last executing test programs: 2m35.082024342s ago: executing program 2 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=+x1111111111111111,lp', 0x55) 2m34.886300787s ago: executing program 2 (id=1291): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 2m34.605083754s ago: executing program 2 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0fc5:1227:kl', 0xc) 2m34.435499698s ago: executing program 2 (id=1296): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0xfffffe70) 2m34.217975604s ago: executing program 2 (id=1299): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000000)=ANY=[], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 2m33.242674438s ago: executing program 2 (id=1306): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="013030303030302032303030303030303030206b", 0x14) 2m32.880143036s ago: executing program 32 (id=1306): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="013030303030302032303030303030303030206b", 0x14) 1m38.145593624s ago: executing program 5 (id=1799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="38005a80"], 0x54}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 1m37.949721139s ago: executing program 5 (id=1802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa35d12) 1m37.733862584s ago: executing program 5 (id=1806): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x14, &(0x7f0000001ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001bc0)={r1}, 0xc) 1m37.49011944s ago: executing program 5 (id=1809): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030362c626172726965722c6e6f626172726965722c736d61636b66737472616e736d7574653d55dac73dddd1aa0ff491f57216572f1e671a989f42c64dc0b65d67d4250567573bb5e8d8c2d916d55de0fad0693e50202f126e0e71e930d123c47bc4a1d2ab46e52a07fd8ca501f330abb8b07d3a5364154ec1faf99b6a9779abe230ce8f5a290ef9442c7569643c", @ANYRES8, @ANYBLOB="101500000000", @ANYRES32, @ANYRESDEC, @ANYRES64], 0x1, 0x6fa, &(0x7f00000016c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) 1m37.116005969s ago: executing program 5 (id=1813): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) mq_open(0x0, 0x40, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) 1m36.212084812s ago: executing program 5 (id=1823): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) 1m35.851326231s ago: executing program 33 (id=1823): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) 3.952872482s ago: executing program 6 (id=2866): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xe0000010}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x775409462d9a369f}) 3.67194461s ago: executing program 6 (id=2871): socket(0x2, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x72, &(0x7f00000005c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@cipso={0x86, 0x6}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "3ce7b9286b574dc2720ef6057772f09df9d3421eee34e003", "047b90670593e17881953d1e429031066797feb6632a4cea988cc9256fe11df4"}}}}}}, 0x0) 3.329403328s ago: executing program 6 (id=2874): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x10d, 0x0, &(0x7f0000000880)="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", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x121403) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 3.132159443s ago: executing program 6 (id=2880): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x80000005, 0x2) close(0x3) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$eJzs3T9sFNkdAOA3YyfYBIhNKIgUKSsFJVESWTYViZFijMHY4BCRQJFmWdsLOFl7kb2OUlA4SoOUKlKKKAW6k65zhdxdxTUnXXnNlVyNdFdcc9JJiD3t7qy9M+vFe9wuPtD3SXh23n/8m3n7phi/OFG5t7KRW9nIFdZy5aU7G2dzfy+XNleLIc76sC2lJ7run0PVjziJ/eG5fvHyn26dDeGD5U+eVavVaqgZDPuaaPn85RcPllqPTXHryb8a7e7fWq/8JYRwqm1cNQMhhKHk84XkOJ0ch0MIJ0IIUQjh1oN/3871aDSPnxbP558vPNyZPDO//Win8/89CuH/pR//5u7qZz8bmPz0Vz3qHgAAAAAAAAAAAAAAAACAN9zsjes3/zg+EZ5EYXA7an9fdzY5dno/ttozP+04xl69mwsAAAAAAAAAAAAAAAAAAADfVXvv/+eik/u8/z+THKc61K/+vrt+fv4tx0l/zP3h+syl8Ylk//eoLf9ckvT5hYEw2txf/aPO+79fyNTff//39n5eVXN8zX5HQhSPpc7jeGwshHeTjd9PR0fjUnmj8us75c215Z4N442Vjn9j9/5UdJIN/VPxf8n+/9OZ9vu///+P2q6m2vnt3l1ib7V0/Ac6lnvvn9FL4v/93XIXM/VeR/x5den4D9bThlsLTDUmgFr8/zN48P0/k2m/X/E/EULIRbWx5lIzQG0NU0vvtF4hLR3/79XTUlNn8ovsdP9/lYn/pUz7hzX/b2W/iNhXOv6NeXwoVWLv/h+ND77/L2faP4z418a/5fu/K+n4H2kkDqaK1H+T3c7/s5n2s/F/Ua1WezHum3EyzhNR6grYjhrp/mZcd9LxH2rL33v+i7ta/1/J1H9dz3/NfpvPf83p/5dR4/mP/e3Gfyc8q1aHO5br9v6fy9Tr9/w/VV//tTl3qp+dvkXS9//Relp67TxS/9kp/tVM/Ocz7b9C/N/v/BS6p74qGWrGf28+eXGkkf6O9V9X0vH/QSMxbi2xVf9ZX/9FB6//r2baP4z1X238W3F/e31bpON/rGO5Wvw/7uL7/1qmXv/jH8J48wJoX75wgHT8j3csV7//hw6O/0KmXr/j/4t+Ng4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwBphOjiMhisdS53E8NhbCxeT8dDgaLRaW84ul8tLfNkKYSdJz4WR0t1ReLJTyK2vl5WK+UCqVl0K4lOSfCkPRRqlcya8W7l/ebWs4ulcsrFcWi4VKCGE2Sf9JON5sa3Glslq4H0K4spv3w7i8fv9eYS2/vLL+u/Hx8fEwtzuG0aj4j0pxrdLovZEbwvxu3ZGoZXD17Ku7YzkW/bW8ub5WKNXTr7XUKZWXCqWWOgtJ3n/DaFRZ31xbKlSK+VL5brO/wzSVHGfmbvz5xrWJtvzbUeM4/XqHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA39GTyt/8LIQw2zuIQQi5KPkTJv5THT4vn888XHu5MnpnffrTzbL8yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXTpGiRiIwgD8ZlJo6TGsQtLZRhTRwojgCfQYHkaP4iW8g4WFrcWysDuBkGwgzW71fc2D+Zl5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsN7dc//y1LQRKc43ZxFfb98/4/yh1I/rw/erE8zI8dw/9je3TVv+Pc3yq3L02+Vd+v/3/lqVGqM6+JzsyXSf9uZ9ppb2bWm+oe9FpFxHRFfyy5RzXa97CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC07cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL8CAAD//4VrJTc=") ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000003c0)={0x0, 0x0}) 2.751428362s ago: executing program 1 (id=2882): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20542, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) truncate(&(0x7f0000000940)='./file1\x00', 0x5) 2.582733036s ago: executing program 3 (id=2884): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504003a3a6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 2.578599776s ago: executing program 4 (id=2896): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000280)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000340)="dfcb", 0x2}], 0x1}, 0x40) 2.401333631s ago: executing program 3 (id=2885): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000400)=[{0x48, 0x3, 0xbc, 0x66}, {0x6, 0x1, 0xfb, 0x2}]}) writev(r0, &(0x7f0000000440)=[{&(0x7f00000004c0)="333a55137d1f0ac82f22920033d3b38f832963003bcbcc50463674e5d3cfc0f28ac673e47015db2211ba0165e5018e30d9dd944c40b5076004c01ed46a5db0545ea5b93595f1748a40bfc6b5ec2035e515a08d6e485aaf8f5549394e23c220b0b40ea71487c0", 0x66}], 0x1) 2.281853414s ago: executing program 0 (id=2886): socket(0x2, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x72, &(0x7f00000005c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@cipso={0x86, 0x6}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "3ce7b9286b574dc2720ef6057772f09df9d3421eee34e003", "047b90670593e17881953d1e429031066797feb6632a4cea988cc9256fe11df4"}}}}}}, 0x0) 2.281746924s ago: executing program 4 (id=2887): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)="70726f66696c6500fc", 0x9) 2.144708717s ago: executing program 4 (id=2888): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x1, 0x67a, &(0x7f0000000e80)="$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") syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 2.107461108s ago: executing program 3 (id=2889): setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x61d1, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.0337832s ago: executing program 1 (id=2890): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) 2.03261913s ago: executing program 0 (id=2904): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0c00000000000000000000850000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0x36) 1.907341173s ago: executing program 3 (id=2891): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000140)={[{@acl}, {@usrjquota_file, 0x4}, {@user_xattr}, {@commit={'commit', 0x3d, 0x7}}, {@usrjquota, 0x3d}]}, 0xff, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 1.846968925s ago: executing program 0 (id=2893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000030000001200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000000054008100050002000600000005000100e0000000050001000d0000000500020000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.707400588s ago: executing program 1 (id=2894): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.542009212s ago: executing program 0 (id=2897): chdir(&(0x7f0000000540)='./cgroup\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000014a9fcff0400000038130000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x3000000}, 0x10}, 0x6b) 1.541917282s ago: executing program 4 (id=2899): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x109842, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0xb}) epoll_pwait2(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) 1.471009394s ago: executing program 1 (id=2900): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x46, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x22, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 1.431721825s ago: executing program 6 (id=2901): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @mptcp=@ack={0x1e, 0x4, 0x42, 0x1}]}}}}}}}}, 0x0) 1.338425807s ago: executing program 0 (id=2902): r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000001c0)=0x4) syz_mount_image$ocfs2(&(0x7f0000000340), &(0x7f00000044c0)='./file1\x00', 0x800401, &(0x7f0000000440)={[{@data_ordered}, {@resv_level={'resv_level', 0x3d, 0x2}}, {@heartbeat_none}, {@coherency_buffered}, {@err_cont}, {@barrier={'barrier', 0x3d, 0xffffff}}, {@nouser_xattr}, {@noacl}, {@data_ordered}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x1}}]}, 0x8, 0x4479, &(0x7f0000008c00)="$eJzs27tvHNUCB+Aza98bOzfx9SvvRFpBgQXIWqcCUhASA4qECDYPIYpY60cSw9pr2WuUAokg+khIFIiaJhE9Sqr8CxSkpUwRKGgiKGDR7szaO7NeebG8sWK+T0rGc2bOQ/55Zs/RsXOJyvXFtfziWr64nC/PXV07m/+0XFpfWgi5J2Sv+6cz3chJ9nvn8sU33v3gbAg3fhr+X7VarYaawbCliaavH//22VzzsSGXqVNrd+vWdstHIYTREEJfyI6nJ4Tw4Q8hRCGEoaRsODn2hxAOhfjal9/fno5r/1mN7Xw0PQ/vTN2emrx199HSg/6LV/Jtb4xC+LZ04sVrS78823Pu5+d33iMAAHTuzenL779TmAj3ozBwr7d1vn4sOfa1qV+lI692P0oAAABoa3P9Pxjlotb1/2hybLMlGCxsn26X3r48+XphItn/jVquv5QU/fpaT30PNbvvm93/HcrU33r/t7WfnWqMr9HvYIhy46nzXG58PISJC/H58ehgrlReq7xwtby+PL9rw3hqpfOPd+9T6SQb+p3mP5xpv/v7/yMtP0218/zu/Yjta+n8e9re990XUUf5j2TqPYn82bl0/r31smeab8jHL4Ba/l/1bp//aKb9buU/UHu3R7Wx9qXeALU5TK283XyFtHT+/6mXpV6dyTey3fP/Ryb/I5n29+r9P3ahu73uF+n8/1svS//S2ubzP5Tb/vk/mml/L/KvjX/M539H0vkfiAvTL8/6d7LT9/+xTPtdyv9msq0awkAURpp+6/Reb/zh0Nivri9papdXujCKfSCdf+su/+b6L9fR/O94pv6TWv81+m2s/xrrkLEoXv+xtXT+/W3v6/T5P5Gp1/X3f9SXrACqn3e1n30qnf/BuHCLCWCn+Z/MtN+t/Otv/L5G/psD/utAXF4w/+tIOv8kqtTHwM36//X5X9Sa+++Z/E9l2m/KP/unIbukdf5XG/9Yl3rbb9L5H2p7Xy3/Hzv4/D+dqdf9+X8IBXP9HRtIjnH+h9veV3/++7bP/0ymXrfzf66bjQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AsMJ8fBEOXGU+e53Ph4CCPJ+fFwMJotzs/Mlspzn6yFMJqU58NwdK1Uni2WZhaXy/MLM8VSqTwXwpHk+mjoi9ZK5crMUnHl6EZb/dH1heJqZXahWAkhHEvKT4fDjbZmFytLxZX6vY1r/8+VV1euF5dn5hdXXykUCoVwYmMMQ9HCjcrCciXuPb4awsmNuoNR0+Dql09tjOVQ9HF5fXW5WKqXn26qUyrPFUtNdc4k174OQ1FldX15rlhZmCmVrzX669zjarX6jyps63xynLw0/d70WxMt1/NRfBze3W4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeMrcP/fyNyGE3vgsF0I43/giSv6l9Dy8M3V7avLW3UdLD/ovXslvdQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYZeOVRqGojAAn3sVFFzU0SdwCsnmqijiYkTwCXyJDn3NPkaHjl1Kob2BkDTQpaXD9y2H5Ofec+AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAux+dv+/dTNxEpbjc3EbPF410/fyq1fjt8/uoMM3I6X9/t+0fdlHdPo/yl/Fq+5l26Xs3/o9Tr3nenGezJcJ/2xn2GpvZtar6u732kXEXEQ8mfU85VddxdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs2ZtDFAqhIAyjMw9eslksLkJXYVQE92F0eW7C9WgSDAbh1nPSwPDxAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA3wzwuU9fHnvE7M2M76ur5b+5jbV/7LJv/l+UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxQ4cyAAAAAAI87fOo/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBQAA///31ddE") llistxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 717.257002ms ago: executing program 3 (id=2903): socket(0x2, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x72, &(0x7f00000005c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@cipso={0x86, 0x6}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "3ce7b9286b574dc2720ef6057772f09df9d3421eee34e003", "047b90670593e17881953d1e429031066797feb6632a4cea988cc9256fe11df4"}}}}}}, 0x0) 716.116132ms ago: executing program 1 (id=2905): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./bus\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./debug\x00', 0x4000, 0x0, 0x1, 0x0, &(0x7f0000000100)) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x2a990a5, 0x0, 0x1, 0x0, 0x0) rename(&(0x7f0000000280)='./debug\x00', &(0x7f0000000300)='./file0\x00') 715.070402ms ago: executing program 6 (id=2906): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xfffffff8, 0x4}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) pipe2(0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b41"], 0x0) 612.345825ms ago: executing program 4 (id=2907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0xfffffffffffffffd}]}) 183.079645ms ago: executing program 1 (id=2908): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x2b8) lchown(&(0x7f0000000380)='./file0\x00', 0xee00, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x30140, 0x0) 147.398796ms ago: executing program 4 (id=2909): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6c7, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) unlinkat(0xffffffffffffff9c, &(0x7f0000002ec0)='./file1\x00', 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) 1.20081ms ago: executing program 0 (id=2910): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s1', 0xb) 0s ago: executing program 3 (id=2920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}]}, 0x30}, 0x1, 0x0, 0x0, 0x40884}, 0x4894) kernel console output (not intermixed with test programs): T5238] usb 2-1: can't set config #16, error -71 [ 219.608048][ T5238] usb 2-1: USB disconnect, device number 7 [ 219.735182][ T8606] loop3: detected capacity change from 0 to 1024 [ 219.777718][ T8608] loop1: detected capacity change from 0 to 1024 [ 219.834058][ T8606] hfsplus: invalid length 32517 has been corrected to 255 [ 219.965547][ T26] audit: type=1800 audit(1792075414.827:51): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.1592" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 220.374843][ T4857] hfsplus: b-tree write err: -5, ino 4 [ 220.380479][ T4857] hfsplus: b-tree write err: -5, ino 2 [ 220.817135][ T8644] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1605'. [ 220.864967][ T8646] loop0: detected capacity change from 0 to 128 [ 221.350622][ T8668] rnbd_client L211: map_device: Parameters missing [ 221.481305][ T5238] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 221.601160][ T5235] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 221.724662][ T5238] usb 2-1: Using ep0 maxpacket: 16 [ 222.021374][ T5238] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 222.068052][ T5238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.121771][ T5238] usb 2-1: Product: syz [ 222.148353][ T5238] usb 2-1: Manufacturer: syz [ 222.153446][ T5235] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 222.173198][ T8659] loop0: detected capacity change from 0 to 32768 [ 222.192955][ T5238] usb 2-1: SerialNumber: syz [ 222.205294][ T5235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.264346][ T8692] loop3: detected capacity change from 0 to 4096 [ 222.289392][ T5235] usb 5-1: Product: syz [ 222.341192][ T5235] usb 5-1: Manufacturer: syz [ 222.376341][ T8692] ntfs3: loop3: Failed to load $Volume. [ 222.407099][ T5235] usb 5-1: SerialNumber: syz [ 222.493604][ T5235] ums_eneub6250 5-1:1.0: USB Mass Storage device detected [ 222.621214][ T5235] scsi host1: usb-storage 5-1:1.0 [ 223.096420][ T8726] loop3: detected capacity change from 0 to 256 [ 223.186345][ T8726] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.224641][ T5235] ums_eneub6250: probe of 5-1:1.0 failed with error 3 [ 223.299078][ T8726] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 223.353787][ T8726] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 223.369637][ T8731] loop0: detected capacity change from 0 to 256 [ 223.399825][ T5235] usb 5-1: USB disconnect, device number 12 [ 223.431387][ T5238] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 223.485002][ T5238] usb 2-1: USB disconnect, device number 8 [ 223.929727][ T8743] loop3: detected capacity change from 0 to 8 [ 224.170671][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1637'. [ 224.864642][ T8754] loop1: detected capacity change from 0 to 131072 [ 224.939596][ T8754] F2FS-fs (loop1): invalid crc value [ 224.975873][ T8754] F2FS-fs (loop1): Found nat_bits in checkpoint [ 225.018818][ T8754] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 225.044179][ T8754] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 225.138321][ T8767] loop0: detected capacity change from 0 to 256 [ 225.309724][ T8766] hub 1-0:1.0: USB hub found [ 225.350416][ T8766] hub 1-0:1.0: 1 port detected [ 225.489098][ T8774] loop0: detected capacity change from 0 to 512 [ 226.087839][ T26] audit: type=1800 audit(1792075420.947:52): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.0.1650" name="protocol" dev="configfs" ino=47882 res=0 errno=0 [ 226.316062][ T8795] loop5: detected capacity change from 0 to 4096 [ 226.487514][ T8805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1657'. [ 227.069653][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1665'. [ 227.329567][ T8829] netlink: 'syz.5.1669': attribute type 4 has an invalid length. [ 227.364011][ T8829] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1669'. [ 227.587635][ T8840] loop0: detected capacity change from 0 to 256 [ 227.646907][ T8840] /dev/loop0: Can't open blockdev [ 227.802999][ T8845] loop0: detected capacity change from 0 to 128 [ 227.970603][ T8848] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 228.042127][ T8758] block2mtd: error: cannot open device /dev/ [ 228.664321][ T8878] loop0: detected capacity change from 0 to 1024 [ 228.696941][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1694'. [ 228.791279][ T4313] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 228.987801][ T8890] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1697'. [ 229.172229][ T4313] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 229.217164][ T4313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.274992][ T4313] usb 6-1: config 0 descriptor?? [ 229.332159][ T4313] cp210x 6-1:0.0: cp210x converter detected [ 229.438055][ T8906] loop0: detected capacity change from 0 to 164 [ 229.761201][ T4313] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 229.847828][ T4313] usb 6-1: cp210x converter now attached to ttyUSB0 [ 230.016169][ T8922] loop3: detected capacity change from 0 to 4096 [ 230.045624][ T4281] usb 6-1: USB disconnect, device number 2 [ 230.089268][ T8922] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 230.115455][ T4281] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 230.224398][ T4281] cp210x 6-1:0.0: device disconnected [ 230.423193][ T5238] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 230.681349][ T5238] usb 5-1: Using ep0 maxpacket: 16 [ 230.801352][ T5238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.921338][ T5238] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 230.964736][ T5238] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 231.011442][ T5238] usb 5-1: Manufacturer: syz [ 231.039104][ T5238] usb 5-1: config 0 descriptor?? [ 231.473021][ T8974] loop5: detected capacity change from 0 to 4096 [ 231.539140][ T5238] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.000D/input/input24 [ 231.577867][ T8974] NILFS (loop5): invalid segment: Checksum error in segment payload [ 231.617673][ T8974] NILFS (loop5): trying rollback from an earlier position [ 231.698689][ T8974] NILFS (loop5): recovery complete [ 231.710863][ T5238] creative-sb0540 0003:041E:3100.000D: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 231.740917][ T8978] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.817142][ T8977] rxe_eth0 speed is unknown, defaulting to 1000 [ 231.985559][ T5237] usb 5-1: USB disconnect, device number 13 [ 232.374611][ T8996] netlink: 'syz.5.1742': attribute type 11 has an invalid length. [ 232.581191][ T5238] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 232.981347][ T5238] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 232.989409][ T5238] usb 1-1: config 0 has no interface number 0 [ 233.046958][ T5238] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 233.097576][ T9026] program syz.3.1755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.231415][ T5238] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 233.291125][ T5238] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 233.339858][ T5238] usb 1-1: Product: syz [ 233.367515][ T5238] usb 1-1: SerialNumber: syz [ 233.424165][ T5238] usb 1-1: config 0 descriptor?? [ 233.493120][ T5238] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 233.800566][ T5238] usb 1-1: USB disconnect, device number 12 [ 233.949731][ T9038] loop4: detected capacity change from 0 to 1024 [ 234.228874][ T9024] loop5: detected capacity change from 0 to 40427 [ 234.317646][ T9024] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 234.392131][ T9024] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 234.481729][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 234.517926][ T9024] F2FS-fs (loop5): invalid crc value [ 234.582947][ T9024] F2FS-fs (loop5): Found nat_bits in checkpoint [ 234.855221][ T9024] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 234.901126][ T9024] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 234.956541][ T9060] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 235.114667][ T7712] attempt to access beyond end of device [ 235.114667][ T7712] loop5: rw=2049, want=45104, limit=40427 [ 235.294198][ T9073] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1774'. [ 235.344987][ T9070] loop3: detected capacity change from 0 to 4096 [ 235.404526][ T9076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1775'. [ 235.452021][ T9070] EXT4-fs (loop3): Test dummy encryption mode enabled [ 235.538455][ T9070] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 235.634332][ T9070] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 235.798165][ T9087] loop0: detected capacity change from 0 to 256 [ 235.877617][ T9070] EXT4-fs (loop3): Test dummy encryption mode enabled [ 235.956297][ T9070] EXT4-fs (loop3): re-mounted. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,. Quota mode: writeback. [ 236.321044][ T9070] EXT4-fs (loop3): Remounting file system with no journal so ignoring journalled data option [ 236.419759][ T9102] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 236.434975][ T9070] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 236.474764][ T9070] System zones: 0-5 [ 236.505533][ T9070] EXT4-fs (loop3): re-mounted. Opts: journal_ioprio=0x0000000000000001,delalloc,init_itable,grpjquota=,data=writeback,noblock_validity,minixdf,block_validity,acl,max_batch_time=0x0000000000000006,. Quota mode: writeback. [ 236.616876][ T9108] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 237.306716][ T9134] loop0: detected capacity change from 0 to 2048 [ 237.590470][ T9147] loop1: detected capacity change from 0 to 256 [ 238.089179][ T9163] loop5: detected capacity change from 0 to 1024 [ 238.304792][ T9166] loop3: detected capacity change from 0 to 2048 [ 238.346417][ T7712] hfsplus: bad catalog entry type [ 238.389343][ T9147] FAT-fs (loop1): Directory bread(block 64) failed [ 238.408119][ T7712] hfsplus: bad catalog entry type [ 238.423192][ T9166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.502429][ T9173] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.544394][ T154] hfsplus: b-tree write err: -5, ino 25 [ 238.550106][ T154] hfsplus: b-tree write err: -5, ino 4 [ 238.581414][ T9147] FAT-fs (loop1): Directory bread(block 65) failed [ 238.588285][ T9147] FAT-fs (loop1): Directory bread(block 66) failed [ 238.631017][ T154] hfsplus: b-tree write err: -5, ino 2 [ 238.636578][ T154] hfsplus: b-tree write err: -5, ino 26 [ 238.769779][ T9147] FAT-fs (loop1): Directory bread(block 67) failed [ 238.890771][ T9147] FAT-fs (loop1): Directory bread(block 68) failed [ 238.897360][ T9147] FAT-fs (loop1): Directory bread(block 69) failed [ 239.068350][ T9147] FAT-fs (loop1): Directory bread(block 70) failed [ 239.150102][ T9188] loop0: detected capacity change from 0 to 2048 [ 239.164392][ T9147] FAT-fs (loop1): Directory bread(block 71) failed [ 239.220800][ T4313] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 239.286447][ T9147] FAT-fs (loop1): Directory bread(block 72) failed [ 239.310944][ T4204] udevd[4204]: incorrect nilfs2 checksum on /dev/loop0 [ 239.369161][ T9147] FAT-fs (loop1): Directory bread(block 73) failed [ 239.500833][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 239.630784][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.703997][ T4313] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 239.770838][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.825898][ T4313] usb 5-1: config 0 descriptor?? [ 239.932219][ T9204] loop0: detected capacity change from 0 to 128 [ 240.079097][ T4292] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.133203][ T4313] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 240.368133][ T9214] loop0: detected capacity change from 0 to 2048 [ 240.403273][ T4281] usb 5-1: USB disconnect, device number 14 [ 240.462177][ T4292] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.564416][ T9211] rxe_eth0 speed is unknown, defaulting to 1000 [ 240.605333][ T4292] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.761162][ T4292] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.689550][ T9211] chnl_net:caif_netlink_parms(): no params data found [ 241.901756][ T26] audit: type=1326 audit(1792075692.764:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9253 comm="syz.4.1848" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 241.925913][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.133661][ T9264] loop0: detected capacity change from 0 to 1024 [ 242.160500][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.167700][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.180905][ T26] audit: type=1326 audit(1792075692.834:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9253 comm="syz.4.1848" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 242.292547][ T9211] device bridge_slave_0 entered promiscuous mode [ 242.317981][ T9228] loop3: detected capacity change from 0 to 32768 [ 242.360381][ T5237] Bluetooth: hci4: command 0x0409 tx timeout [ 242.395827][ T26] audit: type=1326 audit(1792075692.834:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9253 comm="syz.4.1848" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 242.547161][ T9228] XFS (loop3): Mounting V5 Filesystem [ 242.557759][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.595923][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.666987][ T26] audit: type=1326 audit(1792075692.834:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9253 comm="syz.4.1848" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 242.691157][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.700205][ T9228] XFS (loop3): Ending clean mount [ 242.716645][ T9211] device bridge_slave_1 entered promiscuous mode [ 242.894680][ T4189] XFS (loop3): Unmounting Filesystem [ 242.902394][ T26] audit: type=1326 audit(1792075692.844:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9253 comm="syz.4.1848" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 242.926387][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.982159][ T9211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.142610][ T9211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.198623][ T26] audit: type=1326 audit(1792075692.844:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9253 comm="syz.4.1848" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 243.401560][ T9211] team0: Port device team_slave_0 added [ 243.440344][ T26] audit: type=1326 audit(1792075692.844:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9253 comm="syz.4.1848" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 243.535288][ T9211] team0: Port device team_slave_1 added [ 243.700383][ T26] audit: type=1326 audit(1792075692.844:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9253 comm="syz.4.1848" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 243.724597][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.780424][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.787423][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.813347][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.998039][ T9232] loop1: detected capacity change from 0 to 32768 [ 244.010216][ T26] audit: type=1326 audit(1792075692.844:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9253 comm="syz.4.1848" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 244.125703][ T9211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.189170][ T9275] loop0: detected capacity change from 0 to 40427 [ 244.253037][ T26] audit: type=1326 audit(1792075692.844:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9253 comm="syz.4.1848" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 244.277151][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.335929][ T4292] device hsr_slave_0 left promiscuous mode [ 244.408668][ T4292] device hsr_slave_1 left promiscuous mode [ 244.440098][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 244.447762][ T4204] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4204) [ 244.508203][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.554355][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.662307][ T9302] loop4: detected capacity change from 0 to 2048 [ 244.686250][ T4292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.713791][ T4292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.801429][ T9302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.851304][ T4292] device bridge_slave_1 left promiscuous mode [ 244.889381][ T4292] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.947827][ T4292] device bridge_slave_0 left promiscuous mode [ 244.998184][ T4292] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.086138][ T4292] device veth1_macvtap left promiscuous mode [ 245.145092][ T4292] device veth0_macvtap left promiscuous mode [ 245.180167][ T4292] device veth1_vlan left promiscuous mode [ 245.221244][ T4292] device veth0_vlan left promiscuous mode [ 245.605343][ T9316] loop1: detected capacity change from 0 to 1024 [ 245.725145][ T7806] hfsplus: bad catalog file entry [ 245.746192][ T7806] hfsplus: b-tree write err: -5, ino 3 [ 245.973086][ T4292] team0 (unregistering): Port device team_slave_1 removed [ 246.014943][ T4292] team0 (unregistering): Port device team_slave_0 removed [ 246.055414][ T4292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.111554][ T4292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.329056][ T4292] bond0 (unregistering): Released all slaves [ 246.378614][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.388786][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.428314][ T9320] loop1: detected capacity change from 0 to 32768 [ 246.469016][ T9320] JBD2: Ignoring recovery information on journal [ 246.489908][ T5238] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 246.514137][ T9211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.532903][ T4313] Bluetooth: hci4: command 0x040f tx timeout [ 246.573662][ T9320] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 246.587053][ T9306] netlink: 'syz.3.1852': attribute type 3 has an invalid length. [ 246.606817][ T9306] IPv6: NLM_F_REPLACE set, but no existing node found! [ 246.771949][ T5238] usb 5-1: Using ep0 maxpacket: 8 [ 246.825409][ T9211] device hsr_slave_0 entered promiscuous mode [ 246.836874][ T4191] ocfs2: Unmounting device (7,1) on (node local) [ 246.864921][ T9211] device hsr_slave_1 entered promiscuous mode [ 247.049797][ T5238] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 247.099822][ T5238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 247.107952][ T5238] usb 5-1: Product: syz [ 247.170522][ T5238] usb 5-1: Manufacturer: syz [ 247.205685][ T5238] usb 5-1: SerialNumber: syz [ 247.240609][ T5238] usb 5-1: config 0 descriptor?? [ 247.321733][ T5238] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 247.495889][ T5238] gspca_sn9c2028: read1 error -32 [ 247.539689][ T5238] gspca_sn9c2028: read1 error -32 [ 247.607531][ T9211] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 247.684362][ T9211] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 247.773317][ T9211] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 247.795226][ T4281] usb 5-1: USB disconnect, device number 15 [ 247.918201][ T9211] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 248.315556][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.453340][ T9211] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.529879][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.567925][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.599668][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 248.646176][ T9387] loop1: detected capacity change from 0 to 2048 [ 248.676751][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.720029][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.807141][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.814268][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.937862][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.019127][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.076595][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.083944][ T5841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.208154][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.268214][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.306703][ T9405] loop1: detected capacity change from 0 to 1024 [ 249.346991][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.359131][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 249.416677][ T9405] EXT4-fs (loop1): Ignoring removed bh option [ 249.441977][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.486382][ T9405] EXT4-fs (loop1): Ignoring removed bh option [ 249.527946][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.561947][ T9405] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsv1,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,bh,noload,. Quota mode: none. [ 249.605501][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.639180][ T9417] loop3: detected capacity change from 0 to 512 [ 249.658390][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.708374][ T9417] EXT4-fs (loop3): Ignoring removed nobh option [ 249.721274][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.763713][ T9417] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 249.782267][ T9405] EXT4-fs (loop1): shut down requested (2) [ 249.795391][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.841616][ T9417] EXT4-fs (loop3): 1 truncate cleaned up [ 249.847684][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.883094][ T9417] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 249.927206][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.997779][ T9211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.066395][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.365241][ T9433] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1904'. [ 250.668640][ T9211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.766609][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.822404][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.888469][ T9460] loop3: detected capacity change from 0 to 2048 [ 251.107622][ T9460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.253667][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 251.253678][ T26] audit: type=1800 audit(1792075702.115:64): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.1911" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 251.526350][ T9483] loop0: detected capacity change from 0 to 512 [ 251.696030][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.770535][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.857433][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.952433][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.023888][ T9211] device veth0_vlan entered promiscuous mode [ 252.071347][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.110316][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.187677][ T9211] device veth1_vlan entered promiscuous mode [ 252.359812][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.414874][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.500109][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.549842][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.612896][ T9211] device veth0_macvtap entered promiscuous mode [ 252.638474][ T9510] loop1: detected capacity change from 0 to 2048 [ 252.675575][ T9211] device veth1_macvtap entered promiscuous mode [ 252.724850][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.766579][ T9510] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=262151, location=262151 [ 252.782236][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.799014][ T5235] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 252.846896][ T9510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.873700][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.936860][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.002855][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.054453][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.104992][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.163046][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.189610][ T5235] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 253.202590][ T9471] loop4: detected capacity change from 0 to 40427 [ 253.223673][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.241938][ T5235] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 253.298967][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.340562][ T9471] F2FS-fs (loop4): invalid crc value [ 253.347556][ T5235] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 253.398781][ T5235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.416712][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.429101][ T9471] F2FS-fs (loop4): Found nat_bits in checkpoint [ 253.525195][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.575486][ T7806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.653935][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.677394][ T9531] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 253.715618][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.736695][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 253.791730][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.803656][ T9471] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 253.860295][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.905674][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.946446][ T9471] F2FS-fs (loop4): Corrupted max_depth of 3: 4294967295 [ 253.975315][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.021076][ T5235] gud 1-1:1.0: Unexpected status OK for failed transfer [ 254.035336][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.072224][ T5235] gud: probe of 1-1:1.0 failed with error -32 [ 254.102877][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.174558][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.214137][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.235541][ T5237] usb 1-1: USB disconnect, device number 13 [ 254.267444][ T5841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.352152][ T9211] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.399523][ T9211] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.434683][ T9211] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.465171][ T9211] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.478786][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 254.707305][ T4857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.767400][ T4857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.829268][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.841236][ T7806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.855189][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.879463][ T7806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.895297][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.927531][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.071052][ T1108] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 255.131936][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 255.175794][ T1108] usb 4-1: Product: syz [ 255.208932][ T1108] usb 4-1: Manufacturer: syz [ 255.245957][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1949'. [ 255.270294][ T1108] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 255.561313][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.567617][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.902285][ T9542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.919001][ T1108] mos7840: probe of ttyUSB0 failed with error -71 [ 255.978909][ T1108] usb 4-1: USB disconnect, device number 9 [ 256.031270][ T1108] mos7840 4-1:1.0: device disconnected [ 256.348590][ T4281] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 256.621658][ T4281] usb 2-1: Using ep0 maxpacket: 16 [ 256.788751][ T4281] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.908685][ T4281] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 256.957248][ T4281] usb 2-1: config 9 has no interface number 0 [ 257.007932][ T4281] usb 2-1: config 9 interface 57 has no altsetting 0 [ 257.298605][ T4281] usb 2-1: string descriptor 0 read error: -22 [ 257.335301][ T4281] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 257.379365][ T4281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.493742][ T9610] loop0: detected capacity change from 0 to 40427 [ 257.624205][ T9660] loop4: detected capacity change from 0 to 256 [ 257.703491][ T9660] exfat: Deprecated parameter 'utf8' [ 257.766765][ T9660] exfat: Deprecated parameter 'utf8' [ 257.812430][ T9660] exfat: Deprecated parameter 'namecase' [ 257.871196][ T9660] exfat: Deprecated parameter 'namecase' [ 257.925756][ T9660] exfat: Deprecated parameter 'namecase' [ 258.011292][ T9660] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 258.327212][ T9689] loop0: detected capacity change from 0 to 512 [ 258.348390][ T4281] video4linux radio48: keene_cmd_main failed (-71) [ 258.355565][ T4281] radio-keene 2-1:9.57: V4L2 device registered as radio48 [ 258.466784][ T4281] usb 2-1: USB disconnect, device number 9 [ 258.898955][ T5238] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 258.964117][ T9708] loop1: detected capacity change from 0 to 256 [ 259.006380][ T9708] exfat: Deprecated parameter 'utf8' [ 259.043850][ T9708] exfat: Deprecated parameter 'namecase' [ 259.084510][ T9711] kAFS: Invalid Command on /proc/fs/afs/cells file [ 259.114811][ T9708] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 259.175096][ T5238] usb 4-1: Using ep0 maxpacket: 32 [ 259.234472][ T9715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1991'. [ 259.244113][ T5243] Bluetooth: hci5: command 0xfc11 tx timeout [ 259.250666][ T4203] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 259.310599][ T5238] usb 4-1: config 16 has an invalid interface number: 233 but max is 0 [ 259.357572][ T5238] usb 4-1: config 16 has no interface number 0 [ 259.424565][ T5238] usb 4-1: config 16 interface 233 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 259.505579][ T5238] usb 4-1: config 16 interface 233 has no altsetting 0 [ 259.718571][ T5238] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0003, bcdDevice=d1.4c [ 259.746681][ T5238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.819733][ T5238] usb 4-1: Product: syz [ 259.855381][ T5238] usb 4-1: Manufacturer: syz [ 259.878516][ T5238] usb 4-1: SerialNumber: syz [ 259.884859][ T9736] loop4: detected capacity change from 0 to 2048 [ 259.904944][ T9741] loop0: detected capacity change from 0 to 128 [ 260.058985][ T9736] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.177761][ T9754] loop6: detected capacity change from 0 to 256 [ 260.208907][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 260.242689][ T9754] exfat: Deprecated parameter 'utf8' [ 260.248466][ T5238] kvaser_usb 4-1:16.233: Cannot get usb endpoint(s) [ 260.287130][ T9754] exfat: Deprecated parameter 'namecase' [ 260.293758][ T9759] binder: 9757:9759 ioctl c0306201 200000000440 returned -14 [ 260.313699][ T5238] usb 4-1: USB disconnect, device number 10 [ 260.381376][ T9754] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 260.445208][ T9761] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 260.628729][ T9766] bond0: invalid ARP target specified [ 260.706648][ T26] audit: type=1400 audit(1792075711.566:65): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9767 comm="syz.0.2010" name="unknown" offset=16 [ 260.878503][ T9779] loop6: detected capacity change from 0 to 256 [ 260.904733][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'. [ 260.962837][ T9779] exfat: Deprecated parameter 'utf8' [ 260.992879][ T9779] exfat: Deprecated parameter 'namecase' [ 261.047682][ T9779] exfat: Deprecated parameter 'namecase' [ 261.107206][ T9779] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 261.136487][ T26] audit: type=1400 audit(1792075711.997:66): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=9784 comm="syz.4.2016" name="p" offset=59 [ 261.192341][ T5238] kernel write not supported for file /input/mice (pid: 5238 comm: kworker/0:13) [ 261.520118][ T9763] loop1: detected capacity change from 0 to 32768 [ 261.555604][ T9805] ip_tables: iptables: counters copy to user failed while replacing table [ 261.616810][ T9763] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 261.759923][ T26] audit: type=1800 audit(1792075712.627:67): pid=9763 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.2008" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 261.876832][ T4191] ocfs2: Unmounting device (7,1) on (node local) [ 262.020102][ T26] audit: type=1400 audit(1792075712.887:68): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=9821 comm="syz.3.2033" name="foo" offset=71 [ 262.364851][ T9836] loop3: detected capacity change from 0 to 8 [ 262.440184][ T9840] exfat: Deprecated parameter 'utf8' [ 262.445557][ T9840] exfat: Deprecated parameter 'namecase' [ 262.576555][ T9840] exfat: Deprecated parameter 'namecase' [ 262.619181][ T9840] exfat: Deprecated parameter 'namecase' [ 262.638029][ T9836] SQUASHFS error: xz decompression failed, data probably corrupt [ 262.702492][ T9844] set_capacity_and_notify: 2 callbacks suppressed [ 262.702504][ T9844] loop6: detected capacity change from 0 to 4096 [ 262.716387][ T9840] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 262.733946][ T9836] SQUASHFS error: Failed to read block 0x60: -5 [ 262.784392][ T9836] SQUASHFS error: xz decompression failed, data probably corrupt [ 262.819512][ T9844] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 262.864677][ T9836] SQUASHFS error: Failed to read block 0x60: -5 [ 262.920960][ T26] audit: type=1800 audit(1792075713.787:69): pid=9836 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.2039" name="file1" dev="loop3" ino=1 res=0 errno=0 [ 263.117297][ T9855] overlayfs: failed to clone upperpath [ 263.228099][ T9859] macsec0: mtu greater than device maximum [ 263.730527][ T9880] bonding: du&B. is being created... [ 263.920508][ T9882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.928333][ T9882] IPv6: NLM_F_CREATE should be set when creating new route [ 263.935591][ T9882] IPv6: NLM_F_CREATE should be set when creating new route [ 263.942830][ T9882] IPv6: NLM_F_CREATE should be set when creating new route [ 264.010126][ T9898] loop1: detected capacity change from 0 to 64 [ 264.115002][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2066'. [ 264.172863][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2066'. [ 264.221899][ T9900] netlink: 'syz.6.2066': attribute type 18 has an invalid length. [ 264.300897][ T9908] loop3: detected capacity change from 0 to 2048 [ 264.316611][ T9900] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 264.326394][ T9900] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 264.335218][ T9900] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 264.343957][ T9900] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 264.403110][ T9908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.515892][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2066'. [ 264.583316][ T9917] loop1: detected capacity change from 0 to 256 [ 264.594395][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2066'. [ 264.625849][ T9917] exfat: Deprecated parameter 'utf8' [ 264.651316][ T9917] exfat: Deprecated parameter 'namecase' [ 264.657344][ T9904] netlink: 'syz.6.2066': attribute type 18 has an invalid length. [ 264.680982][ T9917] exfat: Deprecated parameter 'namecase' [ 264.697999][ T9913] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 264.724251][ T9913] pim6reg0: group set to 0 [ 264.742477][ T9917] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 265.482981][ T9961] sd 0:0:1:0: PR command failed: 2 [ 265.525425][ T9961] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 265.582786][ T9961] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 265.778610][ T9977] netlink: 'syz.0.2094': attribute type 5 has an invalid length. [ 265.999242][ T9980] loop3: detected capacity change from 0 to 4096 [ 266.156139][ T9997] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.208531][ T9980] NILFS error (device loop3): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 266.340056][ T9989] loop1: detected capacity change from 0 to 4096 [ 266.407716][ T9980] Remounting filesystem read-only [ 266.429167][ T9989] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 266.584439][ T9989] ntfs: volume version 3.1. [ 266.988198][T10018] loop1: detected capacity change from 0 to 512 [ 267.064755][T10018] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 267.241815][T10022] loop3: detected capacity change from 0 to 4096 [ 267.291006][T10023] loop6: detected capacity change from 0 to 4096 [ 267.373825][T10022] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.407847][T10023] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 267.506227][T10022] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 268.245839][T10032] loop1: detected capacity change from 0 to 131072 [ 268.287939][T10032] F2FS-fs (loop1): invalid crc value [ 268.320160][T10032] F2FS-fs (loop1): Found nat_bits in checkpoint [ 268.349303][T10032] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 268.363943][T10032] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 268.400467][T10032] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 268.493938][T10008] loop4: detected capacity change from 0 to 32768 [ 268.548836][T10039] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 268.717177][T10008] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 268.852983][T10008] BTRFS info (device loop4): setting nodatacow, compression disabled [ 268.949159][T10008] BTRFS info (device loop4): disabling tree log [ 268.955438][T10008] BTRFS info (device loop4): turning on async discard [ 269.097246][T10008] BTRFS info (device loop4): max_inline at 0 [ 269.159505][T10008] BTRFS info (device loop4): using free space tree [ 269.227071][T10008] BTRFS info (device loop4): has skinny extents [ 269.895240][T10045] loop6: detected capacity change from 0 to 32768 [ 269.985160][T10045] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 270.429108][ T9211] ocfs2: Unmounting device (7,6) on (node local) [ 270.453695][T10008] BTRFS error (device loop4): open_ctree failed: -22 [ 270.783726][T10076] loop0: detected capacity change from 0 to 32768 [ 271.040625][T10096] loop1: detected capacity change from 0 to 256 [ 271.149847][T10100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 271.408515][T10107] vivid-001: disconnect [ 271.477288][T10103] vivid-001: reconnect [ 271.748141][T10116] loop6: detected capacity change from 0 to 1024 [ 271.941922][T10116] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,errors=remount-ro,. Quota mode: none. [ 272.033520][T10088] loop3: detected capacity change from 0 to 32768 [ 272.066696][T10116] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.195948][T10116] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: comm syz.6.2133: lblock 0 mapped to illegal pblock 0 (length 6) [ 272.292570][T10088] XFS (loop3): Mounting V5 Filesystem [ 272.396679][T10116] EXT4-fs (loop6): Remounting filesystem read-only [ 272.490890][T10088] XFS (loop3): Ending clean mount [ 272.731861][T10164] loop0: detected capacity change from 0 to 256 [ 272.825263][ T4189] XFS (loop3): Unmounting Filesystem [ 273.656459][ T4297] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 273.916415][ T4297] usb 1-1: Using ep0 maxpacket: 32 [ 274.046679][ T4297] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 274.079056][ T4297] usb 1-1: config 0 has no interface number 0 [ 274.266680][ T4297] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 274.296174][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.356665][ T4297] usb 1-1: Product: syz [ 274.376459][ T4297] usb 1-1: Manufacturer: syz [ 274.400981][ T4297] usb 1-1: SerialNumber: syz [ 274.438051][ T4297] usb 1-1: config 0 descriptor?? [ 274.497532][ T4297] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 274.720793][ T4297] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 274.795687][ T4297] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 274.936316][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 275.122909][ T4297] usb 1-1: USB disconnect, device number 14 [ 275.136203][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 275.178649][ T4297] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 275.276377][ T4297] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 275.331395][T10263] loop6: detected capacity change from 0 to 512 [ 275.346637][ T4297] quatech2 1-1:0.51: device disconnected [ 275.412096][T10263] EXT4-fs (loop6): Ignoring removed nobh option [ 275.461079][T10263] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 275.548093][T10263] EXT4-fs (loop6): 1 truncate cleaned up [ 275.585516][T10263] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nobh,data_err=ignore,nolazytime,norecovery,acl,,errors=continue. Quota mode: none. [ 275.933790][T10280] loop0: detected capacity change from 0 to 1764 [ 275.966215][ T4297] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 276.205492][T10284] loop6: detected capacity change from 0 to 2048 [ 276.253680][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 276.302888][T10284] NILFS (loop6): invalid segment: Magic number mismatch [ 276.326324][ T4297] usb 4-1: not running at top speed; connect to a high speed hub [ 276.364538][T10284] NILFS (loop6): trying rollback from an earlier position [ 276.400684][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 276.435691][T10284] NILFS (loop6): recovery complete [ 276.446336][ T4297] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 276.509106][T10298] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.526184][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.590195][T10284] NILFS (loop6): Segment number 127 to be freed is out of range [ 276.617196][ T4297] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 276.660781][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 276.686575][ T4297] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 276.723469][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.769890][ T4297] usb 4-1: config 0 descriptor?? [ 276.828166][ T4297] usb 4-1: Found UVC 9.00 device (046d:0825) [ 277.256187][ T4297] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 277.325677][T10331] loop4: detected capacity change from 0 to 64 [ 277.510920][T10331] hfs: unable to locate alternate MDB [ 277.539126][ T4297] usb 4-1: USB disconnect, device number 11 [ 277.577794][T10331] hfs: continuing without an alternate MDB [ 277.649057][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2197'. [ 278.274556][T10317] loop6: detected capacity change from 0 to 32768 [ 278.286260][T10367] bond0: option ad_select: unable to set because the bond device is up [ 278.385572][T10370] loop0: detected capacity change from 0 to 128 [ 278.483476][T10317] XFS (loop6): Mounting V5 Filesystem [ 278.580854][T10381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2208'. [ 278.741182][T10317] XFS (loop6): Ending clean mount [ 278.970574][ T9211] XFS (loop6): Unmounting Filesystem [ 279.135925][ T5242] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 279.172485][T10414] loop3: detected capacity change from 0 to 256 [ 279.538025][ T5242] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 279.567121][ T5242] usb 5-1: config 0 has no interface number 0 [ 279.583629][ T5242] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 279.788723][ T5242] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 279.813873][ T5242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.862663][ T5242] usb 5-1: Product: syz [ 279.888570][ T5242] usb 5-1: Manufacturer: syz [ 279.918852][ T5242] usb 5-1: SerialNumber: syz [ 279.952019][ T5242] usb 5-1: config 0 descriptor?? [ 280.000976][ T5242] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 280.570918][T10455] kvm [10454]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x39 [ 280.582756][T10460] netlink: 'syz.1.2231': attribute type 11 has an invalid length. [ 280.594493][T10459] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2232'. [ 280.614654][T10460] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.2231'. [ 281.384452][T10470] loop6: detected capacity change from 0 to 131072 [ 281.425528][T10470] F2FS-fs (loop6): Segment count (31) mismatch with total segments from devices (0) [ 281.434986][T10470] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 281.452239][T10470] F2FS-fs (loop6): invalid crc value [ 281.479566][T10470] F2FS-fs (loop6): Found nat_bits in checkpoint [ 281.522177][T10470] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 281.529487][T10470] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 281.544418][T10470] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 281.558929][T10472] loop3: detected capacity change from 0 to 512 [ 281.642442][T10472] EXT4-fs (loop3): Test dummy encryption mode enabled [ 281.722330][T10472] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.2237: inode #1: comm syz.3.2237: iget: illegal inode # [ 281.865794][ T26] audit: type=1400 audit(1792075732.739:70): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=10483 comm="syz.1.2241" name="p" offset=58 [ 281.885809][T10472] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2237: error while reading EA inode 1 err=-117 [ 281.932895][ T5239] usb 5-1: USB disconnect, device number 16 [ 281.970420][ T5239] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 281.992390][T10472] EXT4-fs (loop3): 1 orphan inode deleted [ 282.056707][T10472] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000009,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 282.237262][T10495] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 282.301199][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 282.382921][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 282.480312][T10504] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #13: comm syz.3.2237: corrupted inode contents [ 282.582976][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x5636 instead [ 282.666222][T10504] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #13: comm syz.3.2237: mark_inode_dirty error [ 282.742396][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xe5ea instead [ 282.808027][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 282.884065][T10504] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2237: invalid indirect mapped block 234881024 (level 0) [ 282.965329][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 283.028113][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 283.098526][T10504] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #13: comm syz.3.2237: corrupted inode contents [ 283.186282][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 283.287133][T10504] EXT4-fs error (device loop3): ext4_truncate:4286: inode #13: comm syz.3.2237: mark_inode_dirty error [ 283.307716][T10501] loop1: detected capacity change from 0 to 32768 [ 283.340408][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 283.358913][T10524] netlink: 'syz.4.2259': attribute type 5 has an invalid length. [ 283.402821][T10501] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2248 (10501) [ 283.431307][T10504] EXT4-fs error (device loop3) in ext4_setattr:5645: Corrupt filesystem [ 283.498365][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 283.541352][T10501] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 283.599938][T10472] jffs2: Further such events for this erase block will not be printed [ 283.613627][T10501] BTRFS info (device loop1): using free space tree [ 283.645045][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 283.675462][T10501] BTRFS info (device loop1): has skinny extents [ 283.729191][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 283.794053][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5636 instead [ 283.852694][T10501] BTRFS info (device loop1): enabling ssd optimizations [ 283.894357][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xe5ea instead [ 283.975211][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 284.039520][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 284.108884][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 284.181370][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 284.248219][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 284.309572][T10522] loop0: detected capacity change from 0 to 32768 [ 284.320076][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 284.408366][T10472] jffs2: Further such events for this erase block will not be printed [ 284.492953][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 284.581039][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 284.638916][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5636 instead [ 284.708428][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xe5ea instead [ 284.745901][T10567] loop4: detected capacity change from 0 to 512 [ 284.786425][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 284.822274][T10567] EXT4-fs (loop4): Ignoring removed oldalloc option [ 284.873083][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 284.892675][T10567] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 284.944838][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5636 instead [ 284.978688][T10571] loop6: detected capacity change from 0 to 512 [ 284.990618][T10567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 285.035260][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xe5ea instead [ 285.049247][T10571] EXT4-fs (loop6): Ignoring removed oldalloc option [ 285.072657][T10567] EXT4-fs (loop4): orphan cleanup on readonly fs [ 285.110240][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 285.124804][T10571] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 285.148062][T10567] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.2270: bad orphan inode 267 [ 285.174860][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 285.201052][T10567] EXT4-fs (loop4): Remounting filesystem read-only [ 285.231240][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5636 instead [ 285.263863][T10567] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 285.289528][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xe5ea instead [ 285.325656][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 285.380685][T10567] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.2270: dx entry: limit 0 != root limit 125 [ 285.403506][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 285.504823][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5636 instead [ 285.531203][T10567] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2270: Corrupt directory, running e2fsck is recommended [ 285.595382][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xe5ea instead [ 285.631208][T10578] loop6: detected capacity change from 0 to 1024 [ 285.669393][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 285.737934][T10578] hfsplus: invalid length 29440 has been corrected to 255 [ 285.776343][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 285.858750][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2265'. [ 285.867995][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5636 instead [ 285.927349][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2265'. [ 285.940293][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xe5ea instead [ 286.024640][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 286.099390][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 286.152797][T10594] loop0: detected capacity change from 0 to 512 [ 286.177112][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5636 instead [ 286.258678][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xe5ea instead [ 286.331499][T10599] loop1: detected capacity change from 0 to 512 [ 286.344724][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 286.448240][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 286.464278][T10599] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 286.542156][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5636 instead [ 286.564570][T10599] EXT4-fs (loop1): 1 truncate cleaned up [ 286.593626][T10599] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 286.641623][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xe5ea instead [ 286.684937][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 286.740044][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 286.801839][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5636 instead [ 286.812505][ T5241] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 286.872081][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xe5ea instead [ 286.937149][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 286.994968][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 287.059027][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5636 instead [ 287.074958][ T5241] usb 7-1: Using ep0 maxpacket: 16 [ 287.104719][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xe5ea instead [ 287.140256][T10584] loop4: detected capacity change from 0 to 32768 [ 287.163573][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 287.186946][ T26] audit: type=1400 audit(1792075738.060:71): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=10616 comm="syz.1.2290" name="foo" offset=55 [ 287.206433][ T5241] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.253945][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 287.273854][ T5241] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.300824][T10584] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 287.341341][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5636 instead [ 287.403300][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xe5ea instead [ 287.464625][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 287.498921][ T5241] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.522159][T10584] ocfs2: Unmounting device (7,4) on (node local) [ 287.538678][ T5241] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.559488][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 287.580252][ T5241] usb 7-1: Product: syz [ 287.584448][ T5241] usb 7-1: Manufacturer: syz [ 287.618320][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5636 instead [ 287.643590][ T5241] usb 7-1: SerialNumber: syz [ 287.691411][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xe5ea instead [ 287.732393][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 287.812227][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 287.832896][T10611] loop0: detected capacity change from 0 to 32768 [ 287.857133][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5636 instead [ 287.892462][T10611] /dev/loop0: Can't open blockdev [ 287.941210][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xe5ea instead [ 287.994894][ T5241] usb 7-1: 0:2 : does not exist [ 288.002237][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 288.095907][ T5241] usb 7-1: USB disconnect, device number 2 [ 288.109561][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 288.200737][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.239057][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5636 instead [ 288.301030][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xe5ea instead [ 288.377770][T10638] loop0: detected capacity change from 0 to 64 [ 288.391292][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 288.424315][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2299'. [ 288.470469][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 288.493270][T10085] kernel write not supported for file /snd/seq (pid: 10085 comm: kworker/0:20) [ 288.539661][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5636 instead [ 288.614097][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xe5ea instead [ 288.690165][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 288.731679][T10649] loop0: detected capacity change from 0 to 16 [ 288.750812][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 288.779977][T10649] /dev/loop0: Can't open blockdev [ 288.820096][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5636 instead [ 288.873418][ T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 288.906741][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xe5ea instead [ 288.991028][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 289.071366][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 289.103319][ T26] audit: type=1326 audit(1792075739.970:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10658 comm="syz.4.2309" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 289.153195][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5636 instead [ 289.177254][ T13] usb 7-1: Using ep0 maxpacket: 8 [ 289.218471][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xe5ea instead [ 289.250393][ T26] audit: type=1326 audit(1792075740.000:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10658 comm="syz.4.2309" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 289.299095][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 289.315022][ T13] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 289.352359][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.370721][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 289.431194][ T26] audit: type=1326 audit(1792075740.000:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10658 comm="syz.4.2309" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 289.458260][ T13] pvrusb2: Hardware description: Terratec Grabster AV400 [ 289.470936][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5636 instead [ 289.500179][T10671] netlink: 'syz.1.2315': attribute type 1 has an invalid length. [ 289.512657][ T13] pvrusb2: ********** [ 289.535233][ T13] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 289.548564][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xe5ea instead [ 289.564988][T10671] netlink: 'syz.1.2315': attribute type 2 has an invalid length. [ 289.587376][ T13] pvrusb2: Important functionality might not be entirely working. [ 289.602368][T10676] netlink: 'syz.1.2315': attribute type 1 has an invalid length. [ 289.611594][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 289.631119][ T26] audit: type=1326 audit(1792075740.000:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10658 comm="syz.4.2309" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdfee4b6559 code=0x7ffc0000 [ 289.670506][ T13] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 289.684749][T10676] netlink: 'syz.1.2315': attribute type 2 has an invalid length. [ 289.696877][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 289.727632][ T13] pvrusb2: ********** [ 289.737303][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5636 instead [ 289.781429][T10680] loop0: detected capacity change from 0 to 512 [ 289.800760][ T2426] pvrusb2: Invalid write control endpoint [ 289.826660][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xe5ea instead [ 289.860273][T10682] loop4: detected capacity change from 0 to 8 [ 289.882913][T10680] overlayfs: failed to clone upperpath [ 289.921865][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 290.000438][ T13] usb 7-1: USB disconnect, device number 3 [ 290.007344][T10682] SQUASHFS error: lzo decompression failed, data probably corrupt [ 290.034790][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 290.101733][T10682] SQUASHFS error: Failed to read block 0x144: -5 [ 290.138438][ T2426] pvrusb2: Invalid write control endpoint [ 290.148847][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5636 instead [ 290.173418][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 290.184058][T10682] SQUASHFS error: Unable to read metadata cache entry [142] [ 290.212801][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xe5ea instead [ 290.239762][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 290.249326][T10682] SQUASHFS error: Unable to read inode 0x11f [ 290.273176][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 290.294158][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 290.314977][T10693] netlink: 774 bytes leftover after parsing attributes in process `syz.0.2324'. [ 290.334277][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 290.352555][ T2426] pvrusb2: Device being rendered inoperable [ 290.408695][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 290.431814][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5636 instead [ 290.452110][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 290.490298][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xe5ea instead [ 290.533783][T10697] scsi_strcpy_devinfo: model string 'w|auNӤ1pEwzdz' is too long [ 290.575013][ T2426] pvrusb2: Attached sub-driver cx25840 [ 290.589947][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 290.601674][T10700] netem: incorrect ge model size [ 290.631763][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 290.663702][T10700] netem: change failed [ 290.691523][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 290.719470][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 290.772547][ T5241] wiimote 0005:057E:0306.000E: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 290.782993][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5636 instead [ 290.825747][T10710] loop0: detected capacity change from 0 to 64 [ 290.852536][ T5241] wiimote 0005:057E:0306.000E: New device registered [ 290.875366][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xe5ea instead [ 290.936804][T10713] loop6: detected capacity change from 0 to 512 [ 290.958364][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2331'. [ 290.983410][T10714] device veth0_to_bond entered promiscuous mode [ 291.007248][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 291.099084][T10714] device macsec1 entered promiscuous mode [ 291.108885][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 291.162174][T10713] EXT4-fs (loop6): Test dummy encryption mode enabled [ 291.226012][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5636 instead [ 291.244285][ T13] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 291.253451][T10713] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 291.300741][T10718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2334'. [ 291.331378][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xe5ea instead [ 291.345476][T10713] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 291.382576][T10713] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,inode_readahead_blks=0x0000000000080000,prjquota,noauto_da_alloc,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 291.430384][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 291.481885][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 291.523155][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5636 instead [ 291.564000][T10713] EXT4-fs error (device loop6): htree_dirblock_to_tree:1083: inode #2: comm syz.6.2333: Directory hole found for htree leaf block 0 [ 291.586681][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xe5ea instead [ 291.612767][T10728] loop0: detected capacity change from 0 to 512 [ 291.631727][T10707] wiimote 0005:057E:0306.000E: Device removed [ 291.651311][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 291.674328][ T13] usb 2-1: no configurations [ 291.700582][ T13] usb 2-1: can't read configurations, error -22 [ 291.737794][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 291.817576][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5636 instead [ 291.868577][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xe5ea instead [ 291.949680][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 291.960565][ T5239] wiimote 0005:057E:0306.000E: detected device: Nintendo Wii Remote (Gen 1) [ 291.994007][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 292.041131][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5636 instead [ 292.080563][ T5239] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input26 [ 292.096598][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xe5ea instead [ 292.143969][ T5239] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input27 [ 292.164189][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 292.201594][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 292.222471][ T5239] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000E/input/input25 [ 292.247826][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5636 instead [ 292.338378][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xe5ea instead [ 292.369315][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 292.408445][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 292.449440][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5636 instead [ 292.484877][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xe5ea instead [ 292.542512][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 292.564139][ T4298] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 292.607863][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 292.640855][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5636 instead [ 292.671874][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xe5ea instead [ 292.694235][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 292.732010][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 292.771765][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5636 instead [ 292.807822][ T4298] usb 7-1: Using ep0 maxpacket: 32 [ 292.814127][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xe5ea instead [ 292.836016][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2345'. [ 292.859640][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 292.897290][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 292.938248][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5636 instead [ 292.954371][ T4298] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.982064][ T4298] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.003516][T10472] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xe5ea instead [ 293.020495][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.041699][ T4298] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.051921][T10472] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 293.067835][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.087432][ T4298] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 293.102847][T10472] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 293.116394][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.141128][ T4298] usb 7-1: config 0 interface 0 has no altsetting 0 [ 293.153637][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.168752][ T4298] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 293.179169][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.194636][ T4298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.203264][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.225739][ T4298] usb 7-1: config 0 descriptor?? [ 293.239812][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.252007][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.269227][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.281996][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.417450][T10756] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2350'. [ 293.511806][T10762] block2mtd: illegal erase size [ 293.707145][ T4298] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 293.737151][ T4298] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 293.769948][ T4298] hid-thrustmaster 0003:044F:B65D.000F: item fetching failed at offset 2/5 [ 293.796989][T10777] loop0: detected capacity change from 0 to 512 [ 293.810308][ T4298] hid-thrustmaster 0003:044F:B65D.000F: parse failed with error -22 [ 293.821525][T10776] loop3: detected capacity change from 0 to 2048 [ 293.851384][T10777] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 293.872411][ T4298] hid-thrustmaster: probe of 0003:044F:B65D.000F failed with error -22 [ 293.920459][T10776] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 293.934635][T10777] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 293.968608][ T4298] usb 7-1: USB disconnect, device number 4 [ 293.989188][T10777] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 294.036801][ T26] audit: type=1800 audit(1792075744.911:76): pid=10776 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.2358" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 294.058257][T10776] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 294.080414][T10777] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none. [ 294.110211][T10783] loop4: detected capacity change from 0 to 256 [ 294.121486][T10776] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 294.165518][T10777] EXT4-fs (loop0): shut down requested (1) [ 294.184056][T10783] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 294.209999][T10776] EXT4-fs (loop3): This should not happen!! Data will be lost [ 294.209999][T10776] [ 294.233725][T10776] EXT4-fs (loop3): Total free blocks count 0 [ 294.267531][T10776] EXT4-fs (loop3): Free/Dirty block details [ 294.303566][T10776] EXT4-fs (loop3): free_blocks=2415919104 [ 294.311013][T10776] EXT4-fs (loop3): dirty_blocks=32 [ 294.363054][T10776] EXT4-fs (loop3): Block reservation details [ 294.390192][T10776] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 294.680780][T10789] loop4: detected capacity change from 0 to 4096 [ 294.750024][T10789] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 294.802615][T10801] loop6: detected capacity change from 0 to 1024 [ 294.992460][T10807] loop3: detected capacity change from 0 to 1024 [ 295.022111][T10789] ntfs3: loop4: ino=5, "/" directory corrupted [ 295.082954][T10807] EXT4-fs (loop3): Ignoring removed bh option [ 295.091568][T10789] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 295.125372][ T4857] hfsplus: b-tree write err: -5, ino 3 [ 295.222207][T10789] ntfs3: loop4: ino=5, "/" directory corrupted [ 295.231706][T10807] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resuid=0x0000000000000000,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 295.834738][T10805] loop0: detected capacity change from 0 to 32768 [ 295.973602][ T4204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4204) [ 296.086676][ T5241] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 296.456114][T10853] loop6: detected capacity change from 0 to 2048 [ 296.493935][ T5241] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.564902][ T5241] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.599421][T10853] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000fff,abort,,errors=continue. Quota mode: none. [ 296.665768][ T5241] usb 4-1: config 0 interface 0 has no altsetting 0 [ 296.672423][ T5241] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 296.742483][ T5241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.779858][ T5241] usb 4-1: config 0 descriptor?? [ 297.245506][T10884] kAFS: bad VL server IP address [ 297.287747][ T5241] hid-multitouch 0003:0EEF:72C4.0010: unbalanced collection at end of report description [ 297.322218][ T5241] hid-multitouch: probe of 0003:0EEF:72C4.0010 failed with error -22 [ 297.336512][T10888] netlink: 'syz.6.2404': attribute type 12 has an invalid length. [ 297.375348][T10888] netlink: 'syz.6.2404': attribute type 29 has an invalid length. [ 297.405751][T10888] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2404'. [ 297.433037][T10888] netlink: 'syz.6.2404': attribute type 1 has an invalid length. [ 297.454460][T10888] netlink: 'syz.6.2404': attribute type 2 has an invalid length. [ 297.495456][ T5239] usb 4-1: USB disconnect, device number 12 [ 297.533686][ T5241] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 297.561741][T10892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2406'. [ 297.589236][T10892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2406'. [ 297.738557][T10900] loop6: detected capacity change from 0 to 4096 [ 297.760871][T10904] loop4: detected capacity change from 0 to 128 [ 297.829140][T10905] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.871196][T10904] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 297.893631][ T5241] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.935977][ T5241] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 297.970245][ T5241] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.153900][ T5241] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 298.187430][ T5241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 298.217121][ T5241] usb 1-1: Product: syz [ 298.230743][ T5241] usb 1-1: Manufacturer: syz [ 298.236066][ T5241] usb 1-1: SerialNumber: syz [ 298.427040][T10922] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 298.504494][ T5241] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 298.719225][ T5236] usb 1-1: USB disconnect, device number 15 [ 298.785435][ T5236] usblp0: removed [ 299.029201][T10937] set_capacity_and_notify: 2 callbacks suppressed [ 299.029213][T10937] loop1: detected capacity change from 0 to 1024 [ 299.208067][ T9] hfsplus: b-tree write err: -5, ino 25 [ 299.260863][ T9] hfsplus: b-tree write err: -5, ino 4 [ 299.290712][ T9] hfsplus: b-tree write err: -5, ino 2 [ 299.485155][T10951] loop1: detected capacity change from 0 to 256 [ 299.561781][T10955] bonding: no command found in bonding_masters - use +ifname or -ifname [ 299.622360][T10951] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 299.726989][T10959] i2c i2c-0: delete_device: Can't parse I2C address [ 299.979104][T10928] loop3: detected capacity change from 0 to 40427 [ 300.046858][T10928] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 300.087861][T10975] [ 300.117518][T10928] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 300.180551][T10979] loop0: detected capacity change from 0 to 512 [ 300.204143][T10928] F2FS-fs (loop3): invalid crc value [ 300.261362][T10928] F2FS-fs (loop3): Found nat_bits in checkpoint [ 300.509070][T10928] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 300.534427][T10928] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 300.555162][T10995] loop0: detected capacity change from 0 to 512 [ 300.571051][T10998] loop6: detected capacity change from 0 to 1024 [ 300.577854][T10999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2450'. [ 300.707343][T10998] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 2: comm syz.6.2452: lblock 2 mapped to illegal pblock 2 (length 1) [ 300.832218][T10998] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 300.859008][T11004] loop4: detected capacity change from 0 to 1024 [ 300.890872][T10998] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 48: comm syz.6.2452: lblock 0 mapped to illegal pblock 48 (length 1) [ 300.913342][ T4189] attempt to access beyond end of device [ 300.913342][ T4189] loop3: rw=2049, want=40968, limit=40427 [ 300.969339][T10998] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 301.001702][T11004] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 301.037472][T10998] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.2452: Failed to acquire dquot type 0 [ 301.069479][T10998] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 301.103055][T11004] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.123804][T10998] EXT4-fs error (device loop6): ext4_evict_inode:284: inode #11: comm syz.6.2452: mark_inode_dirty error [ 301.162471][T10998] EXT4-fs warning (device loop6): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 301.210789][T11004] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.2454: Freeing blocks not in datazone - block = 0, count = 16 [ 301.228039][T10998] EXT4-fs (loop6): 1 orphan inode deleted [ 301.237269][T10998] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 301.263583][ T4292] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 301.287097][T11004] EXT4-fs (loop4): Remounting filesystem read-only [ 301.301556][ T4292] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 301.357945][ T4292] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 301.441367][ T26] audit: type=1800 audit(1792141288.305:77): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.0.2465" name="features" dev="configfs" ino=56140 res=0 errno=0 [ 301.468119][ T9211] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 301.597337][ T9211] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 301.650731][ T9211] EXT4-fs error (device loop6): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 301.672900][T11010] loop0: detected capacity change from 0 to 2048 [ 301.872011][T11017] loop3: detected capacity change from 0 to 64 [ 301.963344][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2466'. [ 302.122762][T11021] loop0: detected capacity change from 0 to 4096 [ 302.226110][T11023] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.475701][T11031] netem: incorrect ge model size [ 302.512965][T11031] netem: change failed [ 302.640416][ T26] audit: type=1400 audit(1792141289.505:78): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="::o" pid=11032 comm="syz.0.2464" [ 302.771825][T11039] device veth0_to_bond entered promiscuous mode [ 302.794015][T11039] device macsec1 entered promiscuous mode [ 303.157980][T11025] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 303.169800][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2473'. [ 303.186749][T11051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2474'. [ 303.210641][T11025] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 303.269905][T11025] F2FS-fs (loop3): invalid crc value [ 303.328026][T11025] F2FS-fs (loop3): Found nat_bits in checkpoint [ 303.567059][T11025] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 303.580750][T11061] netem: incorrect ge model size [ 303.605562][T11061] netem: change failed [ 303.609808][T11025] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 303.894844][ T4189] attempt to access beyond end of device [ 303.894844][ T4189] loop3: rw=2049, want=45104, limit=40427 [ 304.560921][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2489'. [ 304.815778][T11097] netlink: 'syz.6.2491': attribute type 27 has an invalid length. [ 304.865612][T11097] netlink: 'syz.6.2491': attribute type 25 has an invalid length. [ 305.268036][T11070] set_capacity_and_notify: 4 callbacks suppressed [ 305.268048][T11070] loop4: detected capacity change from 0 to 32768 [ 305.320687][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2504'. [ 305.448262][T11070] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 305.547313][T11070] JBD2: Ignoring recovery information on journal [ 305.710250][T11070] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 305.733656][ T5238] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 305.809013][T11145] loop6: detected capacity change from 0 to 512 [ 305.847499][T11145] FAT-fs (loop6): Unrecognized mount option "֛6GJR .zQ\wFMx7D7U d~zGcxEb4'IG(;e7+ʞ:!Y/Q:|ֿ'WMf_Z8{V@ Ayv7۾?3/R 5?: !l\z{0o-a18446744073709551615" or missing value [ 305.947298][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 306.003573][ T5238] usb 4-1: Using ep0 maxpacket: 16 [ 306.156382][ T5238] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 306.178631][ T5238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.216533][ T5238] usb 4-1: config 0 has no interface number 0 [ 306.369978][T11160] program syz.4.2519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.394380][ T5238] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 306.418018][ T5238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.436463][T11162] pimreg: tun_chr_ioctl cmd 1074025677 [ 306.449712][ T5238] usb 4-1: Product: syz [ 306.456915][T11162] pimreg: linktype set to 1 [ 306.468914][ T5238] usb 4-1: Manufacturer: syz [ 306.479302][ T5238] usb 4-1: SerialNumber: syz [ 306.502613][ T5238] usb 4-1: config 0 descriptor?? [ 306.556553][ T5238] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 306.580819][ T5238] usb 4-1: No valid video chain found. [ 306.770255][T10085] usb 4-1: USB disconnect, device number 13 [ 306.884267][ T5238] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 306.909987][T11164] loop4: detected capacity change from 0 to 32768 [ 306.982192][T11164] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #29: signature =  [ 307.075419][T11164] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 307.102523][T11164] OCFS2: Returning error to the calling process. [ 307.113983][T11174] loop0: detected capacity change from 0 to 8192 [ 307.120488][T11164] (syz.4.2523,11164,0):ocfs2_read_locked_inode:554 ERROR: status = -5 [ 307.181386][T11164] (syz.4.2523,11164,0):_ocfs2_get_system_file_inode:141 ERROR: status = -5 [ 307.225721][T11164] (syz.4.2523,11164,0):ocfs2_init_local_system_inodes:493 ERROR: status=-30, sysfile=12, slot=0 [ 307.255882][ T5238] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.283240][ T5238] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 307.302346][T11164] (syz.4.2523,11164,0):ocfs2_init_local_system_inodes:502 ERROR: status = -30 [ 307.331544][T11164] (syz.4.2523,11164,0):ocfs2_mount_volume:1818 ERROR: status = -30 [ 307.388784][T11164] (syz.4.2523,11164,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 307.483755][ T5238] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.503107][ T5238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.564712][ T5238] usb 7-1: Product: syz [ 307.579167][ T5238] usb 7-1: Manufacturer: syz [ 307.597152][ T5238] usb 7-1: SerialNumber: syz [ 307.688982][T11184] hub 1-0:1.0: USB hub found [ 307.703646][T11184] hub 1-0:1.0: 1 port detected [ 307.769221][T11186] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 307.861850][T11166] udc-core: couldn't find an available UDC or it's busy [ 307.903544][T11166] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 307.911269][T11191] loop3: detected capacity change from 0 to 1024 [ 307.997203][ T5238] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 308.056058][ T5238] usb 7-1: USB disconnect, device number 5 [ 308.400616][T11208] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2542'. [ 308.585840][ T5238] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 308.690450][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 308.856158][T11234] rnbd_client L211: map_device: Parameters missing [ 308.973674][ T5238] usb 7-1: config index 0 descriptor too short (expected 301, got 72) [ 309.004074][ T5238] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 309.060512][ T5238] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.111197][ T5238] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 309.140953][ T5238] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 309.168578][ T5238] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 309.188217][ T5238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.463684][ T5238] usb 7-1: usb_control_msg returned -71 [ 309.469298][ T5238] usbtmc 7-1:16.0: can't read capabilities [ 309.542690][ T5238] usb 7-1: USB disconnect, device number 6 [ 309.668078][T11265] loop4: detected capacity change from 0 to 4096 [ 309.721286][T11265] ntfs3: loop4: Failed to load $Volume. [ 310.105545][T11284] loop0: detected capacity change from 0 to 256 [ 310.166306][T11284] /dev/loop0: Can't open blockdev [ 310.214441][T11290] loop1: detected capacity change from 0 to 8 [ 310.383579][ T5238] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 310.402190][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2585'. [ 310.975635][T11297] loop6: detected capacity change from 0 to 131072 [ 311.044584][T11297] F2FS-fs (loop6): invalid crc value [ 311.064515][T11297] F2FS-fs (loop6): Found nat_bits in checkpoint [ 311.096277][T11297] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 311.118830][T11297] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 311.225010][ T5238] usb 4-1: Using ep0 maxpacket: 16 [ 311.387395][T11309] loop1: detected capacity change from 0 to 512 [ 311.505161][ T5238] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 311.547992][T11309] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 311.569266][T11308] loop0: detected capacity change from 0 to 4096 [ 311.577855][ T5238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.589101][T11309] System zones: 0-2, 18-18, 34-35 [ 311.618925][T11308] /dev/loop0: Can't open blockdev [ 311.629550][ T5238] usb 4-1: Product: syz [ 311.636663][T11309] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 311.660760][ T5238] usb 4-1: Manufacturer: syz [ 311.695511][ T5238] usb 4-1: SerialNumber: syz [ 311.715974][T11309] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.862926][ T26] audit: type=1800 audit(1792141295.725:79): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.2592" name="protocol" dev="configfs" ino=57462 res=0 errno=0 [ 312.432881][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2597'. [ 312.673771][ T5238] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 312.721344][ T5238] usb 4-1: USB disconnect, device number 14 [ 312.731426][T11342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2605'. [ 312.920823][T11351] netlink: 'syz.0.2609': attribute type 4 has an invalid length. [ 312.957233][T11351] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2609'. [ 313.532320][ T26] audit: type=1326 audit(1792141297.395:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11374 comm="syz.1.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6ac1559 code=0x7ffc0000 [ 313.682443][ T26] audit: type=1326 audit(1792141297.435:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11374 comm="syz.1.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f05f6ac1559 code=0x7ffc0000 [ 313.785601][T11388] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2626'. [ 313.833019][ T26] audit: type=1326 audit(1792141297.435:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11374 comm="syz.1.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6ac1559 code=0x7ffc0000 [ 313.982904][T11398] loop3: detected capacity change from 0 to 164 [ 314.003495][ T26] audit: type=1326 audit(1792141297.445:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11374 comm="syz.1.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6ac1559 code=0x7ffc0000 [ 314.160176][ T26] audit: type=1326 audit(1792141297.445:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11374 comm="syz.1.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05f6ac1559 code=0x7ffc0000 [ 314.287248][ T26] audit: type=1326 audit(1792141297.445:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11374 comm="syz.1.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6ac1559 code=0x7ffc0000 [ 314.344886][ T26] audit: type=1326 audit(1792141297.445:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11374 comm="syz.1.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6ac1559 code=0x7ffc0000 [ 314.401685][ T26] audit: type=1326 audit(1792141297.445:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11374 comm="syz.1.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f05f6ac1559 code=0x7ffc0000 [ 314.429940][ T5239] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 314.443332][ T26] audit: type=1326 audit(1792141297.445:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11374 comm="syz.1.2620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f6ac1559 code=0x7ffc0000 [ 314.715924][ T5239] usb 7-1: Using ep0 maxpacket: 8 [ 315.005119][ T5239] usb 7-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 315.023111][ T5239] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 315.052224][ T5239] usb 7-1: Product: syz [ 315.067266][ T5239] usb 7-1: Manufacturer: syz [ 315.080058][ T5239] usb 7-1: SerialNumber: syz [ 315.108190][ T5239] usb 7-1: config 0 descriptor?? [ 315.164989][ T5239] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 315.271176][T11436] loop3: detected capacity change from 0 to 2048 [ 315.395764][ T5239] gspca_sn9c2028: read1 error -32 [ 315.433622][ T5239] gspca_sn9c2028: read1 error -32 [ 315.688922][ T5239] usb 7-1: USB disconnect, device number 7 [ 316.468314][T11454] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2653'. [ 316.513592][T11364] block2mtd: error: cannot open device /dev/ [ 316.578026][T11458] loop6: detected capacity change from 0 to 512 [ 316.647137][T11458] EXT4-fs (loop6): Ignoring removed nobh option [ 316.686505][T11458] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 316.743147][T11458] EXT4-fs (loop6): 1 truncate cleaned up [ 316.769485][T11458] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 316.998958][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.005401][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.160780][T11481] loop0: detected capacity change from 0 to 256 [ 317.885035][T11522] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2687'. [ 317.902844][T11521] loop1: detected capacity change from 0 to 256 [ 318.006078][T11530] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 318.277992][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 318.349158][T11547] loop1: detected capacity change from 0 to 1024 [ 318.456966][T11550] program syz.0.2698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.563657][T10085] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 318.848353][T11561] rxe_eth0 speed is unknown, defaulting to 1000 [ 318.945971][T10085] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 318.959151][T11568] netlink: 'syz.3.2707': attribute type 11 has an invalid length. [ 318.978730][T10085] usb 7-1: config 0 has no interface number 0 [ 319.005284][T10085] usb 7-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 319.173742][T10085] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 319.211558][T10085] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 319.252666][T10085] usb 7-1: Product: syz [ 319.270487][T10085] usb 7-1: SerialNumber: syz [ 319.301330][T10085] usb 7-1: config 0 descriptor?? [ 319.369349][T11575] loop3: detected capacity change from 0 to 4096 [ 319.380758][T10085] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 319.480448][T11575] NILFS (loop3): invalid segment: Checksum error in segment payload [ 319.519221][T11575] NILFS (loop3): trying rollback from an earlier position [ 319.589666][T11575] NILFS (loop3): recovery complete [ 319.643026][T11577] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.713821][T10085] usb 7-1: USB disconnect, device number 8 [ 320.146200][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 320.146212][ T26] audit: type=1400 audit(1792141560.015:90): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=11594 comm="syz.4.2718" name="unknown" offset=16 [ 320.351327][ T26] audit: type=1400 audit(1792141560.215:91): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=11599 comm="syz.4.2720" name="foo" offset=71 [ 320.639846][T11614] sd 0:0:1:0: PR command failed: 2 [ 320.672640][T11614] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 320.697000][T11616] loop0: detected capacity change from 0 to 256 [ 320.722140][T11614] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 321.072074][T11620] loop4: detected capacity change from 0 to 4096 [ 321.142539][T11620] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 321.171243][T11628] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 321.192621][T11624] loop0: detected capacity change from 0 to 4096 [ 321.255059][T11624] /dev/loop0: Can't open blockdev [ 321.401472][T11620] ntfs: volume version 3.1. [ 321.636487][T11639] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 321.936096][T11652] netlink: 'syz.6.2745': attribute type 1 has an invalid length. [ 321.995742][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2745'. [ 322.363530][ T5239] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 322.505405][T11674] loop4: detected capacity change from 0 to 2048 [ 322.593105][T11674] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=262151, location=262151 [ 322.719084][T11674] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.773681][ T5239] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.828668][ T5239] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.993872][ T5239] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 323.063560][ T5239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 323.080692][T11696] loop3: detected capacity change from 0 to 1764 [ 323.109908][ T5239] usb 1-1: Product: syz [ 323.157309][ T5239] usb 1-1: Manufacturer: syz [ 323.235049][ T5239] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 323.458380][T11703] loop3: detected capacity change from 0 to 512 [ 323.522061][T11703] EXT4-fs (loop3): Ignoring removed nobh option [ 323.582633][T11703] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 323.662553][T11703] EXT4-fs (loop3): 1 truncate cleaned up [ 323.684029][T11703] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nobh,data_err=ignore,nolazytime,norecovery,acl,,errors=continue. Quota mode: none. [ 323.716268][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2770'. [ 323.792296][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2770'. [ 323.904278][T11657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.923532][ T5239] mos7840: probe of ttyUSB0 failed with error -71 [ 323.965113][ T5239] usb 1-1: USB disconnect, device number 16 [ 324.039191][ T5239] mos7840 1-1:1.0: device disconnected [ 324.312482][T11694] loop6: detected capacity change from 0 to 40427 [ 324.381992][T11694] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 324.445658][T11694] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 324.567127][T11694] F2FS-fs (loop6): Found nat_bits in checkpoint [ 324.699689][T11735] loop1: detected capacity change from 0 to 64 [ 324.747031][T11694] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 324.755887][ T7806] wlan1: Trigger new scan to find an IBSS to join [ 324.797761][T11735] hfs: unable to locate alternate MDB [ 324.829562][T11694] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 324.838164][T11735] hfs: continuing without an alternate MDB [ 325.096630][ T9211] attempt to access beyond end of device [ 325.096630][ T9211] loop6: rw=2049, want=45104, limit=40427 [ 326.139994][T11775] loop0: detected capacity change from 0 to 4096 [ 326.281958][T11778] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2800'. [ 326.409289][T11751] loop1: detected capacity change from 0 to 32768 [ 326.590933][T11751] XFS (loop1): Mounting V5 Filesystem [ 326.745975][T11751] XFS (loop1): Ending clean mount [ 326.856447][ T4191] XFS (loop1): Unmounting Filesystem [ 327.140189][T11773] loop3: detected capacity change from 0 to 40427 [ 327.200529][T11773] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 327.258066][T11773] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 327.379209][T11773] F2FS-fs (loop3): Found nat_bits in checkpoint [ 327.566972][T11812] loop4: detected capacity change from 0 to 164 [ 327.611715][T11773] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 327.677511][T11773] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 327.767421][T11816] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 327.807394][T11818] loop1: detected capacity change from 0 to 512 [ 327.918579][T11818] EXT4-fs (loop1): Ignoring removed oldalloc option [ 327.973788][T11818] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 328.071802][T11818] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 328.132944][T11818] EXT4-fs (loop1): orphan cleanup on readonly fs [ 328.164574][ T4189] attempt to access beyond end of device [ 328.164574][ T4189] loop3: rw=2049, want=45104, limit=40427 [ 328.184624][T11818] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.2819: bad orphan inode 267 [ 328.245614][T11818] EXT4-fs (loop1): Remounting filesystem read-only [ 328.252148][T11818] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 328.442369][T11818] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.2819: dx entry: limit 0 != root limit 125 [ 328.529963][T11818] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2819: Corrupt directory, running e2fsck is recommended [ 328.558873][T11837] loop6: detected capacity change from 0 to 512 [ 328.637098][T11837] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 328.726726][T11837] EXT4-fs (loop6): 1 truncate cleaned up [ 328.757612][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2823'. [ 328.787251][T11837] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 328.867089][T11843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2823'. [ 329.006031][ T26] audit: type=1400 audit(1792141568.875:92): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=11847 comm="syz.4.2827" name="foo" offset=55 [ 329.379734][ T26] audit: type=1326 audit(1792141569.245:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11864 comm="syz.3.2833" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054de0b559 code=0x7ffc0000 [ 329.559295][T11877] netlink: 'syz.3.2837': attribute type 1 has an invalid length. [ 329.567496][ T26] audit: type=1326 audit(1792141569.275:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11864 comm="syz.3.2833" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054de0b559 code=0x7ffc0000 [ 329.642303][T11877] netlink: 'syz.3.2837': attribute type 2 has an invalid length. [ 329.686247][T11878] netlink: 'syz.3.2837': attribute type 1 has an invalid length. [ 329.714378][ T9] wlan1: Trigger new scan to find an IBSS to join [ 329.727129][ T26] audit: type=1326 audit(1792141569.275:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11864 comm="syz.3.2833" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f054de0b559 code=0x7ffc0000 [ 329.752980][T11881] loop6: detected capacity change from 0 to 8 [ 329.763253][T11878] netlink: 'syz.3.2837': attribute type 2 has an invalid length. [ 329.772407][T11876] loop0: detected capacity change from 0 to 4096 [ 329.821633][T11881] SQUASHFS error: lzo decompression failed, data probably corrupt [ 329.877921][T11881] SQUASHFS error: Failed to read block 0x144: -5 [ 329.884722][T11876] /dev/loop0: Can't open blockdev [ 329.937504][T11881] SQUASHFS error: Unable to read metadata cache entry [142] [ 329.950053][ T26] audit: type=1326 audit(1792141569.275:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11864 comm="syz.3.2833" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f054de0b559 code=0x7ffc0000 [ 330.020286][T11881] SQUASHFS error: Unable to read inode 0x11f [ 330.262162][T11889] scsi_strcpy_devinfo: model string 'w|auNӤ1pEwzdz' is too long [ 330.499661][T11857] loop1: detected capacity change from 0 to 40427 [ 330.562098][T11857] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 330.611775][T11857] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 330.696262][T11857] F2FS-fs (loop1): Found nat_bits in checkpoint [ 330.724380][ T5238] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 330.769542][ T144] wlan1: Creating new IBSS network, BSSID 96:b1:11:e7:71:3b [ 330.908646][T11857] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 330.947993][T11857] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 331.003683][ T5238] usb 4-1: Using ep0 maxpacket: 32 [ 331.147425][ T5238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.191880][ T5238] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.238450][ T5238] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.291913][ T5238] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 331.316427][ T5238] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.323157][ T5238] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 331.336987][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.352886][ T5238] usb 4-1: config 0 descriptor?? [ 331.366364][ T4191] attempt to access beyond end of device [ 331.366364][ T4191] loop1: rw=2049, want=45104, limit=40427 [ 331.609512][T11945] loop0: detected capacity change from 0 to 4096 [ 331.660942][T11945] /dev/loop0: Can't open blockdev [ 331.838409][ T5238] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 331.863701][ T5238] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 331.900658][ T5238] hid-thrustmaster 0003:044F:B65D.0011: item fetching failed at offset 2/5 [ 331.937742][ T5238] hid-thrustmaster 0003:044F:B65D.0011: parse failed with error -22 [ 331.952643][T11955] loop0: detected capacity change from 0 to 512 [ 331.964053][ T5238] hid-thrustmaster: probe of 0003:044F:B65D.0011 failed with error -22 [ 332.177241][T11958] program syz.6.2874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.232088][ T5238] usb 4-1: USB disconnect, device number 15 [ 332.408519][T11965] pimreg: tun_chr_ioctl cmd 1074025677 [ 332.448413][T11965] pimreg: linktype set to 1 [ 332.789434][T11978] loop1: detected capacity change from 0 to 1024 [ 332.922357][ T26] audit: type=1400 audit(1792141569.792:97): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="::o" pid=11979 comm="syz.3.2884" [ 332.966287][T11978] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 333.072271][T11978] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.205446][T11978] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.2882: Freeing blocks not in datazone - block = 0, count = 16 [ 333.291702][T11978] EXT4-fs (loop1): Remounting filesystem read-only [ 333.369626][T11967] loop6: detected capacity change from 0 to 32768 [ 333.471288][T11998] loop4: detected capacity change from 0 to 1024 [ 333.490269][T11967] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 333.572919][T11967] JBD2: Ignoring recovery information on journal [ 333.725992][T12008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2893'. [ 333.794737][T11967] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 333.946207][T12005] loop3: detected capacity change from 0 to 8192 [ 334.038879][T12005] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 334.093017][ T9211] ocfs2: Unmounting device (7,6) on (node local) [ 334.133022][T12005] REISERFS (device loop3): using ordered data mode [ 334.211720][T12005] reiserfs: using flush barriers [ 334.288826][T12005] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 334.371622][T12005] REISERFS (device loop3): checking transaction log (loop3) [ 334.418664][T12005] REISERFS (device loop3): Using r5 hash to sort names [ 334.459303][T12005] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 334.538508][T12005] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 334.630044][T12005] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 334.780029][T12025] loop1: detected capacity change from 0 to 256 [ 334.862264][T12025] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.943583][T12025] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 334.998927][T12025] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 335.091886][T12019] loop0: detected capacity change from 0 to 32768 [ 335.113613][ T5238] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 335.190867][T12031] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 335.224565][T12019] ocfs2: Readonly device (7,0) detected. Cluster services will not be used for this mount. Recovery will be skipped. [ 335.284576][T12019] ocfs2: Mounting device (7,0) on (node local, slot 65535) with ordered data mode. [ 335.363616][ T5238] usb 7-1: Using ep0 maxpacket: 16 [ 335.413039][T12034] loop4: detected capacity change from 0 to 1024 [ 335.460105][ T4188] INFO: trying to register non-static key. [ 335.465945][ T4188] The code is fine but needs lockdep annotation, or maybe [ 335.473045][ T4188] you didn't initialize this object before use? [ 335.479269][ T4188] turning off the locking correctness validator. [ 335.485598][ T4188] CPU: 0 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 335.493148][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 335.503201][ T4188] Call Trace: [ 335.506500][ T4188] [ 335.509429][ T4188] dump_stack_lvl+0x188/0x250 [ 335.514112][ T4188] ? show_regs_print_info+0x20/0x20 [ 335.519307][ T4188] ? load_image+0x410/0x410 [ 335.523810][ T4188] ? cpumask_next+0xb3/0xd0 [ 335.528319][ T4188] assign_lock_key+0x1ec/0x200 [ 335.533085][ T4188] ? SOFTIRQ_verbose+0x10/0x10 [ 335.537845][ T4188] ? rcu_lock_release+0x5/0x20 [ 335.542611][ T4188] register_lock_class+0x21d/0x880 [ 335.547888][ T4188] ? mark_lock+0x94/0x320 [ 335.552221][ T4188] ? is_dynamic_key+0x1f0/0x1f0 [ 335.557078][ T4188] ? __lock_acquire+0x13b3/0x7d40 [ 335.562105][ T4188] __lock_acquire+0x265/0x7d40 [ 335.566874][ T4188] ? rcu_lock_release+0x5/0x20 [ 335.571642][ T4188] ? unwind_next_frame+0x11ec/0x1cf0 [ 335.576944][ T4188] ? 0xffffffffa00302e4 [ 335.581096][ T4188] ? is_bpf_text_address+0x254/0x270 [ 335.586396][ T4188] ? verify_lock_unused+0x140/0x140 [ 335.591610][ T4188] ? __kernel_text_address+0x9a/0x100 [ 335.596985][ T4188] ? unwind_get_return_address+0x49/0x80 [ 335.602620][ T4188] ? stack_trace_save+0xf0/0xf0 [ 335.607465][ T4188] ? arch_stack_walk+0xf2/0x140 [ 335.612331][ T4188] ? mark_lock+0x94/0x320 [ 335.616652][ T4188] lock_acquire+0x19f/0x400 [ 335.621153][ T4188] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 335.627042][ T4188] ? lock_chain_count+0x20/0x20 [ 335.631890][ T4188] ? read_lock_is_recursive+0x10/0x10 [ 335.637260][ T4188] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 335.643498][ T4188] ? lockdep_hardirqs_on+0x94/0x140 [ 335.648701][ T4188] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 335.654167][ T4188] ? lockdep_hardirqs_off+0x70/0x100 [ 335.659457][ T4188] _raw_spin_lock_irqsave+0xb0/0x100 [ 335.664739][ T4188] ? ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 335.670632][ T4188] ? _raw_spin_lock+0x40/0x40 [ 335.675315][ T4188] ? ktime_get+0x247/0x270 [ 335.679734][ T4188] ocfs2_mark_lockres_freeing+0x14a/0x5a0 [ 335.685465][ T4188] ? ocfs2_dlm_shutdown+0x230/0x230 [ 335.690695][ T4188] ? slab_free_freelist_hook+0xec/0x170 [ 335.696257][ T4188] ? ocfs2_release_system_inodes+0x426/0x480 [ 335.702242][ T4188] ? kfree+0xef/0x2a0 [ 335.706223][ T4188] ocfs2_dlm_shutdown+0x33/0x230 [ 335.711162][ T4188] ocfs2_dismount_volume+0x457/0x890 [ 335.716447][ T4188] ? ocfs2_enable_quotas+0x4a0/0x4a0 [ 335.721730][ T4188] ? clear_inode+0x150/0x150 [ 335.726317][ T4188] ? __static_call_return0+0x5/0x10 [ 335.731513][ T4188] ? ocfs2_free_inode+0x20/0x20 [ 335.736363][ T4188] generic_shutdown_super+0x130/0x300 [ 335.741750][ T4188] kill_block_super+0x7c/0xe0 [ 335.746428][ T4188] deactivate_locked_super+0x93/0xf0 [ 335.751712][ T4188] cleanup_mnt+0x426/0x4d0 [ 335.756133][ T4188] task_work_run+0x125/0x1a0 [ 335.760721][ T4188] exit_to_user_mode_loop+0x10f/0x130 [ 335.766089][ T4188] exit_to_user_mode_prepare+0xee/0x180 [ 335.771628][ T4188] syscall_exit_to_user_mode+0x16/0x40 [ 335.777098][ T4188] do_syscall_64+0x58/0xa0 [ 335.781511][ T4188] ? clear_bhb_loop+0x30/0x80 [ 335.786188][ T4188] ? clear_bhb_loop+0x30/0x80 [ 335.790864][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 335.796862][ T4188] RIP: 0033:0x7f56f89ab797 [ 335.801314][ T4188] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 335.820917][ T4188] RSP: 002b:00007ffe4c18e718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 335.829334][ T4188] RAX: 0000000000000000 RBX: 00007f56f8a40cf3 RCX: 00007f56f89ab797 [ 335.837305][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4c18e7d0 [ 335.845280][ T4188] RBP: 00007ffe4c18e7d0 R08: 00007ffe4c18f7d0 R09: 00000000ffffffff [ 335.853251][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4c18f860 [ 335.861216][ T4188] R13: 00007f56f8a40cf3 R14: 0000000000051e21 R15: 00007ffe4c18f8a0 [ 335.869196][ T4188] [ 335.883568][ T5238] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 335.912286][ T5238] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.933096][T12034] hfsplus: invalid length 32517 has been corrected to 255 [ 335.962569][ T5238] usb 7-1: config 0 has no interface number 0 [ 335.978735][ T26] audit: type=1800 audit(1792141572.852:98): pid=12034 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.4.2909" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 336.023694][ T9] hfsplus: b-tree write err: -5, ino 4 [ 336.029562][ T9] hfsplus: b-tree write err: -5, ino 2 [ 336.040244][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 336.135534][ T5238] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 336.152664][ T5238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.170804][ T5238] usb 7-1: Product: syz [ 336.181819][ T5238] usb 7-1: Manufacturer: syz [ 336.190858][ T5238] usb 7-1: SerialNumber: syz [ 336.203022][T12040] rnbd_client L211: map_device: Parameters missing [ 336.216063][ T5238] usb 7-1: config 0 descriptor?? [ 336.254671][ T5238] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 336.261023][ T5238] usb 7-1: No valid video chain found. [ 336.477116][ T5238] usb 7-1: USB disconnect, device number 9