last executing test programs: 7m12.099967142s ago: executing program 3 (id=636): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000008c0)={0xc}) 7m11.78565148s ago: executing program 3 (id=640): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) 7m11.572707733s ago: executing program 3 (id=645): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) gettimeofday(0x0, &(0x7f0000000040)) 7m11.322373768s ago: executing program 3 (id=648): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$eJzs3c1vHGcdB/Df7JtfSlOrh6pECLlteCmleS0hUKDpAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSAgL11EFjP48znq69dt3dWXs+H8mZ+e0z430m35198czsEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/PAHP75QRMT1X6UbViI+F/2IXsRSVa9GxNLqSl5+EBHPx1ZzPBcRw4WIav2tf56JeC0iPjwV8ejx/bXq5osH7Mf3//yPP/zkqR/9/U/Dc//7y93+63std+/eb//71wdH22YAAADomrIsyyJ9zD+dPt/32u4UADAT+fW/TPLt6rmrN+asP2q1Wq0+hnVdOd6DehERG/V1qvcMDscDwDGzER+13QVaJP9OG0TEU213AphrRdsdYCoePb6/VqR8i/rrwep2ez4XZFf+G8XO9R17TSdpnmMyq8fXZvTj2T36szSjPsyTnH+vmf/17fZRWm7a+c/KXvmPti996pycf7+Zf8PJyb83Nv+uyvkPDpV/X/4AAAAAADDH8t//V1o+/rtw9E05kP2O/67OqA8AAAAAAAAA8Fk76vh/O4z/BwAAAHOr+qxe+d2pJ7ft9V1s1e3XioinG8sDHZMullluux8AAAAAAAAAAAAA0CWD7XN4rxURw4h4enm5LMvqp65ZH9ZR1z/uur790GVtP8kDAMC2D081ruUvIhYj4lr6rr/h8vJyWS4uLZfL5dJCfj87Wlgsl2qfa/O0um1hdIA3xINRWf2yxdp6dZM+L09qb/6+6r5GZf8AHZuNFgMHgIjYfjV65BXphCnLZ6LtdzkcD/b/k8f+z0G0/TgFAAAApq8sy7JIX+d9Oh3z77XdKQBgJvLrf/O4gFqtVqvV6pNX15XjPagXEbFRX6d6z2A4fgA4Zjbio7a7QIvk32mDiHi+7U4Ac61ouwNMxaPH99eKlG9Rfz1I47vnc0F25b9RbK2X1x83naR5jsmsHl+b0Y9n9+jPczPqwzzJ+fea+V/fbh+l5aad/6zslX+1nSst9KdtOf9+M/+Gk5N/b2z+XZXzHxwq/778AQAAAABgjuW//6/M1fHf0afdnIn2O/67OrV7BQAAAAAAAIDpevT4/lq+7jUf///CmOVc/3ky5fwL+XdSzr/XyP+rjeX6tfmHbz7J/9+P76/98e6/Pp+nB81/Ic8U6ZFVpEdEke6pGKTpUbbukzaH/VF1T8Oi1x+kc37K4dtxM27FepzftWwv/X88ab+wq73q6XCrvexvt1/c1T7Yac/rX9rVPkxnOpVLuf1srMXP41a8tdVetS1M2P7FCe3lhPacfz/+s9Nn+3935PwHtZ8q/+XUXjSmlYcf9D6x39en4+7n6s0v/ub89Ddnos3o72xbXbV9L7bQn63/k6dG8cs767fP3rtx9+7tC5Emu269GGnyGcv5D9PPzvP/S9vt+Xm/vr8+/GB06PznxWYM9sz/pdp8tb0vz7hvbcj5j9JPzv+t1D5+/z+W+VcP7333/1dm3ycAAAAAAAAAAAAAAADYV1mWW5eIXo2Iy+n6n7auzQQAZutq+sqNMsm3z6ruz/j+1OpjXhdz1p+Z1h+X89Uftfo41nXleG/Ui4j4W32dyxHx63G/DACYZx9HxD/b7gStkX+H5e/7q6Zn2u4MMFN33nv/pzdu3Vq/faftngAAAAAAAAAAn1Ye/3O1Nv73mbIsHzSW2zX+65uxetTxPwd5ZmeA0T0Gqu4ffpv2s9kb9Xu14cZfiL3G/x7uzO03/vegeQeNL08YTujPaEL7woT2xQntYy/0qMn5v1Ab7/xMRJxuDL9+AsZ/3bLf+K/NMe+7IOf/Yu3xXOX/lcZy9fzL3x/n/Hu78j93991fnLvz3vuv3nz3xjvr76z/7NKFC+cvXb585cqVc2/fvLV+fvvfFns8XTn/PPa180C7JeefM5d/t+T8v5Rq+XdLzv/LqZZ/t+T88/s9+XdLzj9/9pF/t+T8X061/Lsl5/+1VMu/W3L+r6Ra/t2S8/96quXfLTn/V1Mt/27J+Z9Ntfy7Jed/LtUHzH9p2v1iNnL++QiX/b9bcv75zAb5d0vO/2Kq5d8tOf9LqZZ/t+T8X0u1/Lsl5/+NVMu/W3L+l1Mt/27J+X8z1fLvlpz/lVTLv1ty/t9Ktfy7Jef/7VQfKv+V6fWL2cj5v55q+3+35Py/k2r5d0vO/7upln+35Py/l2r5d0vO/41Uy79bnnz/vxkzZszkmbafmQAAAAAAAAAAAACAplmcTtz2NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4tRq67vgP42avXzs1ASJ3UwNoxxjib7PoSX2hdTICQJlyaGyUtje16186Cb/HaJUkj2VGgRMKoUUXb8NAWUNTmpcKq8kCrgPKAWlWqRNoH+oKoUHmIqoASpEptFbLVnPn//zszOzuz6x2vZ875fKT45505M+fMmTNn97vOdwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGpt+PDUl/uyLKv8l/+xNsuurvx99eja/LIPXOktBAAAAJbrl/mfr1+XLti/iBvVLPNP7/7Bi7Ozs7PZZwb+dOhrs7PpitEsG1qVZfl10cWfPNRXu0zwdDbS11/zdX+b1Q+0uX6wzfVDba4fbnP9qjbXjzS5bHXN3+ftgCZL96U725T/dW11l2bXZ0P5dZua3OrpvlX9/fF3Obm+/DazQ0ey6exYNpVN1C1fXbYvX/6lDZV13ZXFdfXXrGt95Qh548nDcRv6wj7eVLeuufuMfvahbPQXbzx5+K/PvHZjs9l2N9TdX3U7t2ysbOcXwyXVbe3LVqV9Erezv2Y71zd5TgbqtrMvv13l743b+foit3NgbjNXVONzPpL1539/Jd9Pg7W/1kv7aX247H9uzrLs/NxmNy4zb11Zf7am7pL+uednpHpEVu6jcii9PRtc0nG6YRHHaWVObqo/ThtfE/H53xBuN7jANtQ+TT97arjmeX9z9lKO06jyqBd6rTQeg51+rXTLMRiPi1fyB/1M02NwU3j8T25e+Bhseuw0OQbT4645Bje2Owb7hwfybU5PQl9+m7ljcFvd8gP5mvry+erm1sfg+Jnjp8ZnHn/i1unjh45OHZ06sWPbtokdu3bt2bNn/Mj0samJ6p+XuLe735qsP70GNoZ9F18D72tYtvZQnf3m8Lzz76W+DkdavA7XNizb6dfhYOOD61uZF+T8Y7r62nigstNHLvRnC7zG8udn6/Jfh+lx17wOB2teh02/pzR5HQ4u4nVYWebU1sX9zDJY81+zbVj4e8HyjsG1Ncdg488jjcdgp38e6ZZjcCQcFz/auvD3gvVhe58ZW+rPIwPzjsH0cMO5p3JJ+nl/ZE8+mh2XN1WuuGo4Ozszdfq2xw6dOXN6WxbGinhHzbHSeLyuqXlM2bzjtX/Jx+v+6Xc/c1OTy9eGfTVya+WPkQWfq8oyO29r/Vzl392a78+6S7dnYXTYSu/PZt/NK/tzOMu+/v2n7vvuk1//8IL7s5I3vzi+/J/FUy6tOf8OLXD+jbn/rer60l09PTA0WH39DqS9M1R3Pq5/qgbzc1dfvu7Xxxd3Ph4K/630+fj6FufjdQ3Ldvp8PNT44OL5uK/dbzuWp/H5HAnHybGJ1ufjyjLrti/1mBxseT6+Ocy+sP/fH5JCykU1x85Cx21a1+DgUHhcg3EN9cfpjrrlh0I2q6zrhe2Xdpxuubl6XwPp0c1ZqeN0tGHZTh+n6XdfCx2nfe1++3ZpGp/PkXBcXL+j9XFaWeblncs/d6bfz9WcO4fbHYNDA8OVbR5KB2F+vs9mV8dj8LbscHYyO5ZN5tcO58dTX76usdsXdwwOh/9W+ly5rsUxuKVh2U4fg+n72ELHXt/g/AffAY3P50g4Lp67vfUxWFnmI7s7+7PrlnBJWqbmZ9fG368t9Duvmxp20+U6VgbDdn5/d+vfzVaWObZnqTmz9X66JVxyVZP91Pj6Xeg1NZmtzH5aF7bztT0L76fK9lSW+dreRR5P+7MsO/foHfnve8O/r/zd2R++WPfvLs3+Tefco3f8/Joj/7iU7Qeg971VHWuq3+tq/mVqMf/+DwAAAPSEmPv7w0zkfwAAACiMmPvj/xWeyP8AAABQGDH3D4aZlCT/r/vIa9NvnctSM382iNen3XB3dbnYcZ0IX4/OzqlcfsfzU//9D+cWt+7+LMvevPsPmy6/7u64XVWjYTsvfrT+8nlevHVR6z744Lm03tr++jfC/cfHs9jDoFkFdyLLspeu+2q+ntGHLuTz5bsP5vO+8888XVnm9b3Vr+PtX31Hdfm/COXf/UcO1d3+1bAffhrmxD3N90e83bcvvH/97k/PrS/erm/jtfnDfu7h6v3G98l59unq8nE/L7T93/3KC9+uLP/Ye5tv/7n+5tv/Qrjf58P833dVl699Dipfx9t9KWx/XF+83W3f+l7T7b/45eryp+6sLncwzLj+LeHrTXe+Nl27vx7rO1T3uLKPVZeL65/44R/n18f7i/ffuP0jBy7U7Y/G4+Plf6vez3jD8vHyuJ7o7xvWX7mf2uMzrv+FPzpYt5/brf/ifa++q3K/jeu/pWG5U49uzdc/d3/179j0l1/6atP1xe3Z/7en6h7P/nvD6zis/7mHw/EYrv+/i9X7a3x3hYP31p9/4vLfWHuu7vFEd/2iuv6LHzyaz1Ujq9dcdfU1155/T2XfZdkrq6r31279R//qZN32f/OG6v6I18eOfuP6FxLXf/oLYydOzpydnkx79cnr8vfO+Xh1e+L2XhfOrY1fHzh55pGp06MToxNZNlrct9C7ZN8K8+fVcb710rPzzqBbHwzP501//tKazf/6lXj5vz9QvfzCPdXvW+8Lyz0bLl8bnr+lrX++5zbckL+++14OWzg7//2Cl2P9pv/as6gFw+Nv/LkgHu+n3vlIvh8q1+XfN+Lrepnb/+PJ6v18J+zX2fDOzBtvmFtf7fLxvREu3F99vS97/4XTXHxe/yY835/4afX+43bFx/vj8HPM99bVn+/i8fGdc/2N95+/i8f5cD7Jzlevj0vF/X3h9Ruabl58H5Ls/I3513+S7ufGJT3Mhcw8PjN+bPrE2cfGz0zNnBmfefyJA8dPnj1x5kD+Xp4HPtfu9nPnpzX5+WlyatfOLD9bnayOy+xKb/+pBw9P7p7YPDl15NDZI2cePDV1+ujhmZnDU5Mzmw8dOTL1hXa3n57ct2373h27t48dnZ7ct2fv3h17x6ZPnKxsRnWj2tg18fmxE6cP5DeZ2bdz77bbb985MXb85OTUvt0TE2Nn290+/940Vrn1H4ydnjp26Mz08amxmeknpvZt27tr1/a27wZ4/NSRmdHx02dPjJ+dmTo9Xn0so2fyiyvf+9rdnmKa+Y/qz7ON+qpvxJd96pZd6f1ZK55/asG7qi7S8Aair4X3ovnnt53as5ivY+4fCjMpSf4HAACAMoi5fzjMRP4HAACAwoi5f1WYifwPAAAAhRFz/0iYSUnyf+H6/+vOLWr9+v/6/7X7S/+/ZP3/+7ut/189X+j/d8Zy+/f6/4H+v/6//r/+v/4/HdBt/f+Y+1dn2dLyf3+b6wEAAICuEXP/mjCTkvz7PwAAAJRBzP1XhZnI/wAAAFAYMfdfHWZSkvyv/6//r/+v/6//33z9+v+9Sf+/Nf3/NvT/x7Ny9f/Pd3L79f/1/5mv2/r/MfdfE2ZSkvwPAAAAZRBz/7VhJvI/AAAAFEbM/deFmcj/AAAA0JtWz78o5v61YSYlyf/6//r/+v/6//r/zdev/9+b9P9b0/9vQ//f5//r/+v/01Hd1v+Puf9tYSYlyf8AAABQBjH3vz3MRP4HAACA7jN4aTeLuf8dYSbz8v8lrgAAAAC44mLuvz5rKIKX5N//9f/1//X/9f/1/5uvf/H9/4FM/7976P+3pv/fhv6//r/+v/4/HdVt/f8892cj2TvDTEqS/wEAAKAMYu6/IcxE/gcAAIDuNrL4RWPu/5XGG8r/AAAAUBgx968LMylJ/tf/1//X/9f/1/9vvn6f/9+b9P9b0/9vo9v6/w1HkP5/d2+//r/+P/N1W/8/5v4bw0xKkv8BAACgDGLuvynMRP4HAACAwoi5/1fDTOR/AAAAKIyY+9eHmZQk/+v/d3n/P/b+9P/1//X/9f/1/xdF/781/f82uq3/30D/v7u3X/9f/5/5uq3/H3P/u8JMSpL/AQAAoAxi7n93mIn8DwAAAIURc/97wkzkfwAAACiMmPtHw0xKkv/1/7u8/+/z//X/9f/1//X/l0T/vzX9/zb0//X/9f/1/+mobuv/x9y/IcykJPkfAAAAyiDm/o1hJvI/AAAAFEbM/TeHmcj/AAAAUBgx928KMylJ/tf/1//X/9f/1/9vvn79/96k/9/aYvr/+TlN/1//X/9f/1//nw7otv5/zP3vDTMpSf4HAACAMoi5f3OYifwPAAAAhRFz//vCTOR/AAAAKIyY+7eEmZQk/+v/6/+Xtf+/qmad+v/6/83Wr//fm/T/W/P5/23o/+v/6//r/9NR3db/j7n//WEmJcn/AAAAUAYx928NM5H/AQAAoDBi7r8lzET+BwAAgMKIuX8szKQk+f/K9P/fyP/U/9f/9/n/+v/6//r/nVaG/v9nl3qnNfT/29D/1//X/9f/p6O6rf8fc/+tYSYlyf8AAABQBjH33xZmIv8DAABAYcTcPx5mIv8DAABAYcTcPxFmUpL87/P/9f/1//X/l9T/f8/c/er/V+n/d5cy9P+XQ/+/Df1//f8r3v8f0v+nULqt/x9z/7Ywk5LkfwAAACiDmPu3h5nI/wAAAFAYMffvCDOR/wEAAKAwYu7fGWZSkvyv/6//r/+v/+/z/5uvX/+/N+n/t9b5/n98iPr/+v/6/z7/X/+f+bqt/x9z/+1hJiXJ/wAAAFAGMffvCjOR/wEAAKAwYu7fHWYi/wMAAEBhxNy/J8ykJPlf/78D/f/B5hfr/+v/R/r/4XjQ/9f/XwH6/635/P829P/1//X/9f/pqG7r/8fcvzfMpCT5HwAAAMog5v4PhJnI/wAAAFAYMff/WpiJ/A8AAACFEXP/r4eZlCT/6//7/H/9f/1//f/m69f/7036/63p/7eh/6//r/+v/09HdVv/P+b+fWEmJcn/AAAAUAYx9/9GmIn8DwAAAIURc/8Hw0zkfwAAACiMmPv3h5mUJP/r/+v/6//r/+v/N1+//n9v0v9vTf+/Df1//X/9f/1/Oqrb+v8x938ozKQk+R8AAADKIOb+O8JM5H8AAAAojJj7PxxmIv8DAABAYcTc/5Ewk5Lkf/1//X/9f/1//f/m69f/7036/63p/7eh/6//r/+v/09HdVv/P+b+j4aZlCT/AwAAQBnE3H9nmIn8DwAAAIURc//HwkzkfwAAACiMmPvvCjMpSf7X/9f/1//X/9f/b75+/f/epP/fmv5/G/r/Bev/j16j/6//z+XSLAHNd2n9/6vfXHCFy+z/x9z/m2EmJcn/AAAAUAYx998dZiL/AwAAQGHE3H9PmIn8DwAAAIURc//Hw0xKkv/1//X/9f/1//X/m69f/7836f+31mP9/19eGy7X/6/S/+/u7e/K/v9PFur/z65qvL3+P5fDpfX/m+pI/z/m/k+EmZQk/wMAAEAZxNz/yTAT+R8AAAAKI+b+T4WZyP8AAABQGDH3/1aYSUnyv/5/ZTvm2sv6//r/+QX6//r/+v89S/+/tR7r//v8/wb6/929/V3Z//f5/1xh3db/j7n/3jCTkuR/AAAAKIOY++8LM5H/AQAAoDBi7r8/zET+BwAAgMKIuf+BMJOS5H/9f5//r/+v/6//33z9+v+9Sf+/Nf3/NvT/9f+7rf//n/r/9LZu6//H3P9gmElJ8j8AAACUQcz9nw4zkf8BAACgMGLu/+0wE/kfAAAACiPm/s+EmZQk/+v/90r/f3RF+v+Z/r/+v/6//n+P0/9vTf+/Df1//f9u6//7/H96XLf1/2PufyjMZPH5f2TRSwIAAABXRMz9vxNmUpJ//wcAAIAyiLn/d8NM5H8AAAAojJj7PxtmUpL8f3n6/83a8PPp//v8f/1//X/9f/3/Tlu5/n888+j/6//r/0f6/4vr/882fqML9P8pom7r/8fc/3thJiXJ/wAAAFAGMfc/HGYi/wMAAEBPWMz/hR5z/4EwE/kfAAAACiPm/oNhJiXJ/z7/X/9f/79L+/9/tvFffvSDTx7cdmX6//nU/9f/70WXtf8fTzbx8/8rL36f/6//r/+f6P/7/H/9fxp1W/8/5v5DYSYlyf8AAABQBjH3/36YifwPAAAAhRFz/+EwE/kfAAAACiPm/skwk5Lkf/1//X/9/y7t//fw5//H/aH/X69j/f940tX/b2rlPv+/+vWz+v+X2P8fbnqp/r/+fy9vv/6//j/zXZb+/+yqdOFS+/8x90+FmZQk/wMAAEAZhNzff6Q6566Q/wEAAKAwYu4/GmYi/wMAAEBhxNz/SJhJSfK//r/+v/6//n+n+/8+/785n/+/MvT/W+ue/n9z+v/6/1dq+4fC1P/X/6ezuu3z/2Punw4zKUn+BwAAgDKIuf9zYSbyPwAAABRGzP2fDzOR/wEAAKAwYu4/FmZSkvyv/6//r/+v/6//33z9+v+9Sf+/Nf3/NvT/S9v/78T26//r/zNft/X/Y+4/HmZSkvwPAAAAZRBz//+zdx/PltdlHsdP9zQ13cUfMIvZUDXL2c+Gxcx65g+YhRs3VlmWBSrmRGOOmHPAnDGAIiZUFAOYUMxizoIBM2q1Jf08T9++99zfud2ee+/vfJ/Xa/PMtNOeo0MBH7rf9b0kbrH/AQAAYBi5+y+NW+x/AAAAGEbu/gfELU32v/5f/z9s///f+v/dPl//r/8fmf5/2uH2/7tHnUn/r//f5O+v/9f/s9Pc+v/c/Q+MW5rsfwAAAOggd/+D4hb7HwAAAIaRu/+yuMX+BwAAgGHk7n9w3NJk/2/r/48sevb/mfHq//ez/z/q/X/9v/5f/7//Drb/v+Iff+bT/3v/X/8f9P/6f/0/282t/8/d/5C4pcn+BwAAgA5y9z80brH/AQAAYBi5+x8Wt9j/AAAAMIzc/Q+PW5rsf+//e/9/2Pf/9f+7fr7+X/8/Mu//T+vU/19224WX3HXdv19/Lp+v/+/Q/9+0b99f/6//Z6e59f+5+x8RtzTZ/wAAANBB7v5Hxi32PwAAAAwjd/+j4hb7HwAAAIaRu//RcUuT/a//1//r//X/+v/ln6//30z6/2md+v/z+Xz9f4f+f/++v/5f/89Oc+v/c/c/Jm5psv8BAACgg9z9j41b7H8AAAAYRu7+y+MW+x8AAACGkbv/ZNzSZP/r//e///+b/l//H1f/r//X/+8//f80/f8K+n/9v/5f/89aza3/z91/RdzSZP8DAABAB7n7Hxe32P8AAAAwjNz9j49b7H8AAAAYRu7+J8QtTfa//t/7//p//b/+f/nn6/83k/5/2sH3/8v+Crk7/f/G9/8X6P/1//p/tjrH/v/uiT9tr6X/z93/xLilyf4HAACADnL3Pylusf8BAABgGLn7nxy32P8AAAAwjNz9T4lbmux//b/+f0/9f/z/+HL9v/5/C/3/afr/edH/T5vN+/9Hji39Yf3/xvf/3v/X/+v/Ocvc3v/P3f/UuCWG36X/dV7/MQEAAIAZyd3/tLilya//AwAAQAe5+58et9j/AAAAMIzc/c+IW5rsf/2//t/7//p//f/yz5/q/6/f8v30//Oi/582m/5/F/p//f8mf3/9v/6fnebW/+fuf2bc0mT/AwAAQAe5+6+MW+x/AAAAGEbu/mfFLfY/AAAADCN3/7Pjlib7f3n/f+Zf1//vjf7/7O+v/1/+x8e6+v/8d9T/T/b//+P9/570/9P0/yvo//X/+v/d+v8Tq36+/p9l5tb/5+5/TtzSZP8DAABAB7n7nxu32P8AAAAwjNz9z4tb7H8AAAAYRu7+58ctTfa/9//1//r/zev/vf9/2mG+/7848P7/mP5/j/T/0/T/K+j/9f/6f+//s1Zz6/9z978gbmmy/wEAAKCD3P0vjFvsfwAAANgMW3/vwPbfUBpy978obrH/AQAAYBi5+18ctzTZ//p//b/+X//fu/8/viH9v/f/90r/P03/v8Lh9v9HBu3/jw3W/1+128+fQ/9/uf6fmTmr/7/hzI8fVv+fu/8lcUuT/Q8AAAAd5O5/adxi/wMAAMAwcve/LG6x/wEAAGAYuftfHrc02f/73v+f2P2z9f/6f/2//v/w+/9Nef9f/79X+v9p+v8VvP/v/X/v/+v/Wauz+v8tDqv/z93/irj1jwCa7H8AAADoIHf/K+MW+x8AAACGkbv/qrjF/gcAAIBh5O5/VdzSZP97/1//r//X/+v/l3++/n8z6f+n6f9X0P/r//X/+n/Wam79f+7+V8ctTfY/AAAAdJC7/zVxi/0PAAAAw8jd/9q4xf4HAACAYeTuf13c0mT/6//3t//PH9f/6/8X+n/9v/7/QLTt/48s+yvRTrv0/7fc9+T/nf0j+n/9v/5f/6//Zw1m0f+fOvN3l7n7Xx+3NNn/AAAA0EHu/jfELfY/AAAADCN3/xvjFvsfAAAAhpG7/01xyz37f3uFunmOr/jX9f/e/9f/6//1/8s/X/+/mdr2/3vk/f8V9P/6f/2//p+1mkX/v+V/z93/5rjFr/8DAADAMHL3vyVusf8BAABgGLn73xq32P8AAAAwjNz9b4tbmux//b/+X/+v/9f/L/98/f9m0v9P0/+voP/X/6+l/79//Ij+X//P3Pr/3P1Xxy1N9j8AAAB0kLv/7XGL/Q8AAADDyN3/jrjF/gcAAIBh5O5/Z9zSZP/r//X/+n/9v/5/+efr/zeT/n+a/n+xWFwz8QWW9f+n/lX/r//3/r/+n/M0t/4/d/+74pYm+x8AAAA6yN1/Tdxi/wMAAMAwcvdfG7fY/wAAADCM3P3vjlua7H/9v/5f/6//b9T/H9H/j0//P03/v4L3//X/+n/9P2s1t/4/d/974pYm+x8AAAA6yN1/Xdxi/wMAAMAwcve/N26x/wEAAGAYufuvj1t23f9HD+BbHRz9v/5f/6//b9T/D/j+//HVH9zM/vX/C/2//l//v4L+X/+v/2e7ufX/ufvfF7f49X8AAAAYRu7+98ct9j8AAAAMI3f/B+IW+x8AAACGkbv/g3FLk/2v/9f/6//1//r/5Z+/Gf3/6s/txvv/0/T/K+j/9f/6f/0/azW3/j93/4filib7HwAAADrI3X9D3GL/AwAAwDBy9384brH/AQAAYBi5+z8StzTZ/4fR/x/dcvX/c+v/Fwv9v/5f/3/aAfT/xxf6/7XT/0/T/6+g/x+z/z+6GKj/P7Hrz9f/M0dz6/9z9380bmmy/wEAAKCD3P03xi32PwAAAAwjd//H4hb7HwAAAIaRu//jcUuT/e/9f/3/xr7/f0H8BP2//n9z+//6b1X/vz76/2n6/xX0//vV/9+xli94eN9/Rv3/7vT/zNHc+v/c/TfFLU32PwAAAHSQu/8TcYv9DwAAAMPI3f/JuMX+BwAAgGHk7v9U3NJk/+v/9f8b2/97/1//r//X/y+h/5+m/19B/z/m+//6f/0/h2Zu/X/u/k/HLU32PwAAAHSQu//muMX+BwAAgGHk7r8lbrH/AQAAYBi5+z8TtzTZ//p//b/+fzP7/+P6f/2//n+pufT/F1/8v7fq//X/+n/9v/5f/9/d3Pr/3P2fjVua7H8AAADoIHf/5+IW+x8AAACGkbv/83GL/Q8AAADDyN3/hbilyf7f2f9fsDhdqJ62rP+PRk3/v4X+/+zvr/9f/seH9//1//r//TeX/t/7/+f3/fX/+v9N/v7n1P9ftPPn6/8Z0dz6/9z9t8YtTfY/AAAAdJC7/4txi/0PAAAAw8jd/6W4xf4HAACAYeTuvy1uabL/vf+v/9f/6//1/8s/X/+/mdbb/5/Q/+v/9f/6/37v//+L/p/1mVv/n7v/y3FLk/0PAAAAHeTu/0rcYv8DAADAMHL3fzVusf8BAABgGLn7vxa3NNn/+n/9v/5f/6//X/75+v/N5P3/afr/FWba/+ffoer/5/39h+n/vf/PGq21/9/+F6Xz6P9z9389bmmy/wEAAKCD3P3fiFvsfwAAABhG7v5vxi32PwAAAAwjd/+34pYm+3/9/f9F+v+g/59L/39v/f+2z9f/6/9Hpv/Pv6Ivp/9f4Z4/zR2bXf+f9P/z/v76f/0/O621/1/s+NvRc+7/c/ffHrc02f8AAADQQe7+b8ct9j8AAAAMI3f/d+IW+x8AAACGkbv/u3FLk/3v/f9e/f+RRcf+3/v/+n/9fyf6/2n6/xVm+v5/0v/P+/vr//X/7DS3/j93//filib7HwAAADbV///n/W7f6/9t7v7vxy32PwAAAAwjd/8P4hb7HwAAAIaRu/+HcUuT/a//79X/93z/X/+v/9f/d6L/n6b/X0H/r//X/+v/Wau59f+5+38Ut2wZfsfO+T8lAAAAMCe5+38ctzT59X8AAADoIHf/T+KWHfv/1B5/VzsAAAAwN7n7fxq37OHX//9j377VwdH/z7z/X4zf/9+50P/r/0/T/+v/10H/P+2f7P9PHdH/6/8n6P/1//p/tptb/5+7/2dxi9//DwAAAJvsrH+ikLv/53GL/Q8AAADDyN3/i7jF/gcAAIBh5O6/I25psv/1/zPv/8/r/f8T9T9tQv/v/f997P+vPL708/X/+v+R6f+nef9/Bf2//l//r/9nrebW/+fuvzNuabL/AQAAoIPc/b+MW+x/AAAAGEbu/l/FLfY/AAAADCN3/6/jlib7X/8/Yv+/We//6/+9/3/+/f+/XXjy5nvd59qr9f+csfb+P/7WYFn/n38s6P8PpP+/cdm/n/5f/z+n76//1/+z09z6/9z9v4lbmux/AAAA6CB3/11xi/0PAAAAw8jd/9u4xf4HAACAYeTu/13c0mT/6//1/3Pp//O/60Po/09uXv+fTXH3/t/7//r/nbz/P22D+3/v/+v/Z//99f/6f3aaW/+fu//3cUuT/Q8AAAAd5O7/Q9xi/wMAAMAwcvf/MW6x/wEAAGAYufv/FLc02f/6f/3/XPr/5P3/Mz/P+/+n6f/1/+dC/z9N/7+C/l//r//X/7NWc+v/c/f/OW5psv8BAACgg9z9d8ct9j8AAAAMI3f/X+IW+x8AAACGkbv/r3FLk/2v/9f/6//1//r/5Z+v/99M+v9p+v8V9P/6f/2//p+1mlv/n7v/7wEAAP//TYN26A==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 7m10.231653561s ago: executing program 3 (id=660): syz_mount_image$hfs(&(0x7f0000000840), &(0x7f0000000140)='./file0\x00', 0x2000000, &(0x7f0000000400)={[{@codepage={'codepage', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@gid}]}, 0x5, 0x2de, &(0x7f0000000500)="$eJzs3T9v00AYx/HfOUmb/lExbRFSF1ChEiwVBQYEQxDKys6EgCaVKqIi2iIBCwUxIl4AO2+BF8EC4g3AxMQL6GZ0l4vrNLbTlsZp6PcjNbLPd+fndHZ8jyWIAJxa9+o/P9/4bf+MVFJJ0m0pkFSVypLO6Xz1xcb2+nar2cjrqORa2D+jdkvTU2d1o5nW1LZzLbzQ7pU1nSxLMr0944iiKLr7a9hBYOjc3Z8ikMb9feiOVwuOa1B2pAvDjqFoyQk2u9rVS80MMRwAwAngn/+Bf0xMuyKjIJCW/GN/dJ7/dxb6VtktJJDC3Gz1FEW5DRLPf7e6i4yd3zPu0F6+5xItezzoZIkHCaayb39M7Sura4Fp+mWVLpZgYm29rOXVt2oEeqeal6g27z4b7Uu3o0+0iym5aY7s3iq6P9kejVtR7tcJaW291Ry3G4n4OxHMHe6M/858Nd/NQxPqkxrx+q8cGTtNbqbCfTMVVGz817J7nHKtbC35gdVqtaCryll3kgV/Bq/PKKvpGUmyz84Lgp04grw43bln1f1aoT26lT6t5tJahfFeRqv5rlYlfyUsrz5r5b5KGYzOEM1H88As6o++qJ5Y/wc2viUl7sy8r3rjavoroz2esfSaZVcz7Hly7N0uF+MIvPFDjw1S1tuyDB/0RLc0s/Xq9dNSq9XctBuPUzaeT28aX1J5L6XWGfxGSTl1tLNXEllvouigPUeDDP7qsXZovz/iEnv7pFW2d1lcEhQ9Tadlo/5NeRfk6GxEkZRxaGDfUzhBtkxn0t1uWRPDjggFs+su087/3Erer+pcgmI/wpx1en6Sqa4eV+IMrnspOOs+Jw+VwU1lZ3CJM17PyBldznXpinQ5UWiUe8bQx/mfMHX90CPe/wMAAAAAAAAAAAAAAAAAAIyaIv6lwbDHCAAAAAAAAAAAAAAAAAAAAADAqDvS7/+m/R/x7vd/w0J+/xfA8fgbAAD//+uCeSM=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 7m9.183367334s ago: executing program 3 (id=673): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 7m8.922972289s ago: executing program 32 (id=673): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 3.133391037s ago: executing program 4 (id=8612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 2.954681137s ago: executing program 4 (id=8617): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xffffffff, 0xfe36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 2.758728129s ago: executing program 4 (id=8621): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd25, 0x25dfdbfc, {0x2, 0x20, 0x14, 0x2, 0xff, 0x3, 0x0, 0xb, 0x2800}}, 0x1c}}, 0x10) 2.512674603s ago: executing program 4 (id=8626): r0 = fsopen(&(0x7f0000000680)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\xa0{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x14\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 2.347121533s ago: executing program 4 (id=8629): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000140)='./file0\x00', 0x6010000, &(0x7f0000000200)={[{@filestreams}, {@pqnoenforce}, {@sysvgroups}, {@swalloc}, {@inode32}, {@gquota}, {@quota}, {@usrquota}, {@filestreams}, {@quota}]}, 0x1, 0x975c, &(0x7f0000025d80)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) 1.420296637s ago: executing program 5 (id=8648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000640)={[{@size, 0x4e}]}) 1.219546249s ago: executing program 1 (id=8650): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x6c, 0x3ed, 0x21, 0x70bd2d, 0x25dfdbfb, "4eae3832f3168bb912799ec9a26843e92279912fcb39040b0b97a5be193c33232790709fb6c760a4a2792d2424098d8e221e0faaaaa8a4f4f07f484bac1fb7413ee7b528b669883130888c37468d1a685064fcf578563594f1"}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) 1.219421499s ago: executing program 5 (id=8651): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100030400bf050005001201", 0x67}], 0x1}, 0x0) 1.177094901s ago: executing program 2 (id=8652): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x2a, 0x0, &(0x7f0000000500)) 1.173657032s ago: executing program 0 (id=8653): r0 = socket(0x2, 0x3, 0x4) getsockopt(r0, 0xff, 0x100000000000001, 0x0, 0x0) 1.03310302s ago: executing program 1 (id=8654): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x2, @in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4}}}, 0x90) 1.014215941s ago: executing program 2 (id=8655): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000280)=[{0x1d, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x0, @uvalue=0xaa}, {0x0, @uvalue=0x3}, {0x3, @svalue=0xd7}]}, 0x3}]}) 936.132245ms ago: executing program 5 (id=8656): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 913.355477ms ago: executing program 2 (id=8657): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160009000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 866.73105ms ago: executing program 0 (id=8658): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioprio_set$pid(0x1, 0x0, 0x2000) 732.014818ms ago: executing program 1 (id=8659): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 684.74401ms ago: executing program 4 (id=8660): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x0, 0x31, 0x0, &(0x7f0000001a40)) 647.283333ms ago: executing program 0 (id=8661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200009d96d1c800000000000000008500000020000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xbd, &(0x7f0000000200)=""/189, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 646.740143ms ago: executing program 5 (id=8662): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x8, 0x9fd, 0x84, 0x155}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 638.307883ms ago: executing program 2 (id=8663): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x18, 0xa, 0x200, &(0x7f0000003c40)="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"}) 494.340121ms ago: executing program 1 (id=8664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="06000000040000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000005000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 443.479375ms ago: executing program 5 (id=8665): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) 421.478856ms ago: executing program 0 (id=8666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2400c890}, 0x4) 345.78313ms ago: executing program 1 (id=8667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 274.168294ms ago: executing program 2 (id=8668): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x40810}}], 0x2, 0x0) 213.028198ms ago: executing program 0 (id=8669): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) 175.75391ms ago: executing program 1 (id=8670): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000002180)=[{{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000ec0)="98732eb54141", 0x6}], 0x1}}, {{&(0x7f0000000100)=@abs, 0x6e, 0x0}}], 0x2, 0x0) 95.491825ms ago: executing program 2 (id=8671): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x2, 0x16, 0x7, 0x9, 0xa, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x18, 0x6c, {0x6, 0x9d, 0xa6, 0xf, 0x0, 0x6e531a13, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x20000080) 2.78675ms ago: executing program 5 (id=8672): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x560b, 0x7ffffffffffffffc) 0s ago: executing program 0 (id=8673): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r0, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) kernel console output (not intermixed with test programs): 967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18359 comm="syz.0.6461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x50000 [ 408.090377][ T26] audit: type=1326 audit(2000000225.770:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18359 comm="syz.0.6461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x50000 [ 408.106436][T18370] device ip6gre1 left promiscuous mode [ 408.119005][ T26] audit: type=1326 audit(2000000225.770:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18359 comm="syz.0.6461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x50000 [ 408.126528][T18370] device erspan1 left promiscuous mode [ 408.148326][ T26] audit: type=1326 audit(2000000225.770:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18359 comm="syz.0.6461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x50000 [ 408.158168][T18368] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (6) [ 408.186997][ T26] audit: type=1326 audit(2000000225.770:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18359 comm="syz.0.6461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x50000 [ 408.217294][ T4331] usb 5-1: Using ep0 maxpacket: 16 [ 408.224295][ T4331] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.247971][ T4331] usb 5-1: config 0 has no interface number 0 [ 408.274423][ T4331] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 408.295695][ T4331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.310852][ T4331] usb 5-1: Product: syz [ 408.315094][ T4331] usb 5-1: Manufacturer: syz [ 408.319837][ T4331] usb 5-1: SerialNumber: syz [ 408.352624][ T4331] usb 5-1: config 0 descriptor?? [ 408.360609][ T4331] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 408.523644][T18374] loop5: detected capacity change from 0 to 8192 [ 408.551146][T18374] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 408.621680][T18374] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 408.657515][T18374] REISERFS (device loop5): using ordered data mode [ 408.668050][T18384] device wlan0 entered promiscuous mode [ 408.724149][T18374] reiserfs: using flush barriers [ 408.745272][T18374] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 408.787017][ T4331] gspca_spca1528: reg_w err -71 [ 408.820859][ T4331] spca1528: probe of 5-1:0.1 failed with error -71 [ 408.828792][T18374] REISERFS (device loop5): checking transaction log (loop5) [ 408.840908][ T4331] usb 5-1: USB disconnect, device number 35 [ 408.871985][T18374] REISERFS (device loop5): Using r5 hash to sort names [ 408.879381][T18374] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 409.002349][ T4288] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 409.141373][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6480'. [ 409.192330][ T4288] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.214107][ T4288] usb 2-1: config 0 interface 0 has no altsetting 0 [ 409.243234][ T4288] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 409.273218][ T4288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.299343][ T4288] usb 2-1: Product: syz [ 409.310476][ T4288] usb 2-1: Manufacturer: syz [ 409.325573][ T4288] usb 2-1: SerialNumber: syz [ 409.351810][ T4288] usb 2-1: config 0 descriptor?? [ 409.370186][ T4288] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 409.436975][ T4288] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 409.469790][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6484'. [ 409.482198][ T4288] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 409.502118][ T4288] usb 2-1: media controller created [ 409.608287][ T4288] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.769825][ T4288] DVB: Unable to find symbol tda10046_attach() [ 409.783570][ T4288] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 409.824225][ T4288] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 409.983133][T18431] loop0: detected capacity change from 0 to 512 [ 410.010369][T18431] EXT4-fs: Ignoring removed oldalloc option [ 410.043510][ T4288] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 410.089080][ T4288] usb 2-1: USB disconnect, device number 27 [ 410.096386][T18431] EXT4-fs (loop0): 1 truncate cleaned up [ 410.104406][T18431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 410.252962][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 411.031983][ T4330] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 411.060725][ T4331] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 411.197405][T18488] loop4: detected capacity change from 0 to 16 [ 411.217620][T18488] erofs: (device loop4): mounted with root inode @ nid 36. [ 411.239892][ T4330] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 411.256692][T18488] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 411.268990][ T4330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.281902][ T4331] usb 2-1: Using ep0 maxpacket: 32 [ 411.296359][ T4331] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.324870][ T4330] usb 1-1: config 0 descriptor?? [ 411.326374][T18488] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 411.334527][ T4331] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.393868][T18488] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 411.396327][ T4331] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 411.427314][ T4331] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 411.436857][ T4331] usb 2-1: Product: syz [ 411.442550][ T4331] usb 2-1: Manufacturer: syz [ 411.484455][ T4331] hub 2-1:4.0: USB hub found [ 411.667346][ T4331] hub 2-1:4.0: 2 ports detected [ 411.745996][T18505] loop4: detected capacity change from 0 to 1024 [ 411.771448][ T4330] [drm:udl_init] *ERROR* Selecting channel failed [ 411.864293][ T4330] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 411.872487][ T4331] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 411.880400][ T4331] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 411.911132][ T4330] [drm] Initialized udl on minor 2 [ 411.914106][ T4343] hfsplus: b-tree write err: -5, ino 4 [ 411.922458][ T4330] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 411.943045][ T4331] usb 2-1: USB disconnect, device number 28 [ 411.961361][ T4330] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 411.976599][ T4330] usb 1-1: USB disconnect, device number 32 [ 411.992799][ T125] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 412.030116][ T125] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 412.060198][ T125] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 412.282353][T18521] loop5: detected capacity change from 0 to 4096 [ 412.318659][T18521] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 412.352390][T18521] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 412.464850][T18525] Mount JFS Failure: -22 [ 412.469807][T18525] jfs_mount failed w/return code = -22 [ 412.514443][T18530] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.537282][ T4257] udevd[4257]: incorrect nilfs2 checksum on /dev/loop5 [ 412.546535][T18528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.621301][T18528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 412.638128][T18528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.678934][T18528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.723245][T18528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.771449][T18528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.849707][T18528] device vlan0 left promiscuous mode [ 412.886182][T18528] device veth0_vlan left promiscuous mode [ 412.911693][T18528] device wlan0 left promiscuous mode [ 412.930242][T18536] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.937965][T18528] device bridge3 left promiscuous mode [ 412.979273][T18528] device batadv1 left promiscuous mode [ 413.033899][T18536] exFAT-fs (loop5): unable to read boot sector [ 413.040128][T18536] exFAT-fs (loop5): failed to read boot sector [ 413.053944][T18536] exFAT-fs (loop5): failed to recognize exfat type [ 413.471851][T18564] xt_hashlimit: max too large, truncated to 1048576 [ 414.060882][ T4330] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 414.107925][T18591] netlink: 'syz.1.6572': attribute type 4 has an invalid length. [ 414.120947][T18594] netlink: 'syz.5.6573': attribute type 1 has an invalid length. [ 414.144292][T18596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6574'. [ 414.153837][T18594] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6573'. [ 414.181268][T18596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6574'. [ 414.223650][T18598] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6575'. [ 414.263189][ T4330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 414.294870][ T4330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.332552][ T4330] usb 3-1: New USB device found, idVendor=04b8, idProduct=ef02, bcdDevice= 0.3f [ 414.370725][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.378767][ T4330] usb 3-1: Product: syz [ 414.406046][ T4330] usb 3-1: Manufacturer: syz [ 414.420617][ T4330] usb 3-1: SerialNumber: syz [ 414.588914][T18606] loop4: detected capacity change from 0 to 4096 [ 414.621483][T18606] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 414.670508][ T4330] usb 3-1: USB disconnect, device number 33 [ 414.712021][T18606] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 414.802807][T18619] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 415.241568][T18639] tmpfs: Bad value for 'mpol' [ 415.282659][T18641] xt_TPROXY: Can be used only with -p tcp or -p udp [ 415.367225][T18644] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6597'. [ 415.430907][ T4330] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 415.578738][T18654] netlink: 'syz.5.6601': attribute type 27 has an invalid length. [ 415.630841][ T4330] usb 1-1: Using ep0 maxpacket: 16 [ 415.639759][ T4330] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 415.677336][ T4330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.710731][ T4330] usb 1-1: Product: syz [ 415.724966][ T4330] usb 1-1: Manufacturer: syz [ 415.742834][ T4330] usb 1-1: SerialNumber: syz [ 415.757828][ T4330] r8152-cfgselector 1-1: config 0 descriptor?? [ 415.954302][T18637] loop1: detected capacity change from 0 to 40427 [ 416.008272][T18637] F2FS-fs (loop1): Invalid log sectorsize (131081) [ 416.017481][T18637] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 416.053974][T18637] F2FS-fs (loop1): invalid crc value [ 416.104556][T18637] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 416.181618][ T4330] r8152-cfgselector 1-1: Unknown version 0x0000 [ 416.191677][ T4330] r8152-cfgselector 1-1: bad CDC descriptors [ 416.225094][T18637] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 416.230090][ T4330] r8152-cfgselector 1-1: Unknown version 0x0000 [ 416.255680][T18637] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 416.261970][ T4330] r8152-cfgselector 1-1: USB disconnect, device number 33 [ 416.290745][T18637] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 416.302425][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 416.302437][ T26] audit: type=1800 audit(2000000234.300:262): pid=18677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6613" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 416.675377][T18692] No such timeout policy "syz1" [ 416.973859][T18704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6616'. [ 417.033328][T18704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6616'. [ 417.057856][T18704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6616'. [ 417.101675][T18709] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6628'. [ 417.131127][T18714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 417.352628][T18726] loop1: detected capacity change from 0 to 16 [ 417.390497][T18726] erofs: (device loop1): mounted with root inode @ nid 36. [ 417.962921][T18751] netlink: 'syz.4.6646': attribute type 10 has an invalid length. [ 417.981319][T18751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6646'. [ 418.009909][T18751] bridge0: port 3(dummy0) entered blocking state [ 418.051978][T18751] bridge0: port 3(dummy0) entered disabled state [ 418.095612][T18751] device dummy0 entered promiscuous mode [ 418.143181][T18757] netlink: 'syz.5.6651': attribute type 10 has an invalid length. [ 418.352919][ T26] audit: type=1400 audit(2000000236.360:263): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=18768 comm="syz.4.6654" [ 418.363351][T18772] overlayfs: './file0' not a directory [ 418.589453][T18776] loop1: detected capacity change from 0 to 4096 [ 418.786746][T18791] loop0: detected capacity change from 0 to 256 [ 418.856007][ T4257] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 419.087754][T18791] loop0: detected capacity change from 0 to 4096 [ 419.140884][T18791] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 419.219596][T18791] ntfs: (device loop0): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 419.299773][T18791] ntfs: (device loop0): parse_options(): Unrecognized mount option uni_xlate. [ 419.329753][T18791] ntfs: (device loop0): parse_options(): Unrecognized mount option uni_xlate. [ 419.377563][T18791] ntfs: (device loop0): parse_options(): Unrecognized mount option shortname. [ 419.424012][T18791] ntfs: (device loop0): parse_options(): Unrecognized mount option shortname. [ 419.466887][T18791] ntfs: (device loop0): parse_options(): Unrecognized mount option uni_xlate. [ 419.499024][T18814] loop1: detected capacity change from 0 to 1024 [ 419.511234][T18791] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 419.749866][ T56] hfsplus: b-tree write err: -5, ino 4 [ 419.885932][T18828] netlink: 'syz.1.6683': attribute type 41 has an invalid length. [ 419.929305][T18828] netlink: 'syz.1.6683': attribute type 41 has an invalid length. [ 421.060838][T18850] loop4: detected capacity change from 0 to 32768 [ 421.073994][T18876] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6707'. [ 421.103237][T18850] (syz.4.6695,18850,1):ocfs2_slot_map_physical_size:223 ERROR: Slot map file is too small! (size 2, needed 8) [ 421.671470][T18898] ax25_connect(): syz.0.6719 uses autobind, please contact jreuter@yaina.de [ 421.888386][T18908] loop0: detected capacity change from 0 to 128 [ 421.985610][ T7617] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 422.181748][ T5759] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 422.292967][T18922] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 422.356990][T18924] device geneve3 entered promiscuous mode [ 422.405974][ T5759] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 422.427570][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.477726][ T5759] usb 2-1: config 0 descriptor?? [ 422.524945][T18935] xt_l2tp: invalid flags combination: 4 [ 422.530752][T18934] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6736'. [ 422.773125][T18945] tmpfs: Bad value for 'mpol' [ 422.892734][ T5759] [drm:udl_init] *ERROR* Selecting channel failed [ 422.926557][ T5759] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 422.957958][ T5759] [drm] Initialized udl on minor 2 [ 423.011006][ T5759] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 423.070884][ T5759] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 423.085798][ T5759] usb 2-1: USB disconnect, device number 29 [ 423.100320][ T5761] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 423.122902][ T5761] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 423.169787][ T5761] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 423.330811][ T4331] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 423.346188][T18969] [U] vÔ3¸Âfůľ"SçÁ/Éę4:ĂXTz“Wˇt‘’lWµ«= [ 423.354353][T18969] [U] J"—e:ŔĆ" [ 423.520773][ T4331] usb 1-1: Using ep0 maxpacket: 16 [ 423.542941][ T4331] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 423.568100][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.589158][T18978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6758'. [ 423.596691][ T4331] usb 1-1: Product: syz [ 423.600051][T18978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6758'. [ 423.603412][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 423.603424][ T26] audit: type=1326 audit(2000000241.610:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.5.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 423.649935][ T4331] usb 1-1: Manufacturer: syz [ 423.660049][ T4331] usb 1-1: SerialNumber: syz [ 423.671572][ T4331] usb 1-1: config 0 descriptor?? [ 423.729758][ T26] audit: type=1326 audit(2000000241.650:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.5.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 423.780874][ T26] audit: type=1326 audit(2000000241.650:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.5.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 423.854340][ T26] audit: type=1326 audit(2000000241.650:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.5.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 423.886393][ T4331] speedtch 1-1:0.0: speedtch_bind: wrong device class 68 [ 423.897261][ T4331] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 423.948967][ T26] audit: type=1326 audit(2000000241.650:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.5.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 424.050290][ T26] audit: type=1326 audit(2000000241.650:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.5.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 424.128363][ T4288] usb 1-1: USB disconnect, device number 34 [ 424.147597][ T26] audit: type=1326 audit(2000000241.650:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.5.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 424.200081][ T26] audit: type=1326 audit(2000000241.650:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18976 comm="syz.5.6759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 424.469180][T19016] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 424.545956][T19018] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6779'. [ 424.917071][T19035] netlink: 500 bytes leftover after parsing attributes in process `syz.5.6786'. [ 425.045422][ T4288] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 425.097949][T19045] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6791'. [ 425.240933][ T4288] usb 2-1: Using ep0 maxpacket: 32 [ 425.247927][ T4288] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 425.260879][ T4288] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 425.286285][ T4288] usb 2-1: config 0 has no interface number 1 [ 425.305329][ T4288] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 425.334921][ T4288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.357849][ T4288] usb 2-1: Product: syz [ 425.371524][ T4288] usb 2-1: Manufacturer: syz [ 425.396945][ T4288] usb 2-1: SerialNumber: syz [ 425.431999][ T4288] usb 2-1: config 0 descriptor?? [ 425.458814][ T4288] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 425.508993][ T4288] vmk80xx 2-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 425.649743][T19066] loop0: detected capacity change from 0 to 1024 [ 425.685116][ T5761] usb 2-1: USB disconnect, device number 30 [ 425.699074][T19066] hfsplus: Filesystem is marked locked, mounting read-only. [ 426.018369][T19078] loop0: detected capacity change from 0 to 4096 [ 426.036632][T19078] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 426.527577][T19082] loop5: detected capacity change from 0 to 32768 [ 426.637899][T19082] XFS (loop5): Mounting V5 Filesystem [ 426.766896][T19082] XFS (loop5): Ending clean mount [ 426.952314][T19082] XFS (loop5): Quotacheck needed: Please wait. [ 426.984210][T19119] loop1: detected capacity change from 0 to 64 [ 427.031915][T19082] XFS (loop5): Quotacheck: Done. [ 427.205723][ T5823] XFS (loop5): Unmounting Filesystem [ 427.450549][T19132] loop0: detected capacity change from 0 to 128 [ 427.492103][T19136] netlink: 'syz.4.6833': attribute type 5 has an invalid length. [ 427.564655][ T4257] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 428.056184][T19158] loop4: detected capacity change from 0 to 512 [ 428.084075][T19158] EXT4-fs: Ignoring removed bh option [ 428.119403][T19158] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.161312][T19158] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 428.276412][T19158] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 428.321148][T19158] ext4 filesystem being mounted at /1336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 428.472075][T19178] netlink: 'syz.5.6848': attribute type 3 has an invalid length. [ 428.511024][T19178] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6848'. [ 428.541592][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 428.656550][T19185] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 429.054382][T19203] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.6863'. [ 429.303540][T19216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6869'. [ 429.504322][T19227] netlink: 'syz.4.6876': attribute type 10 has an invalid length. [ 429.549121][T19227] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6876'. [ 429.632908][ T4330] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 429.872548][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 429.883524][ T4330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 429.898845][ T4330] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 429.907961][ T4330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.916010][ T4330] usb 1-1: Product: syz [ 429.920167][ T4330] usb 1-1: Manufacturer: syz [ 429.924795][ T4330] usb 1-1: SerialNumber: syz [ 429.931188][ T4330] usb 1-1: config 0 descriptor?? [ 430.345208][ T5761] usb 1-1: USB disconnect, device number 35 [ 430.946393][T19241] netlink: 'syz.1.6883': attribute type 3 has an invalid length. [ 431.073873][T19251] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6887'. [ 431.111205][T19251] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6887'. [ 431.794625][T19250] loop4: detected capacity change from 0 to 32768 [ 431.846980][T19250] JBD2: Ignoring recovery information on journal [ 431.926396][T19250] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 431.990945][ T4331] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 432.083130][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 432.192515][ T4331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.236007][ T4331] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 432.257824][T19293] netlink: 'syz.4.6906': attribute type 2 has an invalid length. [ 432.275326][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.305680][ T4331] usb 3-1: Product: syz [ 432.309897][ T4331] usb 3-1: Manufacturer: syz [ 432.342720][ T4331] usb 3-1: SerialNumber: syz [ 432.363344][ T4331] usb 3-1: config 0 descriptor?? [ 432.384149][ T4331] asix: probe of 3-1:0.0 failed with error -22 [ 432.454318][T19299] SET target dimension over the limit! [ 432.641900][ T5759] usb 3-1: USB disconnect, device number 34 [ 432.878905][T19315] dns_resolver: Unsupported content type (240) [ 432.947248][T19320] netlink: 'syz.4.6922': attribute type 2 has an invalid length. [ 432.975525][T19320] netlink: 504 bytes leftover after parsing attributes in process `syz.4.6922'. [ 433.443927][T19345] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20003 [ 433.459606][T19341] loop5: detected capacity change from 0 to 2048 [ 433.477717][T19347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6935'. [ 433.498728][T19341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.501449][T19347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6935'. [ 433.529206][T19347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6935'. [ 433.546145][T19347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.676416][T19349] netlink: 'syz.4.6936': attribute type 7 has an invalid length. [ 434.021001][T19364] 9pnet_fd: Insufficient options for proto=fd [ 434.042365][T19367] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 434.081012][T19367] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 434.339943][T19381] ieee802154 phy0 wpan0: encryption failed: -90 [ 434.479663][T19388] netlink: 'syz.0.6956': attribute type 1 has an invalid length. [ 434.861031][T19405] loop1: detected capacity change from 0 to 1024 [ 434.937767][T19405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 435.053876][T19405] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.6964: Attempting to read directory block (623) that is past i_size (638464) [ 435.104965][T19405] EXT4-fs (loop1): Remounting filesystem read-only [ 435.146358][T19422] netlink: 'syz.4.6971': attribute type 16 has an invalid length. [ 435.180787][T19422] netlink: 'syz.4.6971': attribute type 17 has an invalid length. [ 435.210831][T19422] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 435.251572][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 435.267172][T19422] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 435.363274][T19422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 435.383095][T19422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 435.415146][T19422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.447914][T19422] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 435.544231][T19422] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 435.574097][T19422] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 435.668063][T19416] loop5: detected capacity change from 0 to 32768 [ 435.752537][T19416] ERROR: (device loop5): diAllocAG: error reading iag [ 435.752537][T19416] [ 435.814850][T19416] ialloc: diAlloc returned -5! [ 436.427378][T19467] loop0: detected capacity change from 0 to 764 [ 436.509421][T19467] rock: directory entry would overflow storage [ 436.533662][T19467] rock: sig=0x4654, size=5, remaining=4 [ 436.796244][ T26] audit: type=1326 audit(2000000254.800:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 436.858620][ T26] audit: type=1326 audit(2000000254.830:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 436.964696][ T26] audit: type=1326 audit(2000000254.830:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19484 comm="syz.0.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 437.013951][T19496] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7006'. [ 437.529169][T19520] netlink: 'syz.2.7018': attribute type 13 has an invalid length. [ 437.569891][T19520] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7018'. [ 437.585726][T19520] syz_tun: refused to change device tx_queue_len [ 437.630734][T19520] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 437.668700][T19521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 437.676002][T19521] IPv6: NLM_F_CREATE should be set when creating new route [ 437.683322][T19521] IPv6: NLM_F_CREATE should be set when creating new route [ 437.864151][T19529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7023'. [ 437.898168][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7023'. [ 437.916417][T19529] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7023'. [ 438.376990][T19554] netlink: 'syz.4.7036': attribute type 5 has an invalid length. [ 438.573102][T19563] 8021q: VLANs not supported on hsr0 [ 438.620304][T19565] device sit0 entered promiscuous mode [ 438.663542][T19565] netlink: 'syz.4.7040': attribute type 1 has an invalid length. [ 438.710781][T19565] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7040'. [ 439.102227][T19590] netlink: 'syz.5.7053': attribute type 16 has an invalid length. [ 439.130820][T19590] netlink: 'syz.5.7053': attribute type 17 has an invalid length. [ 439.167391][T19590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.205910][T19590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.244021][T19590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 439.260950][T19590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 439.356953][T19590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 439.391071][T19590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 439.419102][T19604] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 439.733391][T19619] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 439.888932][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.906226][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.950912][ T4330] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 439.973469][ T125] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 440.180780][ T125] usb 6-1: Using ep0 maxpacket: 16 [ 440.187816][ T4330] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 440.196980][ T125] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 440.216628][ T4330] usb 5-1: config 0 has no interface number 0 [ 440.241627][ T125] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 440.254216][ T4330] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 440.274031][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.282451][ T125] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.300745][ T4330] usb 5-1: Product: syz [ 440.307431][ T125] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.319987][ T4330] usb 5-1: Manufacturer: syz [ 440.337265][ T4330] usb 5-1: SerialNumber: syz [ 440.342389][ T125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.353009][ T4330] usb 5-1: config 0 descriptor?? [ 440.360433][ T125] usb 6-1: Product: syz [ 440.378915][ T125] usb 6-1: Manufacturer: syz [ 440.384030][ T125] usb 6-1: SerialNumber: syz [ 440.439907][T19638] loop0: detected capacity change from 0 to 256 [ 440.513990][T19638] FAT-fs (loop0): Directory bread(block 64) failed [ 440.520571][T19638] FAT-fs (loop0): Directory bread(block 65) failed [ 440.550978][T19638] FAT-fs (loop0): Directory bread(block 66) failed [ 440.557547][T19638] FAT-fs (loop0): Directory bread(block 67) failed [ 440.567408][ T4330] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 440.583090][ T4330] usb 5-1: No valid video chain found. [ 440.620888][T19638] FAT-fs (loop0): Directory bread(block 68) failed [ 440.624080][ T4330] usb 5-1: USB disconnect, device number 36 [ 440.627438][T19638] FAT-fs (loop0): Directory bread(block 69) failed [ 440.685232][T19638] FAT-fs (loop0): Directory bread(block 70) failed [ 440.701569][T19638] FAT-fs (loop0): Directory bread(block 71) failed [ 440.708587][T19638] FAT-fs (loop0): Directory bread(block 72) failed [ 440.754919][T19638] FAT-fs (loop0): Directory bread(block 73) failed [ 440.828448][ T125] usb 6-1: 0:2 : does not exist [ 440.854516][ T125] usb 6-1: USB disconnect, device number 25 [ 441.378560][T19656] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7085'. [ 441.445608][T19658] loop4: detected capacity change from 0 to 128 [ 441.657020][T19666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7091'. [ 441.898878][T19677] affs: No valid root block on device nbd5 [ 442.145500][T19692] netlink: 'syz.4.7104': attribute type 4 has an invalid length. [ 442.310188][T19697] loop0: detected capacity change from 0 to 2048 [ 442.395420][T19705] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.398601][T19748] xt_CT: No such helper "snmp_trap" [ 443.971505][T19785] netlink: 'syz.0.7149': attribute type 6 has an invalid length. [ 444.023172][T19789] loop1: detected capacity change from 0 to 128 [ 444.511822][T19810] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 444.845654][T19826] loop5: detected capacity change from 0 to 128 [ 444.947963][T19831] No such timeout policy "syz0" [ 445.351203][T19847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7180'. [ 445.636351][T19861] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7186'. [ 445.753992][T19867] loop5: detected capacity change from 0 to 4096 [ 445.795495][T19867] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 445.837091][T19867] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 445.882254][T19867] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 445.923574][T19867] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 445.996912][T19867] ntfs: volume version 3.1. [ 446.052750][T19867] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 446.086775][T19867] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 446.146325][T19867] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 446.272067][T19867] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 446.338655][T19867] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 446.693331][T19902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7204'. [ 446.755294][T19902] netlink: 'syz.5.7204': attribute type 1 has an invalid length. [ 447.014108][T19916] overlayfs: conflicting options: userxattr,redirect_dir=on [ 447.390302][T19933] netlink: 'syz.5.7221': attribute type 2 has an invalid length. [ 447.420920][T19933] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7221'. [ 447.920281][T19952] loop1: detected capacity change from 0 to 4096 [ 447.933215][T19956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7232'. [ 447.970350][T19952] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 448.184653][T19952] ntfs3: loop1: failed to convert "c46c" to iso8859-4 [ 448.906979][T19995] netlink: 'syz.2.7251': attribute type 16 has an invalid length. [ 448.937168][T19995] netlink: 'syz.2.7251': attribute type 17 has an invalid length. [ 448.973947][T19995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 448.991472][T19995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 449.010210][T19995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 449.015706][T20001] loop4: detected capacity change from 0 to 2048 [ 449.036287][T19995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.057670][T19995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.072421][T20001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.102120][T19995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.570029][T20022] netlink: 'syz.2.7265': attribute type 10 has an invalid length. [ 449.778979][T20034] loop5: detected capacity change from 0 to 512 [ 449.841741][T20034] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 449.890426][T20034] ext4 filesystem being mounted at /1272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.940138][T20034] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.7269: corrupted xattr block 33 [ 450.009179][T20034] fscrypt (loop5, inode 15): Error -117 getting encryption context [ 450.087868][ T5823] EXT4-fs (loop5): unmounting filesystem. [ 450.205096][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7273'. [ 450.240455][T20047] loop0: detected capacity change from 0 to 1024 [ 450.275151][T20047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 450.307857][T20047] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 450.375536][T20047] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 450.440682][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 450.503747][T20056] loop5: detected capacity change from 0 to 8 [ 450.531530][T20056] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 450.573569][T20056] cramfs: Error -3 while decompressing! [ 450.573843][ T7617] udevd[7617]: incorrect cramfs checksum on /dev/loop5 [ 450.579144][T20056] cramfs: ffffffff96d8d1e8(26)->ffff8880517e5000(4096) [ 450.592861][T20059] netlink: 'syz.0.7276': attribute type 16 has an invalid length. [ 450.635287][T20059] netlink: 'syz.0.7276': attribute type 17 has an invalid length. [ 450.657051][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 450.668449][T20056] cramfs: Error -3 while decompressing! [ 450.688000][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 450.689073][T20064] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 450.708259][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 450.714240][T20056] cramfs: ffffffff96d8d202(26)->ffff888051d1f000(4096) [ 450.730322][T20059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.739750][T20056] cramfs: Error -3 while decompressing! [ 450.754064][T20056] cramfs: ffffffff96d8d21c(16)->ffff88804e0a0000(4096) [ 450.784705][T20056] cramfs: Error -3 while decompressing! [ 450.790307][T20056] cramfs: ffffffff96d8d1e8(26)->ffff8880517e5000(4096) [ 451.001836][T20070] loop1: detected capacity change from 0 to 512 [ 451.052581][T20070] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.7285: inode has both inline data and extents flags [ 451.147998][T20070] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.7285: couldn't read orphan inode 15 (err -117) [ 451.189144][T20070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 451.345195][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7293'. [ 451.413433][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 451.595966][ T26] audit: type=1326 audit(2000000269.600:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20101 comm="syz.2.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005b59bf79 code=0x7ffc0000 [ 451.618481][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.716641][ T26] audit: type=1326 audit(2000000269.650:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20101 comm="syz.2.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f005b59bf79 code=0x7ffc0000 [ 451.827297][ T26] audit: type=1326 audit(2000000269.650:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20101 comm="syz.2.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005b59bf79 code=0x7ffc0000 [ 451.849762][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.940730][ T26] audit: type=1326 audit(2000000269.650:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20101 comm="syz.2.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005b59bf79 code=0x7ffc0000 [ 452.029773][T20123] loop4: detected capacity change from 0 to 512 [ 452.124215][T20123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 452.162133][ T26] audit: type=1326 audit(2000000270.170:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20128 comm="syz.2.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005b59bf79 code=0x7ffc0000 [ 452.230836][T20123] ext4 filesystem being mounted at /1417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.294581][ T26] audit: type=1326 audit(2000000270.200:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20128 comm="syz.2.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f005b59bf79 code=0x7ffc0000 [ 452.359893][T20123] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.7308: corrupted xattr block 33 [ 452.399094][ T26] audit: type=1326 audit(2000000270.200:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20128 comm="syz.2.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005b59bf79 code=0x7ffc0000 [ 452.441615][T20123] fscrypt (loop4, inode 15): Error -117 getting encryption context [ 452.468711][ T26] audit: type=1326 audit(2000000270.200:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20128 comm="syz.2.7312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005b59bf79 code=0x7ffc0000 [ 452.593814][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 453.016697][ T5761] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 453.073307][T20170] netlink: 1096 bytes leftover after parsing attributes in process `syz.2.7332'. [ 453.117544][T20172] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7333'. [ 453.148711][T20172] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7333'. [ 453.160306][T20172] netlink: 'syz.5.7333': attribute type 6 has an invalid length. [ 453.177952][T20172] netlink: 'syz.5.7333': attribute type 5 has an invalid length. [ 453.186371][T20172] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7333'. [ 453.230751][ T5761] usb 2-1: Using ep0 maxpacket: 8 [ 453.238337][ T5761] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 453.281283][ T5761] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 453.304399][T20182] libceph: resolve '0' (ret=-3): failed [ 453.310176][ T5761] usb 2-1: config 0 interface 0 has no altsetting 0 [ 453.365452][ T5761] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 453.396372][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.428186][ T5761] usb 2-1: Product: syz [ 453.439892][ T5761] usb 2-1: Manufacturer: syz [ 453.445047][ T5761] usb 2-1: SerialNumber: syz [ 453.470388][ T5761] usb 2-1: config 0 descriptor?? [ 453.517475][ T5761] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 453.717995][ T5761] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 453.758800][ T5761] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 453.778668][ T5761] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 453.963597][ T5761] usb 2-1: USB disconnect, device number 31 [ 454.117020][T20213] netlink: 'syz.4.7354': attribute type 8 has an invalid length. [ 454.133338][T20188] loop0: detected capacity change from 0 to 32768 [ 454.205701][T20218] netlink: 'syz.4.7356': attribute type 2 has an invalid length. [ 454.294797][T20188] XFS (loop0): Mounting V5 Filesystem [ 454.431304][T20188] XFS (loop0): Ending clean mount [ 454.539092][ T4269] XFS (loop0): Unmounting Filesystem [ 454.688627][T20238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7363'. [ 454.750003][T20240] netlink: 'syz.5.7364': attribute type 10 has an invalid length. [ 454.766046][T20240] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7364'. [ 455.116641][T20250] ip6t_srh: unknown srh invflags 4000 [ 455.345320][T20262] netlink: 'syz.2.7374': attribute type 21 has an invalid length. [ 455.358322][T20262] IPv6: NLM_F_CREATE should be specified when creating new route [ 455.373594][T20262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7374'. [ 455.617449][ T5759] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 455.766596][T20283] loop1: detected capacity change from 0 to 256 [ 455.823641][T20283] FAT-fs (loop1): Directory bread(block 64) failed [ 455.830880][ T5759] usb 6-1: Using ep0 maxpacket: 16 [ 455.838375][ T5759] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.850223][T20285] loop0: detected capacity change from 0 to 736 [ 455.854186][T20283] FAT-fs (loop1): Directory bread(block 65) failed [ 455.872273][ T5759] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 455.886337][T20283] FAT-fs (loop1): Directory bread(block 66) failed [ 455.904785][ T5759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.922696][T20283] FAT-fs (loop1): Directory bread(block 67) failed [ 455.937215][T20283] FAT-fs (loop1): Directory bread(block 68) failed [ 455.945116][ T5759] usb 6-1: Product: syz [ 455.960780][ T5759] usb 6-1: Manufacturer: syz [ 455.975829][T20283] FAT-fs (loop1): Directory bread(block 69) failed [ 455.985806][ T5759] usb 6-1: SerialNumber: syz [ 455.995491][T20283] FAT-fs (loop1): Directory bread(block 70) failed [ 456.005769][ T5759] usb 6-1: config 0 descriptor?? [ 456.011743][T20283] FAT-fs (loop1): Directory bread(block 71) failed [ 456.044944][ T5759] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 456.061071][T20283] FAT-fs (loop1): Directory bread(block 72) failed [ 456.067804][ T5759] gspca_stv06xx: st6422 sensor detected [ 456.073995][T20283] FAT-fs (loop1): Directory bread(block 73) failed [ 456.119686][T20289] MPI: mpi too large (107144 bits) [ 456.308200][T20295] netlink: 'syz.1.7388': attribute type 16 has an invalid length. [ 456.330742][T20295] netlink: 'syz.1.7388': attribute type 17 has an invalid length. [ 456.355485][T20295] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 456.385838][T20299] loop4: detected capacity change from 0 to 1024 [ 456.416983][T20295] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 456.456182][T20295] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 456.501047][T20295] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 456.552946][ T5759] STV06xx: probe of 6-1:0.0 failed with error -71 [ 456.553273][T10819] hfsplus: b-tree write err: -5, ino 4 [ 456.567787][T20295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 456.577597][T20303] netlink: 'syz.2.7393': attribute type 1 has an invalid length. [ 456.585833][ T5759] usb 6-1: USB disconnect, device number 26 [ 456.597420][T20295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 456.656670][T20295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 456.683579][T20295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 457.330903][ T125] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 457.482814][T20343] netlink: 'syz.1.7413': attribute type 16 has an invalid length. [ 457.509877][T20343] netlink: 'syz.1.7413': attribute type 17 has an invalid length. [ 457.531457][T20343] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 457.539616][ T125] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 457.563195][T20343] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 457.570910][ T125] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 457.579991][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.605346][T20343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 457.625142][ T125] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 457.633658][T20343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 457.661088][T20343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.073398][T20367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7425'. [ 458.417280][T20383] loop1: detected capacity change from 0 to 256 [ 458.431617][T20383] exfat: Deprecated parameter 'utf8' [ 458.440335][T20383] exfat: Deprecated parameter 'namecase' [ 458.476789][T20383] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 458.545303][T20383] kAFS: unable to lookup cell 's@z0' [ 458.663335][T20391] loop5: detected capacity change from 0 to 16 [ 458.683391][ T125] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 458.754557][T20391] erofs: (device loop5): mounted with root inode @ nid 36. [ 458.890355][ T125] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 458.919464][ T125] stv0680 3-1:4.0: last error: 86, command = 0x17 [ 458.936399][ T125] usb 3-1: USB disconnect, device number 35 [ 458.989323][T20404] SET target dimension over the limit! [ 459.079709][T20406] netlink: 'syz.4.7445': attribute type 1 has an invalid length. [ 459.148058][T20410] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 459.341927][T20416] fuse: blksize only supported for fuseblk [ 459.603673][T20426] binder: BC_ACQUIRE_RESULT not supported [ 459.621899][T20426] binder: 20425:20426 ioctl c0306201 200000000500 returned -22 [ 459.672391][T20400] loop0: detected capacity change from 0 to 32768 [ 459.730511][T20400] [ 459.730511][T20400] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 459.730511][T20400] [ 459.755595][T20400] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 459.755595][T20400] [ 459.805118][T20400] ERROR: (device loop0): jfs_unlink: [ 459.805118][T20400] [ 459.875893][ T4269] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 459.875893][ T4269] [ 459.892570][T10833] ERROR: (device loop0): diWrite: ixpxd invalid [ 459.892570][T10833] [ 459.968475][T10833] ERROR: (device loop0): txCommit: [ 459.968475][T10833] [ 460.014236][T10833] jfs_write_inode: jfs_commit_inode failed! [ 460.042097][ T4269] [ 460.042097][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 460.042097][ T4269] [ 460.070310][ T4269] [ 460.070310][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 460.070310][ T4269] [ 460.089037][T20438] loop5: detected capacity change from 0 to 2048 [ 460.202014][T20438] loop5: p1 < > p3 [ 460.210862][T20438] loop5: p3 size 134217728 extends beyond EOD, truncated [ 460.293638][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7465'. [ 460.400912][ T5761] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 460.524759][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 460.532762][ T4506] udevd[4506]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 460.596038][ T4506] udevd[4506]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 460.603662][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 460.612565][ T5761] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 460.645051][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.693897][ T5761] usb 2-1: config 0 descriptor?? [ 460.724027][ T5761] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 461.012353][T20468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.019349][T20468] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 461.085391][T20468] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 461.126068][ T5761] gspca_cpia1: usb_control_msg 03, error -71 [ 461.155503][ T5761] gspca_cpia1: usb_control_msg 01, error -71 [ 461.175549][ T5761] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 461.209955][ T5761] usb 2-1: USB disconnect, device number 32 [ 461.499125][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7483'. [ 461.619614][T20501] ubi30: attaching mtd0 [ 461.624421][T20501] ubi30 error: ubi_attach_mtd_dev: bad VID header (10535) or data offsets (10599) [ 462.160835][T20520] netlink: 'syz.4.7493': attribute type 2 has an invalid length. [ 462.170565][ T26] audit: type=1326 audit(2000000280.170:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 462.258770][ T26] audit: type=1326 audit(2000000280.210:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 462.287703][T20527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7497'. [ 462.357530][ T26] audit: type=1326 audit(2000000280.210:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 462.443512][ T26] audit: type=1326 audit(2000000280.210:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 462.553969][ T26] audit: type=1326 audit(2000000280.210:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 462.601918][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7502'. [ 462.638360][ T26] audit: type=1326 audit(2000000280.210:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 462.743502][T20545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7506'. [ 462.744038][ T26] audit: type=1326 audit(2000000280.210:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 462.794952][T20549] tmpfs: Bad value for 'mpol' [ 462.871162][ T26] audit: type=1326 audit(2000000280.210:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20521 comm="syz.1.7496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 462.963682][ T5761] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 463.038883][T20560] device tunl0 entered promiscuous mode [ 463.103065][T20560] netlink: 'syz.5.7512': attribute type 4 has an invalid length. [ 463.130949][T20560] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7512'. [ 463.175726][T20565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7515'. [ 463.190251][ T5761] usb 2-1: unable to get BOS descriptor or descriptor too short [ 463.229391][ T5761] usb 2-1: config 7 has an invalid interface number: 199 but max is 0 [ 463.258939][ T5761] usb 2-1: config 7 has no interface number 0 [ 463.279174][ T5761] usb 2-1: config 7 interface 199 has no altsetting 0 [ 463.297817][T20572] cgroup: Name too long [ 463.309549][ T5761] usb 2-1: string descriptor 0 read error: -22 [ 463.359289][ T5761] usb 2-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15 [ 463.380371][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.436928][ T5761] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282 [ 463.779197][T20584] loop4: detected capacity change from 0 to 8192 [ 463.821867][T20584] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 463.835914][ T5761] gspca_sn9c20x: Write register 1001 failed -71 [ 463.842958][ T5761] gspca_sn9c20x: Device initialization failed [ 463.849313][ T5761] gspca_sn9c20x: probe of 2-1:7.199 failed with error -71 [ 463.907517][ T5761] usb 2-1: USB disconnect, device number 33 [ 463.913977][T20584] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 463.954455][T20584] FAT-fs (loop4): Filesystem has been set read-only [ 464.643616][T20626] netlink: 'syz.2.7536': attribute type 1 has an invalid length. [ 464.674383][T20626] netlink: 'syz.2.7536': attribute type 3 has an invalid length. [ 464.751023][T20626] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7536'. [ 464.760115][T20626] NCSI netlink: No device for ifindex 52229 [ 464.926213][T20638] binfmt_misc: register: failed to install interpreter file ./file0 [ 465.034810][T20646] loop0: detected capacity change from 0 to 16 [ 465.082045][T20646] erofs: (device loop0): mounted with root inode @ nid 36. [ 465.179670][T20646] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 465.714023][T20678] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7561'. [ 465.934805][T20680] loop4: detected capacity change from 0 to 4096 [ 465.978576][T20680] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 466.117316][T20680] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 466.124785][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7568'. [ 466.195684][T20680] ntfs: volume version 3.1. [ 467.732869][T20720] loop0: detected capacity change from 0 to 32768 [ 467.782376][T20720] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 467.850316][T20720] JBD2: Ignoring recovery information on journal [ 468.076274][T20720] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 468.141192][T20720] ocfs2: Unmounting device (7,0) on (node local) [ 468.195643][T20780] ALSA: mixer_oss: invalid OSS volume '~˘)–„VÄ]Qĺ' [ 468.394371][T20786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7605'. [ 468.965726][T20761] loop1: detected capacity change from 0 to 32768 [ 468.975768][T20806] snd_dummy snd_dummy.0: control 4:9:6:syz1:6 is already present [ 469.163638][T20761] XFS (loop1): Mounting V5 Filesystem [ 469.356679][T20827] comedi comedi3: comedi_config --init_data is deprecated [ 469.357574][T20761] XFS (loop1): Ending clean mount [ 469.616769][T20836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7622'. [ 469.627747][ T4265] XFS (loop1): Unmounting Filesystem [ 469.630852][T20836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7622'. [ 469.751282][T20836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7622'. [ 469.816986][T20845] device netdevsim0 entered promiscuous mode [ 470.027432][T20854] netlink: zone id is out of range [ 470.067745][T20856] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7631'. [ 470.663742][T20884] xt_hashlimit: max too large, truncated to 1048576 [ 470.889094][T20894] mmap: syz.4.7648 (20894): VmData 37462016 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 471.096615][T20904] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7652'. [ 471.216901][T20902] loop5: detected capacity change from 0 to 4096 [ 471.267598][T20902] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 471.330643][ T4330] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 471.454820][ T125] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 471.530773][ T4330] usb 3-1: Using ep0 maxpacket: 32 [ 471.544623][ T4330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 471.590754][ T4330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 471.622994][ T4330] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 471.646622][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.660645][ T125] usb 2-1: Using ep0 maxpacket: 32 [ 471.668289][ T4330] usb 3-1: Product: syz [ 471.679027][ T4330] usb 3-1: Manufacturer: syz [ 471.684464][ T125] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 471.703210][ T4330] usb 3-1: SerialNumber: syz [ 471.714628][ T125] usb 2-1: config 0 has no interface number 0 [ 471.735931][ T4330] usb 3-1: config 0 descriptor?? [ 471.745735][ T125] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 471.763751][ T4330] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 471.780601][ T125] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 26159, setting to 1024 [ 471.796412][ T125] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 471.838335][ T125] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 471.868261][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.903071][ T125] usb 2-1: Product: syz [ 471.907349][ T125] usb 2-1: Manufacturer: syz [ 471.920659][ T125] usb 2-1: SerialNumber: syz [ 471.948180][ T125] usb 2-1: config 0 descriptor?? [ 471.980045][T20908] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 471.980558][ T1169] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 471.993824][T20908] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 472.039489][ T4330] usb 3-1: USB disconnect, device number 36 [ 472.212188][ T1169] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 472.231880][ T1169] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.252598][ T1169] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 472.272844][ T1169] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.282897][ T125] usb 2-1: USB disconnect, device number 34 [ 472.304605][ T1169] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.344765][ T1169] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 472.367120][ T1169] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 472.385985][ T1169] usb 5-1: Product: syz [ 472.390194][ T1169] usb 5-1: Manufacturer: syz [ 472.420164][ T1169] cdc_wdm 5-1:1.0: skipping garbage [ 472.432381][ T1169] cdc_wdm 5-1:1.0: skipping garbage [ 472.449062][ T1169] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 472.460609][ T1169] cdc_wdm 5-1:1.0: Unknown control protocol [ 472.651693][T20926] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 472.679782][T20955] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 472.682397][T20956] loop5: detected capacity change from 0 to 128 [ 472.695603][ T1169] usb 5-1: USB disconnect, device number 37 [ 472.822726][T20956] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 472.988995][ T5823] sysv_free_block: flc_count > flc_size [ 473.011429][ T5823] sysv_free_block: flc_count > flc_size [ 473.017050][ T5823] sysv_free_block: flc_count > flc_size [ 473.023038][ T5823] sysv_free_block: flc_count > flc_size [ 473.028594][ T5823] sysv_free_block: flc_count > flc_size [ 473.040608][ T5823] sysv_free_block: flc_count > flc_size [ 473.046210][ T5823] sysv_free_block: flc_count > flc_size [ 473.090635][ T5823] sysv_free_block: flc_count > flc_size [ 473.096249][ T5823] sysv_free_block: flc_count > flc_size [ 473.119788][ T5823] sysv_free_block: flc_count > flc_size [ 473.137496][ T5823] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 473.220486][T20976] overlayfs: missing 'lowerdir' [ 473.595610][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 473.595628][ T26] audit: type=1326 audit(2000000291.600:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20992 comm="syz.1.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 473.695626][ T26] audit: type=1326 audit(2000000291.610:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20992 comm="syz.1.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 473.761190][ T26] audit: type=1326 audit(2000000291.610:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20992 comm="syz.1.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 473.800609][ T4330] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 473.848973][ T26] audit: type=1326 audit(2000000291.610:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20992 comm="syz.1.7698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fef9bf79 code=0x7ffc0000 [ 473.972558][T21009] vivid-001: ================= START STATUS ================= [ 473.996564][ T4330] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 474.024249][T21009] vivid-001: Radio HW Seek Mode: Bounded [ 474.050612][T21009] vivid-001: Radio Programmable HW Seek: false [ 474.050794][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.061393][T21009] vivid-001: RDS Rx I/O Mode: Block I/O [ 474.100047][T21009] vivid-001: Generate RBDS Instead of RDS: false [ 474.108522][ T4330] usb 3-1: Product: syz [ 474.119544][ T4330] usb 3-1: Manufacturer: syz [ 474.124705][ T4330] usb 3-1: SerialNumber: syz [ 474.126980][T21009] vivid-001: RDS Reception: true [ 474.144732][T21009] vivid-001: RDS Program Type: 0 inactive [ 474.160575][T21009] vivid-001: RDS PS Name: inactive [ 474.168217][T21009] vivid-001: RDS Radio Text: inactive [ 474.168835][ T4330] usb 3-1: config 0 descriptor?? [ 474.188186][T21009] vivid-001: RDS Traffic Announcement: false inactive [ 474.216030][T21009] vivid-001: RDS Traffic Program: false inactive [ 474.229123][T21009] vivid-001: RDS Music: false inactive [ 474.236365][T21009] vivid-001: ================== END STATUS ================== [ 474.293017][T21020] netlink: 'syz.1.7711': attribute type 30 has an invalid length. [ 474.397468][ T4330] peak_usb 3-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 474.611969][ T4330] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 474.620295][ T4330] peak_usb 3-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 474.684722][ T4330] peak_usb: probe of 3-1:0.0 failed with error -71 [ 474.723579][ T4330] usb 3-1: USB disconnect, device number 37 [ 475.186219][ T26] audit: type=1326 audit(2000000293.190:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21059 comm="syz.0.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 475.295305][ T26] audit: type=1326 audit(2000000293.190:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21059 comm="syz.0.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 475.358503][ T26] audit: type=1326 audit(2000000293.190:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21059 comm="syz.0.7731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 475.390453][ T4330] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 475.426892][ T26] audit: type=1326 audit(2000000293.330:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.5.7732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 475.481042][ T26] audit: type=1326 audit(2000000293.330:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.5.7732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 475.541427][ T26] audit: type=1326 audit(2000000293.330:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21061 comm="syz.5.7732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 475.610494][ T4330] usb 2-1: Using ep0 maxpacket: 16 [ 475.626926][ T4330] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 475.665015][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.693246][ T4330] usb 2-1: Product: syz [ 475.696375][T21080] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 475.700596][ T4330] usb 2-1: Manufacturer: syz [ 475.737179][ T4330] usb 2-1: SerialNumber: syz [ 475.750490][T21080] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 475.759918][ T4330] r8152-cfgselector 2-1: config 0 descriptor?? [ 475.779881][T21080] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 475.802805][T21080] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 476.186051][ T4330] r8152-cfgselector 2-1: Unknown version 0x0000 [ 476.201224][ T4330] r8152-cfgselector 2-1: bad CDC descriptors [ 476.226907][ T4330] r8152-cfgselector 2-1: Unknown version 0x0000 [ 476.250011][ T4330] r8152-cfgselector 2-1: USB disconnect, device number 35 [ 477.158349][T21142] netlink: 'syz.1.7771': attribute type 21 has an invalid length. [ 477.176716][T21142] IPv6: NLM_F_CREATE should be specified when creating new route [ 477.185997][T21142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.193328][T21142] IPv6: NLM_F_CREATE should be set when creating new route [ 477.193474][T21144] fuse: Bad value for 'fd' [ 477.200613][T21142] IPv6: NLM_F_CREATE should be set when creating new route [ 477.200640][T21142] IPv6: NLM_F_CREATE should be set when creating new route [ 477.773338][T21171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7784'. [ 478.805849][T21220] loop5: detected capacity change from 0 to 64 [ 479.470313][T21248] binder: 21247:21248 ioctl c00c620f 0 returned -14 [ 479.836202][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7830'. [ 479.872944][T21265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.202008][T21280] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 480.239438][T21283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7840'. [ 480.471909][T21294] netlink: 'syz.5.7843': attribute type 1 has an invalid length. [ 480.591930][T21299] loop4: detected capacity change from 0 to 64 [ 480.730575][ T1169] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 480.949287][T21312] netlink: 'syz.5.7854': attribute type 32 has an invalid length. [ 480.950128][ T1169] usb 1-1: Using ep0 maxpacket: 8 [ 480.999398][ T1169] usb 1-1: unable to get BOS descriptor or descriptor too short [ 481.022811][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 481.044211][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 481.064357][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 481.100897][ T1169] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 481.120094][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 481.147537][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 481.200165][ T1169] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 481.246715][ T1169] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 481.271573][T21318] netlink: 'syz.4.7857': attribute type 1 has an invalid length. [ 481.280115][ T1169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.298348][ T1169] usb 1-1: Product: syz [ 481.303065][ T1169] usb 1-1: Manufacturer: syz [ 481.307678][ T1169] usb 1-1: SerialNumber: syz [ 481.339456][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7858'. [ 481.351340][ T1169] usb 1-1: config 0 descriptor?? [ 481.363914][T21289] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 481.474635][ T4506] udevd[4506]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.611363][ T125] usb 1-1: USB disconnect, device number 36 [ 481.927978][T21331] loop5: detected capacity change from 0 to 1024 [ 482.017641][T21331] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 482.086957][ T5823] EXT4-fs (loop5): unmounting filesystem. [ 483.097178][T21348] loop1: detected capacity change from 0 to 32768 [ 483.187130][T21390] loop4: detected capacity change from 0 to 8 [ 483.216661][T21348] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 483.229021][T21390] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 483.259200][T21390] cramfs: Error -3 while decompressing! [ 483.292894][T21348] XFS (loop1): Mounting V5 Filesystem [ 483.305944][T21390] cramfs: ffffffff96d891e8(26)->ffff88805308c000(4096) [ 483.316569][T21390] cramfs: Error -5 while decompressing! [ 483.322925][T21390] cramfs: ffffffff96d89202(26)->ffff888052998000(4096) [ 483.330642][T21390] cramfs: Error -3 while decompressing! [ 483.336343][T21390] cramfs: ffffffff96d8921c(16)->ffff888052aca000(4096) [ 483.343756][T21390] cramfs: Error -3 while decompressing! [ 483.366931][T21390] cramfs: ffffffff96d891e8(26)->ffff88805308c000(4096) [ 483.424361][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 483.424376][ T26] audit: type=1800 audit(2000000301.430:313): pid=21390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7889" name="file3" dev="loop4" ino=348 res=0 errno=0 [ 483.530177][T21348] XFS (loop1): Ending clean mount [ 483.567274][T21348] XFS (loop1): Quotacheck needed: Please wait. [ 483.668495][T21348] XFS (loop1): Quotacheck: Done. [ 483.840840][ T4265] XFS (loop1): Unmounting Filesystem [ 484.079244][T21425] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7905'. [ 484.156723][T21425] unsupported nlmsg_type 40 [ 484.335268][T21433] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744071562330114) [ 484.366547][T21433] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 484.392990][T21436] IPv6: sit2: Disabled Multicast RS [ 484.447874][T21441] device lo entered promiscuous mode [ 484.466151][T21441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.399534][T21489] loop4: detected capacity change from 0 to 64 [ 485.467026][T21489] hfs: unable to locate alternate MDB [ 485.491687][T21489] hfs: continuing without an alternate MDB [ 485.503029][T21490] loop0: detected capacity change from 0 to 4096 [ 485.681740][T21500] loop5: detected capacity change from 0 to 16 [ 485.747254][T21500] erofs: (device loop5): mounted with root inode @ nid 36. [ 485.795896][T21504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7942'. [ 485.796199][T21500] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 486.584634][T21535] erofs: (device loop9): erofs_read_superblock: cannot find valid erofs superblock [ 486.725596][T21508] loop0: detected capacity change from 0 to 32768 [ 486.795534][T21508] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 486.846894][T21508] (syz.0.7944,21508,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 486.912780][T21508] (syz.0.7944,21508,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 486.922215][T21508] (syz.0.7944,21508,0):ocfs2_mknod:298 ERROR: status = -2 [ 486.926437][T21551] netlink: 'syz.4.7964': attribute type 13 has an invalid length. [ 486.929358][T21508] (syz.0.7944,21508,0):ocfs2_mknod:502 ERROR: status = -2 [ 486.947764][T21508] (syz.0.7944,21508,0):ocfs2_create:676 ERROR: status = -2 [ 487.104737][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 487.334518][T21567] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7972'. [ 487.390470][T21567] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 487.420313][T21570] netlink: 'syz.2.7973': attribute type 12 has an invalid length. [ 487.446528][ T26] audit: type=1326 audit(2000000305.450:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21572 comm="syz.4.7975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 487.555691][ T26] audit: type=1326 audit(2000000305.450:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21572 comm="syz.4.7975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 487.669750][ T26] audit: type=1326 audit(2000000305.450:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21572 comm="syz.4.7975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 487.692019][T21583] ieee802154 phy0 wpan0: encryption failed: -22 [ 487.701279][T21579] PKCS8: Unsupported PKCS#8 version [ 487.747148][ T26] audit: type=1326 audit(2000000305.450:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21572 comm="syz.4.7975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 487.855290][ T26] audit: type=1326 audit(2000000305.450:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21572 comm="syz.4.7975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 488.493826][T21607] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 488.871549][T21626] AppArmor: change_hat: Invalid input '' [ 488.943317][T21600] loop4: detected capacity change from 0 to 32768 [ 488.980051][T21600] (syz.4.7989,21600,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 489.014626][T21600] (syz.4.7989,21600,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 489.084904][T21600] JBD2: Ignoring recovery information on journal [ 489.100330][T21634] overlayfs: conflicting options: userxattr,metacopy=on [ 489.198493][T21600] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 489.377693][ T26] audit: type=1326 audit(2000000307.381:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21642 comm="syz.5.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 489.444706][ T26] audit: type=1326 audit(2000000307.421:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21642 comm="syz.5.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 489.549578][ T26] audit: type=1326 audit(2000000307.421:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21642 comm="syz.5.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 489.595847][T21649] netlink: 'syz.5.8012': attribute type 4 has an invalid length. [ 489.602202][ T26] audit: type=1326 audit(2000000307.421:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21642 comm="syz.5.8010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 489.648429][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 489.918400][T21655] loop1: detected capacity change from 0 to 2048 [ 490.034435][T21655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.155401][T21655] UDF-fs: incorrect filename length (10) [ 491.813692][ T4330] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 491.933421][T21757] netlink: 'syz.1.8065': attribute type 3 has an invalid length. [ 492.009502][ T4330] usb 3-1: Using ep0 maxpacket: 16 [ 492.019118][ T4330] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 492.068301][ T4330] usb 3-1: config 0 has no interface number 0 [ 492.092424][ T4330] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 492.149238][ T4330] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 492.167938][ T4330] usb 3-1: config 0 interface 41 has no altsetting 0 [ 492.202535][ T4330] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 492.217904][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.235151][ T4330] usb 3-1: Product: syz [ 492.249631][ T4330] usb 3-1: Manufacturer: syz [ 492.254412][ T4330] usb 3-1: SerialNumber: syz [ 492.273383][ T4330] usb 3-1: config 0 descriptor?? [ 492.280503][T21736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 492.299635][T21736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 492.349426][ T1169] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 492.355769][T21773] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 492.390734][T21775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8075'. [ 492.434253][T21775] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 492.464573][T21775] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 492.496710][T21775] device bridge3 entered promiscuous mode [ 492.537311][T21736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 492.539484][ T1169] usb 5-1: Using ep0 maxpacket: 16 [ 492.559672][T21736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 492.571027][ T1169] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 492.599523][ T1169] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 492.639932][ T1169] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 492.670787][ T1169] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 492.709374][ T1169] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 492.726964][T21763] loop0: detected capacity change from 0 to 32768 [ 492.734752][ T1169] usb 5-1: config 1 interface 0 has no altsetting 0 [ 492.744407][ T1169] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 492.765065][T21763] (syz.0.8069,21763,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 492.778833][ T4330] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 492.789457][ T1169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.802070][ T4330] CoreChips: probe of 3-1:0.41 failed with error -71 [ 492.839044][ T4330] usb 3-1: USB disconnect, device number 38 [ 492.846389][T21763] (syz.0.8069,21763,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 492.849031][ T1169] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 492.915818][T21763] JBD2: Ignoring recovery information on journal [ 493.042768][T21763] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 493.096483][ T1169] ums-sddr09: probe of 5-1:1.0 failed with error -22 [ 493.138539][ T1169] usb 5-1: USB disconnect, device number 38 [ 493.274214][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 493.339360][ T4288] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 493.565928][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.587239][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.605670][ T4288] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.646886][ T4288] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.679314][ T4288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.711827][ T4288] usb 2-1: config 0 descriptor?? [ 493.751023][ T4288] hub 2-1:0.0: USB hub found [ 493.761918][T21808] loop0: detected capacity change from 0 to 4096 [ 493.795463][T21808] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 493.868054][T21808] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 493.929914][ T4288] hub 2-1:0.0: 14 ports detected [ 493.935940][ T4288] hub 2-1:0.0: insufficient power available to use all downstream ports [ 494.035858][T21820] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 494.135604][ T4288] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 494.147541][ T4288] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 494.230118][ T4288] usb 2-1: USB disconnect, device number 36 [ 494.836929][T21850] loop4: detected capacity change from 0 to 4096 [ 494.858658][T21850] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 494.879360][ T4330] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 495.071566][ T4330] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 495.088792][T21850] ntfs: (device loop4): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 495.099234][ T4330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.116224][T21850] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 495.146214][ T4330] usb 1-1: config 0 descriptor?? [ 495.163987][T21850] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 495.175903][ T4330] cp210x 1-1:0.0: cp210x converter detected [ 495.241444][T21850] ntfs: volume version 3.1. [ 495.295189][T21850] ntfs: (device loop4): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 495.310318][T21850] ntfs: (device loop4): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 495.339348][T21850] ntfs: (device loop4): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 495.398444][ T4330] usb 1-1: cp210x converter now attached to ttyUSB0 [ 495.615991][ T4330] usb 1-1: USB disconnect, device number 37 [ 495.649675][ T4330] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 495.657836][ T4330] cp210x 1-1:0.0: device disconnected [ 495.834491][T21887] Cannot find map_set index 33 as target [ 496.168235][T21906] tmpfs: Bad value for 'mpol' [ 497.139316][T21954] netlink: 'syz.1.8159': attribute type 1 has an invalid length. [ 497.162686][T21954] netlink: 'syz.1.8159': attribute type 3 has an invalid length. [ 497.215006][T21954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8159'. [ 497.459286][ T1169] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 497.649213][ T1169] usb 3-1: Using ep0 maxpacket: 16 [ 497.656128][ T1169] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 497.685937][ T1169] usb 3-1: config 0 has no interface number 0 [ 497.702594][ T1169] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 497.733130][ T1169] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 497.766042][ T1169] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 497.788930][ T1169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.811316][ T1169] usb 3-1: Product: syz [ 497.821788][ T1169] usb 3-1: Manufacturer: syz [ 497.826411][ T1169] usb 3-1: SerialNumber: syz [ 497.843151][ T1169] usb 3-1: config 0 descriptor?? [ 497.849247][T21956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 497.857113][T21956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 497.939277][T21982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.946586][T21982] IPv6: NLM_F_CREATE should be set when creating new route [ 497.953915][T21982] IPv6: NLM_F_CREATE should be set when creating new route [ 497.969233][ T4330] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 498.029399][ T125] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 498.080431][T21956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 498.087692][T21956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 498.159248][ T4330] usb 2-1: Using ep0 maxpacket: 16 [ 498.166352][ T4330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 498.175709][ T4330] usb 2-1: config 4 has an invalid interface number: 108 but max is 0 [ 498.184273][ T4330] usb 2-1: config 4 has no interface number 0 [ 498.190758][ T4330] usb 2-1: config 4 interface 108 has no altsetting 0 [ 498.200130][ T4330] usb 2-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.9f [ 498.216882][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.226157][ T4330] usb 2-1: Product: syz [ 498.231513][ T4330] usb 2-1: Manufacturer: syz [ 498.236364][ T4330] usb 2-1: SerialNumber: syz [ 498.241373][ T125] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.252846][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 498.289213][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 498.299361][ T125] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.312555][ T125] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 498.322674][ T1169] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 498.332605][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.349294][ T1169] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 498.369682][ T125] usb 1-1: config 0 descriptor?? [ 498.375432][ T1169] asix: probe of 3-1:0.251 failed with error -5 [ 498.378344][ T125] gspca_main: spca561-2.14.0 probing abcd:cdee [ 498.385605][ T1169] usb 3-1: USB disconnect, device number 39 [ 498.439272][ T4288] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 498.480571][ T4330] usb 2-1: active config #4 != 1 ?? [ 498.496382][ T4330] usb 2-1: USB disconnect, device number 37 [ 498.579991][ T125] spca561: probe of 1-1:0.0 failed with error -22 [ 498.587302][ T125] usb 1-1: MIDIStreaming interface descriptor not found [ 498.633650][ T125] usb 1-1: USB disconnect, device number 38 [ 498.638283][ T4288] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 498.678139][ T4288] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.701497][ T4288] usb 6-1: config 0 has no interface number 0 [ 498.708070][ T4288] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 498.724336][T22001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8182'. [ 498.737319][ T4288] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.765371][ T4288] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 498.783000][ T4288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.794848][ T4288] usb 6-1: Product: syz [ 498.799414][ T4288] usb 6-1: Manufacturer: syz [ 498.804247][ T4288] usb 6-1: SerialNumber: syz [ 498.811207][ T4288] usb 6-1: config 0 descriptor?? [ 499.223894][ T4288] usbtouchscreen: probe of 6-1:0.117 failed with error -71 [ 499.263296][ T4288] usb 6-1: USB disconnect, device number 27 [ 499.469087][ T1169] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 499.659231][ T1169] usb 3-1: Using ep0 maxpacket: 8 [ 499.668167][ T1169] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 499.683858][ T1169] usb 3-1: config 0 has no interface number 0 [ 499.695149][ T1169] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 499.709726][ T1169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.717905][ T1169] usb 3-1: Product: syz [ 499.723440][ T1169] usb 3-1: Manufacturer: syz [ 499.728212][ T1169] usb 3-1: SerialNumber: syz [ 499.760371][ T1169] usb 3-1: config 0 descriptor?? [ 499.863718][T22019] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 499.983989][ T1169] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 499.998384][ T1169] usb 3-1: No valid video chain found. [ 500.021103][ T1169] usb 3-1: USB disconnect, device number 40 [ 500.081417][T22027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8194'. [ 500.588634][T22023] loop5: detected capacity change from 0 to 32768 [ 500.634744][T22023] (syz.5.8191,22023,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 500.684267][ T26] audit: type=1326 audit(2000000318.691:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.4.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 500.724656][T22023] (syz.5.8191,22023,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 500.833502][T22023] JBD2: Ignoring recovery information on journal [ 500.851885][ T26] audit: type=1326 audit(2000000318.701:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.4.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 500.884890][T22023] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 501.065256][ T26] audit: type=1326 audit(2000000318.701:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.4.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 501.164994][ T26] audit: type=1326 audit(2000000318.701:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.4.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 501.201526][ T5823] ocfs2: Unmounting device (7,5) on (node local) [ 501.265530][ T26] audit: type=1326 audit(2000000318.701:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.4.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 501.296418][T22072] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 501.324010][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.330376][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.339923][T22072] device gre0 left promiscuous mode [ 501.369231][ T26] audit: type=1326 audit(2000000318.701:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.4.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 501.402070][T22072] device sit0 left promiscuous mode [ 501.429048][ T26] audit: type=1326 audit(2000000318.701:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.4.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 501.550722][ T26] audit: type=1326 audit(2000000318.701:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.4.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b00f9bf79 code=0x7ffc0000 [ 501.569269][T22072] bridge0: port 3(dummy0) entered blocking state [ 501.579558][T22072] bridge0: port 3(dummy0) entered forwarding state [ 501.586572][T22072] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.595317][T22072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.602744][T22072] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.609901][T22072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.626620][T22084] loop5: detected capacity change from 0 to 512 [ 501.806614][T22072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 501.854469][T22072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 501.934311][T22072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 502.007934][T10819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.153135][T22104] loop5: detected capacity change from 0 to 256 [ 502.289124][T22110] netlink: 'syz.2.8233': attribute type 11 has an invalid length. [ 502.589881][T22124] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8241'. [ 502.724283][ T1042] block nbd0: Attempted send on invalid socket [ 502.731153][ T1042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 503.148796][ T5761] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 503.345757][ T125] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 503.361128][ T5761] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 503.371798][ T5761] usb 2-1: config 220 has an invalid interface descriptor of length 5, skipping [ 503.387538][ T5761] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 503.438747][ T5761] usb 2-1: config 220 has no interface number 2 [ 503.445114][ T5761] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 503.471615][ T5761] usb 2-1: config 220 interface 0 has no altsetting 0 [ 503.478550][T22169] xt_connbytes: Forcing CT accounting to be enabled [ 503.488983][ T5761] usb 2-1: config 220 interface 76 has no altsetting 0 [ 503.496269][ T5761] usb 2-1: config 220 interface 1 has no altsetting 0 [ 503.521627][ T5761] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 503.529035][ T125] usb 3-1: Using ep0 maxpacket: 16 [ 503.540069][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.552926][ T125] usb 3-1: config 0 has an invalid interface number: 115 but max is 0 [ 503.563152][ T5761] usb 2-1: Product: syz [ 503.567341][ T5761] usb 2-1: Manufacturer: syz [ 503.569135][ T125] usb 3-1: config 0 has no interface number 0 [ 503.581228][ T5761] usb 2-1: SerialNumber: syz [ 503.594151][ T125] usb 3-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 503.622535][ T125] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 503.654833][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.664031][ T125] usb 3-1: Product: syz [ 503.672964][ T125] usb 3-1: Manufacturer: syz [ 503.677785][ T125] usb 3-1: SerialNumber: syz [ 503.679877][T22173] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 503.697206][ T125] usb 3-1: config 0 descriptor?? [ 503.823464][ T5761] usb 2-1: selecting invalid altsetting 0 [ 503.839361][ T5761] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 503.845749][ T5761] usb 2-1: No valid video chain found. [ 503.882919][ T5761] usb 2-1: selecting invalid altsetting 0 [ 503.898569][ T5761] usbtest: probe of 2-1:220.1 failed with error -22 [ 503.911332][ T5761] usb 2-1: USB disconnect, device number 38 [ 503.988642][T22183] loop4: detected capacity change from 0 to 256 [ 504.023947][T22183] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 504.116881][ T26] audit: type=1326 audit(2000000322.121:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22184 comm="syz.5.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 504.200587][ T26] audit: type=1326 audit(2000000322.121:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22184 comm="syz.5.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 504.219054][T22187] loop5: detected capacity change from 0 to 512 [ 504.239545][ T4288] usb 3-1: USB disconnect, device number 41 [ 504.303981][T22187] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 504.332737][T22187] ext4 filesystem being mounted at /1497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.372366][T22194] loop0: detected capacity change from 0 to 128 [ 504.393411][ T1169] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 504.479944][T22187] EXT4-fs error (device loop5): ext4_get_first_dir_block:3583: inode #12: comm syz.5.8273: Attempting to read directory block (0) that is past i_size (3) [ 504.625507][ T1169] usb 5-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 504.625561][ T5823] EXT4-fs (loop5): unmounting filesystem. [ 504.641776][ T1169] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.695769][ T1169] usb 5-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 504.704016][T22202] netlink: 'syz.1.8279': attribute type 30 has an invalid length. [ 504.727557][ T1169] usb 5-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 504.798693][ T1169] usb 5-1: config 1 interface 1 has no altsetting 0 [ 504.825287][ T1169] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.856145][ T1169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.894866][ T1169] usb 5-1: Product: syz [ 504.896704][T22209] loop1: detected capacity change from 0 to 16 [ 504.908196][ T1169] usb 5-1: Manufacturer: syz [ 504.915837][ T1169] usb 5-1: SerialNumber: syz [ 504.933644][T22209] erofs: (device loop1): mounted with root inode @ nid 36. [ 504.970101][ T1169] usb 5-1: selecting invalid altsetting 0 [ 504.975986][ T1169] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 505.167357][ T1169] usb 5-1: selecting invalid altsetting 0 [ 505.184361][ T1169] usbtest: probe of 5-1:1.1 failed with error -22 [ 505.228409][ T1169] usb 5-1: USB disconnect, device number 39 [ 505.267138][T22224] loop5: detected capacity change from 0 to 512 [ 505.358279][T22224] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 505.410955][T22224] ext4 filesystem being mounted at /1500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.566370][ T5823] EXT4-fs (loop5): unmounting filesystem. [ 505.611287][T22238] netlink: 193 bytes leftover after parsing attributes in process `syz.1.8294'. [ 505.795591][T22245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8298'. [ 505.985563][T22252] loop4: detected capacity change from 0 to 256 [ 506.405202][T22272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8311'. [ 507.499299][ T5761] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 507.624360][T22304] device bridge5 entered promiscuous mode [ 507.719844][ T5761] usb 2-1: Using ep0 maxpacket: 16 [ 507.726866][ T5761] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.778402][ T5761] usb 2-1: config 0 has no interface number 0 [ 507.807294][ T5761] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 507.849023][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.857557][ T5761] usb 2-1: Product: syz [ 507.878731][ T5761] usb 2-1: Manufacturer: syz [ 507.890566][ T5761] usb 2-1: SerialNumber: syz [ 507.910678][ T5761] usb 2-1: config 0 descriptor?? [ 508.071388][T22317] loop0: detected capacity change from 0 to 4096 [ 508.097637][T22317] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 508.124260][ T5761] usb 2-1: selecting invalid altsetting 1 [ 508.138331][ T5761] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 508.154757][ T5761] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 508.176163][T22324] loop5: detected capacity change from 0 to 1024 [ 508.182974][ T5761] speedtch: probe of 2-1:0.1 failed with error -22 [ 508.193141][ T4288] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 508.229636][ T5761] usb 2-1: USB disconnect, device number 39 [ 508.304382][T10833] hfsplus: b-tree write err: -5, ino 4 [ 508.326579][T22317] ntfs3: loop0: failed to convert "c46c" to iso8859-6 [ 508.354373][T22317] ntfs3: loop0: failed to convert "0030" to iso8859-6 [ 508.385657][T22317] ntfs3: loop0: failed to convert "0031" to iso8859-6 [ 508.410322][ T4288] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.438657][ T4288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 508.466485][ T4288] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.500287][ T4288] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.520401][ T4288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.545201][ T4288] usb 3-1: Product: syz [ 508.565425][ T4288] usb 3-1: Manufacturer: syz [ 508.580693][ T4288] usb 3-1: SerialNumber: syz [ 508.609664][T22332] device batadv0 entered promiscuous mode [ 508.632320][ T4288] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 508.639431][ T4288] cdc_ncm 3-1:1.0: bind() failure [ 508.857572][ T125] usb 3-1: USB disconnect, device number 42 [ 508.887446][T22340] x_tables: unsorted underflow at hook 2 [ 510.596084][T22412] bond0: option arp_validate: invalid value (18446744073491447809) [ 510.608518][T10828] bond0: (slave bond_slave_0): interface is now down [ 510.616020][T10828] bond0: (slave bond_slave_1): interface is now down [ 510.669865][ T56] bond0: (slave bond_slave_0): interface is now down [ 510.676638][ T56] bond0: (slave bond_slave_1): interface is now down [ 510.711297][ T56] bond0: now running without any active interface! [ 510.857311][T22390] loop5: detected capacity change from 0 to 32768 [ 510.898025][T22426] device lo left promiscuous mode [ 510.948050][T22426] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 510.975715][T22390] ERROR: (device loop5): diAllocAG: nfreeinos = 0, but iag on freelist [ 510.975715][T22390] [ 510.994275][T22426] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 511.022429][T22433] loop4: detected capacity change from 0 to 256 [ 511.035173][T22390] ERROR: (device loop5): remounting filesystem as read-only [ 511.045954][T22426] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 511.066707][T22390] ialloc: diAlloc returned -5! [ 511.072155][T22426] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 511.141295][T22433] FAT-fs (loop4): Directory bread(block 64) failed [ 511.157512][T22428] nvme_fabrics: missing parameter 'transport=%s' [ 511.177031][T22428] nvme_fabrics: missing parameter 'nqn=%s' [ 511.178689][T22426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.201118][T22433] FAT-fs (loop4): Directory bread(block 65) failed [ 511.216608][T22433] FAT-fs (loop4): Directory bread(block 66) failed [ 511.235150][T22426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 511.248470][T22433] FAT-fs (loop4): Directory bread(block 67) failed [ 511.255611][T22433] FAT-fs (loop4): Directory bread(block 68) failed [ 511.291089][T22426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.307574][T22433] FAT-fs (loop4): Directory bread(block 69) failed [ 511.328444][T22433] FAT-fs (loop4): Directory bread(block 70) failed [ 511.358471][T22433] FAT-fs (loop4): Directory bread(block 71) failed [ 511.365114][T22433] FAT-fs (loop4): Directory bread(block 72) failed [ 511.397751][T22433] FAT-fs (loop4): Directory bread(block 73) failed [ 512.318456][ T125] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 512.324676][T22478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8412'. [ 512.375595][T22478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8412'. [ 512.514182][ T125] usb 2-1: config 1 has an invalid interface number: 253 but max is 1 [ 512.531032][ T125] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.564509][ T125] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 512.606006][ T125] usb 2-1: config 1 has no interface number 2 [ 512.606846][T22489] ipt_REJECT: TCP_RESET invalid for non-tcp [ 512.635513][ T125] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.666937][ T125] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 512.697714][ T125] usb 2-1: config 1 interface 1 has no altsetting 0 [ 512.724650][ T125] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 512.752362][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.784806][T22493] netlink: 'syz.2.8419': attribute type 4 has an invalid length. [ 512.791917][ T125] usb 2-1: Product: syz [ 512.796834][ T125] usb 2-1: Manufacturer: syz [ 512.817072][ T125] usb 2-1: SerialNumber: syz [ 512.818377][T22493] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8419'. [ 512.860763][ T125] cdc_ncm 2-1:1.253: CDC Union missing and no IAD found [ 512.898972][ T125] cdc_ncm 2-1:1.253: bind() failure [ 512.925962][T22470] loop5: detected capacity change from 0 to 40427 [ 512.959481][T22470] F2FS-fs (loop5): invalid crc value [ 512.986051][T22470] F2FS-fs (loop5): Found nat_bits in checkpoint [ 513.112837][T22470] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 513.121233][T22470] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 513.293258][ T125] usb 2-1: USB disconnect, device number 40 [ 513.346993][T22517] loop5: detected capacity change from 0 to 256 [ 513.396504][T22517] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000003) [ 513.685629][T22529] delete_channel: no stack [ 513.863810][T22540] netlink: 'syz.4.8439': attribute type 4 has an invalid length. [ 514.178372][T22552] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 514.281550][T22555] loop0: detected capacity change from 0 to 2048 [ 514.288779][T22558] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 514.331109][T22555] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 514.367077][T22555] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 514.419130][T22555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.630121][T22572] loop5: detected capacity change from 0 to 256 [ 514.688402][T22572] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 514.909162][T10828] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 514.970838][T22582] --map-set only usable from mangle table [ 515.221513][T22590] loop1: detected capacity change from 0 to 8192 [ 515.617870][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 515.617886][ T26] audit: type=1326 audit(2000000333.622:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.0.8477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 515.712795][ T26] audit: type=1326 audit(2000000333.662:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.0.8477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 515.728166][T22618] netlink: 260 bytes leftover after parsing attributes in process `syz.1.8478'. [ 515.795434][ T26] audit: type=1326 audit(2000000333.672:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.0.8477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 515.854895][ T26] audit: type=1326 audit(2000000333.672:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.0.8477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 515.941585][ T26] audit: type=1326 audit(2000000333.672:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.0.8477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 515.990327][T22627] SET target dimension over the limit! [ 516.055515][ T26] audit: type=1326 audit(2000000333.702:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.0.8477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 516.129696][ T26] audit: type=1326 audit(2000000333.702:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.0.8477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 516.223846][ T26] audit: type=1326 audit(2000000333.702:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.0.8477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 516.318084][ T26] audit: type=1326 audit(2000000333.702:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22614 comm="syz.0.8477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa71f99bf79 code=0x7ffc0000 [ 516.390454][ T26] audit: type=1326 audit(2000000334.062:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22628 comm="syz.5.8483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412119bf79 code=0x7ffc0000 [ 516.785464][T22663] libceph: resolve '.' (ret=-3): failed [ 517.360906][ T125] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 517.471731][ T4331] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 517.574495][ T125] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.590869][ T125] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.607429][ T125] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 517.627028][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 517.645446][ T125] usb 5-1: SerialNumber: syz [ 517.662684][ T125] usb 5-1: 0:2 : does not exist [ 517.668041][ T4331] usb 1-1: Using ep0 maxpacket: 16 [ 517.679704][ T4331] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 517.708920][ T4331] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 517.727979][ T4331] usb 1-1: config 0 interface 0 has no altsetting 0 [ 517.755018][ T4331] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 517.785197][ T4331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.800134][ T4331] usb 1-1: config 0 descriptor?? [ 517.903998][ T5761] usb 5-1: USB disconnect, device number 40 [ 518.155923][T22730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8533'. [ 518.246334][T22735] xt_TCPMSS: Only works on TCP SYN packets [ 518.250688][ T4331] usb 1-1: USB disconnect, device number 39 [ 518.368024][ T1169] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 518.549536][ T1169] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 518.578147][ T1169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.596912][ T1169] usb 6-1: config 0 descriptor?? [ 518.629785][ T1169] cp210x 6-1:0.0: cp210x converter detected [ 518.687574][T22753] xt_hashlimit: max too large, truncated to 1048576 [ 519.031042][ T1169] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 519.047915][ T1169] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 519.079209][ T1169] usb 6-1: cp210x converter now attached to ttyUSB0 [ 519.121790][T22768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8551'. [ 519.124207][ T1169] usb 6-1: USB disconnect, device number 28 [ 519.187324][ T1169] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 519.214686][ T1169] cp210x 6-1:0.0: device disconnected [ 519.336811][T22777] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 519.356844][T22777] overlayfs: conflicting options: userxattr,redirect_dir=off [ 519.709232][T22793] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 48013 - 0 [ 519.727976][T22793] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 48013 - 0 [ 519.768025][T22793] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 48013 - 0 [ 519.815410][T22793] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 48013 - 0 [ 519.840267][T22793] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 56282 - 0 [ 519.893100][T22793] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 56282 - 0 [ 519.918207][T22793] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 56282 - 0 [ 519.943585][T22793] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 56282 - 0 [ 519.952909][T22793] device geneve3 entered promiscuous mode [ 520.002803][T22793] IPv6: ADDRCONF(NETDEV_CHANGE): geneve3: link becomes ready [ 520.261425][T22814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8574'. [ 520.421622][T22821] loop0: detected capacity change from 0 to 1024 [ 520.451290][T22823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8580'. [ 520.496975][T22821] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 520.527428][T22784] loop4: detected capacity change from 0 to 40427 [ 520.560936][T22827] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8578'. [ 520.611319][T22784] F2FS-fs (loop4): Found nat_bits in checkpoint [ 520.644690][T22834] ieee802154 phy0 wpan0: encryption failed: -22 [ 520.755765][T22784] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 521.108033][ T125] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 521.313861][ T125] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 521.335875][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.358352][ T125] usb 1-1: Product: syz [ 521.404533][ T125] usb 1-1: Manufacturer: syz [ 521.426590][ T125] usb 1-1: SerialNumber: syz [ 521.455714][ T125] usb 1-1: config 0 descriptor?? [ 521.471504][ T125] go7007: probe of 1-1:0.0 failed with error -12 [ 521.647354][T22870] QAT: Invalid ioctl 1075883590 [ 521.657016][T22870] QAT: Invalid ioctl 1075883590 [ 521.672383][ T125] usb 1-1: USB disconnect, device number 40 [ 521.673116][T22870] QAT: Invalid ioctl 1075883590 [ 521.693194][T22870] QAT: Invalid ioctl 1075883590 [ 521.701621][T22870] QAT: Invalid ioctl 1075883590 [ 521.706675][T22870] QAT: Invalid ioctl 1075883590 [ 521.715801][T22870] QAT: Invalid ioctl 1075883590 [ 521.737408][T22870] QAT: Invalid ioctl 1075883590 [ 521.745572][T22870] QAT: Invalid ioctl 1075883590 [ 521.765339][T22870] QAT: Invalid ioctl 1075883590 [ 521.779070][T22874] xt_TCPMSS: Only works on TCP SYN packets [ 522.094758][T22886] delete_channel: no stack [ 522.405673][T22898] loop1: detected capacity change from 0 to 4096 [ 522.475974][T22908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8618'. [ 522.516118][T22908] netlink: zone id is out of range [ 522.536490][T22908] netlink: zone id is out of range [ 522.566964][T22908] netlink: zone id is out of range [ 522.594651][T22908] netlink: zone id is out of range [ 522.604814][T22908] netlink: zone id is out of range [ 522.630696][T22908] netlink: zone id is out of range [ 522.646583][T22908] netlink: zone id is out of range [ 522.666926][T22908] netlink: zone id is out of range [ 522.687965][T22908] netlink: zone id is out of range [ 522.714024][T22908] netlink: zone id is out of range [ 523.128683][T22934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8631'. [ 523.198488][T22936] netlink: 'syz.1.8632': attribute type 1 has an invalid length. [ 523.217905][T22936] netlink: 'syz.1.8632': attribute type 2 has an invalid length. [ 523.226017][T22939] loop0: detected capacity change from 0 to 16 [ 523.242317][T22939] erofs: (device loop0): mounted with root inode @ nid 36. [ 523.263612][T22939] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 523.295495][T22936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8632'. [ 523.297468][T22939] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 523.567536][T22952] netlink: 'syz.2.8640': attribute type 2 has an invalid length. [ 523.597686][T22952] netlink: 'syz.2.8640': attribute type 8 has an invalid length. [ 523.633070][T22952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8640'. [ 523.940991][T22962] loop0: detected capacity change from 0 to 2048 [ 523.994835][T22962] Invalid option length (0) for dns_resolver key [ 524.020959][T22932] loop4: detected capacity change from 0 to 32768 [ 524.038449][T22969] tmpfs: Bad value for 'size' [ 524.182941][T22932] XFS (loop4): Mounting V5 Filesystem [ 524.357701][T22988] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 524.389283][T22932] XFS (loop4): Ending clean mount [ 524.452938][T22932] XFS (loop4): Quotacheck needed: Please wait. [ 524.513487][T22993] netlink: 'syz.2.8657': attribute type 4 has an invalid length. [ 524.531613][T22993] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.8657'. [ 524.545043][T22932] XFS (loop4): Quotacheck: Done. [ 524.548567][T22995] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 524.687729][ T4280] XFS (loop4): Unmounting Filesystem [ 525.061513][T23013] loop5: detected capacity change from 0 to 64 [ 525.148183][T23013] hfs: unable to locate alternate MDB [ 525.170070][T23013] hfs: continuing without an alternate MDB [ 525.337158][T10819] [ 525.339536][T10819] ====================================================== [ 525.346821][T10819] WARNING: possible circular locking dependency detected [ 525.353861][T10819] syzkaller #0 Not tainted [ 525.358288][T10819] ------------------------------------------------------ [ 525.365311][T10819] kworker/u4:10/10819 is trying to acquire lock: [ 525.371640][T10819] ffff888054d968f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 525.382463][T10819] SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 525.382463][T10819] but task is already holding lock: [ 525.389830][T10819] ffff88804ac860b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 525.399341][T10819] [ 525.399341][T10819] which lock already depends on the new lock. [ 525.399341][T10819] [ 525.409744][T10819] [ 525.409744][T10819] the existing dependency chain (in reverse order) is: [ 525.418759][T10819] [ 525.418759][T10819] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 525.426868][T10819] __mutex_lock+0x12d/0xaf0 [ 525.431908][T10819] hfs_find_init+0x15b/0x1d0 [ 525.437034][T10819] hfs_extend_file+0x35d/0x13f0 [ 525.442425][T10819] hfs_bmap_reserve+0x103/0x420 [ 525.447820][T10819] hfs_cat_create+0x204/0x8e0 [ 525.453127][T10819] hfs_mkdir+0x68/0xe0 [ 525.457730][T10819] vfs_mkdir+0x387/0x570 [ 525.462503][T10819] do_mkdirat+0x1d8/0x440 [ 525.467358][T10819] __x64_sys_mkdirat+0x85/0x90 [ 525.472648][T10819] do_syscall_64+0x4c/0xa0 [ 525.477590][T10819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.484004][T10819] [ 525.484004][T10819] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 525.493223][T10819] __lock_acquire+0x2d07/0x7d10 [ 525.498613][T10819] lock_acquire+0x1bb/0x4a0 [ 525.503653][T10819] __mutex_lock+0x12d/0xaf0 [ 525.508702][T10819] hfs_extend_file+0xfb/0x13f0 [ 525.514000][T10819] hfs_bmap_reserve+0x103/0x420 [ 525.519390][T10819] __hfs_ext_write_extent+0x1fa/0x470 [ 525.525296][T10819] hfs_ext_write_extent+0x17b/0x200 [ 525.531119][T10819] hfs_write_inode+0xd8/0xa20 [ 525.536332][T10819] __writeback_single_inode+0x75b/0x1160 [ 525.542498][T10819] writeback_sb_inodes+0xb30/0x1850 [ 525.548228][T10819] wb_writeback+0x482/0xd50 [ 525.553259][T10819] wb_workfn+0x423/0xee0 [ 525.558030][T10819] process_one_work+0x8a2/0x1160 [ 525.563495][T10819] worker_thread+0xaa2/0x1270 [ 525.568701][T10819] kthread+0x29d/0x330 [ 525.573294][T10819] ret_from_fork+0x1f/0x30 [ 525.578238][T10819] [ 525.578238][T10819] other info that might help us debug this: [ 525.578238][T10819] [ 525.588470][T10819] Possible unsafe locking scenario: [ 525.588470][T10819] [ 525.595925][T10819] CPU0 CPU1 [ 525.601285][T10819] ---- ---- [ 525.606655][T10819] lock(&tree->tree_lock#2/1); [ 525.611523][T10819] lock(&HFS_I(tree->inode)->extents_lock); [ 525.620021][T10819] lock(&tree->tree_lock#2/1); [ 525.627406][T10819] lock(&HFS_I(tree->inode)->extents_lock); [ 525.633386][T10819] [ 525.633386][T10819] *** DEADLOCK *** [ 525.633386][T10819] [ 525.641514][T10819] 3 locks held by kworker/u4:10/10819: [ 525.646955][T10819] #0: ffff88801c65d938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 525.657556][T10819] #1: ffffc9000dda7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 525.669366][T10819] #2: ffff88804ac860b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 525.679282][T10819] [ 525.679282][T10819] stack backtrace: [ 525.685160][T10819] CPU: 1 PID: 10819 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 525.692860][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 525.702908][T10819] Workqueue: writeback wb_workfn (flush-7:5) [ 525.708906][T10819] Call Trace: [ 525.712172][T10819] [ 525.715093][T10819] dump_stack_lvl+0x188/0x24e [ 525.719761][T10819] ? load_image+0x400/0x400 [ 525.724252][T10819] ? show_regs_print_info+0x12/0x12 [ 525.729439][T10819] ? print_circular_bug+0x12b/0x1a0 [ 525.734627][T10819] check_noncircular+0x296/0x330 [ 525.739556][T10819] ? look_up_lock_class+0x75/0x140 [ 525.744659][T10819] ? add_chain_block+0x940/0x940 [ 525.749584][T10819] ? lockdep_lock+0xf1/0x1f0 [ 525.754162][T10819] ? unwind_next_frame+0x1880/0x20b0 [ 525.759435][T10819] ? _find_first_zero_bit+0xcf/0x100 [ 525.764708][T10819] __lock_acquire+0x2d07/0x7d10 [ 525.769547][T10819] ? ret_from_fork+0x1f/0x30 [ 525.774132][T10819] ? ret_from_fork+0x1f/0x30 [ 525.778724][T10819] ? verify_lock_unused+0x140/0x140 [ 525.783944][T10819] ? stack_trace_save+0xa6/0xf0 [ 525.788820][T10819] ? stack_trace_snprint+0xf0/0xf0 [ 525.793936][T10819] ? check_noncircular+0x189/0x330 [ 525.799052][T10819] ? add_chain_block+0x940/0x940 [ 525.804002][T10819] lock_acquire+0x1bb/0x4a0 [ 525.808503][T10819] ? hfs_extend_file+0xfb/0x13f0 [ 525.813437][T10819] ? __might_sleep+0xd0/0xd0 [ 525.818037][T10819] ? read_lock_is_recursive+0x10/0x10 [ 525.823430][T10819] __mutex_lock+0x12d/0xaf0 [ 525.827938][T10819] ? hfs_extend_file+0xfb/0x13f0 [ 525.832865][T10819] ? verify_lock_unused+0x140/0x140 [ 525.838055][T10819] ? hfs_extend_file+0xfb/0x13f0 [ 525.843012][T10819] ? mutex_lock_nested+0x10/0x10 [ 525.847954][T10819] ? __stack_depot_save+0x421/0x460 [ 525.853167][T10819] hfs_extend_file+0xfb/0x13f0 [ 525.857931][T10819] ? hfs_ext_write_extent+0x14e/0x200 [ 525.863302][T10819] ? hfs_write_inode+0xd8/0xa20 [ 525.868151][T10819] ? hfs_get_block+0xc50/0xc50 [ 525.872910][T10819] ? trace_raw_output_contention_end+0xd0/0xd0 [ 525.879056][T10819] ? rcu_is_watching+0x11/0xa0 [ 525.883835][T10819] ? trace_contention_end+0x5f/0x170 [ 525.889127][T10819] ? memset+0x1e/0x40 [ 525.893102][T10819] ? hfs_brec_find+0x197/0x500 [ 525.897868][T10819] hfs_bmap_reserve+0x103/0x420 [ 525.902722][T10819] __hfs_ext_write_extent+0x1fa/0x470 [ 525.908093][T10819] hfs_ext_write_extent+0x17b/0x200 [ 525.913282][T10819] ? verify_lock_unused+0x140/0x140 [ 525.918471][T10819] ? hfs_ext_keycmp+0x310/0x310 [ 525.923397][T10819] ? writeback_sb_inodes+0x46b/0x1850 [ 525.928774][T10819] hfs_write_inode+0xd8/0xa20 [ 525.933452][T10819] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 525.938821][T10819] ? __writeback_single_inode+0x4ae/0x1160 [ 525.944629][T10819] ? __lock_acquire+0x7d10/0x7d10 [ 525.949647][T10819] ? do_raw_spin_lock+0x128/0x2f0 [ 525.954656][T10819] ? __rwlock_init+0x140/0x140 [ 525.959405][T10819] __writeback_single_inode+0x75b/0x1160 [ 525.965028][T10819] writeback_sb_inodes+0xb30/0x1850 [ 525.970225][T10819] ? queue_io+0x5a0/0x5a0 [ 525.974546][T10819] ? rcu_is_watching+0x11/0xa0 [ 525.979302][T10819] wb_writeback+0x482/0xd50 [ 525.983797][T10819] ? percpu_ref_tryget+0x250/0x250 [ 525.988896][T10819] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 525.994868][T10819] ? _raw_spin_unlock_irq+0x1f/0x40 [ 526.000053][T10819] wb_workfn+0x423/0xee0 [ 526.004287][T10819] ? inode_wait_for_writeback+0x220/0x220 [ 526.010012][T10819] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 526.015982][T10819] ? read_lock_is_recursive+0x10/0x10 [ 526.021347][T10819] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 526.027233][T10819] ? _raw_spin_unlock+0x40/0x40 [ 526.032069][T10819] ? _raw_spin_unlock_irq+0x1f/0x40 [ 526.037599][T10819] ? process_one_work+0x7b0/0x1160 [ 526.042698][T10819] process_one_work+0x8a2/0x1160 [ 526.047634][T10819] ? worker_detach_from_pool+0x240/0x240 [ 526.053256][T10819] ? _raw_spin_lock_irq+0xb7/0xf0 [ 526.058448][T10819] ? _raw_spin_lock_irqsave+0x100/0x100 [ 526.063984][T10819] ? kthread_data+0x4b/0xc0 [ 526.068477][T10819] worker_thread+0xaa2/0x1270 [ 526.073151][T10819] kthread+0x29d/0x330 [ 526.077202][T10819] ? worker_clr_flags+0x1a0/0x1a0 [ 526.082215][T10819] ? kthread_blkcg+0xd0/0xd0 [ 526.086788][T10819] ret_from_fork+0x1f/0x30 [ 526.091284][T10819] [ 526.110470][T10819] hfs: new node 0 already hashed? [ 526.116152][T10819] ------------[ cut here ]------------ [ 526.121757][T10819] WARNING: CPU: 1 PID: 10819 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 526.130844][T10819] Modules linked in: [ 526.134744][T10819] CPU: 1 PID: 10819 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 526.142504][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 526.152604][T10819] Workqueue: writeback wb_workfn (flush-7:5) [ 526.158652][T10819] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 526.164316][T10819] Code: aa a2 8a 89 ee e8 f6 39 d6 07 e9 ab fd ff ff e8 ec 4f 37 ff 48 89 df e8 a4 89 eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 d6 39 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 526.184016][T10819] RSP: 0018:ffffc9000dda6e80 EFLAGS: 00010246 [ 526.190118][T10819] RAX: 000000000000001f RBX: ffff88804ac860e0 RCX: 3a2b15afc4163800 [ 526.198237][T10819] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 526.206217][T10819] RBP: 0000000000000000 R08: ffffc9000dda6b87 R09: 1ffff92001bb4d70 [ 526.214257][T10819] R10: dffffc0000000000 R11: fffff52001bb4d71 R12: 0000000000000000 [ 526.222351][T10819] R13: ffff88804ac86000 R14: ffff8880541b7b00 R15: dffffc0000000000 [ 526.230378][T10819] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 526.239369][T10819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.245959][T10819] CR2: 0000001b2f822ff8 CR3: 000000007e002000 CR4: 00000000003506e0 [ 526.254086][T10819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 526.262104][T10819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 526.270212][T10819] Call Trace: [ 526.273493][T10819] [ 526.276423][T10819] hfs_bmap_alloc+0x53d/0x5d0 [ 526.281390][T10819] ? hfs_bmap_reserve+0x420/0x420 [ 526.286443][T10819] ? rcu_is_watching+0x11/0xa0 [ 526.291342][T10819] hfs_btree_inc_height+0xfd/0xac0 [ 526.296459][T10819] ? hfs_brec_insert+0x6f6/0xbd0 [ 526.301453][T10819] ? hfs_brec_insert+0xbd0/0xbd0 [ 526.306417][T10819] ? do_raw_spin_unlock+0x11d/0x230 [ 526.311651][T10819] hfs_brec_insert+0x744/0xbd0 [ 526.316434][T10819] ? hfs_brec_keylen+0x350/0x350 [ 526.321437][T10819] __hfs_ext_write_extent+0x2a1/0x470 [ 526.326820][T10819] hfs_ext_write_extent+0x17b/0x200 [ 526.332095][T10819] ? verify_lock_unused+0x140/0x140 [ 526.337302][T10819] ? hfs_ext_keycmp+0x310/0x310 [ 526.342202][T10819] ? writeback_sb_inodes+0x46b/0x1850 [ 526.347609][T10819] hfs_write_inode+0xd8/0xa20 [ 526.352302][T10819] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 526.357720][T10819] ? __writeback_single_inode+0x4ae/0x1160 [ 526.363552][T10819] ? __lock_acquire+0x7d10/0x7d10 [ 526.368629][T10819] ? do_raw_spin_lock+0x128/0x2f0 [ 526.373655][T10819] ? __rwlock_init+0x140/0x140 [ 526.378459][T10819] __writeback_single_inode+0x75b/0x1160 [ 526.384105][T10819] writeback_sb_inodes+0xb30/0x1850 [ 526.389363][T10819] ? queue_io+0x5a0/0x5a0 [ 526.393708][T10819] ? rcu_is_watching+0x11/0xa0 [ 526.398542][T10819] wb_writeback+0x482/0xd50 [ 526.403078][T10819] ? percpu_ref_tryget+0x250/0x250 [ 526.408245][T10819] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 526.414249][T10819] ? _raw_spin_unlock_irq+0x1f/0x40 [ 526.419476][T10819] wb_workfn+0x423/0xee0 [ 526.423767][T10819] ? inode_wait_for_writeback+0x220/0x220 [ 526.429517][T10819] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 526.435499][T10819] ? read_lock_is_recursive+0x10/0x10 [ 526.440896][T10819] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 526.446787][T10819] ? _raw_spin_unlock+0x40/0x40 [ 526.451659][T10819] ? _raw_spin_unlock_irq+0x1f/0x40 [ 526.456858][T10819] ? process_one_work+0x7b0/0x1160 [ 526.461994][T10819] process_one_work+0x8a2/0x1160 [ 526.466937][T10819] ? worker_detach_from_pool+0x240/0x240 [ 526.472598][T10819] ? _raw_spin_lock_irq+0xb7/0xf0 [ 526.477671][T10819] ? _raw_spin_lock_irqsave+0x100/0x100 [ 526.483218][T10819] ? kthread_data+0x4b/0xc0 [ 526.487750][T10819] worker_thread+0xaa2/0x1270 [ 526.492453][T10819] kthread+0x29d/0x330 [ 526.496529][T10819] ? worker_clr_flags+0x1a0/0x1a0 [ 526.501592][T10819] ? kthread_blkcg+0xd0/0xd0 [ 526.506182][T10819] ret_from_fork+0x1f/0x30 [ 526.510643][T10819] [ 526.513667][T10819] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 526.520944][T10819] CPU: 1 PID: 10819 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 526.528675][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 526.538714][T10819] Workqueue: writeback wb_workfn (flush-7:5) [ 526.544694][T10819] Call Trace: [ 526.547964][T10819] [ 526.550882][T10819] dump_stack_lvl+0x188/0x24e [ 526.555639][T10819] ? memcpy+0x3c/0x60 [ 526.559604][T10819] ? show_regs_print_info+0x12/0x12 [ 526.564799][T10819] ? load_image+0x400/0x400 [ 526.569292][T10819] panic+0x2e5/0x730 [ 526.573176][T10819] ? bpf_jit_dump+0xd0/0xd0 [ 526.577669][T10819] ? ret_from_fork+0x1f/0x30 [ 526.582275][T10819] __warn+0x2f8/0x4f0 [ 526.586238][T10819] ? hfs_bnode_create+0x37a/0x400 [ 526.591252][T10819] ? hfs_bnode_create+0x37a/0x400 [ 526.596268][T10819] report_bug+0x2ba/0x4f0 [ 526.600589][T10819] ? hfs_bnode_create+0x37a/0x400 [ 526.605601][T10819] handle_bug+0x3a/0x70 [ 526.609743][T10819] exc_invalid_op+0x16/0x40 [ 526.614234][T10819] asm_exc_invalid_op+0x16/0x20 [ 526.619076][T10819] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 526.624696][T10819] Code: aa a2 8a 89 ee e8 f6 39 d6 07 e9 ab fd ff ff e8 ec 4f 37 ff 48 89 df e8 a4 89 eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 d6 39 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 526.644286][T10819] RSP: 0018:ffffc9000dda6e80 EFLAGS: 00010246 [ 526.650346][T10819] RAX: 000000000000001f RBX: ffff88804ac860e0 RCX: 3a2b15afc4163800 [ 526.658477][T10819] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 526.666517][T10819] RBP: 0000000000000000 R08: ffffc9000dda6b87 R09: 1ffff92001bb4d70 [ 526.674471][T10819] R10: dffffc0000000000 R11: fffff52001bb4d71 R12: 0000000000000000 [ 526.682425][T10819] R13: ffff88804ac86000 R14: ffff8880541b7b00 R15: dffffc0000000000 [ 526.690389][T10819] hfs_bmap_alloc+0x53d/0x5d0 [ 526.695061][T10819] ? hfs_bmap_reserve+0x420/0x420 [ 526.700254][T10819] ? rcu_is_watching+0x11/0xa0 [ 526.705005][T10819] hfs_btree_inc_height+0xfd/0xac0 [ 526.710105][T10819] ? hfs_brec_insert+0x6f6/0xbd0 [ 526.715030][T10819] ? hfs_brec_insert+0xbd0/0xbd0 [ 526.719957][T10819] ? do_raw_spin_unlock+0x11d/0x230 [ 526.725139][T10819] hfs_brec_insert+0x744/0xbd0 [ 526.729917][T10819] ? hfs_brec_keylen+0x350/0x350 [ 526.734845][T10819] __hfs_ext_write_extent+0x2a1/0x470 [ 526.740215][T10819] hfs_ext_write_extent+0x17b/0x200 [ 526.745400][T10819] ? verify_lock_unused+0x140/0x140 [ 526.750582][T10819] ? hfs_ext_keycmp+0x310/0x310 [ 526.755421][T10819] ? writeback_sb_inodes+0x46b/0x1850 [ 526.760784][T10819] hfs_write_inode+0xd8/0xa20 [ 526.765447][T10819] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 526.770811][T10819] ? __writeback_single_inode+0x4ae/0x1160 [ 526.776612][T10819] ? __lock_acquire+0x7d10/0x7d10 [ 526.781620][T10819] ? do_raw_spin_lock+0x128/0x2f0 [ 526.786647][T10819] ? __rwlock_init+0x140/0x140 [ 526.791405][T10819] __writeback_single_inode+0x75b/0x1160 [ 526.797035][T10819] writeback_sb_inodes+0xb30/0x1850 [ 526.802242][T10819] ? queue_io+0x5a0/0x5a0 [ 526.806568][T10819] ? rcu_is_watching+0x11/0xa0 [ 526.811333][T10819] wb_writeback+0x482/0xd50 [ 526.815836][T10819] ? percpu_ref_tryget+0x250/0x250 [ 526.820939][T10819] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 526.826910][T10819] ? _raw_spin_unlock_irq+0x1f/0x40 [ 526.832094][T10819] wb_workfn+0x423/0xee0 [ 526.836327][T10819] ? inode_wait_for_writeback+0x220/0x220 [ 526.842036][T10819] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 526.848008][T10819] ? read_lock_is_recursive+0x10/0x10 [ 526.853367][T10819] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 526.859259][T10819] ? _raw_spin_unlock+0x40/0x40 [ 526.864102][T10819] ? _raw_spin_unlock_irq+0x1f/0x40 [ 526.869286][T10819] ? process_one_work+0x7b0/0x1160 [ 526.874395][T10819] process_one_work+0x8a2/0x1160 [ 526.879332][T10819] ? worker_detach_from_pool+0x240/0x240 [ 526.884953][T10819] ? _raw_spin_lock_irq+0xb7/0xf0 [ 526.889964][T10819] ? _raw_spin_lock_irqsave+0x100/0x100 [ 526.895497][T10819] ? kthread_data+0x4b/0xc0 [ 526.899993][T10819] worker_thread+0xaa2/0x1270 [ 526.904662][T10819] kthread+0x29d/0x330 [ 526.908719][T10819] ? worker_clr_flags+0x1a0/0x1a0 [ 526.913725][T10819] ? kthread_blkcg+0xd0/0xd0 [ 526.918298][T10819] ret_from_fork+0x1f/0x30 [ 526.922706][T10819] [ 526.925993][T10819] Kernel Offset: disabled [ 526.930299][T10819] Rebooting in 86400 seconds..