last executing test programs: 4m47.615880909s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 4m46.966990353s ago: executing program 0 (id=5): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x48}}, 0x0) 4m45.627859822s ago: executing program 0 (id=13): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) 4m45.425080196s ago: executing program 32 (id=13): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) 4m9.339026511s ago: executing program 4 (id=260): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000c76d000000000000008100000081"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m9.038770651s ago: executing program 4 (id=264): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}], 0x1, 0x4044805) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 4m8.869730372s ago: executing program 4 (id=267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r0) 4m8.647685667s ago: executing program 4 (id=271): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f0000000080), 0x3, 0x45c, &(0x7f00000002c0)="$eJzs281vFGUYAPBnZtsCArYifvChVtHY+NFSQOXgQY0mHjAx0YMem7YQZKGG1kQIUTAGT8aYeDce/Rc86cUYTyZe9W5IiOECeFozuzN0d9ld6LLbLezvlwy873z0fZ6deXffmXc3gKE1mf2TRGyLiL8iYrxWbdxhsvbftSvn5q9fOTefRKXy3r9Jdb+rV87NF7sWx23NK1NpRPplEntatLt85uyJuXJ58XRen1k5+fHM8pmzLx4/OXds8djiqQOHDx86OPvKywde6kmeWUxXd3+2tHfX2x9++86Rr7N1aZF/Ux49Mtlp4zOVSo+bG6ztdeVkZICBsCaliMhO12i1/49HKVZP3ni89cVAgwP6qlKpVLa233y+AtzDkmis6/IwLIoP+uz+t1iaBwGv9W/4MXCXX6/dAGV5X8uX2paR6vOByO+Ntvep/cmI+OD8f99nS/TnOQQAQIOfs/HPC63Gf2k8XLff/fnc0EREPBAROyLiwYjYGREPRVT3fSQiHl1j+82TJDePf9JLXSV2m7Lx36v53Fbj+K8Y/cVEKa9tr+Y/mhw9Xl7cn78mUzG6KavPdmjjlzf//KbdtvrxX7Zk7RdjwTyOSyObGo9ZmFuZu5Oc612+ELF7pFX+yY2ZgCQidkXE7i7bOP7cj3vbbbt1/h30YJ6p8kPEs7Xzfz6a8i8knecnZzZHeXH/THFV3Oz3Py6+2679O8q/B7Lzf1/L6/9G/hNJ/Xzt8trbuPj3V23vabq9/seS96vlsXzdp3MrK6dnI8aSI7Wg69cfWD22qBf7Z/lP7Wvd/3fE6iuxJyKyi/ixiHg8Ip7IY38yIp6KiH0d8v/tjac/6j7//sryX1jT+V8tjEXzmtaF0olff2podOKm/K93Pv+HqqWpfM3tvP/dTlzdXc0AAABw90kjYlsk6fSNcppOT9e+L78zIi0vLa88f3Tpk1MLtd8ITESkxZOu8brnobP5bX2tfiEial8tKLYfzJ8bf1faUq1Pzy+VFwadPAy5rW36f+af0qCjA/rO77VgeOn/MLxu1f8/X6c4gPXn8x+GV4v+v2UQcQDrbVPLz39jfhgOTf3ftB8Mkab+v3lQcQDrr/vnf2M9jQNYf57/w1Ba3hK3/pF8x0Lxl7o8/J4txOiGCKNvhUg3RBgbtjB6l/eLwb0nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NL/AQAA//8kV94B") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m8.014652969s ago: executing program 4 (id=279): r0 = socket$packet(0x11, 0x3, 0x300) close(0x3) socket$xdp(0x2c, 0x3, 0x0) getsockname$packet(r0, 0x0, 0x0) 4m7.413082279s ago: executing program 4 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x9, 0x6, 0x9, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 4m6.777794551s ago: executing program 33 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x9, 0x6, 0x9, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 3m12.619896551s ago: executing program 3 (id=688): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) read$alg(r1, &(0x7f0000000000)=""/35, 0x1c) 3m12.328914921s ago: executing program 3 (id=692): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 3m12.199438839s ago: executing program 3 (id=694): r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m11.210183415s ago: executing program 3 (id=707): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m10.777654014s ago: executing program 3 (id=710): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20000) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x800, 0x188) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040)) 3m10.067336011s ago: executing program 3 (id=714): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000140)=ANY=[], 0xfa, 0x164, &(0x7f0000000440)="$eJzsz02LUlEcx/Hvufd4r5JikYEFpRCUJEEktIvwRpKQXShq0Uqo2wMohUK5S4l2LYS2LXpYFkGvQNNFNOhm5k3Mxt3AbAbucO7VceM7mP9ncRa/3zn/c86dm/OSYu32a+gE3W7wrPjAb9Qe7o5GVZM70PsT9e03nUumj/ePq/ASzVgDFph4moHnr7Z/Pj4b71lUwQW8EyZvBRbtLJAynZfTDDShCRYWlC7C5MxBGIYtKzo7WGXx2QqJaOY5DV42zq4B4Te47IB36ugr/T2zgFKOGyfnbT7Wy4XTCnpfyr9/bd2f/a9fvXIr+HS9NnTTebv8Hr7jqeS/6YsdezlnPmvc8xu+mXGjYh69LPpD9N30W3iiIFwy8xzyF/Qj+KDgc3TX4q/KAJOv+37bXT/wnV0EVUg9beYTP5q5k9bqypANdLQmN1VCCCGEEEIIIYQQQgghhBBCCCGOu8MAAAD//yI8VBo=") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 3m9.564358645s ago: executing program 34 (id=714): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000140)=ANY=[], 0xfa, 0x164, &(0x7f0000000440)="$eJzsz02LUlEcx/Hvufd4r5JikYEFpRCUJEEktIvwRpKQXShq0Uqo2wMohUK5S4l2LYS2LXpYFkGvQNNFNOhm5k3Mxt3AbAbucO7VceM7mP9ncRa/3zn/c86dm/OSYu32a+gE3W7wrPjAb9Qe7o5GVZM70PsT9e03nUumj/ePq/ASzVgDFph4moHnr7Z/Pj4b71lUwQW8EyZvBRbtLJAynZfTDDShCRYWlC7C5MxBGIYtKzo7WGXx2QqJaOY5DV42zq4B4Te47IB36ugr/T2zgFKOGyfnbT7Wy4XTCnpfyr9/bd2f/a9fvXIr+HS9NnTTebv8Hr7jqeS/6YsdezlnPmvc8xu+mXGjYh69LPpD9N30W3iiIFwy8xzyF/Qj+KDgc3TX4q/KAJOv+37bXT/wnV0EVUg9beYTP5q5k9bqypANdLQmN1VCCCGEEEIIIYQQQgghhBBCCCGOu8MAAAD//yI8VBo=") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 2m30.140845913s ago: executing program 2 (id=936): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x2000, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 2m29.836374083s ago: executing program 2 (id=937): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 2m29.161249678s ago: executing program 2 (id=942): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, 'X\f'}]}}}}}}}}, 0x0) 2m28.661029422s ago: executing program 2 (id=948): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}, {@test_dummy_encryption}, {@usrquota}, {@nogrpid}, {@resgid}]}, 0x1, 0x451, &(0x7f0000000980)="$eJzs281rHGUYAPBnZpP020SpH/1Qo1UsfiRNWmsPXhQFDwqCHtpjTNJSu22kiWBL0SpSj1LwLh4F/wJPehH1JHjVuxSK9NIqCCOT3Wl2t7vbbLKbje7vB9O+73zwPs/OvLvvzJsJYGCN5/8kETsj4reIGK1U63cYr/x368al2b9uXJpNIsve+jM5MRIRN29cmi12LY7bUVSGItJPk9jXpN3FCxfPzJTL8+er9cmls+9NLl64+NzpszOn5k/Nn5s+duzI4akXjk4/33FOY03W5Xnd3Pvhwv49r524+sbs8avv/PRNUuTfkEeXjLfb+GSWdbm5/tpVU06G+hgIHSlVumkML/f/0SjFyskbjVc/6WtwQE9lWZY90Hrz5Qz4H0ui40OGOj8E2HyKH/r8/rdYNmjosSlcf6lyA5Tnfau6VLYMRVrdZ7jh/rabxiPi+OW/v8yX6M1zCACAOt/l459nm43/0qh9LnRPdQ5lLCLujYj7IuJoROyOiPsjlvd9MCIeWn3TpWgySXLn+Ce9tubkViEf/734Txa37hj/FaO/GCtVa7uW8x9OTp4uzx+qfiYHY3hLXp9q08b3r/z6eattteO/fMnbL8aC1TiuDW2pP2ZuZmlmPTnXuv5xxN6haJJ/cnsmIImIPRGxd41tnH766/2ttt09/za6MM+UfRXxVGVu83I05F9I2s9PTm6N8vyhyeKquNPPv1x5s1X768q/C/Lzvz2an/+qsaR2vnax8zau/P5Zy3uatV7/I8nbdes+mFlaOj8VMZK8Xgm6dv10w37TK/vn+R88UJ9/peeny99xxSexLyLyi/jhiHgkIh6txv5YRDweEQfa5P/jy0+8u/b8eyvPf66j879SGInGNc0LpTM/fFvX6Fgn+efn/0hEttIfV/P9t5q41nY1AwAAwH9PGhE7I0knbpfTdGKi8jf8u2N7Wl5YXHrm5ML75+Yq7wiMxXBaPOkarXkeOlW9rS/q0w31w9Xnxl+Uti3XJ2YXynP9Th4G3I4W/T/3R6nf0QE9530tGFy1/X+4j3EAG8/vPwwu/R8GV5P+v60fcQAbr9nv/0d9iAPYeA39v+2030iPYwE2lvt/GFz6Pwwu/R8G0uK2uPtL8grtC1s7/AxHNkHM6y5EuinCUOhRod/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//VQTm5g==") creat(&(0x7f0000000000)='./file2\x00', 0x149) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m27.658044818s ago: executing program 2 (id=954): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast1, 0x4}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00g\x00', 0x48, 0x11, 0x1, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "ac847a8d6a70500317a6ff633b2d873b3538b7a94d5194cc", "7a124682524e9cc26482e0daa35cc98a6f80be6351aa0bb5bd6db9e9548e79fb"}}}}}}}, 0x0) 2m26.875855881s ago: executing program 2 (id=964): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) writev(r1, &(0x7f00000017c0)=[{&(0x7f00000016c0)="d2", 0x1}], 0x1) 2m26.687931253s ago: executing program 35 (id=964): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) writev(r1, &(0x7f00000017c0)=[{&(0x7f00000016c0)="d2", 0x1}], 0x1) 4.124039015s ago: executing program 7 (id=1947): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 3.963825476s ago: executing program 7 (id=1948): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x0, 0x84, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x71, 0xf2, {0x7, 0x25, 0x1, 0x4, 0x3, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0xcdd934d246555470, 0x0, 0x4, 0x2, {0x7, 0x25, 0x1, 0x4, 0x4, 0xff}}}}}}}}]}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='\'', 0x7ab8}], 0x1}}], 0x1, 0x0) 3.473538889s ago: executing program 5 (id=1951): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9}) 3.174486178s ago: executing program 5 (id=1953): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000640)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x1fe, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2.835441071s ago: executing program 5 (id=1955): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x4e22, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) 2.643844044s ago: executing program 5 (id=1958): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, 0x0, 0x18, 0x0, 0x12345}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x13, r4, 0x0) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) 2.411884319s ago: executing program 7 (id=1962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000440)={0x58, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "02e7468e87e76a782b856d13fd9d98b1"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "3d5610fb0fff887ac9d4d3fae4e11c36"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20044800) 2.307609376s ago: executing program 7 (id=1964): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r1, 0x7fffffffffffffff, 0x2) sendfile(r1, r0, 0x0, 0x820000006) 2.185572225s ago: executing program 7 (id=1967): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000006c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@uqnoenforce}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000280)={0x3ff, 0x2, 0x2, 0x9, 0x229}) 2.067911012s ago: executing program 6 (id=1968): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e20, 0x3, @empty, 0x8}}}, &(0x7f0000000300)=0x84) 1.876546135s ago: executing program 6 (id=1969): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 1.700613237s ago: executing program 5 (id=1971): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7001fe9bdf251300000008000300", @ANYRES32=r2, @ANYBLOB="040013000600b500660600000a0006000802110000010000060012008300e5002c0081"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 1.559843106s ago: executing program 6 (id=1972): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@init_itable}]}, 0x82, 0x48f, &(0x7f0000000840)="$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") r0 = open(&(0x7f0000000100)='./file0\x00', 0x80400, 0x20) syz_io_uring_setup(0x4b6, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) 1.279125565s ago: executing program 5 (id=1974): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,noquota,nointegrity,errors=continue,iocharset=cp863,noquota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB="0000bbaa213ca1750a73593e8b6b51ec762e74cada46036fb2cd30b777e4a35afadbbd049c95b9880c70e694709bce9011b4c0460c95d9e0cc473d9f4f1841cdaff7b2a25ff3baddc86b3ab69e93b6beea217b6ff816e2f122cb63010bce65149c059d20b376f3696de010eb1b9ca12fc97b85d273e059e8c625da1575d7ac7d39571c4447ebadc4da39b8bcdf520b21994c5b02d448852f9765d56ffcedca0ad05a7fd150d8028a6997510bf1bf9871f25c4ab5966143ab5fbf218f99d125b00c5ebf68a5ad9dd56d7a"], 0x1, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") rename(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000100)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) 1.219801239s ago: executing program 1 (id=1975): r0 = io_uring_setup(0x5dd8, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 1.20742875s ago: executing program 1 (id=1976): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x20080, 0x2880}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x40000) 1.134644324s ago: executing program 6 (id=1977): socket$inet6(0xa, 0x1, 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) pselect6(0x40, &(0x7f0000000080)={0x2, 0xff, 0x0, 0x5, 0x8000, 0x0, 0x0, 0x200000000007}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0xbc77, 0x4000000000}, 0x0, 0x0, 0x0) 891.89752ms ago: executing program 1 (id=1978): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000840)=0xb6c, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}], 0x1, 0x2100, 0x0) 687.629524ms ago: executing program 1 (id=1979): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000008bcc3e6f0000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f000000000000000500000000000000fefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c617465"], 0x140}}, 0x844) 627.596068ms ago: executing program 6 (id=1980): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 463.937519ms ago: executing program 7 (id=1981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 409.188283ms ago: executing program 1 (id=1982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x20000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@random="8927", 0x2, 0x2) 174.344368ms ago: executing program 6 (id=1983): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') r2 = fanotify_init(0x0, 0x2) fanotify_mark(r2, 0x1, 0x8000039, r1, 0x0) getdents64(r0, &(0x7f0000002540)=""/4096, 0x1000) 0s ago: executing program 1 (id=1984): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) exit(0xffff) wait4(r0, 0x0, 0x8, 0x0) kernel console output (not intermixed with test programs): R13: 00007f0a62216038 R14: 00007f0a62215fa0 R15: 00007ffdbccf6f78 [ 268.874194][T10180] [ 268.927135][T10158] XFS (loop5): Ending clean mount [ 269.092313][ T1816] XFS (loop5): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 269.283331][ T1816] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 269.401057][ T1816] XFS (loop5): Unmount and run xfs_repair [ 269.406858][ T1816] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 269.551603][ T1816] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 269.637107][ T1816] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 269.699220][T10206] loop1: detected capacity change from 0 to 131072 [ 269.725101][ T1816] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 269.742535][T10206] F2FS-fs (loop1): invalid crc value [ 269.819051][T10206] F2FS-fs (loop1): Found nat_bits in checkpoint [ 269.819126][ T1816] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 269.864292][ T1816] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 269.877624][ T1816] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 269.905525][T10206] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 269.905628][ T1816] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 269.984984][T10206] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 270.037999][ T1816] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 270.083691][T10158] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 270.113761][T10158] XFS (loop5): Failed to initialize disk quotas. [ 270.218348][ T6830] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 270.864929][T10209] loop7: detected capacity change from 0 to 32768 [ 270.929773][T10209] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 271.077833][T10209] XFS (loop7): Ending clean mount [ 271.166402][T10209] XFS (loop7): Quotacheck needed: Please wait. [ 271.346338][T10209] XFS (loop7): Quotacheck: Done. [ 271.504176][ T9219] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 271.549368][ T787] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 271.759242][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 271.766786][ T787] usb 2-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 271.792743][ T787] usb 2-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.835963][ T787] usb 2-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.848462][T10238] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1309'. [ 271.866469][ T787] usb 2-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 271.899962][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 271.906701][ T787] usb 2-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 271.936655][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.960752][ T787] usb 2-1: config 0 descriptor?? [ 272.406078][ T787] wacom 0003:056A:010E.0009: unbalanced collection at end of report description [ 272.448449][ T787] wacom 0003:056A:010E.0009: parse failed [ 272.468509][ T787] wacom: probe of 0003:056A:010E.0009 failed with error -22 [ 272.559492][T10244] loop5: detected capacity change from 0 to 4096 [ 272.574064][T10244] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 272.588783][T10244] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 272.617094][T10244] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 272.650108][T10244] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 272.674381][ T5837] usb 2-1: USB disconnect, device number 14 [ 272.697035][T10244] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 272.740923][T10244] ntfs: volume version 3.1. [ 272.838522][T10244] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 272.889579][T10244] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 272.942860][T10244] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 272.979367][T10244] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 273.008644][T10244] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 273.599258][ T5837] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 273.757767][T10267] loop6: detected capacity change from 0 to 64 [ 273.807241][ T5837] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.849669][ T5837] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 273.886311][ T5837] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 273.931785][ T5837] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.954908][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.979932][ T5837] usb 2-1: Product: syz [ 273.984180][ T5837] usb 2-1: Manufacturer: syz [ 274.009215][ T5837] usb 2-1: SerialNumber: syz [ 274.040865][ T5837] cdc_ncm 2-1:1.0: skipping garbage [ 274.090066][T10251] loop7: detected capacity change from 0 to 40427 [ 274.135640][T10251] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 274.162337][T10251] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 274.191226][T10251] F2FS-fs (loop7): Found nat_bits in checkpoint [ 274.366734][T10251] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 274.387037][T10251] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 274.773629][T10270] loop5: detected capacity change from 0 to 40427 [ 274.794468][T10270] F2FS-fs (loop5): invalid crc value [ 274.811924][T10270] F2FS-fs (loop5): Found nat_bits in checkpoint [ 274.942381][T10270] F2FS-fs (loop5): Start checkpoint disabled! [ 274.961337][T10270] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 275.086131][ T5837] cdc_ncm 2-1:1.0: bind() failure [ 275.148467][ T5837] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 275.160210][ T5837] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 275.178262][ T5837] usbtest: probe of 2-1:1.1 failed with error -71 [ 275.217492][ T5837] usb 2-1: USB disconnect, device number 15 [ 275.238408][T10275] loop6: detected capacity change from 0 to 40427 [ 275.276970][T10275] F2FS-fs (loop6): Found nat_bits in checkpoint [ 275.444602][T10275] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 275.525745][ T1080] kworker/u4:6: attempt to access beyond end of device [ 275.525745][ T1080] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 275.545066][ T1080] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 275.554211][ T1080] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 275.616685][ T8241] syz-executor: attempt to access beyond end of device [ 275.616685][ T8241] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 275.653498][ T8241] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 276.272897][T10293] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1332'. [ 276.300324][T10293] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1332'. [ 276.686646][T10286] loop7: detected capacity change from 0 to 40427 [ 276.695736][T10304] netlink: 'syz.1.1340': attribute type 4 has an invalid length. [ 276.715174][T10286] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 276.727995][T10286] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 276.756048][T10286] F2FS-fs (loop7): invalid crc value [ 276.804707][T10286] F2FS-fs (loop7): Found nat_bits in checkpoint [ 276.832491][T10309] netlink: 'syz.1.1340': attribute type 17 has an invalid length. [ 276.998115][T10286] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 277.015445][T10286] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 277.226747][T10322] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 277.337099][ T1098] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 277.371976][ T1098] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 277.604546][T10334] input: syz0 as /devices/virtual/input/input21 [ 277.795521][T10338] loop6: detected capacity change from 0 to 1024 [ 277.809214][ T5815] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 278.025345][ T5815] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 278.047178][ T5815] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.088624][ T5815] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 278.123163][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.150564][ T5815] usb 2-1: Product: syz [ 278.157697][ T5815] usb 2-1: Manufacturer: syz [ 278.168050][ T5815] usb 2-1: SerialNumber: syz [ 278.192224][ T5815] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input22 [ 278.314566][T10349] loop7: detected capacity change from 0 to 64 [ 278.395825][T10351] loop6: detected capacity change from 0 to 512 [ 278.419575][ T5815] bcm5974 2-1:1.0: could not read from device [ 278.452441][T10351] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 278.485173][ T5126] bcm5974 2-1:1.0: could not read from device [ 278.535078][ T5815] input: failed to attach handler mousedev to device input22, error: -5 [ 278.575961][ T5126] bcm5974 2-1:1.0: could not read from device [ 278.590313][ T5815] usb 2-1: USB disconnect, device number 16 [ 278.617983][ T5126] bcm5974 2-1:1.0: could not read from device [ 278.721311][ T787] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 278.870835][ T1124] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 278.951347][ T787] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 278.973668][ T787] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 278.999511][ T787] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.019919][ T787] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.030837][ T787] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.040966][ T787] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.056940][ T787] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.068511][ T787] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.082207][ T787] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.098904][ T787] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.110635][ T787] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.125915][ T787] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.137236][ T787] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.148786][ T787] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.174772][ T787] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.190403][ T787] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.198376][ T787] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.215586][ T787] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.229474][ T787] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.238076][ T787] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.252567][ T787] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.266898][ T787] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.285024][ T787] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 279.298104][ T787] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 279.314647][ T787] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.332019][ T787] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 279.349493][ T787] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 279.364387][T10365] loop1: detected capacity change from 0 to 1024 [ 279.371970][ T787] usb 6-1: Product: syz [ 279.377823][ T787] usb 6-1: Manufacturer: syz [ 279.387724][ T787] usb 6-1: SerialNumber: syz [ 279.414460][ T787] usb 6-1: config 0 descriptor?? [ 279.435122][T10365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.458972][ T787] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 279.544230][T10372] loop6: detected capacity change from 0 to 2048 [ 279.636903][T10372] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.728729][ T787] usb 6-1: USB disconnect, device number 10 [ 279.758318][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.765080][ T787] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 280.315685][T10392] loop7: detected capacity change from 0 to 128 [ 280.326270][T10390] loop6: detected capacity change from 0 to 1024 [ 280.346593][T10392] EXT4-fs: Ignoring removed bh option [ 280.467484][T10392] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.549584][T10392] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 280.614747][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 280.614763][ T28] audit: type=1800 audit(1775613955.589:28): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1375" name="file1" dev="loop7" ino=12 res=0 errno=0 [ 280.806003][T10403] loop1: detected capacity change from 0 to 512 [ 280.838119][ T9219] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.901090][T10403] EXT4-fs (loop1): 1 truncate cleaned up [ 280.908042][T10403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.040919][T10403] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1379: invalid indirect mapped block 4294967295 (level 1) [ 281.088342][T10403] EXT4-fs (loop1): Remounting filesystem read-only [ 281.166065][T10414] loop7: detected capacity change from 0 to 256 [ 281.241357][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.476295][T10425] loop7: detected capacity change from 0 to 8 [ 282.085219][T10430] loop5: detected capacity change from 0 to 32768 [ 282.118601][T10439] trusted_key: syz.1.1394 sent an empty control message without MSG_MORE. [ 282.139965][T10430] loop5: p9 p11 p16 [ 282.606939][T10443] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 282.625630][T10443] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 282.716180][ T6680] udevd[6680]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory [ 282.737294][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop5p16, 10) failed: No such file or directory [ 282.739602][T10457] syz.6.1399 uses obsolete (PF_INET,SOCK_PACKET) [ 282.755000][ T8149] udevd[8149]: inotify_add_watch(7, /dev/loop5p11, 10) failed: No such file or directory [ 282.884516][T10460] loop7: detected capacity change from 0 to 512 [ 283.374841][T10477] loop7: detected capacity change from 0 to 512 [ 283.406145][T10477] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 283.453385][T10477] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 283.477146][T10477] EXT4-fs (loop7): 1 truncate cleaned up [ 283.509782][T10477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.667017][ T9219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.994034][T10473] loop6: p9 p11 p16 [ 284.112813][T10491] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 284.145851][T10491] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 284.213070][T10494] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.355776][T10491] overlayfs: upper fs does not support tmpfile. [ 284.381741][T10491] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 284.388884][T10491] overlayfs: failed to set xattr on upper [ 284.399774][T10491] overlayfs: ...falling back to redirect_dir=nofollow. [ 284.417784][T10491] overlayfs: ...falling back to index=off. [ 284.429280][T10491] overlayfs: ...falling back to uuid=null. [ 284.580644][ T6680] udevd[6680]: inotify_add_watch(7, /dev/loop6p9, 10) failed: No such file or directory [ 284.590720][ T5832] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 284.602947][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop6p16, 10) failed: No such file or directory [ 284.617229][ T8149] udevd[8149]: inotify_add_watch(7, /dev/loop6p11, 10) failed: No such file or directory [ 284.708518][ T6830] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 284.727661][ T6830] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 284.769410][ T6830] Remounting filesystem read-only [ 284.774607][ T6830] NILFS (loop5): error -5 truncating bmap (ino=12) [ 284.787010][ T6830] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 284.799929][ T6830] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 284.806940][ T6830] NILFS (loop5): discard dirty block: blocknr=14, size=4096 [ 284.815257][ T6830] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 284.822361][ T6830] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 284.830198][ T6830] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 284.837958][ T6830] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 284.848277][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 284.860174][ T6830] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 284.867180][ T6830] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 284.874824][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.889310][ T5832] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 284.929021][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.962393][ T5832] usb 8-1: config 0 descriptor?? [ 285.246315][T10496] set_capacity_and_notify: 2 callbacks suppressed [ 285.246333][T10496] loop6: detected capacity change from 0 to 32768 [ 285.360416][T10496] JBD2: Ignoring recovery information on journal [ 285.434936][T10515] loop1: detected capacity change from 0 to 1024 [ 285.442100][ T5832] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 285.448964][ T5832] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 285.470505][T10515] EXT4-fs: Ignoring removed nobh option [ 285.489657][ T5832] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 285.499458][T10515] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.499635][ T5832] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 285.533411][T10496] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 285.564327][T10515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c01c, mo2=0003] [ 285.596817][ T5832] elan 0003:04F3:0755.000A: unknown main item tag 0x0 [ 285.619428][T10515] System zones: 0-1, 3-8 [ 285.626318][T10515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 285.632467][ T5832] elan 0003:04F3:0755.000A: failed to start in urb: -90 [ 285.681558][ T5832] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 285.718861][T10515] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.744401][ T5832] usb 8-1: USB disconnect, device number 7 [ 285.784800][T10515] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 3: comm syz.1.1423: lblock 3 mapped to illegal pblock 3 (length 1) [ 285.862068][T10515] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 285.890991][T10515] EXT4-fs (loop1): This should not happen!! Data will be lost [ 285.890991][T10515] [ 285.926013][T10524] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 3: comm syz.1.1423: lblock 3 mapped to illegal pblock 3 (length 1) [ 285.943883][T10521] fido_id[10521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 285.959981][T10524] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 285.992395][T10524] EXT4-fs (loop1): This should not happen!! Data will be lost [ 285.992395][T10524] [ 286.091809][ T12] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 286.114885][ T8241] ocfs2: Unmounting device (7,6) on (node local) [ 286.174740][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 286.207931][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 286.207931][ T12] [ 286.231351][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 286.913247][T10551] tipc: Enabling of bearer rejected, failed to enable media [ 286.927104][T10553] loop1: detected capacity change from 0 to 16 [ 286.944178][T10553] erofs: (device loop1): mounted with root inode @ nid 36. [ 286.953232][ T787] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 286.986845][ T28] audit: type=1800 audit(1775613961.959:29): pid=10553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1438" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 287.171519][ T787] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.186666][ T787] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 287.194745][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1441'. [ 287.209272][ T787] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.238783][ T787] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 287.270109][ T787] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 287.295108][ T787] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.307693][ T787] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.339692][ T787] usb 6-1: Product: syz [ 287.359648][ T787] usb 6-1: Manufacturer: syz [ 287.387002][ T787] cdc_wdm 6-1:1.0: skipping garbage [ 287.400344][T10563] loop7: detected capacity change from 0 to 512 [ 287.408088][ T787] cdc_wdm 6-1:1.0: skipping garbage [ 287.430473][ T787] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 287.458994][ T787] cdc_wdm 6-1:1.0: Unknown control protocol [ 287.470698][T10563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.556075][T10567] loop1: detected capacity change from 0 to 512 [ 287.596245][T10563] autofs4:pid:10563:autofs_fill_super: pipe file descriptor does not contain proper ops [ 287.644635][ T9219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.059985][T10579] ALSA: seq fatal error: cannot create timer (-19) [ 288.522853][T10575] loop7: detected capacity change from 0 to 40427 [ 288.526277][ T787] usb 6-1: USB disconnect, device number 11 [ 288.555506][T10575] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x35f7 [ 288.564548][T10575] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff [ 288.574375][T10575] F2FS-fs (loop7): Image doesn't support compression [ 288.583821][T10575] F2FS-fs (loop7): invalid crc value [ 288.593049][T10575] F2FS-fs (loop7): Found nat_bits in checkpoint [ 288.713186][T10575] F2FS-fs (loop7): Start checkpoint disabled! [ 288.728128][T10575] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 288.894906][T10587] loop1: detected capacity change from 0 to 32768 [ 288.916747][T10587] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1452 (10587) [ 288.951025][T10587] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 288.966562][T10587] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 288.987741][ T5778] block nbd2: Receive control failed (result -32) [ 289.015004][ T12] F2FS-fs (loop7): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xbe0/0x1a40 [ 289.054432][T10587] BTRFS info (device loop1): force zlib compression, level 3 [ 289.063042][ T12] kworker/u4:1: attempt to access beyond end of device [ 289.063042][ T12] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 289.090934][T10587] BTRFS info (device loop1): force clearing of disk cache [ 289.136195][T10587] BTRFS info (device loop1): setting nodatasum [ 289.152981][ T12] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 289.190073][T10587] BTRFS info (device loop1): allowing degraded mounts [ 289.196926][T10587] BTRFS info (device loop1): enabling disk space caching [ 289.208821][ T12] F2FS-fs (loop7): Stopped filesystem due to reason: 1 [ 289.253312][T10587] BTRFS info (device loop1): disk space caching is enabled [ 289.381778][T10587] BTRFS info (device loop1): auto enabling async discard [ 289.408170][T10587] BTRFS info (device loop1): rebuilding free space tree [ 289.453003][T10587] BTRFS info (device loop1): disabling free space tree [ 289.472732][T10587] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 289.494918][T10587] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 289.716758][T10619] input: syz1 as /devices/virtual/input/input23 [ 289.817083][ T5772] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 290.055843][ T6680] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop1 scanned by udevd (6680) [ 291.100131][ T55] block nbd0: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 180 seconds [ 291.111220][ T55] block nbd0: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 180 seconds [ 291.122314][ T55] block nbd0: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 180 seconds [ 291.133472][ T55] block nbd0: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 180 seconds [ 291.348811][T10647] tipc: Enabling of bearer rejected, failed to enable media [ 291.637875][T10655] loop5: detected capacity change from 0 to 512 [ 291.678124][T10655] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 291.710099][T10655] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1475: invalid indirect mapped block 6684672 (level 2) [ 291.760111][T10639] loop1: detected capacity change from 0 to 40427 [ 291.799458][T10639] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 291.809698][T10655] EXT4-fs (loop5): 1 truncate cleaned up [ 291.816411][T10639] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 291.841048][T10655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.877038][T10639] F2FS-fs (loop1): Found nat_bits in checkpoint [ 291.922811][T10655] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.1475: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 291.984709][T10655] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem [ 292.020007][T10639] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 292.031703][T10639] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.057400][ T6830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.418087][T10667] loop7: detected capacity change from 0 to 16 [ 292.454098][T10667] erofs: (device loop7): mounted with root inode @ nid 36. [ 292.488253][ T28] audit: type=1800 audit(1775613967.459:30): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1480" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 293.281316][T10679] loop5: detected capacity change from 0 to 8192 [ 293.952458][T10685] loop7: detected capacity change from 0 to 32768 [ 293.965926][T10685] XFS: ikeep mount option is deprecated. [ 294.019414][T10685] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 294.037059][T10702] loop5: detected capacity change from 0 to 64 [ 294.073576][ T28] audit: type=1800 audit(1775613969.049:31): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1492" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 294.160018][T10685] XFS (loop7): Ending clean mount [ 294.281962][ T9219] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 294.747892][T10717] loop6: detected capacity change from 0 to 1024 [ 294.760300][T10717] EXT4-fs: Ignoring removed nobh option [ 294.808052][T10717] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 294.895237][T10717] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c01c, mo2=0003] [ 294.913487][T10717] System zones: 0-1, 3-8 [ 294.944560][T10717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 294.999333][T10717] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.067062][T10729] loop7: detected capacity change from 0 to 512 [ 295.078472][T10717] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #15: block 3: comm syz.6.1496: lblock 3 mapped to illegal pblock 3 (length 1) [ 295.109654][T10717] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 295.136556][T10723] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 295.190911][T10717] EXT4-fs (loop6): This should not happen!! Data will be lost [ 295.190911][T10717] [ 295.222994][T10730] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #15: block 3: comm syz.6.1496: lblock 3 mapped to illegal pblock 3 (length 1) [ 295.303309][T10730] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 295.355890][T10734] loop7: detected capacity change from 0 to 1024 [ 295.365808][T10730] EXT4-fs (loop6): This should not happen!! Data will be lost [ 295.365808][T10730] [ 295.474734][ T1080] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 295.531560][ T1080] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 295.557892][ T1080] EXT4-fs (loop6): This should not happen!! Data will be lost [ 295.557892][ T1080] [ 295.632743][ T8241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 295.760426][ T12] hfsplus: b-tree write err: -5, ino 25 [ 295.766248][ T12] hfsplus: b-tree write err: -5, ino 4 [ 295.814275][ T12] hfsplus: b-tree write err: -5, ino 2 [ 295.834257][T10738] loop6: detected capacity change from 0 to 64 [ 295.847119][ T12] hfsplus: b-tree write err: -5, ino 26 [ 295.864211][T10738] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 296.321016][T10745] EXT4-fs (loop7): 1 orphan inode deleted [ 296.328197][T10745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.344088][ T1124] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 296.358344][T10747] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.359575][T10745] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.403152][ T1124] EXT4-fs error (device loop7): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1 [ 296.483787][T10745] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.1508: iget: bad i_size value: 360287970189639690 [ 296.641120][ T9219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.476805][T10781] set_capacity_and_notify: 2 callbacks suppressed [ 297.476820][T10781] loop5: detected capacity change from 0 to 512 [ 297.516101][T10760] loop1: detected capacity change from 0 to 32768 [ 297.523868][T10781] EXT4-fs: Ignoring removed bh option [ 297.540163][T10760] XFS: ikeep mount option is deprecated. [ 297.546419][T10781] EXT4-fs: inline encryption not supported [ 297.572416][T10781] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 297.631121][T10760] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 297.643443][T10781] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 297.684523][T10781] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1522: bg 0: block 248: padding at end of block bitmap is not set [ 297.710615][T10781] Quota error (device loop5): write_blk: dquota write failed [ 297.718203][T10781] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 297.749243][T10781] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.1522: Failed to acquire dquot type 1 [ 297.771218][T10760] XFS (loop1): Ending clean mount [ 297.810317][T10781] EXT4-fs (loop5): 1 truncate cleaned up [ 297.817218][T10781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 297.868721][T10779] loop7: detected capacity change from 0 to 32768 [ 297.954120][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 297.989550][T10779] JBD2: Ignoring recovery information on journal [ 298.038928][ T6830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 298.049990][ T1098] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 298.065548][ T1098] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 1 [ 298.088770][T10779] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 298.293109][ T9219] ocfs2: Unmounting device (7,7) on (node local) [ 298.759266][ T1816] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 298.970869][ T1816] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 298.979603][ T1816] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 298.989872][ T1816] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 298.998977][ T1816] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 299.010330][ T1816] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 299.027273][ T1816] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 299.038098][ T1816] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 299.050291][ T1816] usb 8-1: Product: syz [ 299.054625][ T1816] usb 8-1: Manufacturer: syz [ 299.081184][ T1816] cdc_wdm 8-1:1.0: skipping garbage [ 299.086455][ T1816] cdc_wdm 8-1:1.0: skipping garbage [ 299.095992][ T1816] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 299.102132][ T1816] cdc_wdm 8-1:1.0: Unknown control protocol [ 299.365804][T10803] loop1: detected capacity change from 0 to 512 [ 299.389507][T10803] EXT4-fs (loop1): 1 orphan inode deleted [ 299.396697][T10803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.420573][ T11] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 299.422133][T10803] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.430892][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 299.487226][T10803] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.1523: iget: bad i_size value: 360287970189639690 [ 299.537778][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.664841][T10810] program syz.5.1528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.081623][ T9] usb 8-1: USB disconnect, device number 8 [ 300.151831][T10812] loop1: detected capacity change from 0 to 32768 [ 300.169409][T10818] loop6: detected capacity change from 0 to 64 [ 300.189704][T10812] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1527 (10812) [ 300.237855][T10812] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 300.271009][T10812] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 300.289245][T10812] BTRFS info (device loop1): enabling auto defrag [ 300.295829][T10812] BTRFS info (device loop1): use no compression [ 300.309547][T10812] BTRFS info (device loop1): force clearing of disk cache [ 300.327041][T10812] BTRFS info (device loop1): max_inline at 4096 [ 300.346374][T10812] BTRFS info (device loop1): disabling free space tree [ 300.506810][T10816] loop5: detected capacity change from 0 to 32768 [ 300.537236][T10812] BTRFS info (device loop1): enabling ssd optimizations [ 300.559168][T10812] BTRFS info (device loop1): auto enabling async discard [ 300.589477][T10812] BTRFS info (device loop1): rebuilding free space tree [ 300.619629][T10816] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 300.674442][T10812] BTRFS info (device loop1): disabling free space tree [ 300.733027][T10845] input: syz1 as /devices/virtual/input/input24 [ 300.740719][T10812] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 300.784686][T10812] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 300.803347][T10816] XFS (loop5): Ending clean mount [ 300.857584][T10816] XFS (loop5): Quotacheck needed: Please wait. [ 301.039639][T10816] XFS (loop5): Quotacheck: Done. [ 301.095702][ T5772] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 301.256310][ T6830] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 301.269632][ T1816] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 301.484719][ T1816] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 301.499333][ T1816] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.510644][ T1816] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.537923][ T1816] usb 8-1: config 0 interface 0 has no altsetting 0 [ 301.568981][ T1816] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.605706][ T1816] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.634860][ T1816] usb 8-1: config 0 interface 0 has no altsetting 0 [ 301.650446][ T1816] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.678132][ T1816] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.708087][ T1816] usb 8-1: config 0 interface 0 has no altsetting 0 [ 301.742740][ T1816] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.754153][ T1816] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.817563][ T1816] usb 8-1: config 0 interface 0 has no altsetting 0 [ 301.859961][ T1816] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.884004][ T1816] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 301.908562][ T1816] usb 8-1: config 0 interface 0 has no altsetting 0 [ 301.949652][ T1816] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 301.959504][ T1816] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.003097][ T1816] usb 8-1: config 0 interface 0 has no altsetting 0 [ 302.027424][ T1816] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.046835][ T1816] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.058359][ T1816] usb 8-1: config 0 interface 0 has no altsetting 0 [ 302.092309][ T1816] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 302.101445][ T1816] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 302.114287][ T1816] usb 8-1: config 0 interface 0 has no altsetting 0 [ 302.127465][T10864] loop5: detected capacity change from 0 to 512 [ 302.136093][ T1816] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 302.146172][ T1816] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 302.165001][T10864] EXT4-fs (loop5): unsupported inode size: 4096 [ 302.171476][ T1816] usb 8-1: Product: syz [ 302.178115][ T1816] usb 8-1: Manufacturer: syz [ 302.183428][T10864] EXT4-fs (loop5): blocksize: 1024 [ 302.188761][ T1816] usb 8-1: SerialNumber: syz [ 302.203327][ T1816] usb 8-1: config 0 descriptor?? [ 302.232244][ T1816] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 302.505284][ T2137] usb 8-1: USB disconnect, device number 9 [ 302.524164][ T2137] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 302.596741][T10860] loop1: detected capacity change from 0 to 32768 [ 302.609028][T10860] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1547 (10860) [ 302.642556][T10860] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.653352][T10860] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 302.665636][T10860] BTRFS info (device loop1): force clearing of disk cache [ 302.673383][T10860] BTRFS info (device loop1): metadata ratio 0 [ 302.680285][T10860] BTRFS info (device loop1): enabling ssd optimizations [ 302.687275][T10860] BTRFS info (device loop1): using spread ssd allocation scheme [ 302.698157][T10860] BTRFS info (device loop1): using free space tree [ 302.763296][T10860] BTRFS info (device loop1): auto enabling async discard [ 302.781775][T10860] BTRFS info (device loop1): rebuilding free space tree [ 302.947133][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 303.480511][T10893] ALSA: mixer_oss: invalid OSS volume '' [ 303.511887][T10893] ALSA: mixer_oss: invalid OSS volume '' [ 303.517608][T10893] ALSA: mixer_oss: invalid OSS volume '' [ 303.539404][T10893] ALSA: mixer_oss: invalid OSS volume '' [ 303.615203][T10891] loop1: detected capacity change from 0 to 4096 [ 303.651343][T10891] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 303.827239][T10884] loop5: detected capacity change from 0 to 32768 [ 303.841172][T10884] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1551 (10884) [ 303.889067][T10884] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 303.941250][T10884] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 303.981491][T10884] BTRFS info (device loop5): force clearing of disk cache [ 303.999488][T10884] BTRFS info (device loop5): metadata ratio 0 [ 304.007559][T10884] BTRFS info (device loop5): enabling ssd optimizations [ 304.039193][T10884] BTRFS info (device loop5): using spread ssd allocation scheme [ 304.046934][T10884] BTRFS info (device loop5): using free space tree [ 304.060305][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 304.237250][T10884] BTRFS info (device loop5): auto enabling async discard [ 304.260197][T10884] BTRFS info (device loop5): rebuilding free space tree [ 304.351999][T10895] loop7: detected capacity change from 0 to 32768 [ 304.429553][T10895] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 304.473633][ T6830] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 304.528014][T10895] XFS (loop7): Ending clean mount [ 304.545089][T10895] XFS (loop7): Quotacheck needed: Please wait. [ 304.633889][T10895] XFS (loop7): Quotacheck: Done. [ 304.659202][ T5815] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 304.823192][T10927] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1550'. [ 304.862418][ T9219] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 304.901886][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 304.939780][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.975693][ T5815] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 304.992933][ T5815] usb 2-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 305.029535][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.037636][ T5815] usb 2-1: Product: syz [ 305.056471][ T5815] usb 2-1: Manufacturer: syz [ 305.070580][ T5815] usb 2-1: SerialNumber: syz [ 305.096369][ T5815] usb 2-1: config 0 descriptor?? [ 305.428302][ T5815] usb 2-1: USB disconnect, device number 17 [ 305.709855][T10931] loop5: detected capacity change from 0 to 32768 [ 306.725462][T10937] loop5: detected capacity change from 0 to 40427 [ 306.749756][T10937] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 306.787935][T10937] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 306.842546][T10937] F2FS-fs (loop5): Found nat_bits in checkpoint [ 306.860511][T10947] loop7: detected capacity change from 0 to 32768 [ 306.884734][T10947] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1560 (10947) [ 306.962478][T10947] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.999249][T10947] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 307.007952][T10947] BTRFS info (device loop7): force clearing of disk cache [ 307.061289][T10937] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 307.068401][T10937] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 307.076654][T10947] BTRFS info (device loop7): metadata ratio 0 [ 307.099156][T10947] BTRFS info (device loop7): enabling ssd optimizations [ 307.116671][T10947] BTRFS info (device loop7): using spread ssd allocation scheme [ 307.129145][T10947] BTRFS info (device loop7): using free space tree [ 307.291612][T10947] BTRFS info (device loop7): auto enabling async discard [ 307.318981][T10947] BTRFS info (device loop7): rebuilding free space tree [ 307.325603][T10976] loop1: detected capacity change from 0 to 128 [ 307.637505][ T9219] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 308.355965][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'. [ 308.382642][T10991] netlink: 'syz.1.1580': attribute type 20 has an invalid length. [ 308.408925][T10991] netlink: 'syz.1.1580': attribute type 21 has an invalid length. [ 308.959246][ T5815] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 309.027150][T11012] loop1: detected capacity change from 0 to 256 [ 309.100130][T11012] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 309.191767][ T5815] usb 8-1: Using ep0 maxpacket: 32 [ 309.218991][ T5815] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.239249][ T5815] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 309.272572][ T5815] usb 8-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 309.287899][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.298633][ T5815] usb 8-1: Product: syz [ 309.303189][ T5815] usb 8-1: Manufacturer: syz [ 309.307959][ T5815] usb 8-1: SerialNumber: syz [ 309.320598][ T5815] usb 8-1: config 0 descriptor?? [ 309.344243][T11019] loop6: detected capacity change from 0 to 128 [ 309.399304][T11019] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 309.426818][T11019] hpfs: filesystem error: improperly stopped [ 309.455698][T11019] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 309.468305][T11019] hpfs: You really don't want any checks? You are crazy... [ 309.477180][T11019] hpfs: hpfs_map_sector(): read error [ 309.487944][T11019] hpfs: code page support is disabled [ 309.494530][T11019] hpfs: hpfs_map_4sectors(): unaligned read [ 309.519565][T11019] hpfs: hpfs_map_4sectors(): unaligned read [ 309.525542][T11019] hpfs: filesystem error: unable to find root dir [ 309.556535][T11019] hpfs: hpfs_map_4sectors(): unaligned read [ 309.579843][T11019] hpfs: hpfs_map_sector(): read error [ 309.650156][ T5815] usb 8-1: USB disconnect, device number 10 [ 310.049215][ T787] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 310.250059][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 310.282105][ T787] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.329273][ T787] usb 2-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 310.349175][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 310.355858][ T787] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 310.364947][T11037] loop7: detected capacity change from 0 to 2048 [ 310.374447][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.393983][ T787] usb 2-1: config 0 descriptor?? [ 310.415536][T11037] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 310.428554][T11037] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 310.443299][T11037] UDF-fs: Scanning with blocksize 512 failed [ 310.458348][T11037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.522710][T11039] loop6: detected capacity change from 0 to 64 [ 310.585928][ T28] audit: type=1800 audit(1775613985.559:32): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1589" name="bus" dev="loop7" ino=851 res=0 errno=0 [ 310.624370][T11030] loop5: detected capacity change from 0 to 32768 [ 310.686194][T11030] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1597 (11030) [ 310.761721][T11030] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 310.786159][T11030] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 310.830599][T11030] BTRFS info (device loop5): force clearing of disk cache [ 310.851947][T11030] BTRFS info (device loop5): metadata ratio 0 [ 310.858104][T11030] BTRFS info (device loop5): enabling ssd optimizations [ 310.858394][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 310.867082][T11030] BTRFS info (device loop5): using spread ssd allocation scheme [ 310.905408][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 310.936114][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 310.947548][T11030] BTRFS info (device loop5): using free space tree [ 310.974854][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 311.009200][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 311.020471][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 311.027683][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 311.051702][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 311.058464][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x7 [ 311.068995][T11045] program syz.6.1592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.112820][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 311.161769][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 311.169419][T11030] BTRFS info (device loop5): auto enabling async discard [ 311.183136][T11030] BTRFS info (device loop5): rebuilding free space tree [ 311.190500][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 311.197265][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 311.245330][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 311.269360][ T787] elo 0003:04E7:0030.000B: unknown main item tag 0x0 [ 311.279475][ T787] elo 0003:04E7:0030.000B: unexpected long global item [ 311.297418][ T787] elo 0003:04E7:0030.000B: parse failed [ 311.316738][ T787] elo: probe of 0003:04E7:0030.000B failed with error -22 [ 311.358788][ T787] usb 2-1: USB disconnect, device number 18 [ 311.413832][ T6830] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.491168][T11061] loop7: detected capacity change from 0 to 64 [ 311.597044][ T28] audit: type=1800 audit(1775613986.559:33): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1604" name="file1" dev="loop7" ino=21 res=0 errno=0 [ 312.105315][T11070] loop5: detected capacity change from 0 to 128 [ 312.116232][T11072] loop1: detected capacity change from 0 to 16 [ 312.138689][T11070] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 312.163723][T11072] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 312.179393][T11070] hpfs: filesystem error: improperly stopped [ 312.215650][T11070] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 312.280460][T11070] hpfs: You really don't want any checks? You are crazy... [ 312.288144][T11070] hpfs: hpfs_map_sector(): read error [ 312.339816][T11070] hpfs: code page support is disabled [ 312.381013][T11070] hpfs: hpfs_map_4sectors(): unaligned read [ 312.387097][T11070] hpfs: hpfs_map_4sectors(): unaligned read [ 312.419263][T11070] hpfs: filesystem error: unable to find root dir [ 312.466078][T11070] hpfs: hpfs_map_4sectors(): unaligned read [ 312.478385][T11063] loop6: detected capacity change from 0 to 32768 [ 312.489728][T11070] hpfs: hpfs_map_sector(): read error [ 312.519285][T11063] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1605 (11063) [ 312.575160][T11063] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.599344][T11063] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 312.619591][T11063] BTRFS info (device loop6): force clearing of disk cache [ 312.626784][T11063] BTRFS info (device loop6): metadata ratio 0 [ 312.686998][T11063] BTRFS info (device loop6): enabling ssd optimizations [ 312.709209][T11063] BTRFS info (device loop6): using spread ssd allocation scheme [ 312.716931][T11063] BTRFS info (device loop6): using free space tree [ 312.726426][T11076] loop5: detected capacity change from 0 to 64 [ 312.791631][T11078] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1601'. [ 312.820327][T11078] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1601'. [ 312.929494][T11063] BTRFS info (device loop6): auto enabling async discard [ 312.938679][T11068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1598 (11068) [ 312.968697][T11063] BTRFS info (device loop6): rebuilding free space tree [ 313.057479][T11068] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 313.089257][T11068] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 313.115125][T11068] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 313.146689][T11068] BTRFS info (device loop7): trying to use backup root at mount time [ 313.166357][T11068] BTRFS info (device loop7): setting nodatasum [ 313.176492][T11068] BTRFS info (device loop7): enabling ssd optimizations [ 313.195920][T11068] BTRFS info (device loop7): using spread ssd allocation scheme [ 313.204052][T11068] BTRFS info (device loop7): turning on flush-on-commit [ 313.211331][T11068] BTRFS info (device loop7): force zlib compression, level 3 [ 313.218872][T11068] BTRFS info (device loop7): using free space tree [ 313.240929][T11096] EXT4-fs (loop5): 1 truncate cleaned up [ 313.247990][T11096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.336835][T11096] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1613: bg 0: block 465: padding at end of block bitmap is not set [ 313.359921][ T8241] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.523218][ T6830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.819169][ T28] audit: type=1800 audit(1775613988.779:34): pid=11120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1608" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 313.957507][ T9219] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 314.475583][T11135] netlink: 'syz.1.1612': attribute type 9 has an invalid length. [ 314.525869][T11135] bond_slave_0: entered promiscuous mode [ 314.531699][T11135] bond_slave_1: entered promiscuous mode [ 314.564307][T11135] macvlan2: entered promiscuous mode [ 314.584087][T11135] bond0: entered promiscuous mode [ 314.608089][T11135] bond1: entered promiscuous mode [ 314.635223][T11135] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 314.787010][T11140] set_capacity_and_notify: 3 callbacks suppressed [ 314.787026][T11140] loop1: detected capacity change from 0 to 512 [ 314.852234][T11140] EXT4-fs: Ignoring removed i_version option [ 314.858317][T11140] EXT4-fs: Ignoring removed oldalloc option [ 314.879425][ T5832] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 314.946377][T11140] EXT4-fs (loop1): 1 truncate cleaned up [ 314.956406][T11140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.994152][T11126] loop6: detected capacity change from 0 to 32768 [ 315.043049][T11126] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.1607 (11126) [ 315.107243][T11126] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 315.119372][ T5832] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.153228][ T5832] usb 8-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 315.161193][T11126] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 315.178565][ T5832] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 315.204942][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.215235][T11126] BTRFS info (device loop6): enabling disk space caching [ 315.226886][ T5832] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.239489][T11126] BTRFS info (device loop6): force clearing of disk cache [ 315.246658][T11126] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 315.257752][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.274177][ T5832] usb 8-1: Product: syz [ 315.278565][ T5832] usb 8-1: Manufacturer: syz [ 315.284454][ T5832] usb 8-1: SerialNumber: syz [ 315.307197][ T5832] cdc_ncm 8-1:1.0: skipping garbage [ 315.312182][T11126] BTRFS info (device loop6): use zstd compression, level 3 [ 315.334074][T11126] BTRFS info (device loop6): disk space caching is enabled [ 315.560072][T11126] BTRFS info (device loop6): enabling ssd optimizations [ 315.579362][T11126] BTRFS info (device loop6): auto enabling async discard [ 315.620527][T11126] BTRFS info (device loop6): rebuilding free space tree [ 315.650430][T11126] BTRFS info (device loop6): disabling free space tree [ 315.655334][T11163] loop1: detected capacity change from 0 to 64 [ 315.667994][T11126] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 315.688600][T11126] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 316.024531][ T8241] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 316.055349][T11142] loop5: detected capacity change from 0 to 40427 [ 316.072502][T11142] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 316.081330][T11142] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 316.119230][T11142] F2FS-fs (loop5): Found nat_bits in checkpoint [ 316.325552][ T5832] cdc_ncm 8-1:1.0: bind() failure [ 316.359641][ T5832] cdc_ncm: probe of 8-1:1.1 failed with error -71 [ 316.379679][ T5832] cdc_mbim: probe of 8-1:1.1 failed with error -71 [ 316.387833][T11142] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 316.419267][T11142] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 316.419737][ T5832] usbtest: probe of 8-1:1.1 failed with error -71 [ 316.478846][ T5832] usb 8-1: USB disconnect, device number 11 [ 317.346308][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.408050][T11185] loop8: detected capacity change from 0 to 8 [ 317.420815][T11185] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 317.438953][T11185] loop8: p1 start 1701603686 is beyond EOD, truncated [ 317.447658][T11185] loop8: p2 start 2381523385 is beyond EOD, truncated [ 317.465008][T11185] loop8: p3 start 256934931 is beyond EOD, truncated [ 317.477439][T11185] loop8: p4 start 4084151128 is beyond EOD, truncated [ 317.486176][T11185] loop8: p5 size 2048 extends beyond EOD, truncated [ 317.494709][T11189] netlink: 'syz.7.1624': attribute type 9 has an invalid length. [ 317.500811][T11185] loop8: p6 start 2736933807 is beyond EOD, truncated [ 317.509794][T11185] loop8: p7 start 75287518 is beyond EOD, truncated [ 317.516518][T11185] loop8: p8 start 2402041521 is beyond EOD, truncated [ 317.523984][T11185] loop8: p9 start 3492405423 is beyond EOD, truncated [ 317.531153][T11185] loop8: p10 start 515314764 is beyond EOD, truncated [ 317.538074][T11185] loop8: p11 start 2942580191 is beyond EOD, truncated [ 317.549072][T11185] loop8: p12 start 163001658 is beyond EOD, [ 317.553580][T11189] bond_slave_0: entered promiscuous mode [ 317.566894][T11189] bond_slave_1: entered promiscuous mode [ 317.574169][T11185] truncated [ 317.608381][T11189] macvlan2: entered promiscuous mode [ 317.625057][T11189] bond0: entered promiscuous mode [ 317.641390][T11189] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 317.723540][ T6680] udevd[6680]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 317.746901][T11193] netlink: 'syz.5.1627': attribute type 10 has an invalid length. [ 317.779600][T11193] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1627'. [ 318.347990][T11201] loop5: detected capacity change from 0 to 64 [ 318.632940][T11210] loop1: detected capacity change from 0 to 1024 [ 318.827007][ T59] hfsplus: b-tree write err: -5, ino 25 [ 318.837962][ T59] hfsplus: b-tree write err: -5, ino 4 [ 318.853004][ T59] hfsplus: b-tree write err: -5, ino 2 [ 318.862138][ T59] hfsplus: b-tree write err: -5, ino 26 [ 319.197295][T11228] loop1: detected capacity change from 0 to 4096 [ 319.216630][T11228] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 319.289717][T11228] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 319.299770][T11228] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 319.368352][ T28] audit: type=1800 audit(1775613994.339:35): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1643" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 319.861372][T11247] input: syz1 as /devices/virtual/input/input25 [ 320.121519][T11254] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 320.130044][T11254] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 320.137996][T11254] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 320.145961][T11254] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 320.154002][T11254] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 320.161966][T11254] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 320.169994][T11254] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 320.177899][T11254] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 320.185839][T11254] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 320.194042][T11254] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 320.479259][ T5761] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 320.692094][ T5761] usb 2-1: unable to get BOS descriptor or descriptor too short [ 320.709623][ T5761] usb 2-1: not running at top speed; connect to a high speed hub [ 320.719728][ T5761] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.739439][ T5761] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 320.754678][ T5761] usb 2-1: string descriptor 0 read error: -22 [ 320.761592][ T5761] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.771091][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.790786][ T5761] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 320.891629][ T5832] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 321.018110][ T5761] usb 2-1: USB disconnect, device number 19 [ 321.105177][ T5832] usb 8-1: unable to get BOS descriptor or descriptor too short [ 321.116784][ T5832] usb 8-1: not running at top speed; connect to a high speed hub [ 321.135438][T11270] loop6: detected capacity change from 0 to 40427 [ 321.145768][T11270] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7 [ 321.162876][ T5832] usb 8-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 321.168955][T11270] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff [ 321.182467][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.191137][ T55] block nbd0: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 210 seconds [ 321.202124][T11270] F2FS-fs (loop6): Image doesn't support compression [ 321.202325][ T55] block nbd0: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 210 seconds [ 321.220258][ T55] block nbd0: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 210 seconds [ 321.231659][ T55] block nbd0: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 210 seconds [ 321.243348][ T5832] usb 8-1: Product: syz [ 321.247617][ T5832] usb 8-1: Manufacturer: syz [ 321.252381][ T5832] usb 8-1: SerialNumber: syz [ 321.264689][T11270] F2FS-fs (loop6): invalid crc value [ 321.286317][T11270] F2FS-fs (loop6): Found nat_bits in checkpoint [ 321.446033][T11270] F2FS-fs (loop6): Start checkpoint disabled! [ 321.465529][T11270] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 321.802604][ T2137] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 321.825791][ T12] F2FS-fs (loop6): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xbe0/0x1a40 [ 321.838267][ T12] kworker/u4:1: attempt to access beyond end of device [ 321.838267][ T12] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 321.852829][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 321.861185][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 1 [ 322.041813][ T2137] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.053889][ T2137] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 322.064729][ T2137] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.077672][ T2137] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.101445][T11274] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 322.114396][ T5832] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 322.131767][ T5832] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 322.159517][ T2137] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 322.166994][ T5832] usb 8-1: USB disconnect, device number 12 [ 322.318706][ T6680] udevd[6680]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.421178][ T2137] usb 6-1: USB disconnect, device number 12 [ 322.527047][T11283] loop1: detected capacity change from 0 to 512 [ 322.538178][T11283] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 322.582099][T11283] EXT4-fs (loop1): 1 truncate cleaned up [ 322.610080][T11283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.663452][T11283] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #2: block 13: comm syz.1.1666: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 322.687040][T11283] EXT4-fs (loop1): Remounting filesystem read-only [ 322.757186][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.252036][T11309] loop1: detected capacity change from 0 to 40427 [ 324.268815][T11309] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 324.280030][T11309] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 324.290159][T11309] F2FS-fs (loop1): Image doesn't support compression [ 324.298009][T11309] F2FS-fs (loop1): invalid crc value [ 324.308968][T11309] F2FS-fs (loop1): Found nat_bits in checkpoint [ 324.389026][T11309] F2FS-fs (loop1): Start checkpoint disabled! [ 324.408846][T11309] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 324.657996][ T1080] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xbe0/0x1a40 [ 324.669399][ T1080] kworker/u4:6: attempt to access beyond end of device [ 324.669399][ T1080] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 324.683786][ T1080] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 324.691450][ T1080] F2FS-fs (loop1): Stopped filesystem due to reason: 1 [ 326.289488][T11327] ALSA: mixer_oss: invalid OSS volume '' [ 326.380282][ T5832] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 326.422624][T11330] loop6: detected capacity change from 0 to 1024 [ 326.469317][T11330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.580397][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 326.587203][ T5832] usb 2-1: config 0 has no interfaces? [ 326.597028][ T8241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.608462][ T5832] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 326.629156][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.641498][ T5832] usb 2-1: Product: syz [ 326.645721][ T5832] usb 2-1: Manufacturer: syz [ 326.678585][ T5832] usb 2-1: SerialNumber: syz [ 326.717367][ T5832] usb 2-1: config 0 descriptor?? [ 326.812122][T11341] loop6: detected capacity change from 0 to 128 [ 327.051950][ T9] usb 2-1: USB disconnect, device number 20 [ 327.433916][T11339] loop5: detected capacity change from 0 to 40427 [ 327.468515][T11339] F2FS-fs (loop5): Found nat_bits in checkpoint [ 327.644822][T11339] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 327.798389][T11345] loop7: detected capacity change from 0 to 32768 [ 327.837673][T11345] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 327.860214][T11345] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 327.938689][T11345] XFS (loop7): Ending clean mount [ 327.990873][T11345] XFS (loop7): Quotacheck needed: Please wait. [ 328.089466][T11345] XFS (loop7): Quotacheck: Done. [ 328.239743][ T9219] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 328.488657][T11368] loop5: detected capacity change from 0 to 4096 [ 328.556564][T11368] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 328.683194][T11370] syzkaller1: entered promiscuous mode [ 328.708304][T11370] syzkaller1: entered allmulticast mode [ 328.746604][T11368] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 328.764094][T11368] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 328.871610][ T28] audit: type=1800 audit(1775614003.849:36): pid=11368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1694" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 329.199230][ T5776] Bluetooth: hci3: link tx timeout [ 329.205275][ T5776] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 329.616833][T11393] loop6: detected capacity change from 0 to 512 [ 329.674723][T11395] loop1: detected capacity change from 0 to 512 [ 329.698632][T11395] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 329.782386][T11395] EXT4-fs (loop1): 1 truncate cleaned up [ 329.801101][T11395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.803215][T11393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 329.891862][T11403] loop5: detected capacity change from 0 to 256 [ 329.899336][T11393] ext4 filesystem being mounted at /192/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.921524][T11395] EXT4-fs (loop1): shut down requested (0) [ 330.003170][T11393] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 330.043178][T11393] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 330.099869][T11393] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.1705: Failed to acquire dquot type 0 [ 330.117139][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.273849][ T8241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 330.332227][T11391] loop7: detected capacity change from 0 to 32768 [ 330.392024][T11391] [ 330.392024][T11391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.392024][T11391] [ 330.506707][T11391] read_mapping_page failed! [ 330.516404][T11391] ERROR: (device loop7): txCommit: [ 330.516404][T11391] [ 330.540391][T11412] read_mapping_page failed! [ 330.545097][T11412] ERROR: (device loop7): txCommit: [ 330.545097][T11412] [ 330.574534][T11391] read_mapping_page failed! [ 330.598149][T11391] ERROR: (device loop7): txCommit: [ 330.598149][T11391] [ 330.721806][ T9219] [ 330.721806][ T9219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.721806][ T9219] [ 330.751660][ T9219] [ 330.751660][ T9219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.751660][ T9219] [ 331.267306][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 331.276952][T11411] loop6: detected capacity change from 0 to 40427 [ 331.289690][T11411] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x7ffff [ 331.319464][T11411] F2FS-fs (loop6): invalid crc value [ 331.337711][T11411] F2FS-fs (loop6): Found nat_bits in checkpoint [ 331.417435][T11411] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 331.575890][ T8241] syz-executor: attempt to access beyond end of device [ 331.575890][ T8241] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 331.612682][ T8241] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 332.185598][T11446] Falling back ldisc for ttyS3. [ 333.270888][ T28] audit: type=1326 audit(1775614008.239:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f065b53db99 code=0x7ffc0000 [ 333.350240][ T28] audit: type=1326 audit(1775614008.239:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065b59c819 code=0x7ffc0000 [ 333.419299][ T28] audit: type=1326 audit(1775614008.239:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f065b53db99 code=0x7ffc0000 [ 333.529795][ T28] audit: type=1326 audit(1775614008.239:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f065b53db99 code=0x7ffc0000 [ 333.582948][T11452] loop6: detected capacity change from 0 to 40427 [ 333.592454][ T28] audit: type=1326 audit(1775614008.239:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f065b53db99 code=0x7ffc0000 [ 333.649213][T11452] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 333.657092][T11452] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 333.719014][ T28] audit: type=1326 audit(1775614008.239:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065b59c819 code=0x7ffc0000 [ 333.789194][T11452] F2FS-fs (loop6): invalid crc value [ 333.830858][T11452] F2FS-fs (loop6): Found nat_bits in checkpoint [ 333.859336][ T28] audit: type=1326 audit(1775614008.239:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065b59c819 code=0x7ffc0000 [ 333.997325][ T28] audit: type=1326 audit(1775614008.239:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f065b53db99 code=0x7ffc0000 [ 334.104956][ T28] audit: type=1326 audit(1775614008.269:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065b59c819 code=0x7ffc0000 [ 334.149312][T11452] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 334.156397][T11452] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 334.189225][ T28] audit: type=1326 audit(1775614008.269:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f065b53db99 code=0x7ffc0000 [ 334.249207][ T28] audit: type=1326 audit(1775614008.269:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065b59c819 code=0x7ffc0000 [ 334.341008][ T28] audit: type=1326 audit(1775614008.269:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f065b53db99 code=0x7ffc0000 [ 334.402595][ T28] audit: type=1326 audit(1775614008.269:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065b59c819 code=0x7ffc0000 [ 334.492558][ T28] audit: type=1326 audit(1775614008.279:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065b59c819 code=0x7ffc0000 [ 334.554276][ T11] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 334.575183][ T11] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 334.609290][ T28] audit: type=1326 audit(1775614008.279:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065b59c819 code=0x7ffc0000 [ 334.670367][ T28] audit: type=1326 audit(1775614008.279:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f065b53db99 code=0x7ffc0000 [ 334.739798][T11463] loop5: detected capacity change from 0 to 32768 [ 334.752562][ T28] audit: type=1326 audit(1775614008.279:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065b59c819 code=0x7ffc0000 [ 334.822179][T11463] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 334.905612][ T11] kworker/u4:0: attempt to access beyond end of device [ 334.905612][ T11] loop6: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 334.960462][T11463] XFS (loop5): Ending clean mount [ 334.988482][T11463] XFS (loop5): Quotacheck needed: Please wait. [ 335.129534][T11463] XFS (loop5): Quotacheck: Done. [ 335.426186][ T6830] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 335.541264][T11491] loop1: detected capacity change from 0 to 4096 [ 335.593679][T11491] ntfs: volume version 3.1. [ 336.084890][T11506] netlink: 'syz.6.1747': attribute type 12 has an invalid length. [ 336.118361][T11506] netlink: 'syz.6.1747': attribute type 29 has an invalid length. [ 336.137561][T11506] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1747'. [ 336.148862][T11506] netlink: 'syz.6.1747': attribute type 2 has an invalid length. [ 336.376031][T11516] loop1: detected capacity change from 0 to 512 [ 336.487407][T11516] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1750: bad orphan inode 11862016 [ 336.576546][T11516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 336.653126][T11516] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.675961][T11508] loop7: detected capacity change from 0 to 32768 [ 336.730069][T11508] [ 336.730069][T11508] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 336.730069][T11508] [ 336.880952][ T1147] ERROR: (device loop7): diWrite: ixpxd invalid [ 336.880952][ T1147] [ 336.925182][ T1147] ERROR: (device loop7): txCommit: [ 336.925182][ T1147] [ 336.945781][ T1147] jfs_write_inode: jfs_commit_inode failed! [ 336.961965][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 336.979186][ T9219] [ 336.979186][ T9219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 336.979186][ T9219] [ 337.027691][ T9219] [ 337.027691][ T9219] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 337.027691][ T9219] [ 337.360627][T11535] netlink: 'syz.5.1758': attribute type 4 has an invalid length. [ 337.467964][T11535] netlink: 'syz.5.1758': attribute type 17 has an invalid length. [ 338.007568][T11541] netlink: 'syz.7.1761': attribute type 12 has an invalid length. [ 338.029508][T11541] netlink: 'syz.7.1761': attribute type 29 has an invalid length. [ 338.037496][T11541] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1761'. [ 338.085441][T11541] netlink: 'syz.7.1761': attribute type 2 has an invalid length. [ 338.366496][T11533] loop1: detected capacity change from 0 to 131072 [ 338.412113][T11533] F2FS-fs (loop1): Found nat_bits in checkpoint [ 338.467310][T11533] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 338.575823][T11533] F2FS-fs (loop1): access invalid blkaddr:2 [ 338.582622][T11533] CPU: 1 PID: 11533 Comm: syz.1.1756 Not tainted syzkaller #0 [ 338.590125][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 338.600226][T11533] Call Trace: [ 338.603609][T11533] [ 338.606595][T11533] dump_stack_lvl+0x18c/0x250 [ 338.611353][T11533] ? show_regs_print_info+0x20/0x20 [ 338.616634][T11533] ? filemap_dirty_folio+0x169/0x330 [ 338.621998][T11533] ? f2fs_dirty_node_folio+0x498/0x9b0 [ 338.627516][T11533] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 338.632958][T11533] f2fs_truncate_data_blocks_range+0x5a6/0xcf0 [ 338.639186][T11533] f2fs_do_truncate_blocks+0x7ff/0xdc0 [ 338.644718][T11533] ? dec_valid_block_count+0x480/0x480 [ 338.650240][T11533] ? clear_page_private_inline+0x500/0x500 [ 338.656124][T11533] f2fs_truncate_blocks+0x10a/0x300 [ 338.661382][T11533] f2fs_truncate+0x449/0x730 [ 338.666026][T11533] f2fs_setattr+0xcbe/0x1360 [ 338.670725][T11533] ? f2fs_force_buffered_io+0x3f0/0x3f0 [ 338.676337][T11533] notify_change+0xb0d/0xe10 [ 338.681000][T11533] do_truncate+0x1b0/0x240 [ 338.685501][T11533] ? put_page_bootmem+0x2c0/0x2c0 [ 338.690610][T11533] ? bpf_lsm_path_truncate+0x9/0x10 [ 338.695859][T11533] vfs_truncate+0x266/0x300 [ 338.700415][T11533] do_sys_truncate+0xf6/0x1c0 [ 338.705123][T11533] ? lock_chain_count+0x20/0x20 [ 338.710022][T11533] ? break_lease+0xd0/0xd0 [ 338.714470][T11533] ? lockdep_hardirqs_on+0x98/0x150 [ 338.719818][T11533] do_syscall_64+0x55/0xa0 [ 338.724254][T11533] ? clear_bhb_loop+0x40/0x90 [ 338.728984][T11533] ? clear_bhb_loop+0x40/0x90 [ 338.733739][T11533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.739705][T11533] RIP: 0033:0x7f065b59c819 [ 338.744158][T11533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.763837][T11533] RSP: 002b:00007f065c42e028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 338.772381][T11533] RAX: ffffffffffffffda RBX: 00007f065b815fa0 RCX: 00007f065b59c819 [ 338.780396][T11533] RDX: 0000000000000000 RSI: 0000000000002328 RDI: 0000200000000000 [ 338.788414][T11533] RBP: 00007f065b632c91 R08: 0000000000000000 R09: 0000000000000000 [ 338.796420][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.804417][T11533] R13: 00007f065b816038 R14: 00007f065b815fa0 R15: 00007ffe5a2e6bd8 [ 338.812435][T11533] [ 338.978355][T11538] loop5: detected capacity change from 0 to 40427 [ 339.004315][T11538] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 339.049424][T11538] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 339.085431][T11538] F2FS-fs (loop5): invalid crc value [ 339.100558][T11538] F2FS-fs (loop5): Found nat_bits in checkpoint [ 339.176242][T11538] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 339.190452][T11538] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 339.407078][ T1080] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 339.416670][ T1080] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 339.855437][T11559] loop7: detected capacity change from 0 to 512 [ 339.932616][T11559] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.1765: bad orphan inode 11862016 [ 339.967522][T11559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 339.998134][T11563] loop5: detected capacity change from 0 to 512 [ 340.005889][T11559] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.034979][T11563] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 340.083102][T11563] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1773: Invalid inode bitmap blk 4 in block_group 0 [ 340.122688][T11563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.183993][T11563] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 340.193842][ T9219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 340.249171][ T5837] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 340.292745][ T6830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.399778][ T28] kauditd_printk_skb: 242 callbacks suppressed [ 340.399792][ T28] audit: type=1326 audit(1775614015.369:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a61f3db99 code=0x7ffc0000 [ 340.463273][ T28] audit: type=1326 audit(1775614015.379:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a61f9c819 code=0x7ffc0000 [ 340.463323][ T28] audit: type=1326 audit(1775614015.379:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a61f9c819 code=0x7ffc0000 [ 340.463917][ T28] audit: type=1326 audit(1775614015.409:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a61f3db99 code=0x7ffc0000 [ 340.463969][ T28] audit: type=1326 audit(1775614015.409:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a61f9c819 code=0x7ffc0000 [ 340.464015][ T28] audit: type=1326 audit(1775614015.409:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a61f9c819 code=0x7ffc0000 [ 340.464068][ T28] audit: type=1326 audit(1775614015.409:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a61f9c819 code=0x7ffc0000 [ 340.464114][ T28] audit: type=1326 audit(1775614015.409:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a61f9c819 code=0x7ffc0000 [ 340.464159][ T28] audit: type=1326 audit(1775614015.409:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a61f3db99 code=0x7ffc0000 [ 340.464203][ T28] audit: type=1326 audit(1775614015.409:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.6.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a61f9c819 code=0x7ffc0000 [ 340.469451][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 340.478151][ T5837] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 340.478211][ T5837] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 340.481302][ T5837] usb 2-1: string descriptor 0 read error: -22 [ 340.481429][ T5837] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 340.481452][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.488995][T11566] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 340.809237][ T5837] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 340.818661][ T5837] usb 2-1: MIDIStreaming interface descriptor not found [ 341.059952][T11577] syzkaller1: entered promiscuous mode [ 341.065535][T11577] syzkaller1: entered allmulticast mode [ 341.100373][T11578] pim6reg: tun_chr_ioctl cmd 1074812118 [ 341.177808][ T5837] usb 2-1: USB disconnect, device number 21 [ 341.681418][T11581] loop6: detected capacity change from 0 to 32768 [ 341.705582][T11581] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 341.852755][ T6680] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9 [ 341.946568][T11587] loop5: detected capacity change from 0 to 32768 [ 342.024560][T11587] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 342.210526][T11587] XFS (loop5): Ending clean mount [ 342.234803][T11587] XFS (loop5): Quotacheck needed: Please wait. [ 342.360648][T11587] XFS (loop5): Quotacheck: Done. [ 342.535846][ T6830] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 342.693013][T11590] loop1: detected capacity change from 0 to 32768 [ 342.707557][T11590] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1779 (11590) [ 342.757278][T11590] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 342.770844][T11590] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 342.782443][T11590] BTRFS info (device loop1): setting nodatasum [ 342.788661][T11590] BTRFS info (device loop1): force zlib compression, level 3 [ 342.804655][T11590] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 342.816923][T11590] BTRFS info (device loop1): use lzo compression, level 0 [ 342.827385][T11591] loop6: detected capacity change from 0 to 32768 [ 342.832126][T11590] BTRFS info (device loop1): turning on flush-on-commit [ 342.842956][T11590] BTRFS info (device loop1): enabling auto defrag [ 342.852493][T11590] BTRFS info (device loop1): max_inline at 4096 [ 342.858883][T11590] BTRFS info (device loop1): using free space tree [ 342.891593][T11591] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 342.931987][T11590] BTRFS info (device loop1): enabling ssd optimizations [ 342.989499][ T5832] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 343.042125][T11591] XFS (loop6): Ending clean mount [ 343.077162][T11591] XFS (loop6): Quotacheck needed: Please wait. [ 343.191343][T11591] XFS (loop6): Quotacheck: Done. [ 343.209475][ T5832] usb 8-1: Using ep0 maxpacket: 32 [ 343.242743][ T5832] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 343.262353][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.287618][ T5832] usb 8-1: config 0 descriptor?? [ 343.307113][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 343.446104][ T8241] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 343.510303][ T5832] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 343.544250][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 343.558632][ T5832] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 343.571191][ T5832] usb 8-1: media controller created [ 343.633048][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.838947][ T5832] DVB: Unable to find symbol dib7000p_attach() [ 343.857926][ T5832] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 344.019259][ T5832] rc_core: IR keymap rc-dib0700-rc5 not found [ 344.036474][ T5832] Registered IR keymap rc-empty [ 344.048689][ T5832] dvb-usb: could not initialize remote control. [ 344.071994][ T5832] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 344.104554][ T5832] usb 8-1: USB disconnect, device number 13 [ 344.156364][ T5832] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 344.778704][T11650] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 344.873515][T11639] overlayfs: statfs failed on './file0' [ 345.725018][T11677] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 345.774788][T11660] loop5: detected capacity change from 0 to 32768 [ 345.803728][T11660] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1793 (11660) [ 345.889262][T11660] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 345.939681][T11660] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 345.948496][T11660] BTRFS info (device loop5): setting nodatasum [ 345.965343][T11660] BTRFS info (device loop5): force zlib compression, level 3 [ 345.982480][T11660] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 345.992128][T11660] BTRFS info (device loop5): use lzo compression, level 0 [ 346.002474][T11660] BTRFS info (device loop5): turning on flush-on-commit [ 346.029409][T11660] BTRFS info (device loop5): enabling auto defrag [ 346.059574][T11660] BTRFS info (device loop5): max_inline at 4096 [ 346.065923][T11660] BTRFS info (device loop5): using free space tree [ 346.127560][T11665] loop6: detected capacity change from 0 to 32768 [ 346.229680][T11665] [ 346.229680][T11665] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.229680][T11665] [ 346.284142][T11660] BTRFS info (device loop5): enabling ssd optimizations [ 346.346037][T11665] read_mapping_page failed! [ 346.379365][T11665] ERROR: (device loop6): txCommit: [ 346.379365][T11665] [ 346.404991][T11701] read_mapping_page failed! [ 346.428345][T11701] ERROR: (device loop6): txCommit: [ 346.428345][T11701] [ 346.487990][T11665] read_mapping_page failed! [ 346.497563][T11665] ERROR: (device loop6): txCommit: [ 346.497563][T11665] [ 346.654048][ T8241] [ 346.654048][ T8241] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.654048][ T8241] [ 346.709807][ T8241] [ 346.709807][ T8241] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 346.709807][ T8241] [ 346.730232][ T6830] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.905383][T11705] loop7: detected capacity change from 0 to 2048 [ 347.003075][T11705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.144369][T11688] loop1: detected capacity change from 0 to 32768 [ 347.266291][T11688] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 347.517984][T11688] XFS (loop1): Ending clean mount [ 347.548382][T11688] XFS (loop1): Quotacheck needed: Please wait. [ 347.555597][T11727] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 347.614708][T11728] loop6: detected capacity change from 0 to 164 [ 347.789732][T11688] XFS (loop1): Quotacheck: Done. [ 347.866047][T11730] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 348.145843][ T5772] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 348.180971][T11739] loop5: detected capacity change from 0 to 164 [ 349.302053][T11754] loop6: detected capacity change from 0 to 40427 [ 349.326856][T11754] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 349.365862][T11754] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 349.424376][T11754] F2FS-fs (loop6): Found nat_bits in checkpoint [ 349.630365][T11754] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 349.639259][T11754] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 349.844519][T11781] loop7: detected capacity change from 0 to 2048 [ 349.889152][T11781] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.936152][T11781] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 350.001338][ T1147] kworker/u4:11: attempt to access beyond end of device [ 350.001338][ T1147] loop6: rw=1, sector=45096, nr_sectors = 32 limit=40427 [ 350.220351][T11789] loop5: detected capacity change from 0 to 256 [ 350.796142][T11803] loop7: detected capacity change from 0 to 512 [ 350.888339][T11803] EXT4-fs (loop7): 1 truncate cleaned up [ 350.910519][T11803] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.048170][T11803] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1844: invalid indirect mapped block 4294967295 (level 1) [ 351.072673][T11803] EXT4-fs (loop7): Remounting filesystem read-only [ 351.197503][ T9219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.262286][ T55] block nbd0: Possible stuck request ffff888021ec0000: control (read@0,1024B). Runtime 240 seconds [ 351.273436][ T55] block nbd0: Possible stuck request ffff888021ec0200: control (read@1024,1024B). Runtime 240 seconds [ 351.284707][ T55] block nbd0: Possible stuck request ffff888021ec0400: control (read@2048,1024B). Runtime 240 seconds [ 351.295852][ T55] block nbd0: Possible stuck request ffff888021ec0600: control (read@3072,1024B). Runtime 240 seconds [ 352.025423][T11843] loop7: detected capacity change from 0 to 2048 [ 352.113764][T11844] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.251975][T11833] loop5: detected capacity change from 0 to 32768 [ 352.310606][T11833] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 352.320964][T11844] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 352.344509][T11844] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 352.357682][T11833] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 352.402726][T11844] Remounting filesystem read-only [ 352.407908][ T1147] NILFS (loop7): discard dirty page: offset=4096, ino=6 [ 352.427597][ T1147] NILFS (loop7): discard dirty block: blocknr=39, size=1024 [ 352.466953][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.511339][T11833] XFS (loop5): Ending clean mount [ 352.524626][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.556830][T11833] XFS (loop5): Quotacheck needed: Please wait. [ 352.570182][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.599278][ T1147] NILFS (loop7): discard dirty page: offset=0, ino=3 [ 352.609794][ T1147] NILFS (loop7): discard dirty block: blocknr=42, size=1024 [ 352.627393][ T1147] NILFS (loop7): discard dirty block: blocknr=43, size=1024 [ 352.640687][ T5837] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 352.640791][ T1147] NILFS (loop7): discard dirty block: blocknr=44, size=1024 [ 352.640809][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.640834][ T1147] NILFS (loop7): discard dirty page: offset=65536, ino=3 [ 352.679349][ T5837] XFS (loop5): Unmount and run xfs_repair [ 352.685158][ T5837] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 352.715565][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.727463][ T5837] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 352.757706][ T5837] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 352.765753][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.775778][ T5837] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 352.797291][ T1147] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 352.817568][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.820838][ T5837] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 352.842490][ T5837] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 352.846527][ T1147] NILFS (loop7): discard dirty page: offset=131072, ino=3 [ 352.862328][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.871625][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.880974][ T1147] NILFS (loop7): discard dirty block: blocknr=46, size=1024 [ 352.888469][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.898108][ T5837] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 352.905621][ T1147] NILFS (loop7): discard dirty page: offset=196608, ino=3 [ 352.917832][ T5837] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 352.928541][ T5837] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 352.939455][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.940871][ T1124] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 352.959913][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.977913][ T1147] NILFS (loop7): discard dirty block: blocknr=49, size=1024 [ 352.985538][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 352.997734][T11833] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 353.024625][ T1147] NILFS (loop7): discard dirty page: offset=0, ino=18 [ 353.033587][ T1147] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 353.042050][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.051409][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.061608][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.070616][ T1147] NILFS (loop7): discard dirty page: offset=0, ino=12 [ 353.077695][ T1147] NILFS (loop7): discard dirty block: blocknr=17, size=1024 [ 353.122784][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.145094][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.166861][ T6830] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 353.188264][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.197611][ T1147] NILFS (loop7): discard dirty page: offset=0, ino=5 [ 353.205174][ T1147] NILFS (loop7): discard dirty block: blocknr=41, size=1024 [ 353.212728][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.221756][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.230746][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.240327][ T1147] NILFS (loop7): discard dirty page: offset=0, ino=4 [ 353.247113][ T1147] NILFS (loop7): discard dirty block: blocknr=40, size=1024 [ 353.254794][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.263892][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.276436][ T1147] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 353.331363][ T9219] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 353.344706][ T9219] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 353.387604][ T9219] NILFS (loop7): discard dirty block: blocknr=35, size=1024 [ 353.408814][ T9219] NILFS (loop7): discard dirty block: blocknr=36, size=1024 [ 353.442870][ T9219] NILFS (loop7): discard dirty block: blocknr=37, size=1024 [ 353.459525][ T9219] NILFS (loop7): discard dirty block: blocknr=38, size=1024 [ 354.369542][T11887] loop7: detected capacity change from 0 to 32768 [ 354.396106][T11887] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 354.438875][T11887] XFS (loop7): Ending clean mount [ 354.463212][T11887] XFS (loop7): Quotacheck needed: Please wait. [ 354.537173][T11887] XFS (loop7): Quotacheck: Done. [ 354.604247][ T9219] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 354.663616][T11900] loop1: detected capacity change from 0 to 2048 [ 354.762379][T11901] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.914230][T11901] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 354.933847][T11901] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 354.946331][T11901] Remounting filesystem read-only [ 354.956814][ T59] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 354.969001][ T59] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 354.976586][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 354.985769][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 354.994811][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.004463][ T59] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 355.012121][ T59] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 355.027980][ T59] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 355.037843][ T59] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 355.055098][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.064387][ T59] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 355.073923][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.083262][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.093438][ T59] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 355.101447][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.110765][ T59] NILFS (loop1): discard dirty page: offset=131072, ino=3 [ 355.117921][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.133824][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.145995][ T59] NILFS (loop1): discard dirty block: blocknr=46, size=1024 [ 355.146907][T11905] loop7: detected capacity change from 0 to 128 [ 355.172861][T11905] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 355.176075][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.198386][T11905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.225905][ T59] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 355.249238][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.269185][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.271034][T11905] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 355.278082][ T59] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 355.278104][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.278156][ T59] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 355.278174][ T59] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 355.278191][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.278210][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.278226][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.278266][ T59] NILFS (loop1): discard dirty page: offset=0, ino=12 [ 355.296753][T11905] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 355.379248][ T59] NILFS (loop1): discard dirty block: blocknr=17, size=1024 [ 355.386749][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.396274][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.405530][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.415271][ T59] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 355.424536][ T59] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 355.434400][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.443731][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.458873][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.468233][ T59] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 355.481636][ T59] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 355.489031][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.508647][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.543635][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 355.564520][ T5772] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 355.578846][ T5772] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 355.587775][ T5772] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 355.607592][ T5772] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 355.615503][ T5772] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 355.626429][ T5772] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 356.219678][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 356.880625][T11923] loop1: detected capacity change from 0 to 32768 [ 356.964459][T11923] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 357.064200][T11923] XFS (loop1): Ending clean mount [ 357.084902][T11923] XFS (loop1): Quotacheck needed: Please wait. [ 357.172997][T11923] XFS (loop1): Quotacheck: Done. [ 357.414138][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 357.510495][T11950] loop7: detected capacity change from 0 to 32768 [ 357.547452][T11950] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 357.613528][T11950] XFS (loop7): Ending clean mount [ 357.627627][T11950] XFS (loop7): Quotacheck needed: Please wait. [ 357.732470][T11955] loop6: detected capacity change from 0 to 32768 [ 357.770873][T11950] XFS (loop7): Quotacheck: Done. [ 357.793235][T11955] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 357.917041][T11955] XFS (loop6): Ending clean mount [ 357.965611][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 357.965626][ T28] audit: type=1804 audit(1775614032.939:422): pid=11955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1897" name="/newroot/225/file1/file1" dev="loop6" ino=6150 res=1 errno=0 [ 357.971231][ T9219] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 358.121308][ T8241] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 358.244257][T11977] loop5: detected capacity change from 0 to 2048 [ 358.286465][T11977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.937699][T11989] loop7: detected capacity change from 0 to 128 [ 358.960478][T11989] EXT4-fs: Ignoring removed i_version option [ 358.995573][T11989] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.045736][T11989] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.133912][ T9219] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.395590][T11995] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 359.702424][T12006] loop1: detected capacity change from 0 to 1024 [ 359.723853][T12006] EXT4-fs: Ignoring removed orlov option [ 359.785086][T12006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.042774][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.193176][T11997] loop5: detected capacity change from 0 to 32768 [ 360.258312][T11997] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 360.409225][T11997] XFS (loop5): Ending clean mount [ 360.457324][T12004] loop6: detected capacity change from 0 to 32768 [ 360.478338][T12027] loop7: detected capacity change from 0 to 128 [ 360.520886][T12004] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 360.719894][ T9219] syz-executor: attempt to access beyond end of device [ 360.719894][ T9219] loop7: rw=0, sector=25674, nr_sectors = 2 limit=128 [ 360.755118][T12004] XFS (loop6): Ending clean mount [ 360.771929][ T9219] Buffer I/O error on dev loop7, logical block 12837, async page read [ 360.786513][T12004] XFS (loop6): Quotacheck needed: Please wait. [ 360.791120][ T9219] syz-executor: attempt to access beyond end of device [ 360.791120][ T9219] loop7: rw=0, sector=25674, nr_sectors = 2 limit=128 [ 360.841606][ T9219] Buffer I/O error on dev loop7, logical block 12837, async page read [ 360.909267][T12004] XFS (loop6): Quotacheck: Done. [ 360.940560][ T9219] Trying to free block not in datazone [ 360.946431][T12040] loop1: detected capacity change from 0 to 4096 [ 361.016142][ T9219] Trying to free block not in datazone [ 361.045117][ T6830] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 361.097756][ T8241] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 362.704418][T12064] set_capacity_and_notify: 1 callbacks suppressed [ 362.704435][T12064] loop7: detected capacity change from 0 to 32768 [ 362.723017][T12064] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.1931 (12064) [ 362.755316][T12064] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 362.767769][T12064] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 362.778445][T12064] BTRFS info (device loop7): enabling disk space caching [ 362.786645][T12064] BTRFS info (device loop7): force clearing of disk cache [ 362.794472][T12064] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 362.805063][T12064] BTRFS info (device loop7): use zstd compression, level 3 [ 362.812698][T12064] BTRFS info (device loop7): disk space caching is enabled [ 362.895859][T12064] BTRFS info (device loop7): enabling ssd optimizations [ 362.910983][T12064] BTRFS info (device loop7): auto enabling async discard [ 362.942432][T12064] BTRFS info (device loop7): rebuilding free space tree [ 362.985159][T12064] BTRFS info (device loop7): disabling free space tree [ 363.000289][T12064] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 363.001631][T12066] loop5: detected capacity change from 0 to 32768 [ 363.020831][T12064] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 363.045262][T12066] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1921 (12066) [ 363.110336][T12066] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 363.134123][T12066] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 363.159530][T12066] BTRFS info (device loop5): using free space tree [ 363.259210][T12066] BTRFS info (device loop5): enabling ssd optimizations [ 363.285489][T12066] BTRFS info (device loop5): auto enabling async discard [ 363.432747][ T9219] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 363.645344][ T6830] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 363.914708][ T8149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (8149) [ 365.134686][T12134] loop6: detected capacity change from 0 to 8192 [ 365.179013][T12134] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 365.193799][T12134] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 365.203638][T12134] REISERFS (device loop6): using ordered data mode [ 365.210321][T12134] reiserfs: using flush barriers [ 365.234808][T12134] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 365.258590][T12134] REISERFS (device loop6): checking transaction log (loop6) [ 365.288893][T12134] REISERFS (device loop6): Using r5 hash to sort names [ 365.326632][T12134] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 365.517568][T12145] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1949'. [ 365.546063][T12145] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1949'. [ 365.662203][T12150] loop5: detected capacity change from 0 to 512 [ 365.669868][T12150] EXT4-fs: Ignoring removed i_version option [ 365.676055][T12150] EXT4-fs: Ignoring removed bh option [ 365.681594][ T2137] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 365.781698][T12150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.798482][T12150] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 365.845039][T12150] EXT4-fs (loop5): shut down requested (1) [ 365.899339][ T2137] usb 8-1: Using ep0 maxpacket: 8 [ 365.911359][ T6830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.069301][ T2137] usb 8-1: unable to get BOS descriptor or descriptor too short [ 366.093123][ T2137] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 366.115579][ T2137] usb 8-1: can't read configurations, error -71 [ 366.130517][T12158] loop1: detected capacity change from 0 to 256 [ 366.147985][T12158] exfat: Deprecated parameter 'utf8' [ 366.160658][T12158] exfat: Deprecated parameter 'utf8' [ 366.201192][T12158] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 366.919618][T12182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1965'. [ 367.059008][T12185] loop1: detected capacity change from 0 to 4096 [ 367.118951][T12189] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 367.264672][T12191] loop6: detected capacity change from 0 to 128 [ 367.521131][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1970'. [ 367.530211][T12193] netlink: 'syz.5.1971': attribute type 1 has an invalid length. [ 367.555272][T12195] macvlan3: entered promiscuous mode [ 367.570669][T12193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1971'. [ 367.588459][T12195] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 367.634243][T12193] netlink: 'syz.5.1971': attribute type 1 has an invalid length. [ 367.658355][T12193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1971'. [ 367.681563][T12198] loop6: detected capacity change from 0 to 512 [ 367.742290][T12198] EXT4-fs (loop6): 1 truncate cleaned up [ 367.751065][T12198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.917274][T12186] loop7: detected capacity change from 0 to 32768 [ 367.962345][ T8241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.991788][T12186] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 368.148385][T12186] XFS (loop7): Ending clean mount [ 368.200337][T12186] XFS (loop7): Quotacheck needed: Please wait. [ 368.334092][T12186] XFS (loop7): Quotacheck: Done. [ 368.466382][ T28] audit: type=1800 audit(1775614043.439:423): pid=12186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1967" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=4429 res=0 errno=0 [ 368.495180][T12221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 368.574759][ T9219] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 368.754299][T12207] loop5: detected capacity change from 0 to 32768 [ 368.934852][T12207] read_mapping_page failed! [ 368.949675][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.952147][T12207] ERROR: (device loop5): txCommit: [ 368.952147][T12207] [ 368.957535][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.045355][T12207] ERROR: (device loop5): diAllocBit: iag inconsistent [ 369.045355][T12207] [ 369.076500][ C1] ------------[ cut here ]------------ [ 369.082104][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 369.092931][ C1] WARNING: CPU: 1 PID: 5759 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 369.103020][ C1] Modules linked in: [ 369.103364][T12207] ialloc: diAlloc returned -5! [ 369.106944][ C1] CPU: 1 PID: 5759 Comm: syz-executor Not tainted syzkaller #0 [ 369.119922][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 369.130060][ C1] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 369.136448][ C1] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 20 f8 de 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 bb ee 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 369.156149][ C1] RSP: 0018:ffffc900001f0780 EFLAGS: 00010246 [ 369.162306][ C1] RAX: d0a65c53d8623500 RBX: 000000000000000c RCX: ffff888079df0000 [ 369.170355][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 369.178374][ C1] RBP: 0000000000000084 R08: ffffc900001f0387 R09: 1ffff9200003e070 [ 369.186418][ C1] R10: dffffc0000000000 R11: fffff5200003e071 R12: 0000000000000000 [ 369.194481][ C1] R13: dffffc0000000000 R14: ffff888019693358 R15: ffff8880563cfca8 [ 369.202568][ C1] FS: 0000555589deb500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 369.211574][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.218202][ C1] CR2: 0000200000002548 CR3: 000000007b94d000 CR4: 00000000003506e0 [ 369.226268][ C1] Call Trace: [ 369.229624][ C1] [ 369.232529][ C1] rate_control_send_low+0x194/0x790 [ 369.237886][ C1] rate_control_get_rate+0x20b/0x5d0 [ 369.243326][ C1] ieee80211_beacon_get_finish+0x3a2/0x6e0 [ 369.249218][ C1] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 369.255263][ C1] ? kmalloc_reserve+0x240/0x240 [ 369.260324][ C1] ? __ieee80211_beacon_get+0xef5/0x1600 [ 369.266030][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 369.271700][ C1] __ieee80211_beacon_get+0xfca/0x1600 [ 369.277234][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 369.282818][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 369.289680][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 369.295299][ C1] __iterate_interfaces+0x243/0x500 [ 369.300605][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 369.306904][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 369.314208][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 369.320558][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 369.327650][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 369.332970][ C1] __hrtimer_run_queues+0x520/0xc40 [ 369.338268][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 369.344362][ C1] ? hw_scan_work+0xf60/0xf60 [ 369.349136][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 369.354299][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 369.360469][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 369.365638][ C1] handle_softirqs+0x280/0x820 [ 369.370482][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 369.375310][ C1] ? do_softirq+0x1a0/0x1a0 [ 369.379926][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 369.385183][ C1] __irq_exit_rcu+0xd3/0x190 [ 369.389870][ C1] ? irq_exit_rcu+0x20/0x20 [ 369.394432][ C1] irq_exit_rcu+0x9/0x20 [ 369.398715][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 369.404491][ C1] [ 369.407464][ C1] [ 369.410465][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.416508][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 369.422388][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 b0 63 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 369.442095][ C1] RSP: 0018:ffffc9000479f298 EFLAGS: 00000282 [ 369.448231][ C1] RAX: d0a65c53d8623500 RBX: 0000000000000000 RCX: d0a65c53d8623500 [ 369.456299][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 369.464358][ C1] RBP: ffffc9000479f2f0 R08: ffffffff8e8b0c2f R09: 1ffffffff1d16185 [ 369.472422][ C1] R10: dffffc0000000000 R11: fffffbfff1d16186 R12: ffff888079df0000 [ 369.480468][ C1] R13: dffffc0000000000 R14: ffff88807f209e00 R15: ffff8880b8f3cac8 [ 369.488511][ C1] ? finish_task_switch+0x265/0x8f0 [ 369.493811][ C1] __schedule+0x155b/0x45a0 [ 369.498422][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 369.504497][ C1] ? asan.module_dtor+0x20/0x20 [ 369.509449][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 369.515404][ C1] ? _raw_spin_unlock+0x40/0x40 [ 369.520357][ C1] schedule+0xbd/0x170 [ 369.524494][ C1] schedule_hrtimeout_range_clock+0x1cf/0x3d0 [ 369.530652][ C1] ? hrtimer_nanosleep_restart+0x1d0/0x1d0 [ 369.536513][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 369.542501][ C1] ? __remove_hrtimer+0x470/0x470 [ 369.547591][ C1] ? poll_initwait+0x160/0x160 [ 369.552436][ C1] ? pipe_poll+0x2f7/0x4b0 [ 369.556918][ C1] do_select+0x1759/0x1920 [ 369.561431][ C1] ? do_select+0x117/0x1920 [ 369.566001][ C1] ? core_sys_select+0xaa0/0xaa0 [ 369.571050][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 369.577352][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 369.583698][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 369.590051][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 369.596343][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 369.602662][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 369.608967][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 369.615306][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 369.621620][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 369.627954][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 369.633088][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 369.638193][ C1] ? __might_fault+0xaa/0x120 [ 369.642964][ C1] ? __might_fault+0xc6/0x120 [ 369.647696][ C1] ? __might_fault+0xaa/0x120 [ 369.652463][ C1] core_sys_select+0x8c9/0xaa0 [ 369.657307][ C1] ? poll_select_set_timeout+0x160/0x160 [ 369.663064][ C1] ? sigprocmask+0x190/0x190 [ 369.667718][ C1] __se_sys_pselect6+0x272/0x340 [ 369.672759][ C1] ? __x64_sys_pselect6+0xf0/0xf0 [ 369.677852][ C1] ? __x64_sys_pselect6+0x21/0xf0 [ 369.682964][ C1] do_syscall_64+0x55/0xa0 [ 369.687515][ C1] ? clear_bhb_loop+0x40/0x90 [ 369.692296][ C1] ? clear_bhb_loop+0x40/0x90 [ 369.697044][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.703015][ C1] RIP: 0033:0x7fba6b357997 [ 369.707475][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 369.727161][ C1] RSP: 002b:00007ffda5c61650 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 369.735664][ C1] RAX: ffffffffffffffda RBX: 0000555589deb500 RCX: 00007fba6b357997 [ 369.743722][ C1] RDX: 0000000000000000 RSI: 00007ffda5c61770 RDI: 0000000000000021 [ 369.751892][ C1] RBP: 00007ffda5c61bd0 R08: 00007ffda5c61690 R09: 00007ffda5c616a0 [ 369.759960][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffda5c61a10 [ 369.768073][ C1] R13: 00007ffda5c61800 R14: 585858582e7a7973 R15: 00007ffda5c61c40 [ 369.776143][ C1] [ 369.779222][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 369.786531][ C1] CPU: 1 PID: 5759 Comm: syz-executor Not tainted syzkaller #0 [ 369.794123][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 369.804241][ C1] Call Trace: [ 369.807594][ C1] [ 369.810473][ C1] dump_stack_lvl+0x18c/0x250 [ 369.815214][ C1] ? show_regs_print_info+0x20/0x20 [ 369.820472][ C1] ? load_image+0x420/0x420 [ 369.825041][ C1] panic+0x2dc/0x730 [ 369.828998][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 369.833562][ C1] __warn+0x2e0/0x470 [ 369.837589][ C1] ? __rate_control_send_low+0x635/0x880 [ 369.843272][ C1] ? __rate_control_send_low+0x635/0x880 [ 369.848951][ C1] report_bug+0x2be/0x4f0 [ 369.853328][ C1] ? __rate_control_send_low+0x635/0x880 [ 369.859035][ C1] ? __rate_control_send_low+0x635/0x880 [ 369.864753][ C1] ? __rate_control_send_low+0x637/0x880 [ 369.870437][ C1] handle_bug+0xcf/0x120 [ 369.874724][ C1] exc_invalid_op+0x1a/0x50 [ 369.879271][ C1] asm_exc_invalid_op+0x1a/0x20 [ 369.884165][ C1] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 369.890476][ C1] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 20 f8 de 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 bb ee 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 369.910140][ C1] RSP: 0018:ffffc900001f0780 EFLAGS: 00010246 [ 369.916270][ C1] RAX: d0a65c53d8623500 RBX: 000000000000000c RCX: ffff888079df0000 [ 369.924294][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 369.932351][ C1] RBP: 0000000000000084 R08: ffffc900001f0387 R09: 1ffff9200003e070 [ 369.940429][ C1] R10: dffffc0000000000 R11: fffff5200003e071 R12: 0000000000000000 [ 369.948460][ C1] R13: dffffc0000000000 R14: ffff888019693358 R15: ffff8880563cfca8 [ 369.956517][ C1] rate_control_send_low+0x194/0x790 [ 369.961865][ C1] rate_control_get_rate+0x20b/0x5d0 [ 369.967225][ C1] ieee80211_beacon_get_finish+0x3a2/0x6e0 [ 369.973100][ C1] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 369.979218][ C1] ? kmalloc_reserve+0x240/0x240 [ 369.984193][ C1] ? __ieee80211_beacon_get+0xef5/0x1600 [ 369.989871][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 369.995464][ C1] __ieee80211_beacon_get+0xfca/0x1600 [ 370.001001][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 370.006514][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 370.013339][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 370.018958][ C1] __iterate_interfaces+0x243/0x500 [ 370.024222][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 370.030553][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 370.037877][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 370.044176][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 370.051274][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 370.056527][ C1] __hrtimer_run_queues+0x520/0xc40 [ 370.061781][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 370.067821][ C1] ? hw_scan_work+0xf60/0xf60 [ 370.072552][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 370.077706][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 370.083829][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 370.088991][ C1] handle_softirqs+0x280/0x820 [ 370.093820][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 370.098644][ C1] ? do_softirq+0x1a0/0x1a0 [ 370.103202][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 370.108546][ C1] __irq_exit_rcu+0xd3/0x190 [ 370.113177][ C1] ? irq_exit_rcu+0x20/0x20 [ 370.117724][ C1] irq_exit_rcu+0x9/0x20 [ 370.121997][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 370.127678][ C1] [ 370.130663][ C1] [ 370.133635][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.139662][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 370.145597][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 b0 63 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 370.165243][ C1] RSP: 0018:ffffc9000479f298 EFLAGS: 00000282 [ 370.171353][ C1] RAX: d0a65c53d8623500 RBX: 0000000000000000 RCX: d0a65c53d8623500 [ 370.179369][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 370.187383][ C1] RBP: ffffc9000479f2f0 R08: ffffffff8e8b0c2f R09: 1ffffffff1d16185 [ 370.195397][ C1] R10: dffffc0000000000 R11: fffffbfff1d16186 R12: ffff888079df0000 [ 370.203412][ C1] R13: dffffc0000000000 R14: ffff88807f209e00 R15: ffff8880b8f3cac8 [ 370.211451][ C1] ? finish_task_switch+0x265/0x8f0 [ 370.216726][ C1] __schedule+0x155b/0x45a0 [ 370.221309][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 370.227343][ C1] ? asan.module_dtor+0x20/0x20 [ 370.232248][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 370.238199][ C1] ? _raw_spin_unlock+0x40/0x40 [ 370.243114][ C1] schedule+0xbd/0x170 [ 370.247229][ C1] schedule_hrtimeout_range_clock+0x1cf/0x3d0 [ 370.253338][ C1] ? hrtimer_nanosleep_restart+0x1d0/0x1d0 [ 370.259181][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 370.265109][ C1] ? __remove_hrtimer+0x470/0x470 [ 370.270195][ C1] ? poll_initwait+0x160/0x160 [ 370.275032][ C1] ? pipe_poll+0x2f7/0x4b0 [ 370.279517][ C1] do_select+0x1759/0x1920 [ 370.284012][ C1] ? do_select+0x117/0x1920 [ 370.288583][ C1] ? core_sys_select+0xaa0/0xaa0 [ 370.293616][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 370.299905][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 370.306209][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 370.312499][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 370.318810][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 370.325128][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 370.331425][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 370.337730][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 370.344031][ C1] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 370.350323][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 370.355396][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 370.360552][ C1] ? __might_fault+0xaa/0x120 [ 370.365271][ C1] ? __might_fault+0xc6/0x120 [ 370.370008][ C1] ? __might_fault+0xaa/0x120 [ 370.374739][ C1] core_sys_select+0x8c9/0xaa0 [ 370.379562][ C1] ? poll_select_set_timeout+0x160/0x160 [ 370.385245][ C1] ? sigprocmask+0x190/0x190 [ 370.389867][ C1] __se_sys_pselect6+0x272/0x340 [ 370.394895][ C1] ? __x64_sys_pselect6+0xf0/0xf0 [ 370.399985][ C1] ? __x64_sys_pselect6+0x21/0xf0 [ 370.405064][ C1] do_syscall_64+0x55/0xa0 [ 370.409544][ C1] ? clear_bhb_loop+0x40/0x90 [ 370.414272][ C1] ? clear_bhb_loop+0x40/0x90 [ 370.418991][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.424918][ C1] RIP: 0033:0x7fba6b357997 [ 370.429411][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 370.449074][ C1] RSP: 002b:00007ffda5c61650 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 370.457538][ C1] RAX: ffffffffffffffda RBX: 0000555589deb500 RCX: 00007fba6b357997 [ 370.465561][ C1] RDX: 0000000000000000 RSI: 00007ffda5c61770 RDI: 0000000000000021 [ 370.473580][ C1] RBP: 00007ffda5c61bd0 R08: 00007ffda5c61690 R09: 00007ffda5c616a0 [ 370.481588][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffda5c61a10 [ 370.489597][ C1] R13: 00007ffda5c61800 R14: 585858582e7a7973 R15: 00007ffda5c61c40 [ 370.497711][ C1] [ 370.501336][ C1] Kernel Offset: disabled [ 370.505675][ C1] Rebooting in 86400 seconds..