last executing test programs: 2m4.59888559s ago: executing program 3 (id=24): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4421, &(0x7f0000004500)="$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") open(&(0x7f0000000180)='./file1\x00', 0x60142, 0x102) lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000001240)='./file1\x00', &(0x7f0000001340), &(0x7f00000002c0)=ANY=[@ANYBLOB="0501"], 0x51, 0x0) 2m3.585590152s ago: executing program 3 (id=31): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0x67d41000) 2m1.69692136s ago: executing program 3 (id=46): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x20108c0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0x1, 0x61f5, &(0x7f00000075c0)="$eJzs3U1vHVf9B/DfffRD/k2tLqr+I4TctDyU0iROSggUaLsoCzZdoGxRItetIlJASUBpZRFX3rBgxSsAIbFEiCViwQvogi07VqyIZCOBumLQ2OfE48m9vXYd37n2fD6SPfObM9c+4++d++A7MycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjed7+/0omIGz9LC5Yi/i96Ed2IhbJejoiF5aW8fj8inoud5ng2IgZzEeXtd749HfFqRHx8NmJre321XHz5gP146w9/++0Pzrz9198PLv7nj/d6r41b7/79X/77Tw+Ots0AAADQNkVRFJ30Nv9cen/fbbpTAMBU5Of/IsnLT339q3+8/edZ6o9arVar1VOoq4rRHlSLiNio3qZ8zeDjeAA4YTbik6a7QIPk32r9iDjTdCeAmdZpugMci63t9dVOyrdTfT5Y3m3Px4Lsy3+j8+j8jnHTSerHmEzr/rUZvXhmTH8WptSHWZLz79bzv7HbPkzrHXf+0zIu/+HuqU+tk/Pv1fOvOT35d0fm31Y5//6h8u/JHwAAAAAAZlj+//9Sw5//zh19Uw7k0z7/XZ5SHwAAAAAAAADgSTvq+H+PGP8PAAAAZlb5Xr3067N7y8Zdi61cfr0T8VRtfaBl0skyi033AwAAAAAAAAAAAADapL97DO/1TsQgIp5aXCyKovyqqteHddTbnwI71yxouhPA9DX9IA8AALs+Pls7l78TMR8R16O7c62/weLiYlHMLywWi8XCXH49O5ybLxYq7+vztFw2NzzAC+L+sCh/2HzldlWT/l8wqb3+88rfNSx6B+jYEzJIf80xzQ2FDQDJ7rPRlmekU6YonvZpAwdi/z+FlmKp6fsVs6/puykAAABw/IqiKDrpct7n0vh+3aY7BQBMRX7+r38ucKS6O6Y94sn8fLVarVar1Z+pripGe1AtImKjepvyNYPh+AHghNmIT5ruAg2Sf6v1I+K5pjsBzLRO0x3gWGxtr692Ur6d6vNBGt89HwuyL/+Nzs7t8u1HTSepH2MyrfvXZvTimTH9eXZKfZglOf9uPf8bu+3DtN5x5z8t4/If7pwy1z45/149/5rTk393ZP5tlfPvHyr/nvwBAAAAAGCG5f//L/n8N28yAAAAAAAAAJw4W9vrq/m81/z5/+dGrOf8z9Mp5985bP4LaV7+J1rOv1vL/8u19XqV+Ydv7u3//9peX/3dvX/+f54eNP+5PNNJ96xOukd00m/q9NP0KFv3uM1Bb1j+pkGn2+unY36KwbtxK27HWlzat243/T322lf2tZc9Hexrv7yvvf9Y+5V97YN03YFiIbdfiNX4cdyOd3bay7a5Cds/P6G9mNCe8+95/G+lnH+/8lXmv5jaO7Vp6eFH3cf2++p01O9549bnf3Hp+Ddnos3oPdq2qnL7zjfQn/Jv8lYM46d31+5cuH/z3r07K5EmZ6pLL0eaPGE5/8HO19ze4/8Lu+35cb+6vz78aHjo/GfFZvTH5v9CZb7c3pem3Lcm5PyH6Svn/05qH73/n+T8x+//LzfQHwAAAAAAAAAAAAAAAPg0RVHsnCL6RkRcTef/NHVuJgAwXfn5v0jycrVarVar1aevripGe71aRMRfqrcpXzP8fNQPAwBm2X8j4u9Nd4LGyL/F8vX+yumLTXcGmKq7H3z4w5u3b6/dudt0TwAAAAAAAACAzyqP/7lcGf/5xYhYqq23b/zXN2P5qON/9vPMowFGn/BA32Nsdoe9bmW48edjZ3zuC+PG/z4fj4//ncfE7VW3Y4zBhPbhhPa5Ce3zI5fupTXyRI+KnP/zlfHOy/zP1YZfb8P4r/Ux79sg53++cn8u8/9Sbb1q/sVvZi7/jYOuuBndfflfvPf+Ty7e/eDDV269f/O9tffWfnRlZeXSlatXr127dvHdW7fXLu1+P55ez4Ccfx772nGg7ZLzz5nLv11y/l9ItfzbJef/xVTLv11y/vn1nvzbJeef3/vIv11y/i+lWv7tkvP/Sqrl3y5b2+tzZf4vp1r+7ZL3/6+mWv7tkvN/JdXyb5ec/4VUy79dcv4XU32A/F0e/hTJ+edPuOz/7ZLzX0m1/Nsl53851fJvl5z/lVTLv11y/q+mWv7tkvP/Wqrl3y45/6upln+75Py/nurD5L9wjP1iOnL+11Jt/2+XnP83Ui3/dsn5fzPV8m+XnP9rqZZ/u+T8v5Vq+bdLzv/bqZZ/u+T8v5Nq+bdLzv/1VMu/Xfau/2/GjBkzeabpRyYAAAAAAAAAAAAAoG4ahxM3vY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe/uYuQ66/uBn1nv2muHEAMhOPkb2CQmhMRk13biF/5NMYEADVAKJBT6guN612bBb3jtEiiSTQMlEkZFFVXTi7aAojZSVRFVXNCK0lxUfbkq7QW9qagqITWqDAqoSG0F2WrmPM/jmdnZmVnveH32PJ+PlPx2Z86Z88yZ55yd366/cwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHa3vnnuc42iKJr/tf63tShe1Px689TW1m1vuNYjBAAAAFbrp63/P39DuuHgECu1LfN3r/rHry8uLi4WH9jwuxPjxWK6Y6ooJjYVReu+6Jl//2DjS23fB48Xk42xtu/HBmx+w4D7xwfcPzHg/o0D7t804P7JAfcv2QFLbC5/H9N6sB2tL7eWu7S4sZho3bejx1qPNzaNjcXf5bQ0WussThwt5ovjxVwx07F8uWyjtfw3b21u6+1F3NZY27a2N2fIDz91JI6hEfbxjo5tXX7M6PtvKqZ+9MNPHfnjs5du7lUH7oaOxyvHeedtzXF+JtxSjrVRbEr7JI5zrG2c23u8Jhs6xtlordf8unuczw85zg2Xh7mmul/zyWKs9fW3W/tpvP3Xemk/bQ+3/fftRVFcuDzs7mWWbKsYK7Z03DJ2+fWZLGdk8zGaU+mlxfiK5umtQ8zTZp3d0TlPu4+J+PrfGtYbX2YM7S/T9z+9ccnrvtJ5GjWf9XLHSvccHPWxUpU5GOfFt1tP+omec3BHeP6fumP5Odhz7vSYg+l5t83B2wbNwbGNG1pjTi9Co7XO5Tm4q2P5Da0tNVr1uTv6z8HpsydOTy984pOvnz9x+NjcsbmTe3btmtmzd+/+/funj84fn5sp/3+Fe7v6thRj6Ri4Ley7eAy8tmvZ9qm6+JXRHYeTfY7DrV3Ljvo4HO9+co21OSCXzuny2Hi4udMnL44VyxxjrdfnrtUfh+l5tx2H423HYc+fKT2Ow/EhjsPmMqfvGu49y3jbf73GcLV+Fmxtm4Pd70e65+Co349UZQ5Ohnnxr3ct/7NgexjvEztX+n5kw5I5mJ5uOPc0b0nv9yf3t0qveXlL847rNhbnFubO3PPY4bNnz+wqQlkTL2ubK93zdUvbcyqWzNexFc/Xg/OveuKWHrdvDftq8vXN/00u+1o1l7n3nv6vVeunW+/92XHr7iKUEVvr/dnrp3lzf6Zess/+bC7zmenVvxdPfWnb+XdimfNv7PtfKLeXHurxDRPj5fG7Ie2diY7zcedLNd46dzVa235+erjz8UT4b63Pxzf2OR9v61p21Ofjie4nF8/HjUG/7Vid7tdzMsyT4zP9z8fNZbbtXumcHO97Pr491EbY/68LnULqi9rmznLzNm1rfHwiPK/xuIXOebqnY/mJ0Js1t/X07iubp3feXj7WhvTsLlureTrVteyo52k6Xy03TxuDfvt2Zbpfz8kwL27c03+eNpd59t7Vnzs3xy/bzp0bB83BiQ0bm2OeSJOwPN8vbo5z8J7iSHGqOF7Mtu7d2JpPjda2dt433BzcGP5b63Pltj5z8M6uZUc9B9PPseXmXmN86ZMfge7XczLMiyfv6z8Hm8u8Zd9o37veGW5Jy7S9d+3+/dpyv/O6pWs3Xc3feTXH+Tf7+v9utrnM8f0r7TP776e7wy3X9dhP3cfvcsfUbLE2+2lbGOel/cvvp+Z4mst86cCQ8+lgURTnP/ZA6/e94e8rf37uO1/v+LtLr7/pnP/YAz+4/ujfrmT8AKx/L5RlS/mzru0vU8P8/R8AAABYF2LfPxZqov8HAACA2oh9f/xX4Yn+HwAAAGoj9v3joSaZ9P/b3nJp/oXzRUrmLwbx/rQbHiqXixnXmfD91OJlzdsfeGrux395frhtjxVF8ZOHfqPn8tseiuMqTYVxPvNg5+1LVzw/1PYffeTycu359S+Hx4/PZ9hp0CuCO1MUxTdv+EJrO1MfvNiqzz70aKu+98ITjzeXef5A+X1c/7mXlcv/QQj/Hjx6uGP958J++F6oM+/ovT/iel+7+Lrt+95/eXtxvcZtL2497Sc/VD5u/JycLz5eLh/383Lj/6vPP/215vKPvab3+M+P9R7/0+Fxn3rw0nxzxv3PK8vl21+D5vdxvc+G8cftPRXWv+er3+o5/mc+Vy5/+q3lco+GGrd/Z/h+x1svzbfvr8cahzueV/G2crm4/Znv/Hbr/vh48fG7xz956GLH/uieH8/+c/k4013Lx9vjdqK/6Np+83Ha52fc/tO/9WjHfh60/Wfe+9wrm4/bvf27u5bb0LV+9yc2/eFnv9Bze3E8B//sdMfzOfiecByH7T/5oTAfw/3/+8wXOrYbPfqezvNPXP7LW893PJ/o7T8qt//MG4+16n9M/fj3r3vR9S++8OrmviuKb7+vfLxB2z/2R6c6xv+Vm+5qvR7x/pjR797+cuL2z3x858lTC+fmZ9v2auuzc95ZjmfT5OYtzfHeEM6t3d8fOnX2w3NnpmamZopiqr4foXfFvhrqD8pyYaXr3/VIeD1v+b1vbrnjnz4fb/+Xh8vbL76j/Ln12rDcF8PtW8vXb7Gxyu0/eetNreO78Wz5fUeOfQS27/jP/UMtGJ5/9/uCON9Pv/zDrf3QvK/1cyMe16sc/3dny8f5Rtivi+GTmW+76fL22pePn41w8X3l8b7q/RdOc/F1/ZPwer/re+Xjx3HF5/vd8D7mW9s6z3dxfnzj/Fj347c+xeNCOJ8UF8r741Jxf198/qaew4ufQ1JcuLn1/e+kx7l5RU9zOQufWJg+Pn/y3GPTZ+cWzk4vfOKTh06cOnfy7KHWZ3ke+sig9S+fn7a0zk+zc3vvLWY2F0VxqphZgxPW1Rl/86vhxn/6kSOz+2bumJ07evjc0bOPnJ47c+zIwsKRudmFOw4fPTr38UHrz8/ev2v3gT37du88Nj97//4DB/Yc2Dl/8lRzGOWgBtg789GdJ88caq2ycP+9B3bdd9+9MztPnJqdu3/fzMzOc4PWb/1s2tlc+9d3npk7fvjs/Im5nQvzn5y7f9eBvXt3D/w0wBOnjy5MTZ85d3L63MLcmenyuUydbd3c/Nk3aH3qaeHfyvez3RrlB/EV7757b/p81qanPr3sQ5WLdH2A6KXwWTT/8JLT+4f5Pvb9E6EmmfT/AAAAkIPY928MNdH/AwAAQG3Evn9TqIn+HwAAAGoj9v2ToSaZ9P/y//L/w+X/y/tHmf/vlZ8v5P8rlf8//bEyV7re8/8xPy//n4drnP9f9fbl/+X/65f/Hz4/v97HL/8v/89SVcv/x75/c1Fk2f8DAABADmLfvyXURP8PAAAAtRH7/utCTfT/AAAAUBux739RqEkm/b/8/1D5/92DAlf1z/+P/vr/8v/y/2uS/48vjvx/Nlacv3//wx3fyv8H8v/y//L/8v/y/6zaxLL3XKv8f+z7rw81yaT/BwAAgBzEvv/FoSb6fwAAAKiN2PffEGqi/wcAAIDaiH3/1lCTTPp/+X/X/5f/l/+vdf5/tdf/bxuM/P/64Pr//cn/D3DF+f9J+f/1mP+fGO34q53/Hzh8+X+uiqpd/z/2/S8JNcmk/wcAAIAcxL7/paEm+n8AAACojdj3vyzURP8PAAAAtRH7/htDTTLp/+X/5f/l/+X/5f97b3/w9f/Lr+T/q0X+vz/5/wFc/z+v/P+Ix1/t/P+or/8/8WD3+vL/9FK1/H/s+18eapJJ/w8AAAA5iH3/TaEm+n8AAACojdj3vyLURP8PAAAAtRH7/m2hJpn0//L/VyP//9PW2vL/8v/d80P+v275/5L8f7XI//cn/z+A/L/8v/z/cPn/Hh9+Jf9PL1XL/8e+/+ZQk0z6fwAAAMhB7PtvCTVZpv9fHPJv2wAAAEB1xL7//4Wa+Ps/AAAA1Ebs+7eHmmTS/8v/u/6//H9e+f+7N8r/y//Xm/x/f/L/A8j/y//L/w95/f+lVpL/3zTowaiNquX/Y9//ylCTTPp/AAAAyEHs+18VaqL/BwAAgNqIff+rQ030/wAAAFAbse+fCjXJpP+X/69X/v9P//rJVxfy//L/A7Zf0/x/nAby/5mT/+9P/n8A+X/5f/n/Ncn/k4+q5f9j339rqEkm/T8AAADkIPb9t4Wa6P8BAACgNmLff3uoif4fAAAAaiP2/TtCTTLp/+X/65X/j+T/5f/7bb+m+f9E/j9v8v89tB2k8v8DyP/L/2ef/4/vfuX/GY2q5f9j3/+aUJNM+n8AAADIQez77wg10f8DAABAbcS+/7WhJvp/AAAAqI3Y998ZapJJ/y//L/8v/y//L//fe/vy/+uT/H9/K83/b5T/l/+X/88s/+/6/4xW1fL/se9/XahJJv0/AAAA5CD2/XeFmuj/AQAAoDbiv98s/92r/h8AAADqKPb9O0NNMun/5f/l/3PK/zfk/+X/5f9rT/6/P9f/H0D+X/5f/l/+n5GqWv4/9v2vDzXJpP8HAACAHMS+/55QE/0/AAAA1Ebs+6dDTfT/AAAAUBux758JNcmk/5f/l//PKf/v+v/y//L/9Sf/398o8v+L5+X/5f97k/+vYP6/KOT/uaaqlv+Pff+uUJNM+n8AAADIQez7d4ea6P8BAACgNmLfvyfURP8PAAAAtRH7/ntDTTLp/+X/5f/l/+X/5f97b1/+f32S/+/P9f8HkP+X/69b/t/1/7nGqpb/j33/faEmmfT/AAAAkIPY9+8NNdH/AwAAQG3Evn9fqEno/3v9u24AAABgfYl9//5Qk0z+/i//X5P8/2/+fce25f/l//ttfzT5/83y/6HK/1dLTfP/3YfFFZP/H0D+/6rl54uxkQzxmo1f/l/+nytTtfx/7PsPhJpk0v8DAABADmLf/4ZQE/0/AAAA1Ebs+/9/qIn+HwAAAGoj9v0/E2qSSf8v/1+T/H8X+X/5/37bd/1/+f86q2n+f2Rqlf8fk/9fT/l/1/+X/x+0PvV09fP/8avh8v+x778/1CST/h8AAAByEPv+nw010f8DAABAbcS+/42hJvp/AAAAqI3Y9x8MNcmk/5f/l/+/Wvn/C2Py/93zI6/8/xuLblXM/zcnj/x/vVQ4/z8xzPbl/13/X/5/Tcbf/aNmJOOX/5f/Z6mqXf8/9v1vCjXJpP8HAACAHMS+/4FQE/0/AAAA1Ebs+98caqL/BwAAgNqIff9bQk0y6f/l/+X/Xf9f/t/1/3tvX/5/fapw/n8o8v/y//L/63f88v/y/yxVtfx/7PsfDDXJpP8HAACAHMS+/62hJvp/AAAAqI3Y978t1ET/DwAAALUR+/63h5pk0v/L/8v/y//L/8v/996+/P/6JP/fn/z/APL/8v/y//L/jFTV8v+x7/+5UJNM+n8AAADIQez7Hwo10f8DAABAbcS+/x2hJvp/AAAAqI3Y978z1CST/l/+X/5f/l/+X/6/9/bl/9cn+f/+5P8HkP+X/5f/l/9npKqW/499/7tCTTLp/wEAACAHse//+VAT/T8AAADURuz73x1qov8HAACA2oh9/y+EmmTS/8v/y/9XK/+/eL59Pfl/+f9iVPn/5kry/1mQ/+9P/n+AHvn/TfL/8v/y//L/XLGq5f9j3/+eUJNM+n8AAADIQez73xtqov8HAACA2oh9//tCTfT/AAAAUBux73841CST/l/+P8v8f3rK1cv/u/6//L/r/8v/r478f3/y/wO4/r/8v/y//D8jVbX8f+z7Hwk1yaT/BwAAgBzEvv/9oSb6fwAAAKiN2Pf/YqiJ/h8AAABqI/b9Hwg1yaT/l//PMv9f4ev/1y3/P94xP3LK/0+2vZ5pXsr/y/+vAfn//uT/B5D/l/+vcv4/zObNy6wv/08VVS3/H/v+D4aaZNL/AwAAQA5i3/9LoSb6fwAAAKiN2Pf/cqiJ/h8AAABqI/b9vxJqkkn/X8P8/4VC/l/+vzL5/875kVP+3/X/l5L/Xxvy//3J/w8g/y//X+X8/wDy/1RR1fL/se//1VCTZRu/H/zXEE8TAAAAqJDY938o1CSTv/8DAABADmLffyjURP8PAAAAtRH7/kdDTTLp/2uY/1/l9f/jFVXl/+X/R53/H5P/l/+X/18Do8v/v+L6opD/l/+X/5f/l/+X/2c1qpb/j33/4VCTTPp/AAAAyEHs+38t1ET/DwAAALUR+/4joSb6fwAAAKiN2PfPhppk0v9fw/z/RDXz/67/f6X5/5/I/7v+fyD/35v8/9pw/f/+5P8HkP+X/5f/l/9npKqW/499/1yoSSb9PwAAANRY+nVw7PuPhpro/wEAAKA2Yt9/LNRE/w8AAAC1Efv+D4eaZNL/u/6//L/r/1+L/P94x/Ly/yX5f/n/UZD/70/+fwD5f/l/+X/5f0aqavn/2PfPh5pk0v8DAABADmLf/5FQE/0/AAAA1Ebs+z8aaqL/BwAAgNqIff/xUJNM+n/5f/n/3PP/jaK44Pr/o83/b5L/70n+f23I//cn/z+A/P9a5uevH8mgr934l5D/l/9nqarl/2PffyLUJJP+///Yu48mu85qj8MbY0vdI/gIjBkxhJH5CEyZUcWYaJODZXIGk3MwOedgosk552iTczTRUNWUW2stqfsc7S2pj/rs/b7PM1lXuhZ9hBtz/1f1qxcAAAB6kLv/vnGL/Q8AAADNyN1/v7jF/gcAAIBm5O6/f9zSyf7X/+v/e+//h628/3/wr2+t//f+/3r6/+Ox0t9fvv6vO1cUfs7+/y53vfpe+n/9v/5/lPf/9f/6fw6bW/+fu/8BcUsn+x8AAAB6kLv/gXGL/Q8AAADNyN1/Vdxi/wMAAEAzcvdfHbd0sv/1//p//b/+/0D/f6P+X/+/bN7/H6f/n6D/1//r//X/bNTc+v/c/Q+KWzrZ/wAAANCD3P0PjlvsfwAAAGhG7v6HxC32PwAAADQjd/9D45ZO9r/+X/+v/19K/3/C+/+Hfj/6f/3/Ovr/cfr/Cfp//b/+X//PRs2t/8/d/7C4pZP9DwAAAD3I3f/wuMX+BwAAgGbk7n9E3GL/AwAAQDNy9z8ybulk/+v/9f/6/6X0/8f0/r/+X/+/cNcPZ/6ZoP9fpf+fMNH/D4P+f8x59/Prf3vL+fznoP/X/7Nqbv1/7v5HxS13H4YTF/ubBAAAAGYld/+j45ZO/vwfAAAAepC7/5q4xf4HAACAZuTuPxW3dLL/9f/6f/2//l//v/7r6/+Xyfv/447e/9/5jve5d7/9v/f/x3n/f9P9/23fGfp/lm1u/X/u/mvjlk72PwAAAPQgd/9j4hb7HwAAAJqRu/+xcYv9DwAAAM3I3f+4uKWT/a//b63/v/2BX3dW/79fu+j/9f/6f/1/6/T/47z/P2H/H3O79UP9v/7f+//6f45mbv1/7v7Hxy2d7H8AAADoQe7+J8Qt9j8AAAA0I3f/E+MW+x8AAACakbv/SXFLJ/tf/99a/3/w13n/X/+/7uvr//X/LdP/j9P/T2jl/f+L/K7Zdj9/VNv+/Pp//T+r5tb/5+5/ctzSyf4HAACAHuTuf0rcYv8DAABAM3L3PzVusf8BAACgGbn7nxa3dLL/9f/6/2X0//kV5tT/7+3tHfoe0v+ftvT+P+n/l0n/P07/P6GV/v8ibbufX/rn1//r/1k1t/4/d//T45ZO9j8AAAD0IHf/M+IW+x8AAACakbv/mXGL/Q8AAADNyN3/rLilk/2v/9f/L6P/9/6//t/7//r/86P/H6f/n6D/1//r//X/bNTc+v/c/dfFLZ3sfwAAAOhB7v5nxy32PwAAADQjd/9z4hb7HwAAAJqRu/+5cUsn+1//r//X/+v/9f/rv77+f5n0/+P0/xM67/+HU/p//b/+n82aUf9/1q/aGZ4Xt3Sy/wEAAKAHufufH7fY/wAAANCM3P0viFvsfwAAAGhG7v4Xxi2d7H/9/2z6//2cr63+f3cYBv3/0Gn/v3vW38/6vtT/6/+Pgf5/nP5/Quf9/7b7+aV/fv2//p/Dds75v9nW+/+5+190+PN1sv8BAACgB7n7Xxy32P8AAADQjNz9L4lb7H8AAABoRu7+l8Ytnex//f9s+v99bfX/3v8//P3RU//v/f9V+v/jof8fp/+foP/X/+v/9f9s1FU3nf6/Zw/bVv+fu/9lcdOJKy76twgAAADMTO7+l8ctnfz5PwAAAPQgd/8r4hb7HwAAABbqupWfyd3/yrilk/2v/99s/3/irJ/T/+v/D39/6P/1//r/S0//P07/P0H/r//X/+v/2ai59f+5+18Vt3Sy/wEAAKAHufuvj1vsfwAAAGhG7v5Xxy32PwAAADQjd/9r4pZO9r/+3/v/+n/9/1T/f+Y5VP2//n/+9P/j9P8T9P/6/5HPf/i/nw7bQP9/8sz/qP+nDRfQ/+/t7V1zyfv/3P2vjVs62f8AAADQg9z9r4tb7H8AAABoRu7+18ct9j8AAAA047bdvzsMwxv2f9Tf/tf/d9r/57f6svr/U8Og//f+v/5f/z9O/z9O/z9B/6//9/6//p+Nmtv7/7n73xi3dLL/AQAAoAe5+98Ut9j/AAAA0Izc/W+OW+x/AAAAaEbu/rfELZ3sf/1/p/2/9//1//r/4+7/bx30/8diEf3/7rm//tz7/2v1//r/Ed31//e424Ef6v/1/6yaW/+fu/+tcUsn+x8AAAB6kLv/bXGL/Q8AAADNyN3/9rjF/gcAAIBm5O5/R9x0eSf7X/+v/9f/6//1/+u//jG//39iGAb9/wYsov8fMff+fzPv/x/+T/kZ+n/9/5I/v/5f/8+qufX/ufvfGbd0sv8BAACgB7n73xW32P8AAADQjNz9745b7H8AAABoRu7+98Qtnex//b/+X/+v/2++/792Ef2/9/83RP8/bh79/7np//X/S/78+n/9P+dvW/1/7v73xi2d7H8AAADoQe7+98Ut9j8AAAA0I3f/++MW+x8AAACakbv/A3FLJ/tf/6//v5D+Pz+n/r+t/v/ksfT/p4bhvPv/nQP/ep28/6//3xD9/7jz6f/3v7f1//p//X+v/f91+n82aW7v/+fuvyFu6WT/AwAAQA9y938wbv2/bu1/AAAAaEbu/g/FLfY/AAAANCN3/4fjlk72v/5f/+/9f/1/8+//6/+7ov8f5/3/Cfp//b/+3/v/bNTc+v/c/R+JWzrZ/wAAANCD3P0fjVvsfwAAAGhG7v6PxS32PwAAADQjd/+NcUsn+1//r//X/+v/9f+n/x7q/9ug/x93PP3/rv5f/1/9/O3iPwX6f/3/1K+nTXPr/3P3fzxu6WT/AwAAQA9y938ibrH/AQAAoBm5+z8Zt9j/AAAAsEiXr/m53P2fils62f/6f/2//l//r/9f//X1/8u0lf4/vyn0/97/D/30/3c68KOlvf9/+L+/9P/6fzZvbv1/7v5Pxy2d7H8AAADoQe7+z8Qt9j8AAAA0I3f/Z+MW+x8AAACakbv/c3FLJ/tf/6//1//r//X/67++/n+ZvP8/Tv8/Qf+/1ffzl/759f/6f1bNrf/P3f/5uKWT/Q8AAAA9yN3/hbjF/gcAAIBm5O7/Ytxi/wMAAEAz9nd/xmUd7n/9v/5f/6//1/+v//r6/2XS/4/T/0/Q/+v/9f/6fzZqbv3/l/Z/1c7w5bilk/0PAAAAPcjd/5W4xf4HAACAZuTu/2rcYv8DAABAM3L3fy1u6WT/6//1/8vo//f29q7R/+v/D/5+zvT/N+v/Kfr/cfr/Cfp//b/+X//PRs2t/8/d//W4pZP9DwAAAD3I3f+NuMX+BwAAgGbk7v9m3GL/AwAAQDNy938rbulk/+v/Z9D/7+j/vf+v/x+8/7/a/192+h/K+v8Lo/8fp/+f0GL/v3P+v/1t9/NHdck+/47+X//PxZpb/5+7/9txSyf7HwAAAHqQu/87cYv9DwAAAM3I3f/duMX+BwAAgGbk7v9e3NLJ/tf/H1//f9u/d728/787rP/8+n/9v/7f+/+Xmv5/nP5/Qov9/wXQ/3v/X//Pps2t/8/d//245eDwu+LCfpcAAADAnOTu/0Hc0smf/wMAAEAPcvf/MG6x/wEAAKAZuft/FLd0sv/1/zN4/7/B/t/7/+u/P/T/s+7/L9P/t+EC+/sbDv+E/j/o//X/+n/9/5H6//xu1v/3bm79f+7+H8ctnex/AAAA6EHu/p/ELfY/AAAANCN3/01xi/0PAAAAzcjdf3Pcctb+X9d2t0L/r//X/+v/9f/rv77+f5m8/z/ufPv/k8PR+v/Uff+/s/Kvr/+/hLb9+fX/3v9n1dz6/9z9P41b/Pk/AAAALM4V5/j53P0/i1vsfwAAAGhG7v6fxy32PwAAADQjd/8v4pZbLtvWRzpW+n/9v/5f/6//X//19f/LpP8f5/3/Cd7/30Q/f6X+v43+fxj0/xzd3Pr/3P2/jFv8+T8AAAA0I3f/r+IW+x8AAACakbv/13GL/Q8AAADNyN3/m7ilk/2v/9f/H7H/308z9f+n6f9P0/+vp/8/Hvr/cfr/Cfp/7//r/73/z0bNrf/P3f/buKWT/Q8AAAA9yN3/u7jF/gcAAIBm5O7/fdxi/wMAAEAzcvf/IW7pZP9vrf+Pf6v1/4vv/73/r//X/+v/Z0X/P67R/n93GAb9/wZsu59f+ufX/+v/WTW3/j93/x/jlk72PwAAAPQgd/+f4hb7HwAAAJqRu//PcYv9DwAAAM3I3f+XuKWT/e/9f/2//l//r/9f//X1/8uk/x/XaP9/5Pf/62+U/l//r//X/7NRc+v/c/f/NW7pZP8DAABAD3L3/y1usf8BAACgGbn7b4lb7H8AAABoRu7+v8ctnex//b/+X/+v/9f/r//6+v9l0v+P22b/f887TH/ZbfX/Rf+fH0H/r//X/7MRc+v/c/f/I27pZP8DAABAD3L3/zNusf8BAACgGbn7/xW32P8AAADQjNz9/45bOtn/E/3/yfoL9f+j9P8HP7/+f/33h/5f/6//v/T0/+O8/z9B/+/9f/2//p+Nmlv/n7v/P3FLJ/sfAAAAepC7/9a4xf4HAACAZuTu/2/cYv8DAABAM3L3/y9u6WT/e/9/Sf3/lfp//b/+X/+v/5+g/x+n/5+g/9f/6//1/2zU3Pr/3P3/DwAA//+2vUye") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 2m0.564330455s ago: executing program 3 (id=53): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x30040a9, 0x0, 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1m59.230772076s ago: executing program 3 (id=58): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={'blake2b-384-generic\x00'}}) 1m58.47030176s ago: executing program 3 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0xf27, 0x101, 0x6, 0x2e1, 0x80]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m58.12930618s ago: executing program 32 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0xf27, 0x101, 0x6, 0x2e1, 0x80]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m56.941489487s ago: executing program 1 (id=76): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) truncate(&(0x7f00000001c0)='./file1\x00', 0x578) 1m56.498283011s ago: executing program 1 (id=77): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r0, &(0x7f00000003c0)="e6", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) 1m55.677163386s ago: executing program 1 (id=84): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m54.697181217s ago: executing program 1 (id=89): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000006400)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303235342c6c6f6e6761642c756d61736b3d30303030303030303030303030303030303137373737372c646d6f64653d30303030303030303030303030303030303030303430302c756e686964652c73686f727461642c616e63686f723d30303030303030303030303030303030303030372c6e6f7374726963742c696f636861727365743d6b6f69382d72752c00263468691e626cd4f6d91d6fed4bb42a4515346a98d55253771fadd9bb31ceaa8d7647a551ee49f3b17bfc6ae1090b228307b8fdc1935c7e8cbbf9aea203bd"], 0x1, 0xc65, &(0x7f0000000f80)="$eJzs3U9sHNd5APDvjbjiUm4rJnYUJ42LTVuksmK5+hdRsQp3VdNsA8iyEIq5BeBKpNSFKZIgqUY20oJpDz30EKAoesiJQGsUSNHAaIqglwJM6wLJxYfCp56IFjaCoge2CJBTwGBm34pLirRpiZQo6/ezyW929nuz781bztAGv30BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83ssXTpxMD7sXAMCDdGn0qydOuf8DwGPliv/+BwAAAAAAAAAAAACA/S5FEU9GitlLq2m8etxRv9iu3bo9NjyydbOBVLU8UOWXX/WTp06f+dLZoXPdeLE9/QHtd9tn49XRKxcaL83cnJ2bnJ+fnGiMTbevzUxM7vgI99t+s2PVCWjcfO3WxPXr841Tz5/e8PTtwff7nzgyeH7o2ePPdHPHhkdGRtdT6r35fffckY7tKjwORhHHI8Vz3/tJakVEEfd/LuoPdu43G6gGcawaxNjwSDWQqXZreqF88nL3RBQRjZ5Gze452nouoq/2QMewvWbEYtn9ssPHyuGNzrbmWlenJhuXW3ML7YX2zPTl1OltOZ5GFHEuRSxFxEr/3YerRRF9keI7h1fT1Yg40D0PX6wKg7fvR7GHY9yBsp+NWsRS8QjM2T7WH0W8Eil++vbRuJavM9W15gsRr5TxBxFvlvHFiFS+Mc5EvLfF+4hHU18U8Rfl/J9fTRPV9aB7Xbn4tcZXpq/P9OR2rysf8f5w15XiId0fBjbFB2OfX5vqUUSruuKvpnv/ZQcAAAAAAAAAAAAAAACA3TYQRXwmUrz8H39U1RVHVZd++PzQ7w/+cm/N+NMfcpwy9/mIWCx2VpN7MBcGXk6XU3rItcSPs3oU8ce5/u9bD7szAAAAAAAAAAAAAAAAAAAAj7Ui3o0UL7xzNC1F75ri7ekbjSutq1OdVWG7a/9210xfW1tba6RObOY4nuNijks5Lue4kmMUuX0RUS/b58fjRUQ0G3eOv5T3L+e4kmMcyO1zbOY4nuNijks5Lue4kmP05fY5NnMcz3Exx6Ucl3NcyTH2ydq9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfJ0UU8fNI8e1vrKZIEdGMGI9OXO5/2L0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEr9qYjvR4rGHzTv7OuLiFT923G0/HYmmgfL+MloDpXxxWheyLFVxb7mtx5C/7k/tVTEjyNFf/2tOxOe57/WeXTnbRBvfnP90Wf7OvFA98nB9/ufOHL4/NDIrz293XbaqgPHLranb91ujA2PjIz27O7Lr/7Jnn2D+XWL3Rk6ETH/+huvtaamJuc+8sbB7kb5Fvjozbff6IvdOc7ub6S+3R3pxo3yPO7Ccbo/HfvijD3iG9G3L7rxcMbOY6C8/78XKX77nf/s3vA79/96/FLn0Z07fPzsT9bv/y9sPtCO7v+z797VgXz/L69aW93/n+zZ90L+baTWF1FfuDlbOxJRn3/9jePtm60bkzcmp8+cOPHloaEvnz5ROxhRv96emuzZ2o2zBQAAAAAAAAAAAAAAAPAApSJ+N1K0fryaGhFxu6rXGjw/9OzxZw7EgareakPd9qujVy40Xpq5OTs3OT8/OdEYm25fm5mY3OnL1atyr7HhkT0ZzIca2OP+D9Rfmpl9fa594w8Xtnz+UP3C1fmFuda1rZ+OgSgimr17jlUdHhseqTo91W5NV00vb1lM/9HVUhH/FSmunWmkz+d9uf5/c4X/hvr/xc0H2qP6/0/07CtfM6UifhYpfusvn47PV/08FHeds5z3t5Hi2LnP5bw4WOZ1+9D5XIFOZWCZ+3+R4h9/vjG3Ww/55HruyR2f2EdEOf+HI8X3//y78et538bPf9h6/g9tPtAezf9TPfsObfi8gvseOnn+j0eKF598K34j7/ugz//ofrrA0Zx85/M5Bt/v/7M9mP9P9ewbzK/7m7szdAAAAAAAAAAAgEdaLRXxd5HihyN96WzEWmUHf/83sflAm/7mq7ZLf//16Z59E/e1XlHvxr98YM6unFgAAAAA2AdqqYh3I8WNhbfu1FBvrP/uqf/8nfX6z+G06dnq//P9SvW5AbtZ/9lrML/u+P0PGwAAAAAAAAAAAAAAAAAAAPaVlIo4m9dTH6/q+Se2XU99OVK8/D/P5bx0pMzrrgM/WH2vX5qZPn5hamrmWmuhdXVqsjE627o2WbZ9KlKs/s3nctuiWl+9u958Z4339bXY5yLFyN93cztrsXfXJn9qPfdkmfuJSPHf/7Axt7uO9afWc0+VuX8dKb7+z1vnHlnPPV3mfjdS/OjrjW7uoTL3bM799Hru89dmij2YFQAAAAAAAAAAAAAAAAAAAB43tVTEn0aK/725dKeWP6//X+t5WHnzmz3r/W9yu1rnf7Ba/3+77XtZ/7/6XIHF7V4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+nlIU8UakmL20mpb7y8cd9Yvt6Vu3x4ZHtm42kKqWB6r88qt+8tTpM186O3SuGz+4/W77TLw6euVC46WZm7Nzk/PzkxONsen2tZmJyYiBnR2hp32Rd3Xa36Nj1Qlo3Hzt1sT16/ONU8+f3vD07cH3+584Mnh+6Nnjz3Rzx4ZHRkZ7cvpq9/zqd0nb7D8YRfxVpHjuez9JP+yPqMa+7bncmQ957+y1gWoQx6pBjA2PVAOZaremF8onL3dPRBHR6GnU7J6jBzAX96UZsVh2v+zwsXJ4o7OtudbVqcnG5dbcQnuhPTN9OXV6W46nEUWcSxFLEbHSf/fhalHEa5HiO4dX07/2RxzonocvXhr96olT2/ej2MMx7kDZz0YtYql4BOZsH+uPIv4pUvz07aPxb/0RfdH5ii9EvFLGH0S8GZ35TuUb40zEe1u8j3g09UUR/1/O//nV9HZ/eT3oXlcufq3xlenrMz253evKI39/eJD2+bWpHkX8qLrir6Z/93MNAAAAAAAAAAAAAAAAsI8U8auR4oV3jqaqPvhOTXF7+kbjSuvqVKesr1v7162ZXltbW2ukTmzmOJ7jYo5LOS7nuJJjFLl9js0y1tfWxvPjxRyXclzOcSXHOJDb59jMcTzHxRyXclzOcSXH6Mvtc2zmOJ7jYo5LOS7nuJJj7JPaPQAAAAAAAAAAAAAAAAAA4OOlqP5J8e1vrKa1/s760uPRicvWA/3Y+0UAAAD//1Zv8js=") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_off}]}) 1m53.545103282s ago: executing program 1 (id=91): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1842428, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m50.912061724s ago: executing program 1 (id=99): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m50.257214854s ago: executing program 33 (id=99): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.87930302s ago: executing program 5 (id=967): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="000e02"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.368993117s ago: executing program 2 (id=977): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6, @empty, 0x88d}, r1}}, 0x30) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2.292873699s ago: executing program 2 (id=979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="050034006e000000080026008a09000008009f0006"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 2.097881835s ago: executing program 2 (id=982): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x19}}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000000)=0x8) 2.019581617s ago: executing program 2 (id=983): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semget$private(0x0, 0x20000000102, 0x0) 1.664955358s ago: executing program 5 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026008f2900000800b7"], 0x2c}}, 0x0) 1.476442594s ago: executing program 5 (id=991): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 1.372229047s ago: executing program 4 (id=993): newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setuid(r0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) 1.28399688s ago: executing program 5 (id=995): r0 = syz_io_uring_setup(0x48be, &(0x7f00000011c0)={0x0, 0xac08, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000001480)=""/265, 0x109, 0x6) 1.152019305s ago: executing program 4 (id=996): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffb69b0620bd6601f27effeeb61fffffffff69e7ee", 0x58}], 0x1) 1.115146775s ago: executing program 2 (id=998): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) exit(0x0) 1.064163897s ago: executing program 4 (id=999): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200) 918.683211ms ago: executing program 0 (id=1001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, 0x0, 0x0, 0x6}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000280)=[{}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 907.939201ms ago: executing program 4 (id=1002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./bus\x00', 0x10418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") read$FUSE(r0, &(0x7f0000001f00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r1, 0x0, 0x2, 0x0) 784.175316ms ago: executing program 0 (id=1003): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) 614.927251ms ago: executing program 5 (id=1004): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x31) 614.798841ms ago: executing program 0 (id=1005): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 510.210264ms ago: executing program 4 (id=1006): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r0, 0x200, &(0x7f00000000c0)={0x0}) 388.334988ms ago: executing program 0 (id=1007): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000900)="b44c80630562443108347301af47fa0ff9b11fe7d5fe008c6392009c5bbd0408000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x401) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 352.016329ms ago: executing program 5 (id=1008): unshare(0x62040200) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 291.983251ms ago: executing program 4 (id=1009): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0\x00', 0x1810002, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x1cd, &(0x7f0000002180)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0) 233.635962ms ago: executing program 0 (id=1010): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 166.190424ms ago: executing program 2 (id=1011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000003, 0x0, 0xffffffffffffffff}]}) 0s ago: executing program 0 (id=1012): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x2000000) kernel console output (not intermixed with test programs): 01.067972][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.079253][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.086898][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.099928][ T6186] loop0: detected capacity change from 0 to 2048 [ 101.110634][ T9] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 101.120616][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.136083][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.145322][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.159656][ T9] usb 3-1: Product: syz [ 101.166185][ T9] usb 3-1: Manufacturer: syz [ 101.171033][ T9] usb 3-1: SerialNumber: syz [ 101.184284][ T6186] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 101.262310][ T6186] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 101.277070][ T6186] UDF-fs: Scanning with blocksize 512 failed [ 101.292435][ T6169] chnl_net:caif_netlink_parms(): no params data found [ 101.310753][ T6186] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.380806][ T27] audit: type=1800 audit(1779146631.155:18): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.108" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 101.431031][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 101.455736][ T27] audit: type=1800 audit(1779146631.235:19): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.108" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 101.476620][ T9] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 101.504412][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 101.641085][ T9] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 101.709831][ T9] usb 3-1: USB disconnect, device number 2 [ 101.768838][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.967736][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.979019][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.989351][ T6169] bridge_slave_0: entered allmulticast mode [ 102.009427][ T6169] bridge_slave_0: entered promiscuous mode [ 102.074427][ T5781] Bluetooth: hci3: command tx timeout [ 102.111606][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.119847][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.133955][ T6169] bridge_slave_1: entered allmulticast mode [ 102.141751][ T6169] bridge_slave_1: entered promiscuous mode [ 102.270905][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.327095][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.552546][ T6169] team0: Port device team_slave_0 added [ 102.579653][ T6169] team0: Port device team_slave_1 added [ 102.683384][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.690735][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.762972][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.789819][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.813324][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.850292][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.080558][ T2912] hsr_slave_0: left promiscuous mode [ 103.138843][ T2912] hsr_slave_1: left promiscuous mode [ 103.174852][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.195469][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.219225][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.219454][ T6227] loop0: detected capacity change from 0 to 16 [ 103.228566][ T6214] loop2: detected capacity change from 0 to 40427 [ 103.240257][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.248205][ T2912] bridge_slave_1: left allmulticast mode [ 103.267685][ T6214] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 103.278749][ T2912] bridge_slave_1: left promiscuous mode [ 103.295414][ T2912] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.310140][ T6227] erofs: (device loop0): mounted with root inode @ nid 36. [ 103.316551][ T6214] F2FS-fs (loop2): invalid crc value [ 103.351390][ T2912] bridge_slave_0: left allmulticast mode [ 103.366217][ T6214] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.379649][ T2912] bridge_slave_0: left promiscuous mode [ 103.393222][ T2912] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.522205][ T2912] veth1_macvtap: left promiscuous mode [ 103.540546][ T2912] veth0_macvtap: left promiscuous mode [ 103.569287][ T2912] veth1_vlan: left promiscuous mode [ 103.589049][ T6214] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.597228][ T2912] veth0_vlan: left promiscuous mode [ 103.792023][ T5778] syz-executor: attempt to access beyond end of device [ 103.792023][ T5778] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.831052][ T5778] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 104.157286][ T5781] Bluetooth: hci3: command tx timeout [ 104.582441][ T2912] team0 (unregistering): Port device team_slave_1 removed [ 104.618430][ T6247] loop2: detected capacity change from 0 to 64 [ 104.645309][ T2912] team0 (unregistering): Port device team_slave_0 removed [ 104.723629][ T27] audit: type=1800 audit(1779146634.495:20): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.122" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 104.729124][ T6247] syz.2.122: attempt to access beyond end of device [ 104.729124][ T6247] loop2: rw=34817, sector=39, nr_sectors = 122 limit=64 [ 104.775968][ T2912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.832687][ T2912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.026335][ T6249] loop2: detected capacity change from 0 to 4096 [ 105.447574][ T2912] bond0 (unregistering): Released all slaves [ 105.591679][ T6036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.605451][ T6169] hsr_slave_0: entered promiscuous mode [ 105.625073][ T6169] hsr_slave_1: entered promiscuous mode [ 105.644057][ T6169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.652030][ T6169] Cannot create hsr debugfs directory [ 105.825745][ T6262] loop2: detected capacity change from 0 to 128 [ 105.856414][ T6262] EXT4-fs: Ignoring removed i_version option [ 105.982722][ T6262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0003] [ 106.003144][ T6262] System zones: 1-3, 19-19, 35-36 [ 106.023561][ T6262] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.054574][ T6262] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.089172][ T6262] EXT4-fs (loop2): shut down requested (1) [ 106.133208][ T1686] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.140135][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.234733][ T5781] Bluetooth: hci3: command tx timeout [ 106.336241][ T6169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.352215][ T1686] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.364141][ T6169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.399943][ T1686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.410215][ T1686] usb 1-1: Product: syz [ 106.415419][ T1686] usb 1-1: Manufacturer: syz [ 106.420350][ T1686] usb 1-1: SerialNumber: syz [ 106.445571][ T6169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.454298][ T1686] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 106.541602][ T6169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.550246][ T5785] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 106.619040][ T6036] veth0_vlan: entered promiscuous mode [ 106.686198][ T6036] veth1_vlan: entered promiscuous mode [ 106.862119][ T6036] veth0_macvtap: entered promiscuous mode [ 106.882187][ T6036] veth1_macvtap: entered promiscuous mode [ 106.915636][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.953586][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.965305][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.990269][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.005501][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.022330][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.046672][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.062219][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.074799][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.087732][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.100763][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.159171][ T6036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.175559][ T6036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.187484][ T6036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.211963][ T6036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.236446][ T6169] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.274904][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.282171][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.320562][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.327892][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.443869][ T6280] loop2: detected capacity change from 0 to 32768 [ 107.515939][ T6280] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 107.530393][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.547993][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.595752][ T5785] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 107.636392][ T5785] ath9k_htc: Failed to initialize the device [ 107.669256][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.697386][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.708430][ T5785] usb 1-1: ath9k_htc: USB layer deinitialized [ 107.756677][ T6280] XFS (loop2): Ending clean mount [ 107.791990][ T42] usb 1-1: USB disconnect, device number 3 [ 107.860447][ T6280] XFS (loop2): User initiated shutdown received. [ 107.884332][ T6280] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 107.932996][ T6280] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 108.052523][ T5778] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 108.210684][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.250502][ T6312] loop4: detected capacity change from 0 to 16 [ 108.279237][ T6312] erofs: (device loop4): mounted with root inode @ nid 36. [ 108.333055][ T5781] Bluetooth: hci3: command tx timeout [ 108.978568][ T6336] loop2: detected capacity change from 0 to 64 [ 109.166420][ T6340] loop0: detected capacity change from 0 to 256 [ 109.184698][ T6340] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.224507][ T6169] veth0_vlan: entered promiscuous mode [ 109.257426][ T6340] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.261158][ T6169] veth1_vlan: entered promiscuous mode [ 109.420870][ T6343] capability: warning: `syz.2.139' uses 32-bit capabilities (legacy support in use) [ 109.432363][ T6169] veth0_macvtap: entered promiscuous mode [ 109.473351][ T6343] program syz.2.139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.473765][ T6169] veth1_macvtap: entered promiscuous mode [ 109.531565][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.567448][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.594273][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.609413][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.624534][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.638936][ T6320] loop4: detected capacity change from 0 to 40427 [ 109.646466][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.665604][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.702226][ T6320] F2FS-fs (loop4): invalid crc value [ 109.747153][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.781240][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.813086][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.853107][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.893019][ T6169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.915530][ T6169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.934035][ T6320] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 109.955428][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.998169][ T6169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.033010][ T6169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.042159][ T6169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.093009][ T6169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.127303][ T6036] syz-executor: attempt to access beyond end of device [ 110.127303][ T6036] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.206121][ T6036] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 110.344531][ T2881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.417624][ T2881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.495771][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.515854][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.748707][ T6375] loop0: detected capacity change from 0 to 32768 [ 111.830280][ T6375] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 111.877924][ T6375] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.068153][ T6423] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.143520][ T6375] XFS (loop0): Ending clean mount [ 112.227417][ T6375] XFS (loop0): Quotacheck needed: Please wait. [ 112.263978][ T6388] loop4: detected capacity change from 0 to 32768 [ 112.314946][ T6388] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.148 (6388) [ 112.431456][ T6375] XFS (loop0): Quotacheck: Done. [ 112.438247][ T6388] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.484668][ T6433] program syz.2.161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.511705][ T6388] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 112.543706][ T6388] BTRFS info (device loop4): enabling auto defrag [ 112.581395][ T6388] BTRFS info (device loop4): use no compression [ 112.606693][ T6388] BTRFS info (device loop4): max_inline at 4096 [ 112.639907][ T6388] BTRFS info (device loop4): using free space tree [ 112.766865][ T6450] loop2: detected capacity change from 0 to 256 [ 112.853370][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.888486][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.982675][ T6388] BTRFS info (device loop4): enabling ssd optimizations [ 113.017809][ T6388] BTRFS info (device loop4): auto enabling async discard [ 113.114211][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 113.165641][ T8] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.182970][ T8] usb 6-1: config 0 has no interface number 0 [ 113.191433][ T8] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.243177][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.251757][ T8] usb 6-1: Product: syz [ 113.293347][ T8] usb 6-1: Manufacturer: syz [ 113.303205][ T8] usb 6-1: SerialNumber: syz [ 113.304483][ T27] audit: type=1800 audit(1779146643.075:21): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.148" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 113.342449][ T8] usb 6-1: config 0 descriptor?? [ 113.368632][ T8] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.608333][ T8] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 113.630479][ T8] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 113.903434][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 155 [ 113.967483][ T6036] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.010000][ T6481] loop0: detected capacity change from 0 to 128 [ 114.043198][ T6481] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 114.071611][ T6481] hpfs: filesystem error: improperly stopped [ 114.105461][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 114.124926][ T8] usb 6-1: USB disconnect, device number 2 [ 114.134413][ T6481] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 114.185364][ T6481] hpfs: You really don't want any checks? You are crazy... [ 114.204687][ T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 114.217334][ T6481] hpfs: hpfs_map_sector(): read error [ 114.234203][ T6481] hpfs: code page support is disabled [ 114.240083][ T6481] hpfs: hpfs_map_4sectors(): unaligned read [ 114.251732][ T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 114.273163][ T6481] hpfs: hpfs_map_4sectors(): unaligned read [ 114.309744][ T6481] hpfs: filesystem error: unable to find root dir [ 114.310802][ T8] quatech2 6-1:0.51: device disconnected [ 114.436322][ T6481] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 114.884423][ T6499] Bluetooth: MGMT ver 1.22 [ 114.907538][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 115.287416][ T6518] loop2: detected capacity change from 0 to 256 [ 115.346188][ T6518] exfat: Deprecated parameter 'namecase' [ 115.384480][ T6518] exfat: Deprecated parameter 'namecase' [ 115.434828][ T6518] exFAT-fs (loop2): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 116.169505][ T6549] loop2: detected capacity change from 0 to 512 [ 116.211604][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 116.213211][ T6549] EXT4-fs (loop2): bad geometry: block count 768 exceeds size of device (256 blocks) [ 116.285273][ T6554] netlink: 'syz.0.190': attribute type 21 has an invalid length. [ 116.621917][ T6570] loop0: detected capacity change from 0 to 256 [ 116.664878][ T6570] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 116.755009][ T6570] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 117.115981][ T6581] loop5: detected capacity change from 0 to 4096 [ 117.178695][ T6581] NILFS (loop5): invalid segment: Checksum error in segment payload [ 117.200914][ T6581] NILFS (loop5): trying rollback from an earlier position [ 117.284395][ T6581] NILFS (loop5): recovery complete [ 117.333306][ T6592] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.853066][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.890350][ T6605] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 118.062459][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.078788][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.111088][ T9] usb 5-1: config 0 descriptor?? [ 118.138087][ T9] cp210x 5-1:0.0: cp210x converter detected [ 118.270580][ T6615] netlink: 204 bytes leftover after parsing attributes in process `syz.5.211'. [ 118.350765][ T6597] loop0: detected capacity change from 0 to 32768 [ 118.469356][ T6597] read_mapping_page failed! [ 118.492453][ T6597] ERROR: (device loop0): txCommit: [ 118.492453][ T6597] [ 118.526465][ T6621] jfs_unlink: dtDelete returned -116 [ 118.532868][ T6621] jfs_unlink: dtDelete returned -116 [ 118.562729][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 118.596915][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 118.732043][ T6625] program syz.5.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.838330][ T5837] usb 5-1: USB disconnect, device number 2 [ 118.853534][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 118.909434][ T5837] cp210x 5-1:0.0: device disconnected [ 119.728764][ T6647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.775428][ T6632] loop5: detected capacity change from 0 to 40427 [ 119.816202][ T6632] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 119.823025][ T6632] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 119.847336][ T6632] F2FS-fs (loop5): invalid crc value [ 119.929270][ T6632] F2FS-fs (loop5): Found nat_bits in checkpoint [ 120.057937][ T6632] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 120.087409][ T6632] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 120.218155][ T6632] syz.5.216: attempt to access beyond end of device [ 120.218155][ T6632] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 120.373329][ T6169] syz-executor: attempt to access beyond end of device [ 120.373329][ T6169] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.415435][ T6169] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 120.458132][ T6670] loop4: detected capacity change from 0 to 256 [ 120.532713][ T6670] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 121.541137][ T6703] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 123.005504][ T6758] loop0: detected capacity change from 0 to 128 [ 123.021996][ T6758] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.038979][ T6758] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.075953][ T6758] fscrypt (loop0, inode 12): Unsupported encryption flags (0x10) [ 123.210686][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.243284][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.455763][ T6724] loop2: detected capacity change from 0 to 32768 [ 123.469827][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 123.486081][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.533985][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.561852][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.573892][ T6724] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 123.584670][ T6724] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 123.605488][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.663926][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.715315][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.785756][ T6724] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 123.945169][ T6724] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 123.999078][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 124.012998][ T9] usbtmc 6-1:16.0: can't read capabilities [ 124.248068][ T23] usb 6-1: USB disconnect, device number 3 [ 124.456408][ T6787] loop0: detected capacity change from 0 to 1024 [ 124.469679][ T6766] loop4: detected capacity change from 0 to 40427 [ 124.502726][ T6766] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 124.526810][ T6766] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 124.578578][ T6766] F2FS-fs (loop4): invalid crc value [ 124.925089][ T2912] hfsplus: b-tree write err: -5, ino 25 [ 124.946788][ T6766] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 124.960958][ T2912] hfsplus: b-tree write err: -5, ino 4 [ 124.972037][ T6766] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 124.987203][ T2912] hfsplus: b-tree write err: -5, ino 2 [ 125.022332][ T2912] hfsplus: b-tree write err: -5, ino 17 [ 125.244052][ T6036] syz-executor: attempt to access beyond end of device [ 125.244052][ T6036] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.283196][ T6036] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 125.377998][ T6804] loop5: detected capacity change from 0 to 512 [ 125.455728][ T6804] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.490539][ T6804] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.506715][ T6788] loop2: detected capacity change from 0 to 32768 [ 125.585041][ T6804] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 125.658116][ T6804] EXT4-fs (loop5): 1 truncate cleaned up [ 125.665910][ T6804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.971708][ T6169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.180530][ T6824] syzkaller1: tun_chr_ioctl cmd 35111 [ 126.403353][ T5785] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.609293][ T5785] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 126.612865][ T6826] loop5: detected capacity change from 0 to 40427 [ 126.639054][ T5785] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 126.641507][ T6826] F2FS-fs (loop5): Invalid log blocks per segment (1) [ 126.684690][ T5785] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 126.690741][ T6826] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 126.723104][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.724269][ T6826] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 126.766062][ T6826] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 126.772584][ T5785] usb 1-1: Product: syz [ 126.798545][ T6826] F2FS-fs (loop5): Image doesn't support compression [ 126.801118][ T5785] usb 1-1: Manufacturer: syz [ 126.828965][ T5785] usb 1-1: SerialNumber: syz [ 126.846440][ T6826] F2FS-fs (loop5): invalid crc value [ 126.852413][ T5785] usb 1-1: config 0 descriptor?? [ 126.892399][ T5785] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 126.905572][ T6826] F2FS-fs (loop5): Found nat_bits in checkpoint [ 127.043320][ T6826] F2FS-fs (loop5): Start checkpoint disabled! [ 127.075883][ T6826] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 127.101006][ T6826] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 127.218088][ T6832] loop4: detected capacity change from 0 to 32768 [ 127.264492][ T27] audit: type=1804 audit(1779146657.035:22): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.267" name="/newroot/31/file0/file0" dev="loop5" ino=10 res=1 errno=0 [ 127.354534][ T6832] JBD2: Ignoring recovery information on journal [ 127.443787][ T6832] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 127.477949][ T41] (kworker/u4:2,41,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=22056, name_len=67 [ 127.563794][ T59] kworker/u4:4: attempt to access beyond end of device [ 127.563794][ T59] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 127.614681][ T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 127.635975][ T59] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 127.714435][ T5785] gspca_sunplus: reg_r err -71 [ 127.719344][ T5785] sunplus: probe of 1-1:0.0 failed with error -71 [ 127.751257][ T5785] usb 1-1: USB disconnect, device number 4 [ 127.757230][ T27] audit: type=1800 audit(1779146657.525:23): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.270" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=17058 res=0 errno=0 [ 127.774016][ T6855] (syz.4.270,6855,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=22056, name_len=67 [ 127.858048][ T6855] (syz.4.270,6855,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 127.947611][ T6855] (syz.4.270,6855,1):__ocfs2_prepare_orphan_dir:2171 ERROR: status = -2 [ 127.968562][ T6855] (syz.4.270,6855,1):ocfs2_prepare_orphan_dir:2213 ERROR: status = -2 [ 127.992624][ T6855] (syz.4.270,6855,1):ocfs2_prepare_orphan_dir:2229 ERROR: status = -2 [ 128.013052][ T6855] (syz.4.270,6855,1):ocfs2_rename:1466 ERROR: status = -2 [ 128.043171][ T6855] (syz.4.270,6855,0):ocfs2_rename:1690 ERROR: status = -2 [ 128.078940][ T6832] syz.4.270 (6832) used greatest stack depth: 17712 bytes left [ 128.146668][ T6852] loop2: detected capacity change from 0 to 32768 [ 128.179923][ T6852] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.276 (6852) [ 128.238505][ T6036] ocfs2: Unmounting device (7,4) on (node local) [ 128.253009][ T6852] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.303247][ T6852] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 128.330552][ T6852] BTRFS info (device loop2): using free space tree [ 128.717999][ T6852] BTRFS info (device loop2): enabling ssd optimizations [ 128.762396][ T6852] BTRFS info (device loop2): auto enabling async discard [ 129.372901][ C0] sched: RT throttling activated [ 129.409269][ T6868] loop0: detected capacity change from 0 to 131072 [ 129.420461][ T6868] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 129.429994][ T6868] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.459866][ T6868] F2FS-fs (loop0): invalid crc value [ 129.504936][ T6868] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.574272][ T6868] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 129.581400][ T6868] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 129.598629][ T6852] BTRFS info (device loop2): balance: start [ 129.607972][ T6852] BTRFS info (device loop2): balance: ended with status: 0 [ 129.874226][ T5778] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.987314][ T6916] loop4: detected capacity change from 0 to 40427 [ 131.009691][ T6916] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 131.050476][ T6916] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 131.102295][ T6916] F2FS-fs (loop4): invalid crc value [ 131.148849][ T6916] F2FS-fs (loop4): Found nat_bits in checkpoint [ 131.376774][ T6916] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 131.396061][ T6916] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 131.667124][ T6961] loop0: detected capacity change from 0 to 24 [ 131.674407][ T6036] syz-executor: attempt to access beyond end of device [ 131.674407][ T6036] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.712183][ T6036] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 131.988947][ T6939] loop2: detected capacity change from 0 to 40427 [ 132.010761][ T6939] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 132.020697][ T6939] F2FS-fs (loop2): invalid crc value [ 132.039831][ T6939] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.163338][ T6939] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 132.417858][ T5778] syz-executor: attempt to access beyond end of device [ 132.417858][ T5778] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.445476][ T5778] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 132.901983][ T6998] loop4: detected capacity change from 0 to 512 [ 132.946047][ T6998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 132.984272][ T6998] System zones: 1-12 [ 133.001365][ T6998] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.309: missing EA_INODE flag [ 133.052454][ T6998] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.309: error while reading EA inode 12 err=-117 [ 133.082982][ T23] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 133.130514][ T6998] EXT4-fs (loop4): 1 orphan inode deleted [ 133.158628][ T6998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.206902][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.214095][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.274891][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.285497][ T23] usb 1-1: config 0 has no interface number 0 [ 133.291926][ T23] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.296533][ T7007] loop2: detected capacity change from 0 to 1024 [ 133.305095][ T23] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.327284][ T6036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.356376][ T23] usb 1-1: config 0 interface 1 has no altsetting 0 [ 133.373386][ T23] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 133.408893][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.447521][ T7007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.449931][ T23] usb 1-1: config 0 descriptor?? [ 133.500118][ T7007] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.695134][ T2881] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm kworker/u4:6: bg 0: block 112: padding at end of block bitmap is not set [ 133.730379][ T2881] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 4 with error 28 [ 133.746947][ T2881] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.746947][ T2881] [ 133.757203][ T2881] EXT4-fs (loop2): Total free blocks count 0 [ 133.763256][ T2881] EXT4-fs (loop2): Free/Dirty block details [ 133.769422][ T2881] EXT4-fs (loop2): free_blocks=0 [ 133.774764][ T2881] EXT4-fs (loop2): dirty_blocks=16 [ 133.779907][ T2881] EXT4-fs (loop2): Block reservation details [ 133.789827][ T2881] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 133.809393][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.883165][ T42] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.988575][ T7027] team0: entered allmulticast mode [ 133.994784][ T7027] team_slave_0: entered allmulticast mode [ 134.001462][ T7027] team_slave_1: entered allmulticast mode [ 134.015192][ T7025] loop2: detected capacity change from 0 to 4096 [ 134.076703][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.118588][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.133625][ T23] uclogic 0003:2179:0053.0004: pen parameters not found [ 134.154581][ T23] uclogic 0003:2179:0053.0004: interface is invalid, ignoring [ 134.173037][ T42] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 134.182580][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.231635][ T42] usb 5-1: config 0 descriptor?? [ 134.432431][ T5837] usb 1-1: USB disconnect, device number 5 [ 134.685742][ T42] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.713411][ T42] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.721321][ T42] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.746109][ T42] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.761868][ T42] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.781003][ T42] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.799756][ T42] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.825910][ T42] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 134.870475][ T42] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 134.889117][ C1] hid-thrustmaster 0003:044F:B65D.0005: Unknown packet type 0x0, unable to proceed further with wheel init [ 135.185639][ T42] usb 5-1: USB disconnect, device number 3 [ 135.259516][ T7034] loop0: detected capacity change from 0 to 4096 [ 135.279480][ T7034] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 135.375706][ T7034] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 135.403059][ T7034] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 135.455502][ T2957] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 135.477308][ T7034] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 135.511738][ T7034] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 135.543620][ T7040] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 135.544041][ T7034] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 135.570752][ T2881] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 135.635286][ T7038] loop5: detected capacity change from 0 to 32768 [ 135.723332][ T7042] loop2: detected capacity change from 0 to 24 [ 136.285904][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.323'. [ 137.393263][ T7100] netlink: 'syz.2.337': attribute type 11 has an invalid length. [ 137.422155][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 137.900493][ T7111] loop2: detected capacity change from 0 to 256 [ 138.082304][ T7096] loop5: detected capacity change from 0 to 32768 [ 138.198068][ T7096] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 138.413063][ T7096] XFS (loop5): Ending clean mount [ 138.607252][ T9] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 138.644054][ T9] XFS (loop5): Unmount and run xfs_repair [ 138.649849][ T9] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 138.703291][ T9] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 138.742940][ T9] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 138.762177][ T9] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 138.793075][ T9] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 138.814465][ T9] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 138.833021][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.853584][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.875307][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 138.908585][ T7096] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 138.952097][ T7096] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 138.992999][ T7096] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 139.098689][ T7119] loop4: detected capacity change from 0 to 32768 [ 139.138046][ T6169] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 139.935054][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.348'. [ 140.174434][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 140.209022][ T7167] block nbd0: Unsupported socket: should be TCP or UNIX. [ 141.451443][ T7211] loop5: detected capacity change from 0 to 4096 [ 141.488123][ T7211] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 141.654030][ T7211] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 141.683779][ T7211] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 141.759449][ T2998] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 141.797807][ T7211] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 141.808436][ T7211] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 141.835032][ T7211] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 141.842336][ T2912] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 142.348045][ T7235] loop4: detected capacity change from 0 to 512 [ 142.396321][ T7235] EXT4-fs (loop4): 1 truncate cleaned up [ 142.432335][ T7235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.560883][ T7235] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 142.605180][ T7249] netlink: 44 bytes leftover after parsing attributes in process `syz.0.372'. [ 142.696764][ T6036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.883155][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.900522][ T7259] loop4: detected capacity change from 0 to 1024 [ 142.948596][ T7259] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.977201][ T7259] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 142.987351][ T7259] EXT4-fs (loop4): orphan cleanup on readonly fs [ 142.999177][ T7259] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.374: Freeing blocks not in datazone - block = 0, count = 4096 [ 143.028725][ T7259] EXT4-fs (loop4): Remounting filesystem read-only [ 143.035957][ T7259] EXT4-fs (loop4): 1 orphan inode deleted [ 143.043086][ T7259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.093307][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 143.101263][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 143.116232][ T8] usb 6-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 143.134109][ T7265] loop2: detected capacity change from 0 to 2048 [ 143.136561][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.164460][ T8] usb 6-1: Product: syz [ 143.170443][ T6036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.191386][ T8] usb 6-1: Manufacturer: syz [ 143.202488][ T8] usb 6-1: SerialNumber: syz [ 143.243257][ T7268] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.361968][ T7268] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 143.404899][ T7268] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 143.448597][ T7268] Remounting filesystem read-only [ 143.538227][ T8] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 143.572567][ T8] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 143.586240][ T5778] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 143.600935][ T8] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 143.613266][ T5778] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 143.620445][ T5778] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 143.660142][ T8] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 143.660842][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.698970][ T8] usb 6-1: USB disconnect, device number 4 [ 143.713033][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.760520][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.790600][ T5778] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 143.840779][ T5778] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 143.860842][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.891511][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.903726][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 143.925655][ T5778] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 143.951505][ T5778] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 143.977391][ T5778] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 143.993371][ T5778] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 144.005827][ T5778] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 144.033369][ T5778] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 144.043362][ T5778] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 144.062665][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.082828][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.100538][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.118290][ T5778] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 144.136529][ T5778] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 144.162856][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.188251][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.211569][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.232140][ T5778] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 144.279668][ T5778] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 144.298286][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.320879][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.341454][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.363455][ T5778] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 144.379715][ T5778] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 144.396496][ T5778] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 144.413712][ T5778] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 144.434814][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.462273][ T5778] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 144.480075][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.500825][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.525817][ T5778] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 144.537041][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.565141][ T5778] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 144.590424][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.613480][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.636147][ T5778] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 144.652989][ T5778] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 144.825929][ T7296] loop2: detected capacity change from 0 to 64 [ 145.602365][ T7320] loop4: detected capacity change from 0 to 2048 [ 145.636324][ T7320] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.705449][ T7320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.731883][ T7320] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.958678][ T6036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.291683][ T7346] loop4: detected capacity change from 0 to 1024 [ 147.015706][ T7371] loop2: detected capacity change from 0 to 2048 [ 147.061517][ T7371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.102713][ T7371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.116604][ T7371] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.260924][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.729110][ T7366] loop5: detected capacity change from 0 to 32768 [ 147.800236][ T7366] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.958351][ T7402] cifs: Bad value for 'source' [ 148.037401][ T7366] XFS (loop5): Ending clean mount [ 148.066726][ T7366] XFS (loop5): Quotacheck needed: Please wait. [ 148.173538][ T7366] XFS (loop5): Quotacheck: Done. [ 148.217030][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 148.348350][ T7411] loop2: detected capacity change from 0 to 8 [ 148.361539][ T6169] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.744004][ T7420] program syz.2.417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.133066][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.353038][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 149.361428][ T42] usb 5-1: config index 0 descriptor too short (expected 26, got 18) [ 149.392295][ T42] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 149.412327][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.436372][ T7443] loop2: detected capacity change from 0 to 2048 [ 149.443040][ T42] usb 5-1: Product: syz [ 149.443059][ T42] usb 5-1: Manufacturer: syz [ 149.443072][ T42] usb 5-1: SerialNumber: syz [ 149.458538][ T42] usb 5-1: config 0 descriptor?? [ 149.489278][ T42] gspca_main: sq930x-2.14.0 probing 2770:930c [ 149.511084][ T7443] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 149.533401][ T5785] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.588462][ T5770] udevd[5770]: incorrect nilfs2 checksum on /dev/loop2 [ 149.634580][ T7446] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.723283][ T5785] usb 1-1: Using ep0 maxpacket: 16 [ 149.731619][ T5785] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.747290][ T5785] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 149.767243][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.798330][ T5785] usb 1-1: Product: syz [ 149.802605][ T5785] usb 1-1: Manufacturer: syz [ 149.843551][ T5785] usb 1-1: SerialNumber: syz [ 149.890573][ T7451] loop5: detected capacity change from 0 to 512 [ 149.952040][ T7451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.049300][ T7451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.064699][ T7451] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.125966][ T5785] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 150.153744][ T5785] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 150.172188][ T5785] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 150.196058][ T6169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.209656][ T5785] snd-usb-audio: probe of 1-1:1.2 failed with error -22 [ 150.226758][ T5785] usb 1-1: USB disconnect, device number 6 [ 150.273149][ T5837] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.338144][ T42] gspca_sq930x: ucbus_write failed -71 [ 150.377835][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.503182][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 150.514160][ T5837] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 150.531827][ T5837] usb 3-1: config 0 has no interface number 0 [ 150.547689][ T5837] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 150.558288][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.573115][ T5837] usb 3-1: Product: syz [ 150.577342][ T5837] usb 3-1: Manufacturer: syz [ 150.583149][ T42] gspca_sq930x: Sensor ov9630 not yet treated [ 150.583984][ T5837] usb 3-1: SerialNumber: syz [ 150.589616][ T42] sq930x: probe of 5-1:0.0 failed with error -22 [ 150.598049][ T5837] usb 3-1: config 0 descriptor?? [ 150.610387][ T5837] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 150.636551][ T42] usb 5-1: USB disconnect, device number 4 [ 150.842464][ T5837] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 150.880455][ T5837] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 151.379551][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 151.379916][ T42] usb 3-1: USB disconnect, device number 3 [ 151.419079][ T42] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 151.464163][ T42] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 151.496904][ T42] quatech2 3-1:0.51: device disconnected [ 151.861612][ T42] kernel write not supported for file /sg0 (pid: 42 comm: kworker/1:1) [ 152.029900][ T5837] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 152.301588][ T5837] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 152.311965][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.332255][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.349412][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.367648][ T5837] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.373095][ T5785] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 152.381974][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.402340][ T5837] usb 6-1: config 0 descriptor?? [ 152.588813][ T5785] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 152.602751][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.641613][ T5785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.663216][ T5785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.678756][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.690555][ T5785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.702518][ T5785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.713251][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.722343][ T5785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.744943][ T5785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.763498][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.781953][ T5785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.818740][ T5785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.831802][ T5837] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 152.844110][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.856654][ T5837] plantronics 0003:047F:FFFF.0006: parse failed [ 152.863066][ T5785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.863097][ T5785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.864290][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.886329][ T5837] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 152.923039][ T5785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.943022][ T5785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.951538][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 152.968692][ T5785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 152.980400][ T5785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.992594][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 153.002548][ T5785] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 153.024783][ T5785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 153.045896][ T5785] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 153.062978][ T5785] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 153.082467][ T5785] usb 3-1: Product: syz [ 153.087937][ T5785] usb 3-1: Manufacturer: syz [ 153.108234][ T5785] usb 3-1: SerialNumber: syz [ 153.137954][ T5837] usb 6-1: USB disconnect, device number 5 [ 153.142823][ T5785] usb 3-1: config 0 descriptor?? [ 153.177249][ T5785] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 153.431736][ T7534] loop4: detected capacity change from 0 to 32768 [ 153.493797][ T7534] JBD2: Ignoring recovery information on journal [ 153.549223][ T7534] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 154.102597][ T6036] ocfs2: Unmounting device (7,4) on (node local) [ 154.686181][ T7561] loop4: detected capacity change from 0 to 8 [ 154.857300][ T7565] netlink: 30 bytes leftover after parsing attributes in process `syz.5.459'. [ 155.133626][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.155837][ T5785] usb 3-1: USB disconnect, device number 4 [ 155.173469][ T5785] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 155.243453][ T5837] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 155.355391][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 155.363404][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.377146][ T7579] syzkaller1: tun_chr_ioctl cmd 35108 [ 155.383003][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.400225][ T7580] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.407545][ T42] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 155.419107][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.453695][ T5837] usb 6-1: Using ep0 maxpacket: 8 [ 155.459483][ T42] usb 1-1: config 0 descriptor?? [ 155.471662][ T5837] usb 6-1: config index 0 descriptor too short (expected 26, got 18) [ 155.501547][ T5837] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 155.524549][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.551386][ T5837] usb 6-1: Product: syz [ 155.559541][ T5837] usb 6-1: Manufacturer: syz [ 155.572419][ T5837] usb 6-1: SerialNumber: syz [ 155.595838][ T5837] usb 6-1: config 0 descriptor?? [ 155.616099][ T5837] gspca_main: sq930x-2.14.0 probing 2770:930c [ 155.787820][ T7588] loop4: detected capacity change from 0 to 7 [ 155.800864][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.815950][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.826271][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 155.867218][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.876548][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 155.903045][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.912642][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 155.916523][ T42] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 155.929562][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.939054][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 155.948071][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.957487][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 155.981740][ T42] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 156.003178][ T42] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 156.010655][ T42] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 156.046786][ T42] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 156.076615][ T42] koneplus 0003:1E7D:2D51.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 156.434313][ T5785] usb 1-1: USB disconnect, device number 7 [ 156.474501][ T5837] gspca_sq930x: ucbus_write failed -71 [ 156.743027][ T5837] gspca_sq930x: Sensor ov9630 not yet treated [ 156.749465][ T5837] sq930x: probe of 6-1:0.0 failed with error -22 [ 156.783569][ T5837] usb 6-1: USB disconnect, device number 6 [ 157.295376][ T7606] loop4: detected capacity change from 0 to 40427 [ 157.350270][ T7606] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 157.388263][ T7606] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 157.445075][ T7606] F2FS-fs (loop4): invalid crc value [ 157.467516][ T7606] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.671504][ T7606] F2FS-fs (loop4): Start checkpoint disabled! [ 157.709250][ T7606] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 157.745114][ T7606] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 158.021685][ T2912] kworker/u4:8: attempt to access beyond end of device [ 158.021685][ T2912] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 158.038729][ T2912] kworker/u4:8: attempt to access beyond end of device [ 158.038729][ T2912] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 158.060219][ T2912] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 158.069808][ T2912] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 158.079002][ T2912] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 158.335419][ T7640] loop2: detected capacity change from 0 to 1024 [ 158.979646][ T7659] loop5: detected capacity change from 0 to 1024 [ 159.069198][ T7659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.268099][ T7659] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.502: bit already cleared for inode 15 [ 159.471345][ T6169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.740549][ T7682] mmap: syz.5.505 (7682): VmData 43626496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 159.780938][ T7651] loop2: detected capacity change from 0 to 40427 [ 159.819110][ T7651] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 159.859879][ T7651] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 159.888196][ T7651] F2FS-fs (loop2): invalid crc value [ 159.905164][ T7651] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.123260][ T7651] F2FS-fs (loop2): Start checkpoint disabled! [ 160.181919][ T7651] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 160.221377][ T7651] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 160.590439][ T7705] Zero length message leads to an empty skb [ 160.631552][ T2957] kworker/u4:10: attempt to access beyond end of device [ 160.631552][ T2957] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 160.686301][ T1072] kworker/u4:5: attempt to access beyond end of device [ 160.686301][ T1072] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 160.699645][ T7708] input: syz1 as /devices/virtual/input/input7 [ 160.744994][ T1072] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 160.755116][ T1072] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 160.762265][ T1072] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 161.920055][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.531'. [ 162.159883][ T7770] program syz.0.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.803599][ T7800] netlink: 'syz.2.553': attribute type 10 has an invalid length. [ 162.850435][ T7800] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.875919][ T7799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.080700][ T7809] loop5: detected capacity change from 0 to 128 [ 163.122417][ T7809] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 163.156976][ T7809] hpfs: filesystem error: improperly stopped [ 163.167252][ T7809] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 163.176020][ T7809] hpfs: You really don't want any checks? You are crazy... [ 163.185605][ T7809] hpfs: hpfs_map_sector(): read error [ 163.192115][ T7809] hpfs: code page support is disabled [ 163.198489][ T7809] hpfs: hpfs_map_4sectors(): unaligned read [ 163.205733][ T7809] hpfs: hpfs_map_4sectors(): unaligned read [ 163.211847][ T7809] hpfs: filesystem error: unable to find root dir [ 163.575073][ T7819] loop5: detected capacity change from 0 to 2048 [ 163.599206][ T7819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.404351][ T7846] ALSA: mixer_oss: invalid OSS volume '' [ 164.719071][ T7852] loop5: detected capacity change from 0 to 4096 [ 164.818805][ T7852] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 164.886556][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.899086][ T7852] ntfs3: loop5: Failed to load $Extend (-22). [ 164.909461][ T7852] ntfs3: loop5: Failed to initialize $Extend. [ 165.113365][ T8] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 165.154054][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.216252][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.273849][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.325525][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.363278][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.433702][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.454250][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.483765][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.547555][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.560904][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.579718][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.598199][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.631079][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.642266][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.812688][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.864966][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.876187][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.890470][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.926557][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.952967][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.964523][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.973045][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.982187][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.998632][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.028687][ T8] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 166.049067][ T8] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 166.091946][ T8] usb 5-1: Product: syz [ 166.102046][ T8] usb 5-1: Manufacturer: syz [ 166.114855][ T8] usb 5-1: SerialNumber: syz [ 166.130908][ T8] usb 5-1: config 0 descriptor?? [ 166.155147][ T8] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 166.372972][ T5837] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 166.468734][ T8] usb 5-1: USB disconnect, device number 5 [ 166.492548][ T8] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 166.595334][ T5837] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 166.614241][ T5837] usb 6-1: config 0 has no interface number 0 [ 166.635114][ T5837] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 166.659234][ T5837] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 166.673372][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.701439][ T5837] usb 6-1: Product: syz [ 166.705986][ T5837] usb 6-1: Manufacturer: syz [ 166.710700][ T5837] usb 6-1: SerialNumber: syz [ 166.728369][ T5837] usb 6-1: config 0 descriptor?? [ 166.735036][ T7868] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 166.778926][ T7880] loop2: detected capacity change from 0 to 2048 [ 166.803175][ T5837] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 56:d4:bc:15:96:ef [ 166.845446][ T7880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.995325][ T59] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 167.055851][ T59] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 167.082512][ T59] EXT4-fs (loop2): This should not happen!! Data will be lost [ 167.082512][ T59] [ 167.097554][ T5837] usb 6-1: USB disconnect, device number 7 [ 167.110901][ T5837] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 167.127467][ T59] EXT4-fs (loop2): Total free blocks count 0 [ 167.141564][ T59] EXT4-fs (loop2): Free/Dirty block details [ 167.158905][ T59] EXT4-fs (loop2): free_blocks=2415919504 [ 167.190932][ T59] EXT4-fs (loop2): dirty_blocks=48 [ 167.203183][ T59] EXT4-fs (loop2): Block reservation details [ 167.213392][ T59] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 167.234494][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.854056][ T5785] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.073246][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 168.088883][ T5785] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 168.123657][ T5785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.159090][ T5785] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 168.193042][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.218276][ T5785] usb 3-1: config 0 descriptor?? [ 168.747101][ T7949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 168.883399][ T5785] usbhid 3-1:0.0: can't add hid device: -71 [ 168.889606][ T5785] usbhid: probe of 3-1:0.0 failed with error -71 [ 168.909864][ T7955] loop4: detected capacity change from 0 to 512 [ 168.916663][ T5785] usb 3-1: USB disconnect, device number 5 [ 168.993077][ T5818] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 169.217668][ T5818] usb 6-1: Using ep0 maxpacket: 16 [ 169.234669][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.256124][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.293879][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.327381][ T5818] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 169.356202][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.383964][ T5818] usb 6-1: config 0 descriptor?? [ 169.571984][ T7979] loop2: detected capacity change from 0 to 1024 [ 169.607447][ T7979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.645438][ T7982] loop4: detected capacity change from 0 to 64 [ 169.680136][ T7982] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 169.693822][ T7979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.816792][ T5818] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 169.825482][ T5818] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 169.835982][ T5818] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 169.849495][ T5818] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 169.861242][ T5818] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 169.893416][ T5818] microsoft 0003:045E:07DA.0008: no inputs found [ 169.899944][ T5818] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 169.925137][ T7979] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 170.078944][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.171268][ T8] usb 6-1: USB disconnect, device number 8 [ 170.221143][ T7993] netlink: 104 bytes leftover after parsing attributes in process `syz.2.623'. [ 170.484878][ T8001] loop2: detected capacity change from 0 to 512 [ 170.512304][ T8001] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.581769][ T8001] EXT4-fs (loop2): 1 truncate cleaned up [ 170.612321][ T8001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.697115][ T8001] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #2: block 13: comm syz.2.627: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 170.787580][ T8001] EXT4-fs (loop2): Remounting filesystem read-only [ 170.895226][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.808341][ T8029] loop2: detected capacity change from 0 to 512 [ 172.028071][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.642'. [ 172.030584][ T8034] loop2: detected capacity change from 0 to 512 [ 172.045555][ T5818] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.089708][ T8034] EXT4-fs: Ignoring removed i_version option [ 172.099194][ T8034] EXT4-fs: Ignoring removed bh option [ 172.151697][ T8034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.186931][ T8034] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.206628][ T8040] loop5: detected capacity change from 0 to 1024 [ 172.278060][ T5818] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 172.300360][ T5818] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 172.318838][ T8040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 172.331289][ T5818] usb 5-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 172.345026][ T8040] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.348045][ T5818] usb 5-1: config 220 has no interface number 2 [ 172.362216][ T5818] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 172.379798][ T5818] usb 5-1: config 220 interface 0 has no altsetting 0 [ 172.388858][ T5818] usb 5-1: config 220 interface 76 has no altsetting 0 [ 172.396397][ T5818] usb 5-1: config 220 interface 1 has no altsetting 0 [ 172.405743][ T5818] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 172.421153][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.429793][ T5818] usb 5-1: Product: syz [ 172.434150][ T5818] usb 5-1: Manufacturer: syz [ 172.438855][ T5818] usb 5-1: SerialNumber: syz [ 172.460588][ T8040] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm syz.5.643: lblock 0 mapped to illegal pblock 0 (length 1) [ 172.486153][ T8040] EXT4-fs (loop5): Remounting filesystem read-only [ 172.499261][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.574823][ T6169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.682560][ T5818] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 172.716022][ T5818] usb 5-1: No valid video chain found. [ 172.721704][ T5818] usb 5-1: selecting invalid altsetting 0 [ 172.758641][ T5818] usb 5-1: selecting invalid altsetting 0 [ 172.766787][ T5818] usbtest: probe of 5-1:220.1 failed with error -22 [ 172.801774][ T5818] usb 5-1: USB disconnect, device number 6 [ 172.843801][ T8054] loop2: detected capacity change from 0 to 512 [ 173.335016][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 173.387468][ T8068] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 173.409788][ T8068] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 173.446865][ T8073] netlink: 'syz.4.657': attribute type 7 has an invalid length. [ 173.561697][ T8076] process 'syz.0.659' launched '/dev/fd/4' with NULL argv: empty string added [ 173.790262][ T8087] loop5: detected capacity change from 0 to 4096 [ 173.799904][ T8087] EXT4-fs: inline encryption not supported [ 173.922984][ T5818] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.966223][ T8087] EXT4-fs (loop5): Test dummy encryption mode enabled [ 173.977741][ T8087] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 173.987580][ T8087] System zones: 0-5 [ 173.995121][ T8087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.047339][ T27] audit: type=1800 audit(1779146703.825:24): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.663" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 174.075659][ T27] audit: type=1804 audit(1779146703.855:25): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.663" name="/newroot/133/file0/file1" dev="loop5" ino=15 res=1 errno=0 [ 174.104430][ T27] audit: type=1800 audit(1779146703.855:26): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.663" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 174.141552][ T6169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.162202][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.184706][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.204085][ T5818] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 174.219874][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.234450][ T5818] usb 5-1: config 0 descriptor?? [ 174.691491][ T5818] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 174.725020][ T5818] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 174.732826][ T8110] loop5: detected capacity change from 0 to 512 [ 174.746827][ T5818] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 174.754171][ T8110] EXT4-fs: Ignoring removed i_version option [ 174.761873][ T5818] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 174.789064][ T5818] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 174.805582][ T8110] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.815164][ T5818] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 174.828996][ T5818] playstation 0003:054C:0BA0.0009: unknown main item tag 0x0 [ 174.879738][ T8110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.897216][ T5818] playstation 0003:054C:0BA0.0009: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 174.963301][ T8110] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.040373][ T5818] playstation 0003:054C:0BA0.0009: Invalid reportID received, expected 18 got 179 [ 175.060297][ T6169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.063882][ T5818] playstation 0003:054C:0BA0.0009: Failed to retrieve DualShock4 pairing info: -22 [ 175.118250][ T5818] playstation 0003:054C:0BA0.0009: Failed to get MAC address from DualShock4 [ 175.146309][ T5818] playstation 0003:054C:0BA0.0009: Failed to create dualshock4. [ 175.170830][ T5818] playstation: probe of 0003:054C:0BA0.0009 failed with error -22 [ 175.302819][ T5818] usb 5-1: USB disconnect, device number 7 [ 175.496502][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.680'. [ 175.882568][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'. [ 176.357939][ T8136] loop5: detected capacity change from 0 to 40427 [ 176.402458][ T8136] F2FS-fs (loop5): invalid crc value [ 176.419841][ T8136] F2FS-fs (loop5): Found nat_bits in checkpoint [ 176.545651][ T8136] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 176.731129][ T6169] syz-executor: attempt to access beyond end of device [ 176.731129][ T6169] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.751333][ T6169] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 176.983482][ T5785] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.185009][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.206780][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.243014][ T5785] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 177.252636][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.303425][ T5785] usb 5-1: config 0 descriptor?? [ 177.329362][ T8190] loop5: detected capacity change from 0 to 512 [ 177.348800][ T8190] EXT4-fs: Ignoring removed i_version option [ 177.357650][ T8190] EXT4-fs: Ignoring removed bh option [ 177.404264][ T8190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.426000][ T8190] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.659195][ T6169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.691060][ T5818] IPVS: starting estimator thread 0... [ 177.793346][ T8205] IPVS: using max 27 ests per chain, 64800 per kthread [ 177.983563][ T5785] hid-led 0003:1D34:000A.000A: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 178.035688][ T5785] hid-led 0003:1D34:000A.000A: Dream Cheeky Webmail Notifier initialized [ 178.300979][ T5818] usb 5-1: USB disconnect, device number 8 [ 178.864473][ T8227] netem: incorrect ge model size [ 178.877563][ T8227] netem: change failed [ 179.118120][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 179.626909][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.728'. [ 179.873536][ T42] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 180.083025][ T42] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 180.111827][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.151488][ T42] usb 5-1: Product: syz [ 180.169623][ T42] usb 5-1: Manufacturer: syz [ 180.183347][ T42] usb 5-1: SerialNumber: syz [ 180.210350][ T42] usb 5-1: config 0 descriptor?? [ 180.332545][ T8264] loop2: detected capacity change from 0 to 512 [ 180.407899][ T8264] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.732: bg 0: block 5: invalid block bitmap [ 180.441511][ T8264] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 180.455331][ T8264] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.732: invalid indirect mapped block 3 (level 2) [ 180.464378][ T42] usb 5-1: USB disconnect, device number 9 [ 180.491263][ T8264] EXT4-fs (loop2): 1 orphan inode deleted [ 180.497801][ T8264] EXT4-fs (loop2): 1 truncate cleaned up [ 180.515561][ T8264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.567223][ T27] audit: type=1800 audit(1779146710.345:27): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.732" name="bus" dev="loop2" ino=11 res=0 errno=0 [ 180.630458][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.986462][ T8286] loop2: detected capacity change from 0 to 736 [ 181.663002][ T5837] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 181.864605][ T5837] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.882947][ T5837] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.892813][ T5837] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.909099][ T5837] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 181.918618][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 181.927225][ T5837] usb 3-1: Product: syz [ 181.931517][ T5837] usb 3-1: Manufacturer: syz [ 181.936617][ T5837] usb 3-1: SerialNumber: syz [ 181.991190][ T8307] loop4: detected capacity change from 0 to 32768 [ 182.003822][ T5085] Bluetooth: hci4: command 0x1003 tx timeout [ 182.012170][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 182.065999][ T8307] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.202194][ T5837] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 182.215030][ T8307] XFS (loop4): Ending clean mount [ 182.321614][ T6036] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.484346][ T23] usb 3-1: USB disconnect, device number 6 [ 182.506410][ T23] usblp0: removed [ 182.567309][ T8319] loop5: detected capacity change from 0 to 4096 [ 182.590858][ T8319] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 182.673163][ T5837] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 182.694805][ T8319] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 182.706024][ T8319] ntfs3: loop5: ino=1e, "file1" attr_set_size [ 182.756844][ T2912] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 182.764922][ T6169] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 182.771686][ T6169] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 182.779610][ T6169] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 182.789436][ T2912] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 182.883071][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 182.896373][ T5837] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 182.915779][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.928404][ T5837] usb 1-1: Product: syz [ 182.934758][ T5837] usb 1-1: Manufacturer: syz [ 182.939806][ T5837] usb 1-1: SerialNumber: syz [ 182.955388][ T5837] usb 1-1: config 0 descriptor?? [ 183.176270][ T5837] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 183.735939][ T5837] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 184.143153][ T5818] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 184.198936][ T5837] usb 1-1: [UEAGLE-ATM] interface 1 not found [ 184.211042][ T5837] ueagle-atm 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 184.243725][ T8360] loop2: detected capacity change from 0 to 32768 [ 184.266489][ T8360] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.771 (8360) [ 184.309762][ T8360] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 184.334892][ T5818] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.343436][ T8360] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 184.363943][ T8360] BTRFS info (device loop2): turning off barriers [ 184.370653][ T5818] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.374813][ T5818] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 184.402966][ T8360] BTRFS info (device loop2): turning on async discard [ 184.410225][ T8360] BTRFS info (device loop2): doing ref verification [ 184.421287][ T9] usb 1-1: USB disconnect, device number 8 [ 184.429193][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.458432][ T5818] usb 5-1: SerialNumber: syz [ 184.458678][ T8360] BTRFS info (device loop2): using free space tree [ 184.608701][ T8360] BTRFS info (device loop2): enabling ssd optimizations [ 184.697822][ T5818] usb 5-1: 0:2 : does not exist [ 184.797835][ T5818] usb 5-1: USB disconnect, device number 10 [ 184.991084][ T5778] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 185.611614][ T8394] loop5: detected capacity change from 0 to 2048 [ 185.656752][ T8394] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 185.656791][ T8394] NILFS (loop5): mounting unchecked fs [ 185.752964][ T8394] NILFS (loop5): recovery complete [ 185.765680][ T5770] udevd[5770]: incorrect nilfs2 checksum on /dev/loop5 [ 185.795358][ T8398] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.356962][ T8404] loop5: detected capacity change from 0 to 512 [ 186.410455][ T8404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.489580][ T6169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.547218][ T5818] kernel read not supported for file /adsp1 (pid: 5818 comm: kworker/0:4) [ 186.793288][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.973019][ T42] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 187.005138][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.018326][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.028480][ T9] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 187.038539][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.054803][ T9] usb 1-1: config 0 descriptor?? [ 187.153010][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 187.173826][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.185476][ T42] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 187.195390][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.210550][ T42] usb 3-1: config 0 descriptor?? [ 187.657401][ T42] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 187.680435][ T9] hid-led 0003:1D34:000A.000B: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 187.722055][ T9] hid-led 0003:1D34:000A.000B: Dream Cheeky Webmail Notifier initialized [ 188.000212][ T9] usb 1-1: USB disconnect, device number 9 [ 188.220004][ T5818] usb 3-1: USB disconnect, device number 7 [ 188.995916][ T8463] netlink: 132 bytes leftover after parsing attributes in process `syz.4.808'. [ 189.008672][ T8451] loop5: detected capacity change from 0 to 32768 [ 189.044417][ T8451] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.811 (8451) [ 189.090463][ T8451] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 189.120352][ T8451] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 189.135502][ T8451] BTRFS info (device loop5): turning off barriers [ 189.172344][ T8451] BTRFS info (device loop5): turning on async discard [ 189.195927][ T8451] BTRFS info (device loop5): doing ref verification [ 189.206127][ T8451] BTRFS info (device loop5): using free space tree [ 189.344019][ T8451] BTRFS info (device loop5): enabling ssd optimizations [ 189.703477][ T6169] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 189.932596][ T8502] loop4: detected capacity change from 0 to 4096 [ 190.008951][ T8502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.193135][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 190.335586][ T6036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.417266][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.433530][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.460729][ T9] usb 6-1: config 0 descriptor?? [ 190.511519][ T9] cp210x 6-1:0.0: cp210x converter detected [ 190.709363][ T8522] loop4: detected capacity change from 0 to 164 [ 190.902885][ T9] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 190.920875][ T9] cp210x 6-1:0.0: GPIO initialisation failed: -524 [ 190.941323][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 191.132166][ T9] usb 6-1: USB disconnect, device number 9 [ 191.150466][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 191.171771][ T9] cp210x 6-1:0.0: device disconnected [ 191.432570][ T8524] loop4: detected capacity change from 0 to 32768 [ 191.451892][ T8524] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.829 (8524) [ 191.532776][ T8524] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 191.544056][ T8524] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 191.555926][ T8524] BTRFS info (device loop4): turning off barriers [ 191.565196][ T8524] BTRFS info (device loop4): turning on async discard [ 191.572390][ T8524] BTRFS info (device loop4): doing ref verification [ 191.581736][ T8524] BTRFS info (device loop4): using free space tree [ 191.689395][ T8524] BTRFS info (device loop4): enabling ssd optimizations [ 191.786302][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 191.867990][ T6036] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 191.983125][ T5837] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 192.015566][ T9] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.039647][ T9] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.071006][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 192.081388][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00 [ 192.102918][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.134403][ T9] usb 1-1: config 0 descriptor?? [ 192.183002][ T5837] usb 6-1: Using ep0 maxpacket: 8 [ 192.204378][ T5837] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 192.228637][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.259212][ T5837] usb 6-1: Product: syz [ 192.273394][ T5837] usb 6-1: Manufacturer: syz [ 192.293302][ T5837] usb 6-1: SerialNumber: syz [ 192.561516][ T9] wacom 0003:056A:0144.000D: Unknown device_type for 'HID 056a:0144'. Ignoring. [ 192.571051][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.765362][ T42] usb 1-1: USB disconnect, device number 10 [ 192.773108][ T8] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 192.782470][ T8] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 192.791931][ T8] usb 3-1: config 220 has an invalid descriptor of length 242, skipping remainder of the config [ 192.803107][ T8] usb 3-1: config 220 has no interface number 2 [ 192.809559][ T8] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 192.824938][ T8] usb 3-1: config 220 interface 0 has no altsetting 0 [ 192.835613][ T8] usb 3-1: config 220 interface 76 has no altsetting 0 [ 192.843319][ T8] usb 3-1: config 220 interface 1 has no altsetting 0 [ 192.854407][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 192.864595][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.881061][ T8] usb 3-1: Product: syz [ 192.885459][ T8] usb 3-1: Manufacturer: syz [ 192.890446][ T8] usb 3-1: SerialNumber: syz [ 193.111882][ T8] usb 3-1: selecting invalid altsetting 0 [ 193.119686][ T8] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 193.127647][ T8] usb 3-1: No valid video chain found. [ 193.145938][ T8] usb 3-1: selecting invalid altsetting 0 [ 193.153215][ T8] usbtest: probe of 3-1:220.1 failed with error -22 [ 193.161774][ T5837] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 193.172229][ T8] usb 3-1: USB disconnect, device number 8 [ 193.180400][ T5837] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 193.192167][ T5837] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 193.207638][ T5837] usb 6-1: clock source 0 is not valid, cannot use [ 193.214963][ T5837] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 193.222592][ T5837] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 193.275171][ T5837] usb 6-1: USB disconnect, device number 10 [ 193.357819][ T6485] udevd[6485]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.391698][ T8572] loop4: detected capacity change from 0 to 512 [ 193.461305][ T8572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.564703][ T8572] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.833863][ T6036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.319999][ T8609] loop5: detected capacity change from 0 to 1764 [ 194.384523][ T8613] loop2: detected capacity change from 0 to 512 [ 194.436675][ T8613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.452695][ T8613] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.501196][ T8616] loop5: detected capacity change from 0 to 256 [ 194.620667][ T8616] FAT-fs (loop5): Directory bread(block 64) failed [ 194.630818][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.655603][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.662075][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.684425][ T8616] FAT-fs (loop5): Directory bread(block 65) failed [ 194.691116][ T8616] FAT-fs (loop5): Directory bread(block 66) failed [ 194.699806][ T8616] FAT-fs (loop5): Directory bread(block 67) failed [ 194.713102][ T8616] FAT-fs (loop5): Directory bread(block 68) failed [ 194.757251][ T8616] FAT-fs (loop5): Directory bread(block 69) failed [ 194.764397][ T8616] FAT-fs (loop5): Directory bread(block 70) failed [ 194.808453][ T8616] FAT-fs (loop5): Directory bread(block 71) failed [ 194.843108][ T8616] FAT-fs (loop5): Directory bread(block 72) failed [ 194.850132][ T8616] FAT-fs (loop5): Directory bread(block 73) failed [ 194.916690][ T8620] loop4: detected capacity change from 0 to 4096 [ 194.939924][ T8620] NILFS (loop4): invalid segment: Checksum error in segment payload [ 194.952816][ T8620] NILFS (loop4): trying rollback from an earlier position [ 194.997904][ T8620] NILFS (loop4): recovery complete [ 195.038853][ T8625] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.272716][ T8627] loop2: detected capacity change from 0 to 256 [ 195.329670][ T8629] tmpfs: Too few inodes for current use [ 195.365231][ T8627] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 195.571120][ T8637] GUP no longer grows the stack in syz.0.869 (8637): 200000004000-200000b36000 (200000000000) [ 195.588965][ T8637] CPU: 0 PID: 8637 Comm: syz.0.869 Not tainted syzkaller #0 [ 195.596691][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.606976][ T8637] Call Trace: [ 195.610738][ T8637] [ 195.613864][ T8637] dump_stack_lvl+0x18c/0x250 [ 195.618589][ T8637] ? show_regs_print_info+0x20/0x20 [ 195.624177][ T8637] ? load_image+0x420/0x420 [ 195.628914][ T8637] ? find_vma+0x134/0x1b0 [ 195.633309][ T8637] __get_user_pages+0xf0e/0x1380 [ 195.638346][ T8637] ? populate_vma_page_range+0x380/0x380 [ 195.644119][ T8637] ? __gup_longterm_locked+0x20f6/0x2b80 [ 195.645268][ T42] kernel read not supported for file /swradio8 (pid: 42 comm: kworker/1:1) [ 195.650113][ T8637] ? down_read_killable+0x1d0/0x340 [ 195.664167][ T8637] __gup_longterm_locked+0x2251/0x2b80 [ 195.669699][ T8637] ? pin_user_pages_remote+0x220/0x220 [ 195.675294][ T8637] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 195.681318][ T8637] ? lock_chain_count+0x20/0x20 [ 195.686294][ T8637] ? internal_get_user_pages_fast+0x1fc6/0x2760 [ 195.692749][ T8637] internal_get_user_pages_fast+0x21bf/0x2760 [ 195.698906][ T8637] ? asan.module_dtor+0x20/0x20 [ 195.703801][ T8637] ? get_user_pages_fast_only+0xa0/0xa0 [ 195.709387][ T8637] ? plist_add+0x3d8/0x490 [ 195.713846][ T8637] get_futex_key+0x1aa/0x1010 [ 195.718585][ T8637] ? futex_unqueue+0xcb/0xf0 [ 195.723283][ T8637] ? futex_wait+0x4cc/0x5e0 [ 195.727815][ T8637] ? futex_setup_timer+0xc0/0xc0 [ 195.733035][ T8637] ? userfaultfd_unmap_complete+0x29f/0x320 [ 195.739371][ T8637] futex_wake+0x127/0x4f0 [ 195.743694][ T8637] ? mremap_to+0x535/0x5e0 [ 195.748309][ T8637] ? futex_wake_mark+0x150/0x150 [ 195.753266][ T8637] ? __se_sys_mremap+0x898/0x11f0 [ 195.758480][ T8637] do_futex+0x35d/0x3e0 [ 195.762925][ T8637] ? __ia32_sys_get_robust_list+0x110/0x110 [ 195.769135][ T8637] __se_sys_futex+0x3a9/0x440 [ 195.773835][ T8637] ? __x64_sys_futex+0xf0/0xf0 [ 195.778708][ T8637] ? __x64_sys_futex+0x21/0xf0 [ 195.783624][ T8637] do_syscall_64+0x55/0xb0 [ 195.788251][ T8637] ? clear_bhb_loop+0x40/0x90 [ 195.793031][ T8637] ? clear_bhb_loop+0x40/0x90 [ 195.797895][ T8637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.803792][ T8637] RIP: 0033:0x7ff848b9ce59 [ 195.808400][ T8637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.828403][ T8637] RSP: 002b:00007ff846df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 195.836934][ T8637] RAX: ffffffffffffffda RBX: 00007ff848e15fa0 RCX: 00007ff848b9ce59 [ 195.845010][ T8637] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000200000000240 [ 195.853529][ T8637] RBP: 00007ff848c32d6f R08: 0000000000000000 R09: 0000000000000002 [ 195.861932][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.870081][ T8637] R13: 00007ff848e16038 R14: 00007ff848e15fa0 R15: 00007fff7ad975a8 [ 195.878163][ T8637] [ 195.890727][ T8642] loop5: detected capacity change from 0 to 64 [ 196.419725][ T8661] tipc: Started in network mode [ 196.433093][ T8661] tipc: Node identity ac14140f, cluster identity 4711 [ 196.440760][ T8661] tipc: New replicast peer: 255.255.255.255 [ 196.455705][ T27] audit: type=1326 audit(1779146726.225:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.0.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 196.494545][ T8661] tipc: Enabled bearer , priority 10 [ 196.503387][ T8664] netlink: 52 bytes leftover after parsing attributes in process `syz.2.879'. [ 196.520887][ T27] audit: type=1326 audit(1779146726.225:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.0.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 196.531008][ T8662] IPVS: Scheduler module ip_vs_ not found [ 196.566258][ T27] audit: type=1326 audit(1779146726.225:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.0.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 196.610921][ T27] audit: type=1326 audit(1779146726.225:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.0.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 196.640761][ T27] audit: type=1326 audit(1779146726.235:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.0.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 196.694171][ T27] audit: type=1326 audit(1779146726.355:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.0.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 196.738800][ T8647] loop4: detected capacity change from 0 to 32768 [ 196.764193][ T27] audit: type=1326 audit(1779146726.355:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8659 comm="syz.0.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 196.782087][ T8647] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.871 (8647) [ 196.848360][ T8647] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.860210][ T8647] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 196.878995][ T8647] BTRFS info (device loop4): force clearing of disk cache [ 196.887405][ T8647] BTRFS info (device loop4): metadata ratio 0 [ 196.898872][ T8647] BTRFS info (device loop4): enabling ssd optimizations [ 196.907506][ T8647] BTRFS info (device loop4): using spread ssd allocation scheme [ 196.925335][ T8647] BTRFS info (device loop4): using free space tree [ 196.990885][ T8647] BTRFS info (device loop4): auto enabling async discard [ 197.005814][ T8647] BTRFS info (device loop4): rebuilding free space tree [ 197.240993][ T6036] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.490216][ T8698] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 197.548442][ T8698] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 197.549631][ T5837] tipc: Node number set to 2886997007 [ 197.875235][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 197.903304][ T27] audit: type=1326 audit(1779146727.665:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.5.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0af59ce59 code=0x0 [ 198.116533][ T8707] loop4: detected capacity change from 0 to 2048 [ 198.258451][ T8707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.341389][ T6036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.343087][ T42] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 199.456377][ T8746] loop2: detected capacity change from 0 to 256 [ 199.487309][ T8746] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc780c927, utbl_chksum : 0xe619d30d) [ 199.544851][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 199.557648][ T42] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.599404][ T42] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 199.620313][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 199.632584][ T42] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 199.649168][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.659779][ T42] usb 6-1: Product: syz [ 199.677368][ T42] usb 6-1: Manufacturer: syz [ 199.682059][ T42] usb 6-1: SerialNumber: syz [ 199.709291][ T42] usb 6-1: config 0 descriptor?? [ 199.747208][ T8752] loop2: detected capacity change from 0 to 512 [ 199.866793][ T8761] netlink: 48 bytes leftover after parsing attributes in process `syz.0.909'. [ 199.869867][ T8752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.951194][ T8752] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.055930][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 200.173384][ T42] gs_usb 6-1:0.0: Configuring for 55 interfaces [ 200.231079][ T8769] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.906: Directory hole found for htree leaf block 0 [ 200.291458][ T8767] team0: Port device team_slave_0 removed [ 200.344013][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.591625][ T42] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 200.643781][ T42] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 200.765039][ T42] gs_usb: probe of 6-1:0.0 failed with error -71 [ 200.796133][ T42] usb 6-1: USB disconnect, device number 11 [ 200.979976][ T8788] netlink: 'syz.2.919': attribute type 12 has an invalid length. [ 201.011172][ T8788] netlink: 'syz.2.919': attribute type 29 has an invalid length. [ 201.030083][ T8788] netlink: 148 bytes leftover after parsing attributes in process `syz.2.919'. [ 201.062739][ T8788] netlink: 'syz.2.919': attribute type 2 has an invalid length. [ 201.084381][ T8788] netlink: 'syz.2.919': attribute type 3 has an invalid length. [ 201.096422][ T8788] netlink: 19 bytes leftover after parsing attributes in process `syz.2.919'. [ 201.243138][ T8794] loop2: detected capacity change from 0 to 256 [ 201.833078][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 201.842910][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 202.083003][ T1686] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 202.173137][ T8829] loop5: detected capacity change from 0 to 128 [ 202.269388][ T8811] loop2: detected capacity change from 0 to 40427 [ 202.280324][ T1686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.331077][ T1686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.346069][ T8811] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 202.358033][ T1686] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 202.373679][ T1686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.387556][ T8811] F2FS-fs (loop2): invalid crc value [ 202.402025][ T1686] usb 5-1: config 0 descriptor?? [ 202.420022][ T8811] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.525861][ T8811] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 202.836286][ T1686] aquacomputer_d5next 0003:0C70:F0B6.000E: unknown main item tag 0x0 [ 202.867522][ T1686] aquacomputer_d5next 0003:0C70:F0B6.000E: unknown main item tag 0x0 [ 202.889981][ T1686] aquacomputer_d5next 0003:0C70:F0B6.000E: unbalanced collection at end of report description [ 202.920479][ T1686] aquacomputer_d5next: probe of 0003:0C70:F0B6.000E failed with error -22 [ 203.039092][ T9] usb 5-1: USB disconnect, device number 11 [ 203.500516][ T8839] loop2: detected capacity change from 0 to 32768 [ 203.531950][ T8839] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.587547][ T8850] loop5: detected capacity change from 0 to 4096 [ 203.623055][ T8839] XFS (loop2): Ending clean mount [ 203.731162][ T8863] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.022323][ T5778] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 204.264277][ T1686] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 204.465265][ T1686] usb 1-1: config 0 has no interfaces? [ 204.495903][ T1686] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 204.526795][ T1686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.557503][ T1686] usb 1-1: config 0 descriptor?? [ 204.636407][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.955'. [ 204.761466][ T8884] loop5: detected capacity change from 0 to 1024 [ 204.770826][ T8884] EXT4-fs: Ignoring removed orlov option [ 204.817146][ T8884] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.838987][ T42] usb 1-1: USB disconnect, device number 11 [ 204.914234][ T1686] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 204.915251][ T8884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.999375][ T6169] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.125328][ T1686] usb 3-1: Using ep0 maxpacket: 16 [ 205.144357][ T1686] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.157145][ T1686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.170640][ T1686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.181162][ T1686] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 205.191615][ T1686] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.208180][ T1686] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 205.218866][ T1686] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 205.229153][ T1686] usb 3-1: Manufacturer: syz [ 205.237406][ T1686] usb 3-1: config 0 descriptor?? [ 205.373109][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 205.553102][ T1686] rc_core: IR keymap rc-hauppauge not found [ 205.559679][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 205.567154][ T1686] Registered IR keymap rc-empty [ 205.580499][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.594248][ T23] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 205.604126][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.615748][ T23] usb 5-1: config 0 descriptor?? [ 205.637247][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.679340][ T1686] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 205.698204][ T1686] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 205.721964][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.763260][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.793078][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.793242][ T5837] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 205.823335][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.833915][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 205.853951][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.864029][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.872210][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 205.881382][ T23] usb 5-1: media controller created [ 205.896553][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.912634][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.944888][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 205.975651][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.005094][ T5837] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 206.014479][ T5837] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 206.016468][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.022929][ T5837] usb 6-1: Product: syz [ 206.041026][ T8894] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 206.053231][ T5837] usb 6-1: Manufacturer: syz [ 206.057904][ T5837] usb 6-1: SerialNumber: syz [ 206.060548][ T1686] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 206.073347][ T23] az6027: usb out operation failed. (-71) [ 206.083717][ T5837] usb 6-1: config 0 descriptor?? [ 206.091588][ T5837] ch341 6-1:0.0: ch341-uart converter detected [ 206.096526][ T23] az6027: usb out operation failed. (-71) [ 206.107189][ T23] stb0899_attach: Driver disabled by Kconfig [ 206.115864][ T23] az6027: no front-end attached [ 206.115864][ T23] [ 206.124003][ T23] az6027: usb out operation failed. (-71) [ 206.130645][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 206.145074][ T1686] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 206.158263][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 206.171151][ T1686] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 206.195806][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 206.217238][ T1686] usb 3-1: USB disconnect, device number 9 [ 206.243097][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 206.269799][ T23] usb 5-1: USB disconnect, device number 12 [ 206.415338][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 206.896635][ T8922] netlink: 'syz.0.974': attribute type 21 has an invalid length. [ 206.944666][ T5837] usb 6-1: failed to send control message: -71 [ 206.984380][ T5837] ch341-uart: probe of ttyUSB0 failed with error -71 [ 207.004850][ T5837] usb 6-1: USB disconnect, device number 12 [ 207.033165][ T5837] ch341 6-1:0.0: device disconnected [ 207.133574][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 207.205470][ T8934] loop4: detected capacity change from 0 to 4096 [ 207.226770][ T8934] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 207.733671][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 208.351751][ T27] audit: type=1326 audit(1779146738.125:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.0.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 208.436194][ T27] audit: type=1326 audit(1779146738.125:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.0.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 208.495533][ T27] audit: type=1326 audit(1779146738.125:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.0.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 208.536665][ T27] audit: type=1326 audit(1779146738.125:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.0.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 208.573482][ T8983] loop4: detected capacity change from 0 to 128 [ 208.597017][ T27] audit: type=1326 audit(1779146738.125:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.0.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 208.622462][ T8983] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 208.655221][ T8983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.669984][ T27] audit: type=1326 audit(1779146738.125:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.0.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 208.698581][ T27] audit: type=1326 audit(1779146738.125:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.0.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 208.726778][ T27] audit: type=1326 audit(1779146738.125:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.0.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 208.800087][ T27] audit: type=1326 audit(1779146738.125:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.0.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 208.860737][ T27] audit: type=1326 audit(1779146738.125:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.0.1000" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff848b9ce59 code=0x7ffc0000 [ 208.998336][ T8995] program syz.0.1007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.040813][ T8999] loop4: detected capacity change from 0 to 64 [ 209.170071][ T9000] netlink: 'syz.5.1008': attribute type 4 has an invalid length. [ 209.182025][ T9000] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1008'. [ 209.203063][ T2881] wlan1: Trigger new scan to find an IBSS to join [ 209.210398][ T8999] syz.4.1009: attempt to access beyond end of device [ 209.210398][ T8999] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 209.230877][ T8999] Buffer I/O error on dev loop4, logical block 134217734, lost async page write [ 209.264101][ T2912] ------------[ cut here ]------------ [ 209.270241][ T2912] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 209.281711][ T2912] WARNING: CPU: 0 PID: 2912 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 209.291978][ T2912] Modules linked in: [ 209.296252][ T2912] CPU: 0 PID: 2912 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 209.304308][ T2912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.315368][ T2912] Workqueue: events_unbound cfg80211_wiphy_work [ 209.321753][ T2912] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 209.328126][ T2912] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 16 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 0b 49 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 209.348149][ T2912] RSP: 0018:ffffc9000bf27380 EFLAGS: 00010246 [ 209.354460][ T2912] RAX: 1a2efff6855f0300 RBX: 000000000000000c RCX: ffff88802c2a1e00 [ 209.362592][ T2912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 209.370672][ T2912] RBP: 0000000000000084 R08: ffffc9000bf26f87 R09: 1ffff920017e4df0 [ 209.378712][ T2912] R10: dffffc0000000000 R11: fffff520017e4df1 R12: 0000000000000020 [ 209.386894][ T2912] R13: dffffc0000000000 R14: ffff8880220b3358 R15: ffff88805b8f7de8 [ 209.395109][ T2912] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 209.404289][ T2912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.411428][ T2912] CR2: 000000110c2fa7d7 CR3: 000000006839c000 CR4: 00000000003526f0 [ 209.419576][ T2912] Call Trace: [ 209.422942][ T2912] [ 209.425922][ T2912] ? mark_lock+0x94/0x320 [ 209.430418][ T2912] rate_control_send_low+0x194/0x790 [ 209.436161][ T2912] rate_control_get_rate+0x20b/0x5d0 [ 209.441510][ T2912] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 209.447262][ T2912] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 209.453412][ T2912] ? __lock_acquire+0x1273/0x7d40 [ 209.458481][ T2912] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 209.464745][ T2912] invoke_tx_handlers_late+0xb6/0x1810 [ 209.470260][ T2912] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 209.476385][ T2912] ieee80211_tx+0x2d8/0x460 [ 209.480936][ T2912] ? ieee80211_skb_resize+0x630/0x630 [ 209.486503][ T2912] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 209.492277][ T2912] ? __bpf_trace_tasklet+0x160/0x160 [ 209.497783][ T2912] ? ieee80211_xmit+0x310/0x3f0 [ 209.503145][ T2912] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 209.509962][ T2912] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 209.516056][ T2912] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 209.522620][ T2912] ieee80211_scan_state_send_probe+0x560/0x930 [ 209.528899][ T2912] ieee80211_scan_work+0x4e9/0x1c40 [ 209.534325][ T2912] cfg80211_wiphy_work+0x225/0x260 [ 209.539820][ T2912] ? process_scheduled_works+0x96f/0x15d0 [ 209.546420][ T2912] process_scheduled_works+0xa5d/0x15d0 [ 209.552004][ T2912] ? worker_attach_to_pool+0x380/0x380 [ 209.557537][ T2912] ? assign_work+0x3d2/0x5d0 [ 209.562359][ T2912] worker_thread+0xa55/0xfc0 [ 209.567089][ T2912] kthread+0x2fa/0x390 [ 209.571453][ T2912] ? pr_cont_work+0x560/0x560 [ 209.576208][ T2912] ? kthread_blkcg+0xd0/0xd0 [ 209.580840][ T2912] ret_from_fork+0x48/0x80 [ 209.585542][ T2912] ? kthread_blkcg+0xd0/0xd0 [ 209.590264][ T2912] ret_from_fork_asm+0x11/0x20 [ 209.595397][ T2912] [ 209.598434][ T2912] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 209.606509][ T2912] CPU: 0 PID: 2912 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 209.614331][ T2912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.624662][ T2912] Workqueue: events_unbound cfg80211_wiphy_work [ 209.630914][ T2912] Call Trace: [ 209.634203][ T2912] [ 209.637194][ T2912] dump_stack_lvl+0x18c/0x250 [ 209.642055][ T2912] ? show_regs_print_info+0x20/0x20 [ 209.647811][ T2912] ? load_image+0x420/0x420 [ 209.652514][ T2912] panic+0x2dc/0x730 [ 209.656478][ T2912] ? bpf_jit_dump+0xd0/0xd0 [ 209.660994][ T2912] ? ret_from_fork_asm+0x11/0x20 [ 209.666124][ T2912] __warn+0x2e0/0x470 [ 209.670229][ T2912] ? __rate_control_send_low+0x635/0x880 [ 209.675869][ T2912] ? __rate_control_send_low+0x635/0x880 [ 209.681790][ T2912] report_bug+0x2be/0x4f0 [ 209.686146][ T2912] ? __rate_control_send_low+0x635/0x880 [ 209.691908][ T2912] ? __rate_control_send_low+0x635/0x880 [ 209.697675][ T2912] ? __rate_control_send_low+0x637/0x880 [ 209.703539][ T2912] handle_bug+0xcf/0x120 [ 209.707885][ T2912] exc_invalid_op+0x1a/0x50 [ 209.712536][ T2912] asm_exc_invalid_op+0x1a/0x20 [ 209.717563][ T2912] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 209.723817][ T2912] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 80 16 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 0b 49 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 209.743918][ T2912] RSP: 0018:ffffc9000bf27380 EFLAGS: 00010246 [ 209.750294][ T2912] RAX: 1a2efff6855f0300 RBX: 000000000000000c RCX: ffff88802c2a1e00 [ 209.758374][ T2912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 209.766432][ T2912] RBP: 0000000000000084 R08: ffffc9000bf26f87 R09: 1ffff920017e4df0 [ 209.774664][ T2912] R10: dffffc0000000000 R11: fffff520017e4df1 R12: 0000000000000020 [ 209.782914][ T2912] R13: dffffc0000000000 R14: ffff8880220b3358 R15: ffff88805b8f7de8 [ 209.791108][ T2912] ? mark_lock+0x94/0x320 [ 209.795630][ T2912] rate_control_send_low+0x194/0x790 [ 209.801105][ T2912] rate_control_get_rate+0x20b/0x5d0 [ 209.806430][ T2912] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 209.812270][ T2912] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 209.818252][ T2912] ? __lock_acquire+0x1273/0x7d40 [ 209.823298][ T2912] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 209.829414][ T2912] invoke_tx_handlers_late+0xb6/0x1810 [ 209.834982][ T2912] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 209.840911][ T2912] ieee80211_tx+0x2d8/0x460 [ 209.845431][ T2912] ? ieee80211_skb_resize+0x630/0x630 [ 209.850835][ T2912] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 209.856331][ T2912] ? __bpf_trace_tasklet+0x160/0x160 [ 209.861946][ T2912] ? ieee80211_xmit+0x310/0x3f0 [ 209.866830][ T2912] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 209.873003][ T2912] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 209.878950][ T2912] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 209.885491][ T2912] ieee80211_scan_state_send_probe+0x560/0x930 [ 209.891732][ T2912] ieee80211_scan_work+0x4e9/0x1c40 [ 209.897154][ T2912] cfg80211_wiphy_work+0x225/0x260 [ 209.902278][ T2912] ? process_scheduled_works+0x96f/0x15d0 [ 209.908035][ T2912] process_scheduled_works+0xa5d/0x15d0 [ 209.913624][ T2912] ? worker_attach_to_pool+0x380/0x380 [ 209.919205][ T2912] ? assign_work+0x3d2/0x5d0 [ 209.924244][ T2912] worker_thread+0xa55/0xfc0 [ 209.928880][ T2912] kthread+0x2fa/0x390 [ 209.933045][ T2912] ? pr_cont_work+0x560/0x560 [ 209.937747][ T2912] ? kthread_blkcg+0xd0/0xd0 [ 209.942441][ T2912] ret_from_fork+0x48/0x80 [ 209.946865][ T2912] ? kthread_blkcg+0xd0/0xd0 [ 209.951647][ T2912] ret_from_fork_asm+0x11/0x20 [ 209.956428][ T2912] [ 209.959829][ T2912] Kernel Offset: disabled [ 209.964335][ T2912] Rebooting in 86400 seconds..