T8506] loop1: detected capacity change from 0 to 32768 [ 218.084767][ T8492] BTRFS info (device loop0): disabling free space tree [ 218.097773][ T8506] (syz.1.1094,8506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.132548][ T8492] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 218.164399][ T8506] (syz.1.1094,8506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 218.195863][ T8492] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 218.244508][ T8506] JBD2: Ignoring recovery information on journal [ 218.417115][ T8506] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 218.657582][ T5765] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.676259][ T8547] loop2: detected capacity change from 0 to 64 [ 218.762877][ T5766] ocfs2: Unmounting device (7,1) on (node local) [ 219.517288][ T8559] loop0: detected capacity change from 0 to 8192 [ 219.542560][ T8559] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 219.563845][ T8559] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 219.574118][ T8559] REISERFS (device loop0): using ordered data mode [ 219.581167][ T8559] reiserfs: using flush barriers [ 219.597064][ T8559] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.632704][ T8559] REISERFS (device loop0): checking transaction log (loop0) [ 219.924028][ T8559] REISERFS (device loop0): Using tea hash to sort names [ 219.950618][ T8559] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 219.975049][ T8567] loop1: detected capacity change from 0 to 4096 [ 220.105580][ T8570] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.256386][ T8567] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 220.343493][ T8567] Remounting filesystem read-only [ 220.551862][ T8574] loop3: detected capacity change from 0 to 256 [ 220.778822][ T8574] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 221.945764][ T8608] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 222.098061][ T8592] loop2: detected capacity change from 0 to 32768 [ 222.165213][ T8592] JBD2: Ignoring recovery information on journal [ 222.333638][ T8592] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 222.617861][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 222.958007][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1129'. [ 223.086954][ T8618] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1130'. [ 223.135806][ T8618] netlink: 'syz.0.1130': attribute type 5 has an invalid length. [ 223.210864][ T8620] loop2: detected capacity change from 0 to 4096 [ 223.249108][ T8620] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 223.262189][ T8603] loop3: detected capacity change from 0 to 32768 [ 223.292113][ T8622] ipvlan2: entered allmulticast mode [ 223.302334][ T8622] veth0: entered allmulticast mode [ 223.399072][ T8620] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 223.467705][ T8603] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 223.530801][ T8620] ntfs3: loop2: ino=5, "/" directory corrupted [ 223.562132][ T8603] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.163364][ T8603] XFS (loop3): Ending clean mount [ 224.249696][ T8603] XFS (loop3): Quotacheck needed: Please wait. [ 224.349308][ T8603] XFS (loop3): Quotacheck: Done. [ 224.685529][ T5767] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.839947][ C1] sd 0:0:1:0: [sda] tag#2279 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 224.850766][ C1] sd 0:0:1:0: [sda] tag#2279 CDB: Read(6) 08 00 f9 56 e4 47 [ 225.273109][ T5807] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 225.485550][ T5807] usb 1-1: Using ep0 maxpacket: 32 [ 225.503105][ T5807] usb 1-1: config 157 has too many interfaces: 246, using maximum allowed: 32 [ 225.515496][ T5807] usb 1-1: config 157 has 1 interface, different from the descriptor's value: 246 [ 225.535563][ T5807] usb 1-1: config 157 has no interface number 0 [ 225.542186][ T5807] usb 1-1: config 157 interface 224 has no altsetting 0 [ 225.554824][ T5807] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 225.571112][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.600416][ T5807] usb 1-1: Product: syz [ 225.604651][ T5807] usb 1-1: Manufacturer: syz [ 225.626979][ T5807] usb 1-1: SerialNumber: syz [ 225.882424][ T5807] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 226.260742][ T8673] loop2: detected capacity change from 0 to 512 [ 226.285875][ T8673] EXT4-fs: Ignoring removed orlov option [ 226.302084][ T8673] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.330485][ T8673] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.1152: corrupted in-inode xattr: e_value size too large [ 226.376270][ T8673] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.1152: couldn't read orphan inode 15 (err -117) [ 226.458083][ T8673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.577913][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.587516][ T5807] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 226.677725][ T8680] loop2: detected capacity change from 0 to 128 [ 226.692489][ T8680] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 226.716837][ T8680] hpfs: filesystem error: improperly stopped [ 226.722968][ T8680] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 226.734063][ T8662] loop1: detected capacity change from 0 to 32768 [ 226.740699][ T8680] hpfs: You really don't want any checks? You are crazy... [ 226.741698][ T8680] hpfs: hpfs_map_sector(): read error [ 226.770986][ T8680] hpfs: code page support is disabled [ 226.786201][ T8680] hpfs: hpfs_map_4sectors(): unaligned read [ 226.803641][ T8680] hpfs: hpfs_map_4sectors(): unaligned read [ 226.817400][ T8680] hpfs: filesystem error: unable to find root dir [ 227.014676][ T5807] usb 1-1: failed to restore interface 224 altsetting 169 (error=-71) [ 227.056861][ T5807] ueagle-atm 1-1:157.224: usbatm_usb_probe: bind failed: -19! [ 227.096127][ T5807] usb 1-1: USB disconnect, device number 11 [ 227.106288][ T8682] loop3: detected capacity change from 0 to 2048 [ 227.187130][ T8682] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 227.259876][ T8682] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 227.295596][ T8682] UDF-fs: Scanning with blocksize 512 failed [ 227.325883][ T8682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.513470][ T27] audit: type=1800 audit(1774955176.576:43): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1155" name="file1" dev="loop3" ino=838 res=0 errno=0 [ 227.565574][ T8686] netlink: 'syz.1.1156': attribute type 4 has an invalid length. [ 227.910532][ T8693] loop0: detected capacity change from 0 to 1024 [ 227.958724][ T8693] hfsplus: invalid length 32517 has been corrected to 255 [ 228.082369][ T8699] loop3: detected capacity change from 0 to 2048 [ 228.112966][ T4319] hfsplus: b-tree write err: -5, ino 20 [ 228.296313][ T8699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.558623][ T8713] loop1: detected capacity change from 0 to 1024 [ 228.605173][ T8715] loop0: detected capacity change from 0 to 2048 [ 228.637578][ T8713] hfsplus: bad catalog entry type [ 228.673669][ T8715] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.684549][ T8717] loop2: detected capacity change from 0 to 2048 [ 228.692474][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.706442][ T8717] UDF-fs: bad mount option "novrc" or missing value [ 228.768112][ T8717] 000000000: renamed from lo (while UP) [ 228.789850][ T49] hfsplus: b-tree write err: -5, ino 25 [ 228.822023][ T49] hfsplus: b-tree write err: -5, ino 4 [ 228.841657][ T49] hfsplus: b-tree write err: -5, ino 2 [ 228.849284][ T27] audit: type=1800 audit(1774955177.926:44): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1169" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 229.229422][ T8726] loop0: detected capacity change from 0 to 512 [ 229.240055][ T8723] macsec1: entered promiscuous mode [ 229.245320][ T8723] macsec1: entered allmulticast mode [ 229.255672][ T8726] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 229.326202][ T8726] EXT4-fs (loop0): orphan cleanup on readonly fs [ 229.333129][ T8726] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1174: Block bitmap for bg 0 marked uninitialized [ 229.380855][ T8726] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 229.477698][ T8726] EXT4-fs (loop0): 1 orphan inode deleted [ 229.496966][ T8726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 229.565282][ T8726] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1174: Block bitmap for bg 0 marked uninitialized [ 229.714309][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.086050][ T28] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 230.106854][ T8747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 230.258540][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 230.313602][ T28] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.325351][ T28] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.344941][ T28] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.394527][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.425188][ T8743] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 230.461702][ T28] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 231.043846][ T28] usb 1-1: USB disconnect, device number 12 [ 231.261352][ T8772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.275311][ T8772] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.521691][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.714835][ T8786] ip6tnl1: entered allmulticast mode [ 231.854149][ T8789] set_capacity_and_notify: 2 callbacks suppressed [ 231.854168][ T8789] loop0: detected capacity change from 0 to 256 [ 231.941397][ T8791] loop2: detected capacity change from 0 to 256 [ 231.963269][ T8791] exfat: Deprecated parameter 'utf8' [ 232.003853][ T8791] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 232.024469][ T8789] FAT-fs (loop0): Directory bread(block 64) failed [ 232.031490][ T8789] FAT-fs (loop0): Directory bread(block 65) failed [ 232.058833][ T8789] FAT-fs (loop0): Directory bread(block 66) failed [ 232.081375][ T8789] FAT-fs (loop0): Directory bread(block 67) failed [ 232.101127][ T8789] FAT-fs (loop0): Directory bread(block 68) failed [ 232.116690][ T8789] FAT-fs (loop0): Directory bread(block 69) failed [ 232.136624][ T8789] FAT-fs (loop0): Directory bread(block 70) failed [ 232.143528][ T8789] FAT-fs (loop0): Directory bread(block 71) failed [ 232.187687][ T8789] FAT-fs (loop0): Directory bread(block 72) failed [ 232.194395][ T8789] FAT-fs (loop0): Directory bread(block 73) failed [ 232.295680][ T8793] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1203'. [ 232.325949][ T8793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1203'. [ 232.335638][ T8793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1203'. [ 232.538310][ T8797] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1212'. [ 232.565521][ T8797] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 232.667008][ T8799] loop1: detected capacity change from 0 to 512 [ 232.694522][ T8799] EXT4-fs: Ignoring removed i_version option [ 232.745256][ T8799] EXT4-fs error (device loop1): ext4_get_journal_inode:5816: comm syz.1.1206: inode #196608: comm syz.1.1206: iget: illegal inode # [ 232.783378][ T8799] EXT4-fs (loop1): no journal found [ 232.805777][ T8799] EXT4-fs (loop1): can't get journal size [ 232.822489][ T8799] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 232.838262][ T8801] loop3: detected capacity change from 0 to 4096 [ 232.839591][ T8799] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 232.907869][ T8801] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 232.938727][ T8799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.049065][ T8801] ntfs3: loop3: Failed to load $Extend (-22). [ 233.055238][ T8801] ntfs3: loop3: Failed to initialize $Extend. [ 233.071705][ T8799] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.1206: Logical block already allocated [ 233.231443][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.591343][ T8820] loop1: detected capacity change from 0 to 1024 [ 233.646015][ T8820] hfsplus: bad catalog entry type [ 233.714259][ T8819] loop2: detected capacity change from 0 to 2048 [ 233.757884][ T12] hfsplus: b-tree write err: -5, ino 25 [ 233.763899][ T12] hfsplus: b-tree write err: -5, ino 4 [ 233.768039][ T8822] loop3: detected capacity change from 0 to 16 [ 233.794967][ T12] hfsplus: b-tree write err: -5, ino 2 [ 233.857485][ T8822] erofs: (device loop3): mounted with root inode @ nid 36. [ 233.916709][ T8819] loop2: p2 p3 p7 [ 234.128683][ T8827] loop0: detected capacity change from 0 to 1024 [ 234.302901][ T8833] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 234.336998][ T8833] @0: renamed from bond_slave_1 (while UP) [ 234.572575][ T5756] udevd[5756]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 234.598953][ T8392] udevd[8392]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 234.613193][ T8837] loop1: detected capacity change from 0 to 512 [ 234.634085][ T6462] udevd[6462]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 234.706886][ T8837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.764416][ T8837] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.971138][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.176537][ T8856] loop3: detected capacity change from 0 to 512 [ 235.185673][ T8856] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 235.219973][ T8856] EXT4-fs (loop3): 1 truncate cleaned up [ 235.228447][ T8856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.258817][ T8856] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.1230: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 235.283394][ T8856] EXT4-fs (loop3): Remounting filesystem read-only [ 235.378039][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.659683][ T27] audit: type=1326 audit(1774955184.726:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe885d9c819 code=0x7fc00000 [ 235.953991][ T8878] netlink: 'syz.3.1239': attribute type 1 has an invalid length. [ 235.969026][ T8878] netlink: 'syz.3.1239': attribute type 2 has an invalid length. [ 236.114158][ T8886] netlink: 'syz.0.1243': attribute type 1 has an invalid length. [ 236.246458][ T5805] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 236.284972][ T8890] hfsplus: bad catalog entry type [ 236.328964][ T12] hfsplus: b-tree write err: -5, ino 25 [ 236.334890][ T12] hfsplus: b-tree write err: -5, ino 4 [ 236.346652][ T12] hfsplus: b-tree write err: -5, ino 2 [ 236.440483][ T5805] usb 3-1: Using ep0 maxpacket: 8 [ 236.445940][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 236.469282][ T5805] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.481553][ T5805] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.500281][ T5805] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.507130][ T5805] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 236.518979][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.530374][ T5805] usb 3-1: config 0 descriptor?? [ 236.655522][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 236.662554][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.677652][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.689559][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.704952][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.714173][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.725110][ T8] usb 1-1: config 0 descriptor?? [ 236.968113][ T5805] smartjoyplus 0003:6666:8804.000F: item fetching failed at offset 2/5 [ 236.988464][ T5805] smartjoyplus 0003:6666:8804.000F: parse failed [ 237.002189][ T5805] smartjoyplus: probe of 0003:6666:8804.000F failed with error -22 [ 237.157130][ T8] microsoft 0003:045E:07DA.0010: unbalanced collection at end of report description [ 237.160823][ T5826] usb 3-1: USB disconnect, device number 9 [ 237.184935][ T8] microsoft 0003:045E:07DA.0010: parse failed [ 237.202416][ T8] microsoft: probe of 0003:045E:07DA.0010 failed with error -22 [ 237.398674][ T5807] usb 1-1: USB disconnect, device number 13 [ 237.660232][ T8908] set_capacity_and_notify: 1 callbacks suppressed [ 237.660248][ T8908] loop3: detected capacity change from 0 to 8192 [ 237.686740][ T8908] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 237.761213][ T8908] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 237.822417][ T8908] REISERFS (device loop3): using ordered data mode [ 237.835836][ T8913] loop2: detected capacity change from 0 to 2048 [ 237.855543][ T8908] reiserfs: using flush barriers [ 237.869981][ T8913] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 237.880917][ T8908] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 237.937942][ T5758] udevd[5758]: incorrect nilfs2 checksum on /dev/loop2 [ 237.946484][ T8914] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.967749][ T8908] REISERFS (device loop3): checking transaction log (loop3) [ 238.017071][ T8908] REISERFS (device loop3): Using r5 hash to sort names [ 238.022811][ T8904] loop1: detected capacity change from 0 to 40427 [ 238.053757][ T8908] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 238.066686][ T8904] F2FS-fs (loop1): invalid crc value [ 238.108005][ T8904] F2FS-fs (loop1): Found nat_bits in checkpoint [ 238.203179][ T8914] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 238.265561][ T8914] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 238.335473][ T8914] Remounting filesystem read-only [ 238.340681][ T49] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 238.355815][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.364852][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.375221][ T49] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 238.379243][ T8904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 238.382784][ T49] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 238.409393][ T49] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 238.437559][ T49] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 238.444940][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.485993][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.498183][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.525035][ T49] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 238.542835][ T49] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 238.561185][ T8923] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1260'. [ 238.571831][ T5766] syz-executor: attempt to access beyond end of device [ 238.571831][ T5766] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.577093][ T49] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 238.606370][ T5766] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 238.610439][ T8923] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 238.622177][ T49] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 238.656206][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.665242][ T49] NILFS (loop2): discard dirty page: offset=131072, ino=3 [ 238.678314][ T8923] openvswitch: netlink: Message has 1 unknown bytes. [ 238.716266][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.737566][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.752816][ T49] NILFS (loop2): discard dirty block: blocknr=46, size=1024 [ 238.761558][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.773347][ T49] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 238.782277][ T49] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 238.798682][ T8926] netlink: 'syz.3.1262': attribute type 4 has an invalid length. [ 238.835601][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.866812][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.893197][ T49] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 238.947633][ T5768] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 238.972678][ T5768] NILFS (loop2): discard dirty page: offset=0, ino=12 [ 239.000882][ T8930] loop3: detected capacity change from 0 to 764 [ 239.002088][ T5768] NILFS (loop2): discard dirty block: blocknr=17, size=1024 [ 239.055466][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 239.064576][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 239.115486][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 239.289849][ T8934] vlan2: entered promiscuous mode [ 239.312468][ T8934] bridge0: entered promiscuous mode [ 239.574793][ T8941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1269'. [ 239.672615][ T8942] loop2: detected capacity change from 0 to 4096 [ 239.822515][ T8948] loop1: detected capacity change from 0 to 1024 [ 239.877682][ T8942] ntfs3: loop2: ino=9, attr_set_size [ 239.964431][ T8948] hfsplus: bad catalog entry type [ 240.121095][ T4319] hfsplus: b-tree write err: -5, ino 25 [ 240.127330][ T4319] hfsplus: b-tree write err: -5, ino 4 [ 240.140756][ T4319] hfsplus: b-tree write err: -5, ino 2 [ 240.343797][ T8952] loop2: detected capacity change from 0 to 4096 [ 240.371512][ T8952] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 240.424165][ T8938] loop0: detected capacity change from 0 to 32768 [ 240.501508][ T8938] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 240.554157][ T8966] loop1: detected capacity change from 0 to 512 [ 240.566026][ T5826] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 240.639352][ T8938] XFS (loop0): Ending clean mount [ 240.788340][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 240.818484][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.856085][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.869493][ T5765] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 240.905603][ T5826] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.954023][ T5826] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.998595][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.103691][ T5826] usb 4-1: config 0 descriptor?? [ 241.444039][ T8980] loop1: detected capacity change from 0 to 512 [ 241.485336][ T8980] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1284: Directory hole found for htree index block 0 [ 241.539761][ T5826] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.548311][ T5826] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.555807][ T5826] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.563253][ T5826] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.570880][ T5826] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.578362][ T5826] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.586737][ T5826] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.594118][ T5826] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.601550][ T5826] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.609292][ T8] hid-generic 0004:00A9:0000.0012: unknown main item tag 0x0 [ 241.609392][ T8] hid-generic 0004:00A9:0000.0012: unknown main item tag 0x2 [ 241.609417][ T8] hid-generic 0004:00A9:0000.0012: unknown main item tag 0xe [ 241.613878][ T8980] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 241.622342][ T5826] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 241.635781][ T8] hid-generic 0004:00A9:0000.0012: hidraw0: HID v1.01 Device [syz1] on syz0 [ 241.646613][ T8980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.689014][ T5826] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0011/input/input10 [ 241.839847][ T5826] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 241.870711][ T5826] usb 4-1: USB disconnect, device number 10 [ 241.904367][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.910344][ T8987] fido_id[8987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 242.248442][ T8992] fido_id[8992]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 242.600058][ T9000] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 242.679966][ T9000] ntfs3: loop1: Failed to load $Extend (-22). [ 242.709361][ T9000] ntfs3: loop1: Failed to initialize $Extend. [ 242.980388][ T9006] set_capacity_and_notify: 1 callbacks suppressed [ 242.980407][ T9006] loop3: detected capacity change from 0 to 4096 [ 242.999247][ T8991] loop0: detected capacity change from 0 to 32768 [ 243.044609][ T9006] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 243.111884][ T8991] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 243.122735][ T9006] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 243.210130][ T9006] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 243.241606][ T9006] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 243.255631][ T9006] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 243.295643][ T9006] ntfs: volume version 3.1. [ 243.314324][ T8991] XFS (loop0): Ending clean mount [ 243.345709][ T8991] XFS (loop0): Quotacheck needed: Please wait. [ 243.382803][ T9006] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 243.455837][ T9006] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 243.470750][ T8991] XFS (loop0): Quotacheck: Done. [ 243.503181][ T9006] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 243.524027][ T9006] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 243.594062][ T9006] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 243.630112][ T5765] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 243.772852][ T9006] ptrace attach of "./syz-executor exec"[5767] was attempted by "ޤ=J:G!EI\x09R&EHQR!H\x09R足BlύՄpA\x0d76Ej)E\x0bwrhV\x09i}?qM?wvh\x22\x09_;EβzCH{2\x0c$~ER>w^.&!H)FuB\x229v\x09|OtizwF_O:a;]i~<;3jGTNv?O\x5cmN$+S%ޟ7_wxnmdB^V\x1b|N\x0ci\x22׻۴[ۗr H^Sg>%m&R!x/PpC\x0d\x07 qIH%ЄbQ:rB(:!+7Tr;MxˈKޠ)IϣN&[FґNmi ~ ?ӠzDJ<7!d\x0bOY#q:rlnDq\x0at(u)o@\x09}(2\x0aHMR$~t#iN\x0ao*iO:jDD\x0aѯirt'IoҞ#Bt;Hm0&y\x5c/H^$\x09?L\x0d2\x0 [ 243.932442][ T9024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.091960][ T9004] loop2: detected capacity change from 0 to 40427 [ 244.187547][ T9004] F2FS-fs (loop2): invalid crc value [ 244.217166][ T9004] F2FS-fs (loop2): Found nat_bits in checkpoint [ 244.284610][ T9021] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 244.381575][ T9004] F2FS-fs (loop2): Start checkpoint disabled! [ 244.403700][ T9004] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 245.050366][ T9049] loop3: detected capacity change from 0 to 256 [ 245.091876][ T9049] FAT-fs (loop3): Directory bread(block 1285) failed [ 245.147727][ T9049] FAT-fs (loop3): Directory bread(block 1285) failed [ 245.480934][ T9055] loop2: detected capacity change from 0 to 512 [ 245.502637][ T9055] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.573067][ T9055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.606161][ T9055] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.658458][ T9055] EXT4-fs (loop2): resizing filesystem from 128 to 1 blocks [ 245.666809][ T9055] EXT4-fs warning (device loop2): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 245.744628][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.922236][ T9066] loop3: detected capacity change from 0 to 256 [ 245.954273][ T9066] FAT-fs (loop3): Directory bread(block 1285) failed [ 245.974018][ T9066] FAT-fs (loop3): Directory bread(block 1286) failed [ 245.996992][ T9066] FAT-fs (loop3): Directory bread(block 1287) failed [ 246.033037][ T9066] FAT-fs (loop3): Directory bread(block 1288) failed [ 246.079501][ T9044] loop1: detected capacity change from 0 to 32768 [ 246.088255][ T9066] FAT-fs (loop3): Directory bread(block 1285) failed [ 246.097953][ T9038] loop0: detected capacity change from 0 to 32768 [ 246.109560][ T9066] FAT-fs (loop3): Directory bread(block 1286) failed [ 246.139604][ T9066] FAT-fs (loop3): Directory bread(block 1287) failed [ 246.173953][ T9066] FAT-fs (loop3): Directory bread(block 1288) failed [ 246.189724][ T9044] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 246.191992][ T9038] jfs_mkdir: dtInsert returned -EIO [ 246.231787][ T9076] loop2: detected capacity change from 0 to 64 [ 246.255201][ T9038] ERROR: (device loop0): jfs_mkdir: [ 246.255201][ T9038] [ 246.292135][ T9038] ERROR: (device loop0): remounting filesystem as read-only [ 246.309029][ T9044] XFS (loop1): Ending clean mount [ 246.381649][ T9038] jfs_lookup: iget failed on inum 4 [ 246.436661][ T9038] jfs_lookup: iget failed on inum 4 [ 246.442465][ T9038] jfs_lookup: iget failed on inum 4 [ 246.476209][ T9038] jfs_lookup: iget failed on inum 4 [ 246.501106][ T9080] loop3: detected capacity change from 0 to 256 [ 247.084282][ T5766] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 247.903917][ T9094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1325 (9094) [ 247.987001][ T9094] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.002149][ T9094] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 248.063930][ T9094] BTRFS info (device loop2): setting nodatasum [ 248.065235][ T9099] set_capacity_and_notify: 1 callbacks suppressed [ 248.065249][ T9099] loop0: detected capacity change from 0 to 32768 [ 248.076122][ T9094] BTRFS info (device loop2): force zlib compression, level 3 [ 248.122396][ T9094] BTRFS info (device loop2): turning on flush-on-commit [ 248.142628][ T9094] BTRFS info (device loop2): enabling auto defrag [ 248.160949][ T9099] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 248.167096][ T9094] BTRFS info (device loop2): max_inline at 4096 [ 248.218942][ T9094] BTRFS info (device loop2): using free space tree [ 248.377126][ T9094] BTRFS info (device loop2): enabling ssd optimizations [ 248.384230][ T9094] BTRFS info (device loop2): auto enabling async discard [ 248.666472][ T9099] XFS (loop0): Ending clean mount [ 248.699725][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.878254][ T5765] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 248.995472][ T5756] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5756) [ 249.236332][ T5826] IPVS: starting estimator thread 0... [ 249.335671][ T9152] IPVS: using max 17 ests per chain, 40800 per kthread [ 250.253970][ T9174] loop3: detected capacity change from 0 to 128 [ 250.326864][ T5756] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.442145][ T9178] loop1: detected capacity change from 0 to 4096 [ 250.546178][ T9182] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.615054][ T9155] loop2: detected capacity change from 0 to 32768 [ 250.668563][ T9155] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1341 (9155) [ 250.756957][ T9155] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 250.780162][ T9155] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 250.790569][ T9155] BTRFS info (device loop2): enabling auto defrag [ 250.797508][ T9155] BTRFS info (device loop2): use no compression [ 250.804057][ T9155] BTRFS info (device loop2): force clearing of disk cache [ 250.812407][ T9155] BTRFS info (device loop2): max_inline at 4096 [ 250.819775][ T9155] BTRFS info (device loop2): disabling free space tree [ 250.927987][ T9193] mmap: syz.1.1356 (9193) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 250.961981][ T9187] loop3: detected capacity change from 0 to 4096 [ 250.976069][ T9187] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 251.104908][ T9155] BTRFS info (device loop2): enabling ssd optimizations [ 251.122606][ T9155] BTRFS info (device loop2): auto enabling async discard [ 251.147546][ T9187] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 251.157272][ T9155] BTRFS info (device loop2): rebuilding free space tree [ 251.256310][ T9155] BTRFS info (device loop2): disabling free space tree [ 251.263321][ T9155] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 251.316320][ T9155] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 251.336521][ T5767] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 251.365486][ T5767] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 251.558553][ T9217] netlink: 'syz.1.1362': attribute type 3 has an invalid length. [ 251.613848][ T5768] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.624651][ T9217] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1362'. [ 251.684294][ T9220] loop0: detected capacity change from 0 to 64 [ 251.932612][ T5756] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop2 scanned by udevd (5756) [ 252.402193][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 252.469798][ T9238] team0: Device vlan2 is already an upper device of the team interface [ 253.201566][ T9229] loop3: detected capacity change from 0 to 40427 [ 253.241326][ T9229] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 253.269644][ T9229] F2FS-fs (loop3): Image doesn't support compression [ 253.291057][ T9229] F2FS-fs (loop3): Image doesn't support compression [ 253.318216][ T9229] F2FS-fs (loop3): invalid crc value [ 253.346953][ T9229] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.354826][ T9240] loop0: detected capacity change from 0 to 32768 [ 253.359315][ T9242] loop2: detected capacity change from 0 to 32768 [ 253.418394][ T9242] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1374 (9242) [ 253.444119][ T9240] non-latin1 character 0x466c found in JFS file name [ 253.465513][ T9240] mount with iocharset=utf8 to access [ 253.495091][ T9242] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 253.500354][ T9229] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 253.534806][ T9242] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 253.571121][ T9242] BTRFS info (device loop2): enabling disk space caching [ 253.596069][ T9242] BTRFS info (device loop2): force clearing of disk cache [ 253.618388][ T9229] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 253.620459][ T9242] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 253.676848][ T9242] BTRFS info (device loop2): use zstd compression, level 3 [ 253.684135][ T9242] BTRFS info (device loop2): disk space caching is enabled [ 253.749141][ T5767] syz-executor: attempt to access beyond end of device [ 253.749141][ T5767] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.785509][ T5767] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 253.923442][ T9242] BTRFS info (device loop2): enabling ssd optimizations [ 253.955787][ T9242] BTRFS info (device loop2): auto enabling async discard [ 254.323462][ T5768] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 254.904589][ T9280] netlink: 'syz.2.1380': attribute type 21 has an invalid length. [ 254.914957][ T9281] loop3: detected capacity change from 0 to 164 [ 255.068123][ T9281] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 255.106063][ T5840] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 255.298324][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.321461][ T5840] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 255.339020][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.348889][ T5840] usb 1-1: Product: syz [ 255.353244][ T5840] usb 1-1: Manufacturer: syz [ 255.358484][ T5840] usb 1-1: SerialNumber: syz [ 255.371826][ T5840] usb 1-1: config 0 descriptor?? [ 255.516866][ T9277] loop1: detected capacity change from 0 to 40427 [ 255.537400][ T9277] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 255.553049][ T9277] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 255.555584][ T28] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 255.564044][ T9277] F2FS-fs (loop1): invalid crc value [ 255.592236][ T5840] cdc_subset: probe of 1-1:0.0 failed with error -22 [ 255.618038][ T9277] F2FS-fs (loop1): Found nat_bits in checkpoint [ 255.706395][ T9277] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 255.722950][ T9277] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 255.782809][ T28] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 255.805500][ T28] usb 4-1: config 0 has no interface number 0 [ 255.811682][ T28] usb 4-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.827115][ T5840] usb 1-1: USB disconnect, device number 14 [ 255.889194][ T28] usb 4-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.909747][ T28] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 255.940219][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.957225][ T76] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 255.973815][ T28] usb 4-1: config 0 descriptor?? [ 255.983851][ T76] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 256.089549][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.096252][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.103330][ T9302] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 256.414994][ T28] uclogic 0003:5543:0522.0013: unknown main item tag 0x0 [ 256.445348][ T28] uclogic 0003:5543:0522.0013: unknown main item tag 0x0 [ 256.453247][ T28] uclogic 0003:5543:0522.0013: unknown main item tag 0x0 [ 256.475647][ T28] uclogic 0003:5543:0522.0013: unknown main item tag 0x0 [ 256.496300][ T28] uclogic 0003:5543:0522.0013: unknown main item tag 0x0 [ 256.516568][ T28] uclogic 0003:5543:0522.0013: No inputs registered, leaving [ 256.535973][ T28] uclogic 0003:5543:0522.0013: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input17 [ 256.749835][ T5840] usb 4-1: USB disconnect, device number 11 [ 257.182158][ T9323] loop1: detected capacity change from 0 to 4096 [ 257.199127][ T9323] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 257.251173][ T9323] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 257.278401][ T9323] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 257.339834][ T9317] loop0: detected capacity change from 0 to 32768 [ 257.419906][ T9317] JBD2: Ignoring recovery information on journal [ 257.602530][ T9317] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 257.725451][ T9317] (syz.0.1397,9317,1):ocfs2_remount:630 ERROR: Cannot change data mode on remount [ 257.913573][ T9337] loop2: detected capacity change from 0 to 1024 [ 257.948704][ T5765] ocfs2: Unmounting device (7,0) on (node local) [ 258.070960][ T9337] hfsplus: keylen 65060 too large [ 258.086120][ T9337] hfsplus: xattr searching failed [ 258.128949][ T9337] hfsplus: keylen 65060 too large [ 258.145629][ T9337] hfsplus: xattr searching failed [ 258.388900][ T9343] loop2: detected capacity change from 0 to 128 [ 258.408842][ T9343] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 258.455259][ T9343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.744748][ T9333] loop3: detected capacity change from 0 to 32768 [ 258.818084][ T9333] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 258.970269][ T9339] loop1: detected capacity change from 0 to 32768 [ 258.993261][ T9333] XFS (loop3): Ending clean mount [ 259.225265][ T9357] loop2: detected capacity change from 0 to 1024 [ 259.235798][ T5767] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 259.376889][ T9341] loop0: detected capacity change from 0 to 32768 [ 259.532015][ T49] hfsplus: b-tree write err: -5, ino 25 [ 259.545987][ T9341] find_entry called with index >= next_index [ 259.552035][ T9341] find_entry called with index >= next_index [ 259.564426][ T49] hfsplus: b-tree write err: -5, ino 4 [ 259.583269][ T9341] find_entry called with index >= next_index [ 259.589918][ T49] hfsplus: b-tree write err: -5, ino 2 [ 260.014642][ T9364] loop1: detected capacity change from 0 to 512 [ 260.038538][ T9364] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 260.090174][ T9364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 260.127926][ T9364] System zones: 1-12 [ 260.229833][ T9364] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 260.277994][ T9364] EXT4-fs (loop1): 1 truncate cleaned up [ 260.316494][ T9364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.520672][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.915521][ T28] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 261.116526][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 261.134428][ T28] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 261.153302][ T28] usb 4-1: config 0 has no interface number 0 [ 261.164425][ T28] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 261.185260][ T28] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 261.199069][ T28] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 261.219953][ T28] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 261.237949][ T28] usb 4-1: Product: syz [ 261.242696][ T28] usb 4-1: SerialNumber: syz [ 261.256718][ T28] usb 4-1: config 0 descriptor?? [ 261.258930][ T9375] loop2: detected capacity change from 0 to 40427 [ 261.270314][ T28] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 261.311944][ T28] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input11 [ 261.313778][ T9375] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 261.351372][ T9375] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 261.364460][ T9375] F2FS-fs (loop2): invalid crc value [ 261.379308][ T9375] F2FS-fs (loop2): Found nat_bits in checkpoint [ 261.496672][ T9375] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 261.515443][ T9375] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 261.578576][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.588663][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.595874][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.603116][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.610503][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.617710][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.624933][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.632227][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.639568][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.646990][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 261.664073][ T5807] usb 4-1: USB disconnect, device number 12 [ 261.669810][ T5768] syz-executor: attempt to access beyond end of device [ 261.669810][ T5768] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 261.670229][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 261.687190][ T5768] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 261.718317][ T5807] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 262.324465][ T9406] tipc: Started in network mode [ 262.338520][ T9406] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 262.351362][ T9406] tipc: Enabling of bearer rejected, failed to enable media [ 262.977963][ T9422] loop2: detected capacity change from 0 to 1024 [ 262.996149][ T9422] EXT4-fs: inline encryption not supported [ 263.025815][ T9422] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.089427][ T9422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.248583][ T9404] loop3: detected capacity change from 0 to 32768 [ 263.337696][ T9404] [ 263.337696][ T9404] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.337696][ T9404] [ 263.361809][ T9414] loop0: detected capacity change from 0 to 32768 [ 263.386928][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.449555][ T9404] [ 263.449555][ T9404] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.449555][ T9404] [ 263.485626][ T9404] [ 263.485626][ T9404] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.485626][ T9404] [ 263.540768][ T9404] [ 263.540768][ T9404] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.540768][ T9404] [ 263.574203][ T9425] [ 263.574203][ T9425] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.574203][ T9425] [ 263.591234][ T9404] [ 263.591234][ T9404] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.591234][ T9404] [ 263.631231][ T9414] jfs: Unrecognized mount option "quota=" or missing value [ 263.637003][ T9404] [ 263.637003][ T9404] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.637003][ T9404] [ 263.668429][ T9425] [ 263.668429][ T9425] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.668429][ T9425] [ 263.695604][ T113] [ 263.695604][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.695604][ T113] [ 263.806473][ T9420] loop1: detected capacity change from 0 to 32768 [ 263.828140][ T11] [ 263.828140][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.828140][ T11] [ 263.868418][ T9431] netlink: 'syz.2.1444': attribute type 28 has an invalid length. [ 263.881761][ T11] [ 263.881761][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.881761][ T11] [ 263.944811][ T5767] [ 263.944811][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.944811][ T5767] [ 263.972694][ T9420] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 263.985855][ T114] [ 263.985855][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.985855][ T114] [ 264.007448][ T5767] [ 264.007448][ T5767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.007448][ T5767] [ 264.025587][ T114] ================================================================== [ 264.033708][ T114] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x520 [ 264.040610][ T114] Write of size 8 at addr ffff888026447840 by task jfsCommit/114 [ 264.048352][ T114] [ 264.050793][ T114] CPU: 0 PID: 114 Comm: jfsCommit Not tainted syzkaller #0 [ 264.058185][ T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.068272][ T114] Call Trace: [ 264.071680][ T114] [ 264.074721][ T114] dump_stack_lvl+0x18c/0x250 [ 264.079444][ T114] ? __lock_acquire+0x7d40/0x7d40 [ 264.084499][ T114] ? show_regs_print_info+0x20/0x20 [ 264.089739][ T114] ? load_image+0x400/0x400 [ 264.094391][ T114] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 264.099892][ T114] ? __virt_addr_valid+0x18c/0x540 [ 264.105133][ T114] ? __virt_addr_valid+0x469/0x540 [ 264.110382][ T114] print_report+0xa8/0x210 [ 264.115108][ T114] ? txEnd+0x32d/0x520 [ 264.119482][ T114] kasan_report+0x117/0x150 [ 264.124393][ T114] ? txEnd+0x32d/0x520 [ 264.128815][ T114] kasan_check_range+0x241/0x290 [ 264.133812][ T114] txEnd+0x32d/0x520 [ 264.137909][ T114] jfs_lazycommit+0x5a4/0xa70 [ 264.142725][ T114] ? txFreelock+0x5a0/0x5a0 [ 264.147275][ T114] ? do_task_dead+0xd0/0xd0 [ 264.151817][ T114] ? __kthread_parkme+0x7a/0x1c0 [ 264.156956][ T114] kthread+0x2fa/0x390 [ 264.161118][ T114] ? txFreelock+0x5a0/0x5a0 [ 264.165715][ T114] ? kthread_blkcg+0xd0/0xd0 [ 264.170317][ T114] ret_from_fork+0x48/0x80 [ 264.174829][ T114] ? kthread_blkcg+0xd0/0xd0 [ 264.180129][ T114] ret_from_fork_asm+0x11/0x20 [ 264.184940][ T114] [ 264.187977][ T114] [ 264.190319][ T114] Allocated by task 9404: [ 264.194670][ T114] kasan_set_track+0x4e/0x70 [ 264.199280][ T114] __kasan_kmalloc+0x8f/0xa0 [ 264.204002][ T114] lmLogOpen+0x2df/0xfb0 [ 264.208366][ T114] jfs_mount_rw+0xef/0x670 [ 264.212890][ T114] jfs_fill_super+0x598/0xad0 [ 264.217686][ T114] mount_bdev+0x221/0x2d0 [ 264.222055][ T114] legacy_get_tree+0xea/0x180 [ 264.226760][ T114] vfs_get_tree+0x8c/0x280 [ 264.231458][ T114] do_new_mount+0x24b/0xa40 [ 264.235985][ T114] __se_sys_mount+0x2e7/0x3d0 [ 264.240674][ T114] do_syscall_64+0x55/0xa0 [ 264.245190][ T114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.251174][ T114] [ 264.253585][ T114] Freed by task 5767: [ 264.257564][ T114] kasan_set_track+0x4e/0x70 [ 264.262158][ T114] kasan_save_free_info+0x2e/0x50 [ 264.267296][ T114] ____kasan_slab_free+0x126/0x1e0 [ 264.272561][ T114] slab_free_freelist_hook+0x130/0x1a0 [ 264.278041][ T114] __kmem_cache_free+0xba/0x1e0 [ 264.282898][ T114] lmLogClose+0x297/0x520 [ 264.287237][ T114] jfs_umount+0x2ef/0x3c0 [ 264.291573][ T114] jfs_put_super+0x8c/0x190 [ 264.296090][ T114] generic_shutdown_super+0x134/0x2b0 [ 264.301461][ T114] kill_block_super+0x44/0x90 [ 264.306266][ T114] deactivate_locked_super+0x97/0x100 [ 264.311727][ T114] cleanup_mnt+0x43b/0x4d0 [ 264.316162][ T114] task_work_run+0x1d4/0x260 [ 264.320786][ T114] exit_to_user_mode_loop+0xe6/0x110 [ 264.326179][ T114] exit_to_user_mode_prepare+0xee/0x180 [ 264.331829][ T114] syscall_exit_to_user_mode+0x1a/0x50 [ 264.337298][ T114] do_syscall_64+0x61/0xa0 [ 264.341724][ T114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.347632][ T114] [ 264.349958][ T114] The buggy address belongs to the object at ffff888026447800 [ 264.349958][ T114] which belongs to the cache kmalloc-1k of size 1024 [ 264.364629][ T114] The buggy address is located 64 bytes inside of [ 264.364629][ T114] freed 1024-byte region [ffff888026447800, ffff888026447c00) [ 264.378440][ T114] [ 264.380775][ T114] The buggy address belongs to the physical page: [ 264.387275][ T114] page:ffffea0000991000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26440 [ 264.397426][ T114] head:ffffea0000991000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 264.406381][ T114] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 264.414390][ T114] page_type: 0xffffffff() [ 264.418759][ T114] raw: 00fff00000000840 ffff888017c41dc0 dead000000000122 0000000000000000 [ 264.427551][ T114] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 264.436233][ T114] page dumped because: kasan: bad access detected [ 264.442669][ T114] page_owner tracks the page as allocated [ 264.448403][ T114] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 49, tgid 49 (kworker/u4:3), ts 263208940259, free_ts 245731947611 [ 264.469170][ T114] post_alloc_hook+0x1c1/0x200 [ 264.473975][ T114] get_page_from_freelist+0x1951/0x19e0 [ 264.479533][ T114] __alloc_pages+0x1f0/0x460 [ 264.484334][ T114] alloc_slab_page+0x5d/0x160 [ 264.489015][ T114] new_slab+0x87/0x2d0 [ 264.493466][ T114] ___slab_alloc+0xc5d/0x12f0 [ 264.498154][ T114] __kmem_cache_alloc_node+0x19e/0x250 [ 264.503622][ T114] __kmalloc+0xa4/0x230 [ 264.507788][ T114] ieee802_11_parse_elems_full+0xb9/0x20c0 [ 264.513630][ T114] ieee80211_inform_bss+0x127/0x1080 [ 264.518950][ T114] rdev_inform_bss+0x106/0x410 [ 264.523811][ T114] cfg80211_inform_bss_frame_data+0xb8b/0x13d0 [ 264.530058][ T114] ieee80211_bss_info_update+0x759/0x9b0 [ 264.535788][ T114] ieee80211_ibss_rx_queued_mgmt+0x18ae/0x2c80 [ 264.542033][ T114] ieee80211_iface_work+0x717/0xc70 [ 264.547325][ T114] cfg80211_wiphy_work+0x225/0x260 [ 264.552536][ T114] page last free stack trace: [ 264.557240][ T114] free_unref_page_prepare+0x7b2/0x8c0 [ 264.562794][ T114] free_unref_page+0x32/0x2e0 [ 264.567613][ T114] __unfreeze_partials+0x1cf/0x210 [ 264.572728][ T114] put_cpu_partial+0x17c/0x250 [ 264.577519][ T114] __slab_free+0x319/0x400 [ 264.582026][ T114] qlist_free_all+0x75/0xd0 [ 264.586538][ T114] kasan_quarantine_reduce+0x143/0x160 [ 264.592005][ T114] __kasan_slab_alloc+0x22/0x80 [ 264.596860][ T114] slab_post_alloc_hook+0x6e/0x4b0 [ 264.601981][ T114] kmem_cache_alloc+0x11a/0x2d0 [ 264.606840][ T114] getname_flags+0xbb/0x500 [ 264.611383][ T114] do_sys_openat2+0xda/0x1d0 [ 264.616184][ T114] __x64_sys_openat+0x139/0x160 [ 264.621068][ T114] do_syscall_64+0x55/0xa0 [ 264.625517][ T114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.631462][ T114] [ 264.633793][ T114] Memory state around the buggy address: [ 264.639435][ T114] ffff888026447700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 264.647602][ T114] ffff888026447780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 264.655764][ T114] >ffff888026447800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 264.663822][ T114] ^ [ 264.670063][ T114] ffff888026447880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 264.678164][ T114] ffff888026447900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 264.686241][ T114] ================================================================== [ 264.905197][ T114] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 264.912454][ T114] CPU: 1 PID: 114 Comm: jfsCommit Not tainted syzkaller #0 [ 264.919864][ T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.930127][ T114] Call Trace: [ 264.933423][ T114] [ 264.936371][ T114] dump_stack_lvl+0x18c/0x250 [ 264.941077][ T114] ? show_regs_print_info+0x20/0x20 [ 264.946380][ T114] ? load_image+0x400/0x400 [ 264.950900][ T114] panic+0x2dc/0x730 [ 264.954897][ T114] ? bpf_jit_dump+0xd0/0xd0 [ 264.959522][ T114] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 264.965609][ T114] ? _raw_spin_unlock+0x40/0x40 [ 264.970474][ T114] ? print_memory_metadata+0x314/0x400 [ 264.975974][ T114] ? txEnd+0x32d/0x520 [ 264.980060][ T114] check_panic_on_warn+0x84/0xa0 [ 264.985003][ T114] ? txEnd+0x32d/0x520 [ 264.989167][ T114] end_report+0x6f/0x130 [ 264.993418][ T114] kasan_report+0x128/0x150 [ 264.997931][ T114] ? txEnd+0x32d/0x520 [ 265.002014][ T114] kasan_check_range+0x241/0x290 [ 265.006964][ T114] txEnd+0x32d/0x520 [ 265.010865][ T114] jfs_lazycommit+0x5a4/0xa70 [ 265.015645][ T114] ? txFreelock+0x5a0/0x5a0 [ 265.020243][ T114] ? do_task_dead+0xd0/0xd0 [ 265.024816][ T114] ? __kthread_parkme+0x7a/0x1c0 [ 265.029771][ T114] kthread+0x2fa/0x390 [ 265.033848][ T114] ? txFreelock+0x5a0/0x5a0 [ 265.038354][ T114] ? kthread_blkcg+0xd0/0xd0 [ 265.042942][ T114] ret_from_fork+0x48/0x80 [ 265.047375][ T114] ? kthread_blkcg+0xd0/0xd0 [ 265.052066][ T114] ret_from_fork_asm+0x11/0x20 [ 265.057024][ T114] [ 265.060698][ T114] Kernel Offset: disabled [ 265.065102][ T114] Rebooting in 86400 seconds..