last executing test programs: 6m16.795484154s ago: executing program 32 (id=4977): getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) setfsgid(r0) setfsgid(r0) 4m36.162807241s ago: executing program 1 (id=6094): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}, 0x300}) 4m36.035531881s ago: executing program 1 (id=6096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 4m35.857324699s ago: executing program 1 (id=6097): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000120001b3d1503c0358a0b92507"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m35.639200683s ago: executing program 1 (id=6101): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=maccroatian,errors=continue,allow_utime=00400000,\x00'], 0x1, 0x1535, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 4m35.445418223s ago: executing program 1 (id=6104): r0 = syz_io_uring_setup(0x34bc, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 4m34.976789467s ago: executing program 1 (id=6110): memfd_secret(0x80000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000010c0)={'vlan1', 0x32, 0x39}, 0x8) 4m34.706689739s ago: executing program 33 (id=6110): memfd_secret(0x80000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000010c0)={'vlan1', 0x32, 0x39}, 0x8) 3m36.194038507s ago: executing program 3 (id=6743): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 3m36.015963955s ago: executing program 3 (id=6745): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m35.801445478s ago: executing program 3 (id=6747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000000000080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40008d0) 3m35.581927723s ago: executing program 3 (id=6751): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0032006c00ae1ecebf96fccb8a69f4a8ea113bda4a1e87a726a9dcf01d4bf4543b835eb2b9e6066dc6b060d90b6ca4385a4244aa53e0a0acaebd0c1dd5d380385e85b29008b29f2fb4a93ebe5ace1c105e684d1fd61659e8decea319f675e039904905a8130e2f3c8d5c7a22b4487a331c727612ff1ddd6aabd0e4ab29212632a15e835fac77a7c827"], 0x1, 0x198, &(0x7f00000006c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1008020, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 3m35.21621274s ago: executing program 3 (id=6758): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0xffffffffffffffff, r1, 0x2}}, 0x18) 3m34.636321061s ago: executing program 3 (id=6766): r0 = epoll_create1(0x80000) unshare(0x2c020400) preadv2(r0, 0x0, 0x0, 0xfffffff9, 0x6, 0x8) 3m34.245707702s ago: executing program 34 (id=6766): r0 = epoll_create1(0x80000) unshare(0x2c020400) preadv2(r0, 0x0, 0x0, 0xfffffff9, 0x6, 0x8) 3m1.751127693s ago: executing program 6 (id=7079): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000002700)=ANY=[@ANYBLOB="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"/2310], 0xff, 0x5e9e, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x2, 0xadea}) 3m0.270772485s ago: executing program 6 (id=7084): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x2, 0x6b1, &(0x7f0000001100)="$eJzs3V1vG1kdx/HfOI7jZqFaAaqqqg+nLSulorhjZ5sqKhJrxuNkwPZYMw5qJKRV2Sarqk4X2iLR3Cy54UFa3gDihgu44EUgcb3vghsE0grukJYLr+bJseOnuuu2u9vvJ9r1eM5/zvnPjOu/JvEcCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyHJqtl221PBaO3fMZE4t8Jvp8v97o+1Jb8u6lixcmzmuZEX/qVjU2WTV2W8dN5+J/ndF55Nn51WMHoo6fOPMm7e/mc9l209J+Hlo3g4fPz18cLfb3Xv0DLFLmrv7V0m5bOlUek7GBG25LS/0vWZ1yzVe6JvNjQ37xnY9NHWv4Ya7YcdtGidwcx0/MGvONVPe3Fw3bmnX32lt1aoNN1t567sV294wP1xJTrSkUuhse42G19qKY6LmKOaW+egnSYBbbRqzf7+7tz5rT6Kg8rMEVWYFVexKpVyuVMobNzdv3rLt/OCKnKS8HbHsPo1ssvAXLb5kFvPGDSxALqr//7CkhopqaUd3ZMb+OKopkK/mhPZUVv/fuuFOHXew/mdV/qz0/bT5nOL6fzF5dnFS/Z+Qi5GJNxjXYk1YP9/PcpyR0WM91aEe6K666mpPjxbQt5G5tJBeXsLPlly15CmUL09NVbWlP39d6RqjTW1oQ7be1bbqCmVUl6eGXIXaVaiO3PgV5SiQq6o68hXIaE2OrsmorE1tal1Grkrala8dtbSlmqr6X6/X29f9+LivT8lRWVB5QsDKYFBlSk/DxfyPyur/Tz9MXqd23j6B+v96SV4HK8nDx9NigC+AXnr9Pyg3e7NLLy4jAAAAAACwaFb823cr/tv9BUk91b2Ga7/qtAAAAAAAwAJZ6q3ovKzo+l/SBVlc/wMAAAAA8FVjxffYWZJW4w/1W8d3Qj3LLwGWXkKKAAAAAADgc4rv/L9YkHrxpBWXZM11/Q8AAAAAAL4Efjswx34+m2O3l/1ZPycpbK9Yf/vPioJl66h959vWQTVqqR6kMZ+e7LFTP2edTifqjR8KkuJnjnveOp9MjplOgtmfd/CT/Vlz/VvBiQQKS4MdTEjAikbeyKfP9JEuJ5tcTueZv3eYU9ySjLJa9xpuyfEbt8uqVk/nOu6dzi8e3v+lFPQ/6bB/v7tXeu+D7r04l6No1dFB1OmHQ+nkxh+M41yexPMtxPdcjNvjU6pnQ/6u1Vy14nHtbP+XVD3IDQ407QQcj/lrXVH8qY0rq0ns6mF/xv1o/4vR/pdL8Skb2vtg2TrOonxyz8ediAlZFOMsriYxV9euqvLPZLl/FnJW8TtLUqU0eg6GsqgMZjH7WFj/HTkWA1nED1nLwLFYj7L4e9TRhCzW58ti5IwAwKuyrwuK34UuKJ7EvF+FimndzcpD9qb2XHVndnV/Z7i6P/lDrxdvsCTl079NTB2lqOgdfc2K61Ah2aX8uTHv6HZaV4qa8I5uf47qFo311+PvQErTHsni016vd7scj/v7E1X1T0PDjYwbNipL0SG88eTgZ/EE+JH3997fe1iprG/Yb9v2zYqW491IH5ZE7QEAjJj9HTszI6y3dTmJuHzv328lS0MV7xv9jxSU9J4+UFf3dD37CoFL43tdHfgYwvXkqlUDV63mzJu34++lG44t6/rEq7q4lg7EVvqxy8o2Ga7Ux7HrL/gsAADwcl2ZUYfH1//iUP2/rrUkYu3c2Ovu4VqeXh33L+knxZZnJ//Ooo8GAACvBzf4xFrt/MYKAq/9bnlzs1ztbLsm8J0fmcCrbbnGa3XcwNmutrZc0w78ju/4DdMOtOLV3NCEO+22H3RM3Q9M2w+9O/E3v5v0q99Dt1ltdTwnbDfcaugax291qk7H1LzQMe2dHzS8cNsN4o3Dtut4dc+pdjy/ZUJ/J3DckjGh6w4EejW31fHqXrTYMu3Aa1aDXfNjv7HTdE3NDZ3Aa3f8pMNsLK9V94Nm3G0p3xv3eQEAAF47j58ePrjb7e49OrlwKro0T9YcaULM6EJBj59GV+XRmnzaxBxBAAB8wRwX8Dk2Kr7AhAAAAAAAAAAAAAAAAAAAAAAAwIjZt/TNubA87mZBqb/m56fTNfqVjm8xHOnH0qITm2chN+9W2S0Rhw8+nhRT0N1T/TXZ4R+MOXppO/ivr0lvxGuUrMkvfqxTU07ui1j43n5yRCfGRI1jm1b65yL/HP8cCpoZ8/AvE5p6vV5v+hArw8ewMLSDuWmD5iU9Ksx9CgojL1EAX1WfBQAA//843TOC") open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x0) 3m0.045741851s ago: executing program 6 (id=7089): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 2m59.708107553s ago: executing program 6 (id=7093): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f00000002c0)={[{@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) 2m59.388232034s ago: executing program 6 (id=7095): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 2m58.852213418s ago: executing program 6 (id=7099): r0 = socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(r0, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) 2m58.1352947s ago: executing program 35 (id=7099): r0 = socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(r0, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) 1m49.507205452s ago: executing program 7 (id=7690): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in=@multicast1, 0x4e22, 0x0, 0x4, 0xf000, 0x2, 0x0, 0x0, 0x91}, {0x3, 0x802, 0x913e, 0x0, 0xfffffffffffffffb, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@empty, 0x4d2, 0x33}, 0x0, @in6=@mcast1, 0x34ff, 0x0, 0x2, 0x4, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1m49.289644886s ago: executing program 7 (id=7694): unshare(0x22020600) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x3, 0x4) 1m49.174495305s ago: executing program 7 (id=7695): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8e, 0x180000504) 1m49.024717368s ago: executing program 7 (id=7698): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0032006c00ae1ecebf96fccb8a69f4a8ea113bda4a1e87a726a9dcf01d4bf4543b835eb2b9e6066dc6b060d90b6ca4385a4244aa53e0a0acaebd0c1dd5d380385e85b29008b29f2fb4a93ebe5ace1c105e684d1fd61659e8decea319f675e039904905a8130e2f3c8d5c7a22b4487a331c727612ff1ddd6aabd0e4ab29212632a15e835fac77a7c827"], 0x1, 0x198, &(0x7f00000006c0)="$eJzs201OE3EYwOF32voRVibujDtR8YNOS6thqUchUAmxqBE3EBd6As/gWTyES7mACy/gGEbAxOkwqJR/pc+zetNfJ/N2MZ3ZTADzq/Mksshi8WC+efXah+tZ6o2Ac1IkPv/3AkinvZ96AyCNr08j9iPiy7e369FerNyfD/q7o966Xe3vI250Dnt2J+7+1ouPUX72sy9NPH7huN+b2JduHZ3/fjyIh7Ec3cijF/3DvnF8/PAfn0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmFdZdJv6iV9oxbOt8ahX2y+VvV/bL5d9paEPavuVsnfXX443TlqzxsJfHAMXR+sU1//nT/W93XD9dxqufyCdnd2952vj8ej1bAxZRMzAGgbDWQ9FRMzAGqceUv8zAdOWv9l+le/s7i1vba9tjjZHL4b94ePVwWD1US8vn+zzyvN9J922wFn6ddOvtnaKhQAAAAAAAACAP7YS9e/WTJJNbRMAAGDazuN1otS/EQAAAAAAAAAAAAAA/nc/AgAA//8+HKsv") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1008020, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 1m48.585441347s ago: executing program 7 (id=7702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x44) 1m48.030558094s ago: executing program 7 (id=7710): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0xa10008, &(0x7f0000000240)=ANY=[@ANYBLOB="696f636861727365743d63703836302c00bc03aec574fed94bec499f0537c696426fdc67c6064116a1d440ff5fe2d962d2c447be725f56d4e75439aa7b6b3335160e6d0e54038503688fda7affa628c6dff93410047f9921e3c689e5bbc5b8add23a556fb41b5d09d7136e86d6829d6bdf235dec41447d9dcb847e3ebb1e202f0a45a2b27f0309ab31190229ffdf6045cbbc8f3b1a3e9292b32577b5953cc7d1715bf2dd56acedc52ad83c81000000000000000000"], 0x1, 0x6303, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xe042, 0x0) read$FUSE(r0, &(0x7f0000006680)={0x2020}, 0x2020) 1m47.67320782s ago: executing program 36 (id=7710): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0xa10008, &(0x7f0000000240)=ANY=[@ANYBLOB="696f636861727365743d63703836302c00bc03aec574fed94bec499f0537c696426fdc67c6064116a1d440ff5fe2d962d2c447be725f56d4e75439aa7b6b3335160e6d0e54038503688fda7affa628c6dff93410047f9921e3c689e5bbc5b8add23a556fb41b5d09d7136e86d6829d6bdf235dec41447d9dcb847e3ebb1e202f0a45a2b27f0309ab31190229ffdf6045cbbc8f3b1a3e9292b32577b5953cc7d1715bf2dd56acedc52ad83c81000000000000000000"], 0x1, 0x6303, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xe042, 0x0) read$FUSE(r0, &(0x7f0000006680)={0x2020}, 0x2020) 49.889499233s ago: executing program 9 (id=8135): r0 = syz_io_uring_setup(0x339d, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000000240), &(0x7f00000024c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002380)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)=[{0x0}], 0xfffffffffffffffe, 0x1}, 0x20) 49.578899312s ago: executing program 9 (id=8137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 48.95232553s ago: executing program 9 (id=8140): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) 48.789065536s ago: executing program 9 (id=8141): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0032006c00ae1ecebf96fccb8a69f4a8ea113bda4a1e87a726a9dcf01d4bf4543b835eb2b9e6066dc6b060d90b6ca4385a4244aa53e0a0acaebd0c1dd5d380385e85b29008b29f2fb4a93ebe5ace1c105e684d1fd61659e8decea319f675e039904905a8130e2f3c8d5c7a22b4487a331c727612ff1ddd6aabd0e4ab29212632a15e835fac77a7c827"], 0x1, 0x198, &(0x7f00000006c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1008020, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 48.350271165s ago: executing program 9 (id=8144): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$notify(r0, 0x402, 0x6) 47.587184684s ago: executing program 9 (id=8150): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@errors_remount}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000025c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x92c9, 0x0) 46.97568562s ago: executing program 37 (id=8150): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@errors_remount}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000025c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x92c9, 0x0) 3.040201484s ago: executing program 0 (id=8538): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44895}, 0x4800) 2.803017591s ago: executing program 0 (id=8541): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000140)=[{0x48, 0xfd, 0x0, 0x40}, {0x28, 0x1, 0x4f, 0xfffff034}, {0x6, 0xe, 0x1, 0x4}]}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000600)="89120d53013d65b79244ab3acde53fdc3a8d9bd74d597edcdc28034b769d7b390db8fcf7c470d1cf1f32aebcdb762a1669e5ff8a104329393298a7feb9b7c2e3eb35", 0x42}], 0x1) 2.687460679s ago: executing program 8 (id=8543): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2.589577014s ago: executing program 0 (id=8545): r0 = socket(0xa, 0x3, 0xff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0xc6, 0xfffff034}, {0x30, 0x0, 0x2, 0x1}, {0x6, 0x4, 0x0, 0x100000f}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2b, 0x1, @remote, @local, {[@hopopts={0xff}]}}}}}, 0x0) 2.392953135s ago: executing program 5 (id=8547): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/228, 0xe4}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) close(r1) 2.382502527s ago: executing program 0 (id=8548): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000480), 0x1, 0xbc1, &(0x7f00000043c0)="$eJzs3M9rXNUeAPDvvfnZNu9N+ng8Xt+meTweLTzeNO0j5bUItlJx40LQrdCQTkrI9AdJpCbNYqL/gKhrwY2gFqULu+5Gwa0brVuLC6FIbBRENHLnR5omM0nazuTG5POBM/ecOXfu+X7nMnPPgZkbwJ41lD2kEYci4nwSUag/n0ZEb7XWH1Gp7be0OD/20+L8WBLLyy9+n0QSEfcX58cax0rq2wP1Rn9EfPFMEn95ff2407Nzk6Plcmmq3j42c+nqsenZuf9OXBq9WLpYunz85P9HToycHD410rZcf/7mzK0f//nct5VfPvj1xg9vvZfEmRio963Oo571ExuKoZX3ZLXuiBhtw/F3gq56PqvzTLo3eVHa4aAAAGgpXTWH+1sUoiseTN4K8emXuQYHAAAAtMVyV8QyAAAAsMsl1v8AAACwyzV+B3B/cX6sUfL9RcL2unc2IgZr+S/VS62nOyrVbX/0RMT++0ms/ltrUnvZExuKiLtfn/o4K9Hkf8idVlmIiL83O/9JNf/B+j+h1+afRsRwG8YfWtP+I+V/pg3j550/AHvT7bO1C9n661+6Mv+JJte/7ibXrsex0fVv0/uItEFj/re0bv73IP+uFvO/F7Y4xvX337nWqi/L/6lbz37UKNn42faJknoE9xYi/tHdLP9kJf+kRf7ntzhG4bdrpVZ9eee//G7EkWief0Oy8f2Jjo1PlEvDtcemYyx8PvJhq/Hzzj87//tb5L/Z+b/60JFa39Tn5XPnbrbq2zz/9Lve5KVqrbf+zKujMzNTxyN6k+fXP39i43wb+zSOkeV/9F8bf/6b5Z99J1Tq70OW+UJ9m7VfWzPm0zeuf7JR/tnaL8/zf+Exz/8bWxzj35+9ebRV3+r1b1ay8e8mtbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEQSVqMiKRaT9NiMeJARPw19qflK9Mz/xm/8srlC1lfxGD0pOMT5dJwRBRq7SRrH6/WH7RPrGn/LyIORsTbhX3VdnHsSvlC3skDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw4kBEDESSFiMijYilQpoWi3lHBQAAALTdYN4BAAAAAB1n/Q8AAAC7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXbw8O07SURUTu+rlkxvva8n18iATkvzDgDITVfeAQC56d7abv2djgPYfo+4xjddgF0o2aS/9QSgr+2xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBzHTl0+04SEZXT+6ol01vv62n6isPbGB3QSWneAQC56dqos3v74gC2n4847F3N1/jAXpJs0t9f3yepROXhnr5OhgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADjNQLUlajIi0Wk/TYjHiTxExGD3J+ES5NBwRf46Irwo9fVm7L++gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvp2bnJ0XK5NKWiopJvJdkZYdQqeX8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRcrk0NZ13JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJkfL5dLUFio3H2XnVZW8cwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+/BwAA//+99w6C") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc2}}) 2.113224769s ago: executing program 5 (id=8550): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendto$inet(r0, &(0x7f00000003c0)="d415", 0x2, 0x0, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) 2.035613382s ago: executing program 4 (id=8551): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pread64(r0, &(0x7f0000000140)=""/23, 0x17, 0x400000000000000) 1.761993204s ago: executing program 5 (id=8553): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x80000001) 1.754617295s ago: executing program 0 (id=8554): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) fcntl$addseals(r0, 0x409, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r0, 0x1000000) 1.59812587s ago: executing program 8 (id=8556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="b8050000", @ANYRES16=r1, @ANYBLOB="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"], 0x5b8}, 0x1, 0x0, 0x0, 0x4004840}, 0x20000810) 1.426597097s ago: executing program 0 (id=8557): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x444b, &(0x7f00000088c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x268) ioctl$FITRIM(r0, 0x40046f01, 0x0) 1.376799665s ago: executing program 2 (id=8558): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 1.361368277s ago: executing program 4 (id=8559): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x2, 0x9, 0xfffffffe}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001200578300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000004"], 0x24}}, 0x0) 1.282128589s ago: executing program 8 (id=8560): unshare(0x20000400) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, 0x0, 0xc00) 1.160101559s ago: executing program 2 (id=8561): r0 = shmget$private(0x0, 0x3000, 0x15c0, &(0x7f0000ffa000/0x3000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x4a, 0x7fff0000}]}) shmctl$IPC_RMID(r0, 0x0) 1.131231293s ago: executing program 4 (id=8562): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r0, 0x6ae3e61d32b8160b, 0xfffffffc, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.036579028s ago: executing program 8 (id=8563): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x40) read$hidraw(r0, &(0x7f00000008c0)=""/257, 0x101) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 940.013743ms ago: executing program 4 (id=8564): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000280)={0x1, {&(0x7f0000000840)=""/248, 0xf743de55d0c00b89, 0x0, 0x2, 0x2}}, 0x48) 921.446746ms ago: executing program 2 (id=8565): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{&(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000000000007000000010000000000000024000000000000000000000007000000440cffc30a010101000001009408f3b4fbb75a17000000001c000000000000000000000008000000", @ANYRES32=r1], 0x60}}], 0x1, 0x4800) 752.424762ms ago: executing program 2 (id=8566): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x3, 0x4, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 745.701873ms ago: executing program 5 (id=8567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000000)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 741.339514ms ago: executing program 8 (id=8568): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=@newqdisc={0xcc, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x9c, 0x2, {{0x9, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fffffff}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x9}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x3aa8, 0x7}}, @TCA_NETEM_LOSS={0x23, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9be8, 0x166e, 0xfffffff9, 0xffff476a}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x15, 0x8, 0xff}}]}, @TCA_NETEM_DELAY_DIST={0x19, 0x2, "1fec3497f3dbd724734657c49974e72102ac6ec276"}, @TCA_NETEM_ECN={0x8}]}}}]}, 0xcc}}, 0x0) 646.726889ms ago: executing program 4 (id=8569): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000740)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfff9, 0x20, 0x0, 0x0, 0x1, 0x6b3, 0x0, 0x10000, 0x824f, 0x0}) 422.403644ms ago: executing program 2 (id=8570): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1, 0x1, 0x7ffffffe}}, 0x20) 377.469351ms ago: executing program 5 (id=8571): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) pwritev2(r0, &(0x7f0000000740)=[{&(0x7f00000005c0)='+', 0x1}], 0x1, 0x1, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x5, @pix={0xb78d0f0, 0x27, 0x47425247, 0x0, 0x6, 0x0, 0x0, 0x200, 0x0, 0x3, 0x2, 0x7}}) 364.166353ms ago: executing program 4 (id=8572): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xb04, &(0x7f0000000a40)="$eJzs3V2IXFcdAPBzd3c2u2lrJjXVNY1tYrWt2m6azRqrQZOSIBiaIr4Uii8hTWswRrCCWgomefLNlpKCT37gUx8sVQQLIqFPvhRsoAh5qoI+NEQs+FCjycjO3DMz92Qmd2azO3dn9/eDs2fuPffO/9zZO3fu17knABvWRPPv4uJcFsL5N14+/N79/5hdGnOgPUW9+Xeqa6gWQsjy4ank/d6dbOXX3n/heK88CwvNv3E4PHGlPe9tIYQzYWe4EOph+/mLL7218PjRs0fO7Xr71f2XV2fpAQBgY/nahf2Ld/31z3dvvfraPQfDpvb4uH9ejyNmWvv9B/Md/7j/PxGKw0v51ktJkM7bFo4bltLEbHHSyR7TdcepJdNN9Yi/lKaTKtT6TLcp3Dz+ZNe4XssN4yyux/WQTcyHEDa3hycm5udbx+SheVw/nc2fPnnqmecqqiiw4v59bwhhZ1c6dK44vNbSgTVQh2Wmxhqow1img6OLdbXRUvkyjyg1tlS9BQJoSa8X3uBMtqLx2u82NVj8K49N9J4fVsCo1/+h4k/fEH92pPFDxcu/BuL/6qwtDitnva5Ncbni9+j2fDi9jpDev/TKH4rzdaRXOopj0+sRtQHr2e86wrhcX+hXz8kR12O5+tU/XS/Wqy/lefwcvlwovbfw/Un/p+PyPwZ6+yA9/z+OKZxpLUzV9ZBK06PvVV+HsU/Fdb12K+/VqHDbA6xt6X1zjXh9NDddUr6ppHympHy2pHxzSfltJeWwkf32ez8JL2ad813pMf2w58PjebY78vxDQ9YnPR85bPz0vt9h3Wr89H5iWMt+f+zJE48+/dTF1v3/WXv9v56v7/Fwo55/ty7kE8Tzhel59XhffafhQLE8ne7OpD539Ji++XpbcbpsW+d9Qtd25oZ6zBXn29Jvuh3F6erJdLN5mknqm+6fbE7mi/sfcbsaP6+pZHlryXJMJ/WI25WteZ7WA5Yjro/1kBV+yOL9/3H9nAu17JmTp048kg/H9fRPk7VNS+P3jK7KwApJ2/90hovtf+ZCsf3P7e3xtYnu7cKWzvistV14PX+/4viFdpyu8V0/avF37puTs83p549/59TTK7zssNE998Pnv3Xs1KkT3/Vi2S++sjaqMcyLeNiyVurjxbAvdq52iIo3TMCq2/2j1k7Awye/fezZE8+eOL133769Cwv7vrB3cXdzv3539959tzMV1BZYSZ0f/aprAgAAAAAAAAAAAAzq+0cOX3znzc9farX/77T/i+3/452/sf3/j5P2/2k7+diIOLYD3NqjvDlN8oDV6WS6Wp4+nNR3WxLnrmS+j+R5ux+/vP1/DJc+1zXW56PJ+FqfweRxAjc8L2U6eQZJ2l/gJ/L8XJ7/MkCFst6P8E/X2x7Pt84+6FrX4/MpuprwNjwfeHzE/1tzbeh6EkRs/93zuU492mszXkbRYrHqZQR6++d6eP73wOlfnQUfYr6HKq/3oOnCr4ddtrWZpkYb76fDrxPrJTX67qUP2oMNwMqouv/Pv4dW3Hj+8/QfvzqzlOJkVx4rbi/T55fCMP7yTnF4rfc/udrx0377Rh2/6uUfdf+f7f7v8u1f3O713/4lPebVlxf3Pz+7fKkrbNg+aPx0+eNzoLcNF/9qHj8uzQNhsPiNXyTx0wtCA/pvEn/zgPFvWP4dy4v/vzx+/NgevG/Q+K0aZxPFeswmyxGv/6XnjaNryfLHZ3veJP7Xn++1/MvsqPF6Hh82snHpZ3ZYyX5Ee6e9rP/fYX//b7X/33Zls2Jl0vswPpcPxw1xvM8h7e9k2PrH+yvi78BdyftnJb9v+v8db1/M87LvQ+z/N66P9fwnv2u4+VnG4VqPz3a9bmtgXL27oa7/jSpdbh0G9Su/WdnOMFN9/aUhUmNyGfO1+4mruP6NRmN1T2iVqDQ4lX/+VR8nVB2/6s+/TNr/b7oPn/b/m5an/f+m5Wn/v2n5bP4f6lee9v+bfp5p/79ZWvHkfdP+gedKyj9WUr69d3k7+t0l8+8oKf94SfmudvmBwhSx/J6bzt+Zrt/731lSfl9J+SdLyj9VUn5/SfmDXeXdfUDH8k8n82dJ+XoX26P0+/yA9Sttn+f7DxtHvP7T7/u/rVM+3T3JaGsJrIZXXttz6KnffKPeav8/3T4fEq/jHcyHa/mx0Q/y4fS6d+gaXip7Mx/+W1K+1s93wEaSPj8j/f1/oKQcGF/xPi/fb9iAspneo/O87LlV/fbzGS+fyfPP5vlDef5wns/n+e4835PnCyOqH6vj0Ou/2/9i1jne35KUD3o/edoeqPCcqBDC3gHrk54fGPZ+9vQ5fsO61fjLbA4GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQmYnm38XFuSyE82+8fPjJoyd3L4050J6i3vw71TVUa88XwiN5PpnnP89fXHv/hePd+fU8z8JCyELWHh+euNKOdFsI4UzYGS6Eeth+/uJLby08fvTskXO73n51/+XV+wQAAABg/ft/AAAA//+puAr+") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 359.018244ms ago: executing program 8 (id=8573): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 86.379467ms ago: executing program 2 (id=8574): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x2000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x2001, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 0s ago: executing program 5 (id=8575): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4434, &(0x7f00000088c0)="$eJzs3c9vVNUeAPBzb/ug5QGv/Fg8kvfiJJJo1DQtK7Uk0lIoLVQMCjFuhmk7QHXaIe3UuGBRdySuTFwQF0QT46Yr0oVb/BPcuMQ1iSzcmJgQa2bmTpl7O5OOpEOFfD5J58w9v2e+c8+cWdzeOFG5Mb+cm1/OFRZz5dlryydyn5ZLKwvFED8juz0+nelGnMR+91w8ffb9KydC+HHu54cbGxsboao3tDTc9Pz3327NNqcNcaZNtd/Wve2Uj0IIR7fMq6onhPDhDyFEIYTRJG8sSftDCAdDvezKrS+u5nZoNvceFE/mH0/fXh85PrV2d739a49C+Lp07I3rC7++3DPyy2s7NDwAAAAAAAAAAAAAAAAAAM+5iUsXL783NBzuR6F3Ldp6ve5Ekra7PnZjx7zU/RcLAAAAAAAAAAAAAAAAAAAA/1BPrv/PRYdbXP8/nqSn2rTfeKf7c6R7Jt+9OH5maDi5/3u0pfzNJOvRaE841OK+79n7v49m2re+//vWcZ5WY36NcQdCFA+mjuN4cDCEb8dCCHuqQ++LS+XlyuvXyiuLczs2jedWOv71u/enopPc0L/T+I9l+u/+/f+PbPk0VY+v7txH7IWWjn9P23rffR51FP/T6WZ3ujTtJke6P8QLLB3/3lpef3OFvfWkGv8ve7eP/3im/26d/wdDCLmoOtdcagWo7mGq+e32K6Sl4/+vWl5q6UzeyHbn/x+Z+J/J9L9b6/9q9ouIltLx31PL60vVqG8AavGPtz//z2b63434V+e/6vu/I+n4J4t9b6pK7Z3sdP2fyPTfrfhfjpN5HoxSn4C1qJ7f7v/VkZaOf+rM//7/M8c2Dx6Nxh3t/85l+n9Wv/8a4zZ+/zWW/1ej+u8/WkvHv79tvU7P/8lMu26v/6dq+z+eVjr++2p56b3zQO2x0/hPZfrvVvxru5K+RvyfrCd/7q3nf2P/15F0/P9dz4yba6zWHmv7v2j7/f/5TP+7sf+rzn817u6oL4p0/Pe3rVeN/08dfP9fyLTrfvxDGLLXf2rp+B9oW692/vdtH//pTLtux/+VbnYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BwYS9KBEMWDqeM4HhwM4XRy/N+wL5opzOVnSuXZT5ZDGE/yc+FwdL1UnimU8vOL5blivlAqlWdDOJOUHw190XKpXMkvFG6e3eyrP7pRLCxVZoqFSghhIsn/XzjQ6GtmvrJQuBlCOLdZ9p+4vHTzRmExPze/9PbQ0NBQmNycw6Go+FmluFipj14vDWFqs+1A1DS5WvH5zbnsjz4urywtFkq1/AtNbUrl2UKpqc10UvZVOBRVllYWZwuVYr5Uvt4YbzedStLxyUsfXLowvKX8alRPx57ttAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4m+6PvHUnhNBbP4pDCLkoeRIlfyn3HhRP5h9P314fOT61dnf9Yas6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAXO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdile5SIoSgKwPc9BS1dhlVIOtuIIloYEVyBLsPF6FLchHuwsLC1GAbCCwz5gRCY7vuaCzncnEAuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw3t1z9/JUNxEpzndnEV9v3z+H+UOZH9fz+ycbOk837HAc94/dzW3dlP+eJvlVefTb5j79/3t/jZk5+Bzdyfieoi+Z9owt3dvS9w29F5FyFRFtyS9TzlW17l0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGcHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqKvg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4FQAA///QEh3D") openat(0xffffffffffffff9c, 0x0, 0x141842, 0x1c2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): descriptor's value: 2 [ 603.389152][ T4319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 603.397912][T22281] F2FS-fs (loop7): recover fsync data on readonly fs [ 603.399303][ T27] audit: type=1326 audit(2000000259.950:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22321 comm=B4F285B09B14EBD43CA0F6ED7E624F exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa359e159 code=0x7ffc0000 [ 603.461810][ T4319] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 603.492257][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.505463][T22281] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 603.515239][ T4319] usb 3-1: config 0 descriptor?? [ 603.553335][ T27] audit: type=1326 audit(2000000259.960:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22321 comm=B4F285B09B14EBD43CA0F6ED7E624F exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa359e159 code=0x7ffc0000 [ 603.741375][T22339] loop5: detected capacity change from 0 to 64 [ 603.905400][T22342] netem: change failed [ 603.943539][ T4319] corsair-cpro 0003:1B1C:0C10.0016: unknown main item tag 0x0 [ 603.967324][ T4319] corsair-cpro 0003:1B1C:0C10.0016: unknown main item tag 0x0 [ 603.998645][ T4319] corsair-cpro 0003:1B1C:0C10.0016: unknown main item tag 0x0 [ 604.012315][ T4319] corsair-cpro 0003:1B1C:0C10.0016: unknown main item tag 0x0 [ 604.027685][ T4319] corsair-cpro 0003:1B1C:0C10.0016: unknown main item tag 0x0 [ 604.051429][ T4319] corsair-cpro 0003:1B1C:0C10.0016: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 604.078309][ T4285] Bluetooth: hci0: command 0x0c3a tx timeout [ 604.084676][ T4277] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 604.136468][ T4319] corsair-cpro: probe of 0003:1B1C:0C10.0016 failed with error -38 [ 604.149373][ T4319] usb 3-1: USB disconnect, device number 25 [ 604.227044][T22351] loop5: detected capacity change from 0 to 256 [ 604.340663][T22351] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 604.371359][T22351] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 604.431777][T22351] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 604.479690][ T27] audit: type=1800 audit(2000000261.520:637): pid=22351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7637" name="file1" dev="loop5" ino=1048736 res=0 errno=0 [ 604.511688][T22350] fido_id[22350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 604.714997][ T4319] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 604.916953][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.953584][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.966943][T22369] loop7: detected capacity change from 0 to 512 [ 604.985032][ T4319] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 605.000864][T22369] EXT4-fs (loop7): Test dummy encryption mode enabled [ 605.016335][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.033802][T22369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002] [ 605.056311][T22369] System zones: 1-12 [ 605.068278][ T4319] usb 5-1: config 0 descriptor?? [ 605.106043][T22369] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 605.137031][T22369] EXT4-fs error (device loop7): ext4_add_entry:2488: inode #2: comm syz.7.7644: Directory hole found for htree leaf block 0 [ 605.200937][T22369] EXT4-fs (loop7): Remounting filesystem read-only [ 605.249065][T22374] EXT4-fs error (device loop7): ext4_empty_dir:3141: inode #2: comm syz.7.7644: Directory hole found for htree leaf block 0 [ 605.280487][T22374] EXT4-fs (loop7): Remounting filesystem read-only [ 605.386401][T19744] EXT4-fs (loop7): unmounting filesystem. [ 605.490860][ T4319] holtek_kbd 0003:04D9:A055.0017: unknown main item tag 0x2 [ 605.519818][ T4319] holtek_kbd 0003:04D9:A055.0017: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0 [ 605.669355][T22353] loop8: detected capacity change from 0 to 40427 [ 605.713745][ T4319] usb 5-1: USB disconnect, device number 32 [ 605.742218][T22353] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 605.768278][T22353] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 605.832569][T22353] F2FS-fs (loop8): invalid crc value [ 605.878770][T22353] F2FS-fs (loop8): Found nat_bits in checkpoint [ 605.913817][T22366] loop2: detected capacity change from 0 to 40427 [ 605.919806][T22382] fido_id[22382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 605.978297][T22366] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3584) blocks(15872) [ 606.012282][T22366] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 606.091791][T22353] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 606.092470][T22366] F2FS-fs (loop2): Found nat_bits in checkpoint [ 606.137880][T22353] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 606.240355][T22394] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7647'. [ 606.415607][T22366] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 606.434989][T22366] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 606.760668][ T4278] syz-executor: attempt to access beyond end of device [ 606.760668][ T4278] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 606.890023][T22378] loop5: detected capacity change from 0 to 40427 [ 606.930771][T22378] F2FS-fs (loop5): invalid crc value [ 606.993203][T22378] F2FS-fs (loop5): Found nat_bits in checkpoint [ 607.066646][T22411] loop4: detected capacity change from 0 to 256 [ 607.178177][T22411] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0aef944c, utbl_chksum : 0xe619d30d) [ 607.250113][T22378] F2FS-fs (loop5): Start checkpoint disabled! [ 607.345082][T22378] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 607.513455][T22425] loop4: detected capacity change from 0 to 256 [ 607.585248][ T5623] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 607.586253][T22425] exfat: Deprecated parameter 'namecase' [ 607.629007][T22425] exfat: Deprecated parameter 'namecase' [ 607.689166][T22425] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 607.760637][ T37] kworker/u4:2: attempt to access beyond end of device [ 607.760637][ T37] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 607.810463][ T5623] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 607.852033][ T5623] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.879632][ T5623] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 607.909554][ T5623] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.948230][ T5623] hub 9-1:4.0: USB hub found [ 608.193993][T22418] loop8: detected capacity change from 0 to 128 [ 608.286166][T22418] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 608.299584][T22418] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 608.412828][ T5623] hub 9-1:4.0: 2 ports detected [ 608.425040][ T5623] usb 9-1: selecting invalid altsetting 1 [ 608.444925][ T5623] hub 9-1:4.0: Using single TT (err -22) [ 608.624065][ T5623] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 608.641834][ T5623] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 608.706513][ T5623] usb 9-1: USB disconnect, device number 6 [ 609.178462][T22447] loop4: detected capacity change from 0 to 32768 [ 609.192621][T22436] loop2: detected capacity change from 0 to 40427 [ 609.259163][T22436] F2FS-fs (loop2): invalid crc value [ 609.270139][T20651] EXT4-fs (loop8): unmounting filesystem. [ 609.317030][T22436] F2FS-fs (loop2): Found nat_bits in checkpoint [ 609.575837][T22436] F2FS-fs (loop2): Start checkpoint disabled! [ 609.682784][T22460] loop8: detected capacity change from 0 to 2048 [ 609.703798][T22436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 609.833571][T22460] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 609.915389][T22460] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 610.184250][T20651] EXT4-fs (loop8): unmounting filesystem. [ 610.461824][T22486] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7671'. [ 610.914022][T22464] loop5: detected capacity change from 0 to 32768 [ 611.012428][T22464] JBD2: Ignoring recovery information on journal [ 611.125109][ T7] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 611.187172][T22464] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 611.201718][T22511] loop8: detected capacity change from 0 to 1024 [ 611.263559][T22511] hfsplus: small file entry [ 611.328303][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 611.343441][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 611.386799][ T7] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 611.427787][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.487278][ T7] usb 5-1: Product: syz [ 611.495299][ T7] usb 5-1: Manufacturer: syz [ 611.500087][ T7] usb 5-1: SerialNumber: syz [ 611.546987][ T7] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 611.562405][T14988] ocfs2: Unmounting device (7,5) on (node local) [ 611.567158][ T7] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 611.567158][ T7] Please send a copy of this message to and [ 611.728717][T22521] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 612.069792][ T7] ums-sddr09: probe of 5-1:1.0 failed with error -32 [ 612.103775][ T7] usb 5-1: USB disconnect, device number 33 [ 612.716342][T22567] loop7: detected capacity change from 0 to 128 [ 612.811714][T22567] overlayfs: upper fs needs to support d_type. [ 612.842039][T22567] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 612.851114][T22571] loop4: detected capacity change from 0 to 256 [ 612.862837][T22567] overlayfs: failed to set xattr on upper [ 612.876938][T22567] overlayfs: ...falling back to index=off,metacopy=off. [ 613.068244][T19744] VFS: Lookup of '..×Ã' in minix loop7 would have caused loop [ 613.082815][T19744] VFS: Lookup of '..×Ã' in minix loop7 would have caused loop [ 613.140506][T22578] rdma_op ffff88802c7271f0 conn xmit_rdma 0000000000000000 [ 613.383132][T22585] loop2: detected capacity change from 0 to 256 [ 613.391389][T22585] exfat: Deprecated parameter 'utf8' [ 613.397265][T22585] exfat: Deprecated parameter 'namecase' [ 613.403162][T22585] exfat: Deprecated parameter 'utf8' [ 613.431052][T22585] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 613.747582][T22591] ip_tables: iptables: counters copy to user failed while replacing table [ 613.777793][ T4337] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.886856][ T4337] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.068123][ T4337] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.256976][ T4337] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.899423][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 614.915262][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 614.945233][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 614.986708][T22617] loop4: detected capacity change from 0 to 4096 [ 615.007564][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 615.015537][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 615.026394][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 615.074191][T22617] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 615.201816][T22617] ntfs3: loop4: Failed to load $Extend. [ 615.314442][T22618] wg2 speed is unknown, defaulting to 1000 [ 615.455572][T22618] wg1 speed is unknown, defaulting to 1000 [ 615.577874][ T5623] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 615.635306][ T5623] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 616.042509][T22643] fido_id[22643]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 616.240793][T22657] loop8: detected capacity change from 0 to 1024 [ 616.804642][T22637] loop5: detected capacity change from 0 to 32768 [ 617.072171][T22637] XFS (loop5): Mounting V5 Filesystem [ 617.126500][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 617.247975][T22637] XFS (loop5): Ending clean mount [ 617.258237][T22618] chnl_net:caif_netlink_parms(): no params data found [ 617.288581][T22637] XFS (loop5): Quotacheck needed: Please wait. [ 617.654350][T22637] XFS (loop5): Quotacheck: Done. [ 617.716301][ T4337] device hsr_slave_0 left promiscuous mode [ 617.723332][ T4337] device hsr_slave_1 left promiscuous mode [ 617.756224][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.781324][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.808302][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.838480][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.867241][T14988] XFS (loop5): Unmounting Filesystem [ 617.888300][ T4337] device bridge_slave_1 left promiscuous mode [ 617.916437][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.961879][ T4337] device bridge_slave_0 left promiscuous mode [ 617.988780][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.069954][T22709] loop4: detected capacity change from 0 to 256 [ 618.096836][T22710] netlink: 'syz.8.7755': attribute type 1 has an invalid length. [ 618.106557][T22709] exfat: Deprecated parameter 'namecase' [ 618.112374][T22709] exfat: Deprecated parameter 'namecase' [ 618.234981][T22709] exfat: Deprecated parameter 'utf8' [ 618.269003][ T4337] device veth1_macvtap left promiscuous mode [ 618.293042][ T4337] device veth0_macvtap left promiscuous mode [ 618.313341][ T4337] device veth0_vlan left promiscuous mode [ 618.319487][T22709] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 618.968526][T22682] loop2: detected capacity change from 0 to 40427 [ 619.032771][T22720] loop4: detected capacity change from 0 to 16 [ 619.075605][T22682] F2FS-fs (loop2): invalid crc value [ 619.145222][T22720] erofs: (device loop4): mounted with root inode @ nid 36. [ 619.195569][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 619.215772][T22682] F2FS-fs (loop2): Found nat_bits in checkpoint [ 619.495595][T22714] loop8: detected capacity change from 0 to 131072 [ 619.519232][T22714] F2FS-fs (loop8): Invalid segment count (0) [ 619.525446][T22714] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 619.538664][T22714] F2FS-fs (loop8): invalid crc value [ 619.639146][T22714] F2FS-fs (loop8): Found nat_bits in checkpoint [ 619.639235][T22682] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 619.679270][T22714] F2FS-fs (loop8): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [393219, 3] run fsck to fix. [ 619.742602][T22714] F2FS-fs (loop8): Failed to read root inode [ 620.065035][ T5623] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 620.255187][ T5623] usb 5-1: Using ep0 maxpacket: 16 [ 620.262675][ T5623] usb 5-1: unable to get BOS descriptor or descriptor too short [ 620.289834][ T5623] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 620.317361][T22741] loop8: detected capacity change from 0 to 256 [ 620.321644][ T5623] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 620.374934][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.394998][ T5623] usb 5-1: Product: syz [ 620.399268][ T5623] usb 5-1: Manufacturer: syz [ 620.414152][ T5623] usb 5-1: SerialNumber: syz [ 620.649681][ T5623] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 620.664577][T22743] loop8: detected capacity change from 0 to 256 [ 620.669143][ T5623] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 620.748437][T22736] loop5: detected capacity change from 0 to 32768 [ 620.811776][T22736] [ 620.811776][T22736] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 620.811776][T22736] [ 620.901000][T22736] ERROR: (device loop5): diWrite: ixpxd invalid [ 620.901000][T22736] [ 620.958644][T22736] ERROR: (device loop5): txCommit: [ 620.958644][T22736] [ 621.149357][ T5623] usb 5-1: USB disconnect, device number 34 [ 621.156749][T14988] [ 621.156749][T14988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 621.156749][T14988] [ 621.221553][T14988] [ 621.221553][T14988] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 621.221553][T14988] [ 621.274955][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 622.178517][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 622.263720][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 622.343765][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.419196][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.993551][ T4337] bond0 (unregistering): Released all slaves [ 623.145339][T22752] netlink: 'syz.5.7766': attribute type 10 has an invalid length. [ 623.177814][T22754] netlink: 'syz.4.7767': attribute type 298 has an invalid length. [ 623.198653][T22618] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.246359][T22618] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.254734][T22618] device bridge_slave_0 entered promiscuous mode [ 623.298004][T22618] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.312920][T22618] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.328757][T22618] device bridge_slave_1 entered promiscuous mode [ 623.347063][T22758] loop2: detected capacity change from 0 to 128 [ 623.355343][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 623.420151][T22757] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 623.577426][T22618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.605221][ T4321] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 623.641718][T22618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.799356][T22618] team0: Port device team_slave_0 added [ 623.814663][ T4321] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 623.839393][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.879585][T22618] team0: Port device team_slave_1 added [ 623.888382][ T4321] usb 6-1: Product: syz [ 623.892611][ T4321] usb 6-1: Manufacturer: syz [ 623.914661][ T4321] usb 6-1: SerialNumber: syz [ 623.952200][T22618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.952865][ T4321] usb 6-1: config 0 descriptor?? [ 623.978533][ T4321] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 623.991171][T22618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.018784][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 624.044914][T22618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.049767][ T4321] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 624.090333][ T4321] usb 6-1: media controller created [ 624.124398][T22618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.125874][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 624.138258][T22618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.210115][T22618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.253378][T21210] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 624.364272][T22618] device hsr_slave_0 entered promiscuous mode [ 624.397539][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.403964][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.421472][T22618] device hsr_slave_1 entered promiscuous mode [ 624.433153][T22618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.451922][T22618] Cannot create hsr debugfs directory [ 624.457808][T21210] usb 9-1: Using ep0 maxpacket: 8 [ 624.465181][T21210] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.474063][ T4321] DVB: Unable to find symbol mt352_attach() [ 624.508603][T21210] usb 9-1: config 0 interface 0 has no altsetting 0 [ 624.528907][T21210] usb 9-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 624.559271][T21210] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.604335][T21210] usb 9-1: config 0 descriptor?? [ 624.616525][ T4321] DVB: Unable to find symbol nxt6000_attach() [ 624.622773][ T4321] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 624.665237][ T4321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 624.716919][ T4321] dvb-usb: schedule remote query interval to 1000 msecs. [ 624.734733][ T4321] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 624.784985][ T4321] dvb-usb: bulk message failed: -22 (7/0) [ 624.795573][ T4321] dvb-usb: bulk message failed: -22 (7/0) [ 624.810289][ T4321] usb 6-1: USB disconnect, device number 16 [ 624.891119][T22770] loop2: detected capacity change from 0 to 32768 [ 624.919398][ T4321] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 624.998270][T22770] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 625.041734][T21210] input: HID 17ef:60b5 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:17EF:60B5.0019/input/input33 [ 625.082338][T22618] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 625.131187][T22618] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 625.142151][ T4278] ocfs2: Unmounting device (7,2) on (node local) [ 625.207866][T21210] lenovo 0003:17EF:60B5.0019: input,hidraw0: USB HID v0.02 Joystick [HID 17ef:60b5] on usb-dummy_hcd.8-1/input0 [ 625.207882][T22618] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 625.254502][T21210] usb 9-1: USB disconnect, device number 7 [ 625.259432][T22796] loop4: detected capacity change from 0 to 512 [ 625.344402][T22796] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.7779: Unrecognised inode hash code 255 [ 625.383612][T22800] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 625.426649][T22796] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.7779: Corrupt directory, running e2fsck is recommended [ 625.442298][T22618] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 625.501972][T22796] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 625.560852][T22797] fido_id[22797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 625.605025][T22796] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.7779: corrupted in-inode xattr [ 625.670561][T22796] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.7779: couldn't read orphan inode 15 (err -117) [ 625.728610][T22796] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 625.792594][T22796] EXT4-fs error (device loop4): ext4_empty_dir:3147: inode #2: block 4: comm syz.4.7779: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 625.841088][T22796] EXT4-fs warning (device loop4): ext4_empty_dir:3149: inode #2: comm syz.4.7779: directory missing '.' [ 626.030680][T22810] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 626.095886][T22810] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 626.112743][T22810] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 626.122322][T22810] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 626.138242][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 626.164489][T22618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.247674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 626.261310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 626.306560][T22618] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.309972][T22822] loop4: detected capacity change from 0 to 256 [ 626.337818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 626.357259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 626.374402][T22822] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 626.381187][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.393767][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.495546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 626.514008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 626.544203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 626.562593][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.569935][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.605755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 626.663286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 626.712623][T22830] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[22831] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[22830] [ 626.718154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 626.760262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 626.787668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 626.806000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 626.826182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 626.847478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 626.902659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 626.921162][T22838] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 626.939553][T22618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 626.985420][T22618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 627.027826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 627.044122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 627.709367][T22875] loop4: detected capacity change from 0 to 512 [ 627.769605][T22875] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 627.824101][T22875] EXT4-fs (loop4): 1 truncate cleaned up [ 627.845233][T22875] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 627.946730][T22875] EXT4-fs warning (device loop4): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 628.065704][T11558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 628.073295][T11558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 628.121993][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 628.128731][T22618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.587876][T22906] IPv6: NLM_F_CREATE should be specified when creating new route [ 629.181990][T22932] loop4: detected capacity change from 0 to 64 [ 629.234987][ T5623] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 629.435632][ T5623] usb 6-1: Using ep0 maxpacket: 8 [ 629.442872][ T5623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 629.475697][ T5623] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 629.509493][ T5623] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 629.541327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 629.561040][ T5623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.573400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 629.600746][ T5623] usb 6-1: config 0 descriptor?? [ 629.657942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 629.693325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.728437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 629.749310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 629.811206][T22949] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 629.812839][T22618] device veth0_vlan entered promiscuous mode [ 629.904315][T22618] device veth1_vlan entered promiscuous mode [ 629.996594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 630.026444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 630.041301][ T5623] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0 [ 630.059599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 630.067934][ T5623] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0 [ 630.094950][ T5623] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0 [ 630.103285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 630.122399][ T5623] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0 [ 630.147618][T22618] device veth0_macvtap entered promiscuous mode [ 630.155290][ T5623] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0 [ 630.162424][ T5623] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0 [ 630.171162][T22618] device veth1_macvtap entered promiscuous mode [ 630.202813][ T5623] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0 [ 630.226209][ T5623] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0 [ 630.248032][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.269121][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.274195][ T5623] lenovo 0003:17EF:6047.001A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 630.289877][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.316586][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.334039][ T5623] lenovo 0003:17EF:6047.001A: Failed to switch F7/9/11 mode: -71 [ 630.348866][T22618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.358509][ T5623] lenovo 0003:17EF:6047.001A: Failed to switch middle button: -71 [ 630.372615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 630.390046][ T5623] lenovo 0003:17EF:6047.001A: Fn-lock setting failed: -71 [ 630.405515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 630.408510][ T5623] lenovo 0003:17EF:6047.001A: Sensitivity setting failed: -71 [ 630.445268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 630.470335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 630.488855][ T5623] usb 6-1: USB disconnect, device number 17 [ 630.513745][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.559607][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.588687][T22973] xt_hashlimit: size too large, truncated to 1048576 [ 630.588813][T22618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.616148][T22973] xt_hashlimit: max too large, truncated to 1048576 [ 630.636922][T22618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.677291][T22618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.711988][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 630.719527][T22970] fido_id[22970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 630.722549][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 630.775340][ T1182] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 630.809445][T22618] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.839423][T22618] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.871493][T22618] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.893495][T22618] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.990435][ T1182] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.031278][ T1182] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 631.041399][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.057696][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.067721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 631.098231][ T1182] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 631.111199][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.122428][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.128866][ T1182] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.139811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 631.187941][ T1182] usb 9-1: config 0 descriptor?? [ 631.315284][ T4320] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 631.329704][T22987] bond0: option ad_select: unable to set because the bond device is up [ 631.511101][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 631.522428][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.542029][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.572308][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 631.601922][ T4320] usb 3-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00 [ 631.626204][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.670959][ T4320] usb 3-1: config 0 descriptor?? [ 631.821037][ T1182] Bluetooth: Can't get version to change to load ram patch err [ 631.845259][ T1182] Bluetooth: Loading sysconfig file failed [ 631.851221][ T1182] ath3k: probe of 9-1:0.0 failed with error -71 [ 631.871338][ T1182] usb 9-1: USB disconnect, device number 8 [ 632.108464][ T4320] input: HID 04f2:0618 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04F2:0618.001B/input/input34 [ 632.192040][T23020] loop4: detected capacity change from 0 to 256 [ 632.217634][ T4320] topseed 0003:04F2:0618.001B: input,hidraw0: USB HID v0.05 Joystick [HID 04f2:0618] on usb-dummy_hcd.2-1/input0 [ 632.231418][T23020] exfat: Deprecated parameter 'namecase' [ 632.242274][T23020] exfat: Deprecated parameter 'utf8' [ 632.277162][T23020] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 632.349984][ T4320] usb 3-1: USB disconnect, device number 26 [ 632.621994][T23021] fido_id[23021]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 632.657035][T23028] loop8: detected capacity change from 0 to 128 [ 632.802148][T23028] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 632.957173][T23028] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 632.971257][T23034] ntfs3: loop5: try to read out of volume at offset 0x0 [ 633.000926][T23036] loop9: detected capacity change from 0 to 64 [ 633.218767][ T4337] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 633.431862][T23047] loop9: detected capacity change from 0 to 1024 [ 633.519835][T23047] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 2: comm syz.9.7861: lblock 2 mapped to illegal pblock 2 (length 1) [ 633.538765][T23047] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 633.547239][T23047] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 48: comm syz.9.7861: lblock 0 mapped to illegal pblock 48 (length 1) [ 633.564715][T23047] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 633.577148][T23047] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.7861: Failed to acquire dquot type 0 [ 633.601335][T23047] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 633.615637][T23047] EXT4-fs error (device loop9): ext4_evict_inode:281: inode #11: comm syz.9.7861: mark_inode_dirty error [ 633.631970][T23047] EXT4-fs warning (device loop9): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 633.648630][T23047] EXT4-fs (loop9): 1 orphan inode deleted [ 633.665647][T23047] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 633.675554][ T47] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 633.694053][T23047] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.7861: Invalid inode table block 1 in block_group 0 [ 633.745217][ T47] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 633.771100][T23047] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 633.795661][ T47] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 633.864904][ T7] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 633.934488][T22618] EXT4-fs (loop9): unmounting filesystem. [ 633.965601][T22618] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 634.014931][T22618] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 634.045149][T22618] EXT4-fs error (device loop9): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 634.065096][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 634.072949][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.114142][ T7] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 634.140314][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.182371][ T7] usb 3-1: config 0 descriptor?? [ 634.606424][ T7] holtek 0003:1241:5015.001C: unknown main item tag 0x0 [ 634.634178][ T7] holtek 0003:1241:5015.001C: unknown main item tag 0x0 [ 634.664631][ T7] holtek 0003:1241:5015.001C: unknown main item tag 0x0 [ 634.685156][ T7] holtek 0003:1241:5015.001C: unknown main item tag 0x0 [ 634.715553][ T7] holtek 0003:1241:5015.001C: unknown main item tag 0x0 [ 634.723855][ T7] holtek 0003:1241:5015.001C: unknown main item tag 0x0 [ 634.757028][ T7] holtek 0003:1241:5015.001C: hidraw0: USB HID v0.04 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 634.797519][ T7] holtek 0003:1241:5015.001C: no inputs found [ 634.829299][T23061] loop8: detected capacity change from 0 to 32768 [ 634.839657][ T7] usb 3-1: USB disconnect, device number 27 [ 634.849279][ T27] audit: type=1326 audit(2000000291.890:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23083 comm="syz.9.7871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bf99e159 code=0x7ffc0000 [ 634.956421][ T27] audit: type=1326 audit(2000000291.890:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23083 comm="syz.9.7871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bf99e159 code=0x7ffc0000 [ 635.055250][ T27] audit: type=1326 audit(2000000291.900:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23083 comm="syz.9.7871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bf99e159 code=0x7ffc0000 [ 635.127855][ T27] audit: type=1326 audit(2000000291.900:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23083 comm="syz.9.7871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06bf99e159 code=0x7ffc0000 [ 635.185141][T23092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7874'. [ 635.194086][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7874'. [ 635.234935][ T27] audit: type=1326 audit(2000000291.900:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23083 comm="syz.9.7871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bf99e159 code=0x7ffc0000 [ 635.280927][T23092] netlink: 'syz.4.7874': attribute type 7 has an invalid length. [ 635.294672][T23087] fido_id[23087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 635.320037][ T27] audit: type=1326 audit(2000000291.900:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23083 comm="syz.9.7871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bf99e159 code=0x7ffc0000 [ 635.359125][T23092] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.368293][T23092] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.377089][T23092] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.385902][T23092] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.480350][ T27] audit: type=1326 audit(2000000291.900:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23083 comm="syz.9.7871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bf99e159 code=0x7ffc0000 [ 635.785568][T23108] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7889'. [ 635.794523][T23108] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7889'. [ 635.864907][T23108] netlink: 'syz.8.7889': attribute type 19 has an invalid length. [ 635.893386][T23108] netlink: 'syz.8.7889': attribute type 20 has an invalid length. [ 636.070597][T23114] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[23116] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[23114] [ 636.164776][T23123] loop8: detected capacity change from 0 to 8 [ 636.233060][T23123] SQUASHFS error: Failed to read block 0x285: -5 [ 636.252539][T23123] SQUASHFS error: Unable to read metadata cache entry [283] [ 636.297905][T23123] SQUASHFS error: Unable to read directory block [283:0] [ 636.571568][T23135] option changes via remount are deprecated (pid=23133 comm=syz.2.7888) [ 636.602583][T23130] loop9: detected capacity change from 0 to 4096 [ 636.678223][T23130] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 636.775196][ T7] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 636.974928][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 636.982950][ T7] usb 5-1: config index 0 descriptor too short (expected 63524, got 36) [ 637.040741][ T7] usb 5-1: config 0 has too many interfaces: 64, using maximum allowed: 32 [ 637.084961][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 64 [ 637.086150][T23149] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7895'. [ 637.113408][ T7] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.146933][T23149] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7895'. [ 637.168821][ T7] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 637.217755][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 637.251977][ T7] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 637.291028][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.323975][ T7] usb 5-1: config 0 descriptor?? [ 637.750480][ T7] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x2 [ 637.769301][ T7] kovaplus 0003:1E7D:2D50.001D: unknown main item tag 0x5 [ 637.804991][ T7] kovaplus 0003:1E7D:2D50.001D: item fetching failed at offset 18/24 [ 637.828102][ T7] kovaplus 0003:1E7D:2D50.001D: parse failed [ 637.837034][T23166] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[23177] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[23166] [ 637.861651][ T7] kovaplus: probe of 0003:1E7D:2D50.001D failed with error -22 [ 637.922841][T23181] loop2: detected capacity change from 0 to 8 [ 637.952600][ T7] usb 5-1: USB disconnect, device number 35 [ 638.085634][T23181] SQUASHFS error: Failed to read block 0x285: -5 [ 638.092066][T23181] SQUASHFS error: Unable to read metadata cache entry [283] [ 638.126538][T23184] loop9: detected capacity change from 0 to 2048 [ 638.133820][T23181] SQUASHFS error: Unable to read directory block [283:0] [ 638.196818][T23184] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 638.670200][T23201] loop8: detected capacity change from 0 to 512 [ 638.701322][ T9] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 638.737086][T23201] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 638.782898][ T9] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 638.783375][T23201] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.795880][ T9] EXT4-fs (loop9): This should not happen!! Data will be lost [ 638.795880][ T9] [ 638.816347][ T9] EXT4-fs (loop9): Total free blocks count 0 [ 638.822379][ T9] EXT4-fs (loop9): Free/Dirty block details [ 638.828952][ T9] EXT4-fs (loop9): free_blocks=4096 [ 638.835150][ T9] EXT4-fs (loop9): dirty_blocks=512 [ 638.840403][ T9] EXT4-fs (loop9): Block reservation details [ 638.846542][ T9] EXT4-fs (loop9): i_reserved_data_blocks=32 [ 638.868397][T22618] EXT4-fs (loop9): unmounting filesystem. [ 639.082976][T20651] EXT4-fs (loop8): unmounting filesystem. [ 639.295208][T23217] loop2: detected capacity change from 0 to 4096 [ 639.368348][T23217] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 639.379093][T23229] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 639.411945][T23217] NILFS (loop2): mounting fs with errors [ 639.695481][T23235] loop9: detected capacity change from 0 to 1024 [ 639.752741][T23235] hfsplus: invalid length 1033 has been corrected to 255 [ 639.831218][T23235] hfsplus: invalid length 1033 has been corrected to 255 [ 639.917794][T23235] hfsplus: invalid length 1033 has been corrected to 255 [ 640.151383][ T11] hfsplus: b-tree write err: -5, ino 25 [ 640.162460][ T11] hfsplus: b-tree write err: -5, ino 4 [ 640.204110][ T11] hfsplus: b-tree write err: -5, ino 2 [ 640.220497][ T11] hfsplus: b-tree write err: -5, ino 26 [ 640.384382][T23231] loop5: detected capacity change from 0 to 8192 [ 640.482516][T23231] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 640.510003][T23252] loop8: detected capacity change from 0 to 2048 [ 640.600047][T23252] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 640.741103][T23231] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 640.814598][T23231] ntfs3: loop5: Failed to load $Extend. [ 640.988313][T23220] loop4: detected capacity change from 0 to 40427 [ 641.091489][T23220] F2FS-fs (loop4): Found nat_bits in checkpoint [ 641.186239][T23266] loop9: detected capacity change from 0 to 256 [ 641.283096][T11558] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 641.296072][T23220] F2FS-fs (loop4): Start checkpoint disabled! [ 641.298171][T23266] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 641.412205][T11558] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 641.459040][T23220] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 641.512479][T23267] loop2: detected capacity change from 0 to 4096 [ 641.534911][T11558] EXT4-fs (loop8): This should not happen!! Data will be lost [ 641.534911][T11558] [ 641.544640][T11558] EXT4-fs (loop8): Total free blocks count 0 [ 641.583804][T23267] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 641.625223][T11558] EXT4-fs (loop8): Free/Dirty block details [ 641.632503][T11558] EXT4-fs (loop8): free_blocks=4096 [ 641.668552][T11558] EXT4-fs (loop8): dirty_blocks=512 [ 641.673846][T11558] EXT4-fs (loop8): Block reservation details [ 641.734905][T11558] EXT4-fs (loop8): i_reserved_data_blocks=32 [ 641.852838][T20651] EXT4-fs (loop8): unmounting filesystem. [ 642.457185][T23276] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 642.938952][T23302] set_capacity_and_notify: 1 callbacks suppressed [ 642.938970][T23302] loop4: detected capacity change from 0 to 4096 [ 643.041592][ T1086] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 643.081674][T23307] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 643.082151][T23302] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 643.143679][ T1086] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 324 with error 28 [ 643.183119][T23302] NILFS (loop4): mounting fs with errors [ 643.200436][ T1086] EXT4-fs (loop5): This should not happen!! Data will be lost [ 643.200436][ T1086] [ 643.261348][ T1086] EXT4-fs (loop5): Total free blocks count 0 [ 643.281628][ T1086] EXT4-fs (loop5): Free/Dirty block details [ 643.325590][ T1086] EXT4-fs (loop5): free_blocks=4096 [ 643.358764][ T1086] EXT4-fs (loop5): dirty_blocks=336 [ 643.391184][ T1086] EXT4-fs (loop5): Block reservation details [ 643.417605][ T1086] EXT4-fs (loop5): i_reserved_data_blocks=21 [ 643.520651][T14988] EXT4-fs (loop5): unmounting filesystem. [ 643.720248][T23321] loop5: detected capacity change from 0 to 128 [ 643.754285][T23321] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 643.815158][T21613] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 643.833631][T23321] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 643.966189][ T47] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 644.024959][T21613] usb 9-1: Using ep0 maxpacket: 8 [ 644.033907][T21613] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 644.045259][T23325] loop4: detected capacity change from 0 to 1024 [ 644.066074][T21613] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.104759][T21613] usb 9-1: Product: syz [ 644.112986][T21613] usb 9-1: Manufacturer: syz [ 644.144931][T21613] usb 9-1: SerialNumber: syz [ 644.185700][T21613] usb 9-1: config 0 descriptor?? [ 644.199941][T23325] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.7947: lblock 2 mapped to illegal pblock 2 (length 1) [ 644.288655][T23325] __quota_error: 6 callbacks suppressed [ 644.288675][T23325] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 644.345012][T23325] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.7947: lblock 0 mapped to illegal pblock 48 (length 1) [ 644.379321][T23325] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 644.400500][T21613] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 644.408159][T23325] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.7947: Failed to acquire dquot type 0 [ 644.452111][T23325] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 644.492929][T23325] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.7947: mark_inode_dirty error [ 644.524652][T23325] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 644.543588][T23325] EXT4-fs (loop4): 1 orphan inode deleted [ 644.549911][T23341] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7952'. [ 644.575212][ T11] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 644.577399][T23325] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 644.635983][ T11] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 644.644552][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 644.655340][T23325] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.7947: Invalid inode table block 1 in block_group 0 [ 644.731607][T23325] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 644.806641][T21613] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 644.830625][T21613] usb 9-1: USB disconnect, device number 9 [ 644.891050][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 644.917390][ T4279] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 644.954613][ T4279] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 644.983141][ T4279] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 645.060561][T23355] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7955'. [ 645.277551][T23359] loop2: detected capacity change from 0 to 2048 [ 645.460639][T23359] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 645.649083][T23376] loop4: detected capacity change from 0 to 128 [ 645.728221][T23376] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 645.848526][T23376] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 646.034141][ T4337] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 646.255286][ T4337] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 646.311174][ T4337] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 690 with error 28 [ 646.357431][ T4337] EXT4-fs (loop2): This should not happen!! Data will be lost [ 646.357431][ T4337] [ 646.398772][ T4337] EXT4-fs (loop2): Total free blocks count 0 [ 646.425290][ T4337] EXT4-fs (loop2): Free/Dirty block details [ 646.461200][ T4337] EXT4-fs (loop2): free_blocks=4096 [ 646.485855][ T4337] EXT4-fs (loop2): dirty_blocks=704 [ 646.491156][ T4337] EXT4-fs (loop2): Block reservation details [ 646.529441][ T4337] EXT4-fs (loop2): i_reserved_data_blocks=44 [ 646.601355][T23371] loop5: detected capacity change from 0 to 32768 [ 646.648023][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 646.651674][T23371] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.7959 (23371) [ 646.780429][T23371] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 646.827770][T23371] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 646.875140][T21613] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 646.886312][T23371] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 646.948087][T23371] BTRFS info (device loop5): use zstd compression, level 3 [ 646.986772][T23371] BTRFS info (device loop5): using free space tree [ 647.075005][T21613] usb 10-1: Using ep0 maxpacket: 32 [ 647.083095][T21613] usb 10-1: config 0 has an invalid interface number: 20 but max is 0 [ 647.146118][T21613] usb 10-1: config 0 has no interface number 0 [ 647.208458][T21613] usb 10-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 647.272137][T21613] usb 10-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 647.329720][T21613] usb 10-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 647.347619][T21613] usb 10-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 647.372486][T21613] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.397996][T21613] usb 10-1: Product: syz [ 647.402456][T21613] usb 10-1: Manufacturer: syz [ 647.415275][T21613] usb 10-1: SerialNumber: syz [ 647.422385][T21613] usb 10-1: config 0 descriptor?? [ 647.432409][T23394] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 647.440143][T23371] BTRFS info (device loop5): enabling ssd optimizations [ 647.772362][T21613] usb-storage 10-1:0.20: USB Mass Storage device detected [ 647.826449][T14988] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 647.840629][T21613] usb-storage 10-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 647.865028][T21613] scsi host1: usb-storage 10-1:0.20 [ 647.878863][T21613] usb 10-1: USB disconnect, device number 2 [ 648.237054][T23446] loop2: detected capacity change from 0 to 16 [ 648.275809][ T6028] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop5 scanned by udevd (6028) [ 648.312779][T23446] erofs: (device loop2): mounted with root inode @ nid 36. [ 648.453504][ T3934] device veth1_vlan left promiscuous mode [ 648.511972][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 648.665953][T23446] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 648.765047][T23446] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 648.920846][T23446] syz.2.7980: attempt to access beyond end of device [ 648.920846][T23446] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 649.080054][T23446] syz.2.7980: attempt to access beyond end of device [ 649.080054][T23446] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 649.120065][T23456] loop5: detected capacity change from 0 to 2048 [ 649.230893][T23456] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 649.512621][T23466] loop9: detected capacity change from 0 to 512 [ 649.817619][ T47] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 649.873388][T23466] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 649.950340][ T47] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 818 with error 28 [ 649.975986][ T47] EXT4-fs (loop5): This should not happen!! Data will be lost [ 649.975986][ T47] [ 650.000469][T23466] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.011769][ T47] EXT4-fs (loop5): Total free blocks count 0 [ 650.035677][ T47] EXT4-fs (loop5): Free/Dirty block details [ 650.041749][ T47] EXT4-fs (loop5): free_blocks=4096 [ 650.082951][ T47] EXT4-fs (loop5): dirty_blocks=832 [ 650.115118][ T47] EXT4-fs (loop5): Block reservation details [ 650.121197][ T47] EXT4-fs (loop5): i_reserved_data_blocks=52 [ 650.235576][T14988] EXT4-fs (loop5): unmounting filesystem. [ 650.313206][T23482] loop8: detected capacity change from 0 to 256 [ 650.411796][T22618] EXT4-fs (loop9): unmounting filesystem. [ 650.422147][T23482] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 650.535658][T23489] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7990'. [ 650.616697][T23491] loop2: detected capacity change from 0 to 2048 [ 650.851361][T23491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 651.665933][ T4337] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 651.726163][ T4337] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 651.784926][ T4337] EXT4-fs (loop2): This should not happen!! Data will be lost [ 651.784926][ T4337] [ 651.819603][ T4337] EXT4-fs (loop2): Total free blocks count 0 [ 651.835000][ T4337] EXT4-fs (loop2): Free/Dirty block details [ 651.861248][ T4337] EXT4-fs (loop2): free_blocks=4096 [ 651.879429][ T4337] EXT4-fs (loop2): dirty_blocks=512 [ 651.899646][ T4337] EXT4-fs (loop2): Block reservation details [ 651.939243][ T4337] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 652.050401][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 652.162307][T23486] loop4: detected capacity change from 0 to 32768 [ 652.219871][T23486] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 652.587121][ T6029] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 653.191439][T23529] loop5: detected capacity change from 0 to 4096 [ 653.319012][T23535] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 653.372165][T23529] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 653.610134][T23543] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8006'. [ 653.725393][T10364] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 653.810697][T23545] loop5: detected capacity change from 0 to 4096 [ 653.893422][T23552] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 653.945018][T10364] usb 9-1: Using ep0 maxpacket: 16 [ 653.961081][T10364] usb 9-1: config index 0 descriptor too short (expected 63524, got 36) [ 653.970908][T23545] NILFS (loop5): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 653.999931][T10364] usb 9-1: config 0 has too many interfaces: 64, using maximum allowed: 32 [ 654.010785][T23545] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 654.040083][T10364] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 64 [ 654.060722][T23545] Remounting filesystem read-only [ 654.077347][T10364] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.130544][T10364] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 654.199946][T10364] usb 9-1: config 0 interface 0 has no altsetting 0 [ 654.223164][T10364] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 654.252810][T10364] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.294745][T10364] usb 9-1: config 0 descriptor?? [ 654.748421][T10364] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x2 [ 654.774238][T10364] kovaplus 0003:1E7D:2D50.001E: unknown main item tag 0x5 [ 654.794387][T23561] loop5: detected capacity change from 0 to 128 [ 654.805126][T10364] kovaplus 0003:1E7D:2D50.001E: item fetching failed at offset 18/24 [ 654.813919][T10364] kovaplus 0003:1E7D:2D50.001E: parse failed [ 654.856211][T23561] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 654.882080][T10364] kovaplus: probe of 0003:1E7D:2D50.001E failed with error -22 [ 654.932681][T23561] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 655.078403][T10364] usb 9-1: USB disconnect, device number 10 [ 655.154582][T11558] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 655.925166][ T7] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 656.143145][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 656.176908][T23605] loop5: detected capacity change from 0 to 64 [ 656.191531][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 656.236562][ T7] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 656.267157][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.293839][ T7] usb 3-1: Product: syz [ 656.309719][ T7] usb 3-1: Manufacturer: syz [ 656.314407][ T7] usb 3-1: SerialNumber: syz [ 656.360756][ T7] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 656.412965][ T7] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 656.412965][ T7] Please send a copy of this message to and [ 656.775786][T23623] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8037'. [ 656.865321][ T7] ums-sddr09: probe of 3-1:1.0 failed with error -32 [ 656.892060][ T7] usb 3-1: USB disconnect, device number 28 [ 657.026328][T23627] loop4: detected capacity change from 0 to 2048 [ 657.134159][T23627] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 657.198311][T23639] loop8: detected capacity change from 0 to 128 [ 657.254579][T23627] ext4 filesystem being mounted at /1629/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 657.318570][T23639] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 657.375556][T23639] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.728813][T20651] EXT4-fs (loop8): unmounting filesystem. [ 657.745505][ T27] audit: type=1326 audit(2000000314.790:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23655 comm="syz.5.8048" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d0f9e159 code=0x7ffc0000 [ 657.831489][ T27] audit: type=1326 audit(2000000314.830:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23655 comm="syz.5.8048" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f91d0f9e159 code=0x7ffc0000 [ 657.919588][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 657.946158][ T27] audit: type=1326 audit(2000000314.830:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23655 comm=B4F285B09B14EBD43CA0F6ED7E624F exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d0f9e159 code=0x7ffc0000 [ 658.075813][ T27] audit: type=1326 audit(2000000314.830:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23655 comm=B4F285B09B14EBD43CA0F6ED7E624F exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d0f9e159 code=0x7ffc0000 [ 658.099355][T23665] netlink: 'syz.9.8050': attribute type 1 has an invalid length. [ 658.195205][ T27] audit: type=1326 audit(2000000314.830:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23655 comm=B4F285B09B14EBD43CA0F6ED7E624F exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91d0f9e159 code=0x7ffc0000 [ 658.274950][ T27] audit: type=1326 audit(2000000314.830:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23655 comm=B4F285B09B14EBD43CA0F6ED7E624F exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d0f9e159 code=0x7ffc0000 [ 658.374186][ T27] audit: type=1326 audit(2000000314.830:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23655 comm=B4F285B09B14EBD43CA0F6ED7E624F exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d0f9e159 code=0x7ffc0000 [ 658.687612][T23682] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8057'. [ 658.739416][T23687] ip_tables: iptables: counters copy to user failed while replacing table [ 659.550001][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8071'. [ 659.610854][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8071'. [ 659.801142][T23725] loop5: detected capacity change from 0 to 4096 [ 659.925031][T23725] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 660.816687][ T7] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 661.017417][ T7] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.037506][ T7] usb 9-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 661.055745][ T7] usb 9-1: config 0 interface 0 has no altsetting 0 [ 661.062706][ T7] usb 9-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 661.075102][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.104456][ T7] usb 9-1: config 0 descriptor?? [ 661.564562][ T7] logitech 0003:046D:C295.001F: item fetching failed at offset 5/7 [ 661.594648][ T7] logitech 0003:046D:C295.001F: parse failed [ 661.632429][ T7] logitech: probe of 0003:046D:C295.001F failed with error -22 [ 661.820502][ T7] usb 9-1: USB disconnect, device number 11 [ 662.022296][T23783] loop2: detected capacity change from 0 to 512 [ 662.095447][T23773] loop9: detected capacity change from 0 to 131072 [ 662.148242][T23783] EXT4-fs: Ignoring removed oldalloc option [ 662.235651][T23783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 662.332470][T23783] ext4 filesystem being mounted at /1713/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.376761][T23776] loop4: detected capacity change from 0 to 40427 [ 662.386037][T23776] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(15872) [ 662.418582][T23776] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 662.487964][T23776] F2FS-fs (loop4): Found nat_bits in checkpoint [ 662.598361][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 662.600917][T23795] device syz_tun entered promiscuous mode [ 662.708486][T23776] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 662.735960][T23776] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 663.103326][ T4279] syz-executor: attempt to access beyond end of device [ 663.103326][ T4279] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 663.860753][T23817] loop2: detected capacity change from 0 to 1024 [ 664.624900][ T7] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 664.829196][ T7] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 664.854961][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.863126][ T7] usb 10-1: Product: syz [ 664.894997][ T7] usb 10-1: Manufacturer: syz [ 664.899785][ T7] usb 10-1: SerialNumber: syz [ 664.935269][ T7] usb 10-1: config 0 descriptor?? [ 665.051692][T23828] loop4: detected capacity change from 0 to 32768 [ 665.142436][T23841] loop8: detected capacity change from 0 to 1024 [ 665.183057][T23828] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 665.202217][ T4319] usb 10-1: USB disconnect, device number 3 [ 665.397312][T23831] loop2: detected capacity change from 0 to 32768 [ 665.560996][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 665.577541][T23819] loop5: detected capacity change from 0 to 32768 [ 665.664171][T23831] XFS (loop2): Mounting V5 Filesystem [ 665.796904][T23819] XFS (loop5): Mounting V5 Filesystem [ 665.805264][T23831] XFS (loop2): Ending clean mount [ 666.203485][T23878] loop8: detected capacity change from 0 to 512 [ 666.366421][ T4278] XFS (loop2): Unmounting Filesystem [ 666.519789][T23878] EXT4-fs (loop8): orphan cleanup on readonly fs [ 666.553677][T23878] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:984: inode #11: comm syz.8.8121: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 666.762030][T23878] EXT4-fs (loop8): Remounting filesystem read-only [ 666.825040][T23878] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.8.8121: ea_inode dec ref err=-117 [ 666.928169][T23878] EXT4-fs (loop8): 1 orphan inode deleted [ 666.934001][T23878] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 667.013840][T23872] loop4: detected capacity change from 0 to 131072 [ 667.262175][T20651] EXT4-fs (loop8): unmounting filesystem. [ 667.378464][T23819] XFS (loop5): Ending clean mount [ 667.435524][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 667.494036][T23887] loop8: detected capacity change from 0 to 512 [ 667.510270][T23819] XFS (loop5): Quotacheck needed: Please wait. [ 667.580575][T23887] EXT4-fs: Ignoring removed oldalloc option [ 667.725682][T23819] XFS (loop5): Quotacheck: Done. [ 667.742276][T23887] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 667.801809][T23887] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.005746][T14988] XFS (loop5): Unmounting Filesystem [ 668.163316][T23876] loop9: detected capacity change from 0 to 40427 [ 668.170300][T20651] EXT4-fs (loop8): unmounting filesystem. [ 668.193121][T23876] F2FS-fs (loop9): Wrong NAT boundary, start(2560) end(3584) blocks(15872) [ 668.231289][T23876] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 668.259720][ T4320] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 668.291592][T23876] F2FS-fs (loop9): Found nat_bits in checkpoint [ 668.446978][ T4320] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.484946][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 668.517278][ T4320] usb 3-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.00 [ 668.544947][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.574076][T23876] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 668.607032][T23876] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 668.632168][ T4320] usb 3-1: config 0 descriptor?? [ 668.714947][T23908] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 668.972016][T23910] loop8: detected capacity change from 0 to 4096 [ 669.009124][T22618] syz-executor: attempt to access beyond end of device [ 669.009124][T22618] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 669.071291][ T4320] input: HID 046d:c29a as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C29A.0020/input/input35 [ 669.202393][ T4320] logitech 0003:046D:C29A.0020: input,hidraw0: USB HID v0.06 Keyboard [HID 046d:c29a] on usb-dummy_hcd.2-1/input0 [ 669.225854][ T4320] logitech 0003:046D:C29A.0020: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 669.318334][T23899] loop4: detected capacity change from 0 to 32768 [ 669.335897][ T4320] logitech: probe of 0003:046D:C29A.0020 failed with error -1 [ 669.402823][ T4320] usb 3-1: USB disconnect, device number 29 [ 669.503971][T23911] fido_id[23911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 669.527548][T23899] XFS (loop4): Mounting V5 Filesystem [ 669.772500][T23899] XFS (loop4): Ending clean mount [ 669.797847][T23899] XFS (loop4): Quotacheck needed: Please wait. [ 669.903980][T23899] XFS (loop4): Quotacheck: Done. [ 669.922734][T10365] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 670.122289][ T4279] XFS (loop4): Unmounting Filesystem [ 670.156945][T10365] usb 6-1: Using ep0 maxpacket: 32 [ 670.178096][T10365] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 670.231293][T10365] usb 6-1: config 0 has no interface number 0 [ 670.259838][T10365] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 670.343050][T10365] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 670.370924][T10365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.379871][T10365] usb 6-1: Product: syz [ 670.384280][T10365] usb 6-1: Manufacturer: syz [ 670.389767][T10365] usb 6-1: SerialNumber: syz [ 670.434603][T10365] usb 6-1: config 0 descriptor?? [ 670.440498][T23923] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 670.710911][T23923] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 670.947490][T10365] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 670.962826][T10365] asix: probe of 6-1:0.188 failed with error -71 [ 670.972031][T10365] usb 6-1: USB disconnect, device number 18 [ 671.652120][T23941] loop4: detected capacity change from 0 to 4096 [ 671.680371][T23941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 671.747968][T23941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 671.855113][ T4319] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 671.894984][ T4317] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 672.054979][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 672.063039][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 672.095544][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 672.105251][ T4319] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 672.122099][ T4317] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 672.134947][ T4317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.152521][ T4319] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 672.168451][ T4317] usb 9-1: Product: syz [ 672.182918][ T4317] usb 9-1: Manufacturer: syz [ 672.192921][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.201748][ T4317] usb 9-1: SerialNumber: syz [ 672.216679][ T4317] usb 9-1: config 0 descriptor?? [ 672.232778][ T4319] usb 3-1: config 0 descriptor?? [ 672.432064][T23967] loop4: detected capacity change from 0 to 16 [ 672.475202][T23967] erofs: (device loop4): mounted with root inode @ nid 36. [ 672.500215][T21210] usb 9-1: USB disconnect, device number 12 [ 672.562285][T23967] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 672.572403][T23967] syz.4.8138: attempt to access beyond end of device [ 672.572403][T23967] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 672.588667][T23967] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 672.678106][ T4319] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 672.694768][ T4319] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 672.715676][ T4319] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 672.733150][ T4319] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 672.756110][ T4319] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 672.773262][ T4319] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 672.801434][ T4319] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 672.817546][ T4319] lenovo 0003:17EF:6047.0021: unknown main item tag 0x0 [ 672.842036][ T4319] lenovo 0003:17EF:6047.0021: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 672.882403][ T4319] lenovo 0003:17EF:6047.0021: Failed to switch F7/9/11 mode: -71 [ 672.906279][ T4319] lenovo 0003:17EF:6047.0021: Failed to switch middle button: -71 [ 672.933330][T23979] loop9: detected capacity change from 0 to 128 [ 672.941810][ T4319] lenovo 0003:17EF:6047.0021: Fn-lock setting failed: -71 [ 672.974096][ T4319] lenovo 0003:17EF:6047.0021: Sensitivity setting failed: -71 [ 672.987837][T23979] overlayfs: upper fs needs to support d_type. [ 672.992442][T23982] loop4: detected capacity change from 0 to 1024 [ 673.007097][ T4319] usb 3-1: USB disconnect, device number 30 [ 673.013846][T23979] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 673.055900][T23979] overlayfs: failed to set xattr on upper [ 673.082137][T23979] overlayfs: ...falling back to index=off,metacopy=off. [ 673.120453][T23982] hfsplus: invalid length 1033 has been corrected to 255 [ 673.181219][T23982] hfsplus: invalid length 1033 has been corrected to 255 [ 673.243816][T23982] hfsplus: invalid length 1033 has been corrected to 255 [ 673.313041][T22618] VFS: Lookup of '..×Ã' in minix loop9 would have caused loop [ 673.355748][T22618] VFS: Lookup of '..×Ã' in minix loop9 would have caused loop [ 673.438216][T23983] fido_id[23983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 673.490229][ T11] hfsplus: b-tree write err: -5, ino 25 [ 673.505824][ T11] hfsplus: b-tree write err: -5, ino 4 [ 673.555036][ T11] hfsplus: b-tree write err: -5, ino 2 [ 673.560666][ T11] hfsplus: b-tree write err: -5, ino 26 [ 673.890573][T23996] loop8: detected capacity change from 0 to 4096 [ 673.929172][T23996] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 674.025154][T21613] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 674.045516][T23996] ntfs3: loop8: Failed to load $Extend. [ 674.247211][T21613] usb 3-1: Using ep0 maxpacket: 32 [ 674.254384][T21613] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 674.278829][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.303887][T21613] usb 3-1: config 0 has no interface number 0 [ 674.317784][T21613] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 674.389841][T21613] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 674.412946][T21613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.449673][T21613] usb 3-1: Product: syz [ 674.453931][T21613] usb 3-1: Manufacturer: syz [ 674.477054][T21613] usb 3-1: SerialNumber: syz [ 674.499007][T21613] usb 3-1: config 0 descriptor?? [ 674.510214][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.519347][T23995] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 674.667480][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.774503][T23995] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 674.887063][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.045890][T21613] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 675.061641][T21613] asix: probe of 3-1:0.188 failed with error -71 [ 675.094144][T21613] usb 3-1: USB disconnect, device number 31 [ 675.160133][T24009] loop4: detected capacity change from 0 to 32768 [ 675.238485][T24009] XFS (loop4): Mounting V5 Filesystem [ 675.397554][T24009] XFS (loop4): Ending clean mount [ 675.416483][T24009] XFS (loop4): Quotacheck needed: Please wait. [ 675.471789][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 675.486395][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 675.496794][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 675.512523][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 675.521335][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 675.529109][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 675.641295][T24033] wg2 speed is unknown, defaulting to 1000 [ 675.722418][T24009] XFS (loop4): Quotacheck: Done. [ 675.811168][T24033] wg1 speed is unknown, defaulting to 1000 [ 675.821705][ T4279] XFS (loop4): Unmounting Filesystem [ 676.503742][T24033] chnl_net:caif_netlink_parms(): no params data found [ 676.689691][T24033] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.699345][T24033] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.713392][T24033] device bridge_slave_0 entered promiscuous mode [ 676.832125][T24033] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.840077][T24033] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.849657][T24033] device bridge_slave_1 entered promiscuous mode [ 676.917205][T24033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.046040][T24033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.075952][T24033] team0: Port device team_slave_0 added [ 677.088874][T24033] team0: Port device team_slave_1 added [ 677.163370][T24033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.182721][T24033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.245060][T24033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.270769][T24033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.278338][T24033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.310341][T24033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.329646][ T11] device hsr_slave_0 left promiscuous mode [ 677.345880][ T11] device hsr_slave_1 left promiscuous mode [ 677.352649][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.360764][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.369171][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.377030][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.385341][ T11] device bridge_slave_1 left promiscuous mode [ 677.392213][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.401626][ T11] device bridge_slave_0 left promiscuous mode [ 677.408387][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.449109][ T11] device veth1_macvtap left promiscuous mode [ 677.460081][ T11] device veth0_macvtap left promiscuous mode [ 677.466732][ T11] device veth1_vlan left promiscuous mode [ 677.472595][ T11] device veth0_vlan left promiscuous mode [ 677.595633][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 678.527432][ T11] team0 (unregistering): Port device team_slave_1 removed [ 678.599777][ T11] team0 (unregistering): Port device team_slave_0 removed [ 678.672236][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.750745][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.327824][ T11] bond0 (unregistering): Released all slaves [ 679.487444][T24033] device hsr_slave_0 entered promiscuous mode [ 679.495522][T24033] device hsr_slave_1 entered promiscuous mode [ 679.511509][T24033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 679.519991][T24033] Cannot create hsr debugfs directory [ 679.695658][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 680.822420][T24033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 680.833425][T24033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 680.851853][T24033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 680.863212][T24033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 681.033605][T24033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.054714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 681.073186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 681.091105][T24033] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.110795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 681.123215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 681.136778][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.143940][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.160112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 681.172575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 681.183288][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.190663][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.203633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 681.227434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 681.241789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 681.254303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 681.273114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 681.299478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 681.309006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 681.319877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 681.330916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 681.342349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 681.359964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 681.372957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 681.385065][T24033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 681.710650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 681.719314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 681.745839][T24033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.756033][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 681.778180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 681.791494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 681.819305][ T1086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 681.829300][ T1086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 681.842099][T24033] device veth0_vlan entered promiscuous mode [ 681.851106][ T1086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 681.863085][ T1086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 681.879951][T24033] device veth1_vlan entered promiscuous mode [ 681.913471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 681.933830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 681.943122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 681.952503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 681.966142][T24033] device veth0_macvtap entered promiscuous mode [ 681.983644][T24033] device veth1_macvtap entered promiscuous mode [ 682.004441][T24033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.016955][T24033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.027661][T24033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.038701][T24033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.051808][T24033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.060686][T11558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 682.070788][T11558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 682.084278][T11558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 682.102477][T11558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 682.115837][T24033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.132286][T24033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.143192][T24033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.163735][T24033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.181860][T24033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.193672][T11558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 682.210976][T11558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 682.224584][T24033] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.234358][T24033] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.244158][T24033] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.253494][T24033] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.374378][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.388149][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.409600][T11549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 682.437550][T11549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.448882][T11549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.459161][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 682.671234][T24152] loop8: detected capacity change from 0 to 512 [ 682.728888][T24152] EXT4-fs: Invalid uid value -1 [ 683.409499][T10365] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 683.618630][T10365] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.656364][T10365] usb 6-1: config 0 interface 0 has no altsetting 0 [ 683.683534][T10365] usb 6-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.00 [ 683.720722][T10365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.750187][T10365] usb 6-1: config 0 descriptor?? [ 683.835541][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 684.211024][T10365] input: HID 046d:c29a as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C29A.0022/input/input36 [ 684.381180][T10365] logitech 0003:046D:C29A.0022: input,hidraw0: USB HID v0.06 Keyboard [HID 046d:c29a] on usb-dummy_hcd.5-1/input0 [ 684.450210][T10365] logitech 0003:046D:C29A.0022: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 684.551681][T10365] logitech: probe of 0003:046D:C29A.0022 failed with error -1 [ 684.630146][T10365] usb 6-1: USB disconnect, device number 19 [ 684.913999][T24225] fido_id[24225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 685.042342][T24236] loop8: detected capacity change from 0 to 256 [ 685.556361][T24211] loop2: detected capacity change from 0 to 40427 [ 685.602771][T24211] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 685.634771][T24244] loop8: detected capacity change from 0 to 8192 [ 685.647068][T24211] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 685.707491][ T27] audit: type=1800 audit(2000000342.750:658): pid=24244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8192" name="file2" dev="loop8" ino=1048766 res=0 errno=0 [ 685.784262][T24211] F2FS-fs (loop2): invalid crc value [ 685.832744][T24211] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 685.845477][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.851825][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.100231][T24211] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 686.118169][T24211] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 686.346381][T24262] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 686.482545][T24271] loop0: detected capacity change from 0 to 4096 [ 686.529234][T24274] loop5: detected capacity change from 0 to 256 [ 686.610683][T24276] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 686.750842][T24271] NILFS (loop0): Segment number 18446744073709551615 to be freed is out of range [ 688.039957][T24321] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8219'. [ 688.063589][T24321] tipc: Enabling of bearer rejected, media not registered [ 688.579100][T24336] loop0: detected capacity change from 0 to 4096 [ 688.632809][T24336] EXT4-fs: Ignoring removed orlov option [ 688.748707][T24336] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 689.038147][T24033] EXT4-fs (loop0): unmounting filesystem. [ 689.306749][T24374] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8238'. [ 689.700938][T24358] loop5: detected capacity change from 0 to 32768 [ 689.811433][T24358] XFS (loop5): Mounting V5 Filesystem [ 689.916560][T24403] loop4: detected capacity change from 0 to 512 [ 689.922850][T24358] XFS (loop5): Ending clean mount [ 689.988412][T24403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 690.005427][T24403] ext4 filesystem being mounted at /1670/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 690.295830][T14988] XFS (loop5): Unmounting Filesystem [ 690.455895][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 690.816281][T24407] loop0: detected capacity change from 0 to 32768 [ 690.999852][T24407] XFS (loop0): Mounting V5 Filesystem [ 691.150068][T24407] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 691.223908][T24445] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8260'. [ 691.288815][T24407] XFS (loop0): Starting recovery (logdev: internal) [ 691.345139][T24407] XFS (loop0): Ending recovery (logdev: internal) [ 691.442663][ T9821] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 691.486217][ T9821] XFS (loop0): Unmount and run xfs_repair [ 691.492212][ T9821] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 691.504165][ T9821] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 691.520654][ T9821] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 691.531704][ T9821] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 691.547129][T24420] loop4: detected capacity change from 0 to 32768 [ 691.548049][ T9821] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 691.567896][ T9821] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 691.570000][T24420] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 691.577214][ T9821] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 691.617515][ T9821] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 691.640152][ T9821] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 691.652813][T24452] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 691.802616][T24033] XFS (loop0): Unmounting Filesystem [ 692.044329][ T6028] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 692.107470][T24471] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8269'. [ 692.473882][T24481] loop4: detected capacity change from 0 to 512 [ 692.530061][T24481] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 692.677375][T24481] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.8272: Allocating blocks 41-42 which overlap fs metadata [ 692.768700][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 692.795994][T24481] Quota error (device loop4): write_blk: dquota write failed [ 692.803461][T24481] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 692.868381][T24481] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 692.919066][T24481] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.8272: Failed to acquire dquot type 1 [ 692.964954][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 692.982015][T24481] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 692.985220][T24495] loop0: detected capacity change from 0 to 256 [ 693.020725][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 693.056247][T24468] loop2: detected capacity change from 0 to 32768 [ 693.063733][T24481] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.8272: corrupted inode contents [ 693.130505][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 693.145015][T24468] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 693.145015][T24468] [ 693.185136][T24481] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #12: comm syz.4.8272: mark_inode_dirty error [ 693.229846][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 693.280766][T24481] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.8272: corrupted inode contents [ 693.328124][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 693.379805][T24481] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.8272: mark_inode_dirty error [ 693.445094][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 693.451747][T24481] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.8272: corrupted inode contents [ 693.531222][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 693.545647][T10365] kernel write not supported for file /sg0 (pid: 10365 comm: kworker/1:16) [ 693.565118][T24481] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 693.602477][T24513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8283'. [ 693.620413][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 693.640390][T24481] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.8272: corrupted inode contents [ 693.686373][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 693.692980][T24481] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.8272: mark_inode_dirty error [ 693.746474][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 693.753189][T24481] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 693.815973][T24481] EXT4-fs (loop4): Remounting filesystem read-only [ 693.843071][T24481] EXT4-fs (loop4): 1 truncate cleaned up [ 693.849889][T24481] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 693.877210][T24521] loop0: detected capacity change from 0 to 16 [ 693.911096][T24521] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 694.043240][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 694.212437][T24531] loop8: detected capacity change from 0 to 256 [ 694.213846][T24529] loop4: detected capacity change from 0 to 1024 [ 694.286133][T24529] EXT4-fs: Invalid commit interval 2146488486, must be smaller than 21474836 [ 694.315286][T24531] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 694.619617][T24541] netlink: 'syz.2.8294': attribute type 2 has an invalid length. [ 694.947824][T10365] wiimote 0005:057E:0330.0023: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 694.986962][T10365] wiimote 0005:057E:0330.0023: New device registered [ 695.021777][T24560] wiimote 0005:057E:0330.0023: Device removed [ 695.271558][T24563] fido_id[24563]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 695.312696][T24566] loop4: detected capacity change from 0 to 4096 [ 695.412549][T24579] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 695.423705][T24578] loop8: detected capacity change from 0 to 1024 [ 696.077879][T10365] wiimote 0005:057E:0330.0023: detected device: Nintendo Wii Remote Plus (Gen 2) [ 696.238226][T10365] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0023/input/input39 [ 696.267264][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8319'. [ 696.335249][T10365] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0023/input/input40 [ 696.397811][T10365] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0023/input/input38 [ 696.477858][T24612] loop8: detected capacity change from 0 to 4096 [ 696.588656][T24615] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 697.464492][T24654] loop5: detected capacity change from 0 to 2048 [ 697.508621][T24655] loop0: detected capacity change from 0 to 4096 [ 697.515517][T24654] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 697.540448][T24654] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 697.629077][T24660] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 698.346885][T24650] loop8: detected capacity change from 0 to 32768 [ 698.369662][T24650] XFS: attr2 mount option is deprecated. [ 698.414948][ T4359] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 698.480826][T24650] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 698.503489][T24650] XFS (loop8): Mounting V5 Filesystem [ 698.625642][ T4359] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.644147][T24650] XFS (loop8): Ending clean mount [ 698.657115][ T4359] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 698.670685][T24650] XFS (loop8): Quotacheck needed: Please wait. [ 698.685040][ T4359] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 698.729630][ T4359] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.771041][ T4359] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 698.801087][T24650] XFS (loop8): Quotacheck: Done. [ 698.805838][ T4359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.926136][T20651] XFS (loop8): Unmounting Filesystem [ 699.262753][ T4359] gud 5-1:1.0: No supported pixel formats found [ 699.275351][ T4359] gud: probe of 5-1:1.0 failed with error -22 [ 699.444133][ T4359] usb 5-1: USB disconnect, device number 36 [ 699.490989][T24693] loop5: detected capacity change from 0 to 32768 [ 699.580168][ T27] audit: type=1800 audit(2000000356.620:659): pid=24693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8346" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 699.603485][T24693] ERROR: (device loop5): diAllocAG: ipimap->i_size is wrong [ 699.603485][T24693] [ 699.625528][T24693] ERROR: (device loop5): remounting filesystem as read-only [ 699.633037][T24693] ialloc: diAlloc returned -5! [ 699.835011][ T5623] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 700.028789][ T5623] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.049810][ T5623] usb 1-1: config 0 has no interface number 0 [ 700.072538][ T5623] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 700.100573][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.124582][ T5623] usb 1-1: Product: syz [ 700.138369][ T5623] usb 1-1: Manufacturer: syz [ 700.156816][ T5623] usb 1-1: SerialNumber: syz [ 700.195003][ T5623] usb 1-1: config 0 descriptor?? [ 700.203800][ T5623] usb 1-1: selecting invalid altsetting 1 [ 700.228741][ T5623] dvb_ttusb_budget: ttusb_init_controller: error [ 700.256002][ T5623] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 700.432089][T24727] loop5: detected capacity change from 0 to 4096 [ 700.495067][ T5623] DVB: Unable to find symbol stv0299_attach() [ 700.530150][T24737] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 700.690033][ T5623] DVB: Unable to find symbol tda8083_attach() [ 700.701057][ T5623] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 700.720798][ T5623] usb 1-1: USB disconnect, device number 14 [ 700.766863][T24742] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8362'. [ 701.134633][T24753] loop5: detected capacity change from 0 to 1024 [ 701.614066][T24765] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 701.788292][T24739] loop4: detected capacity change from 0 to 32768 [ 701.794812][T24769] netlink: 'syz.8.8370': attribute type 5 has an invalid length. [ 701.837077][T24739] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.8361 (24739) [ 701.922019][T24739] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 701.958304][T24739] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 702.001560][T24739] BTRFS info (device loop4): setting nodatasum [ 702.026010][T24739] BTRFS info (device loop4): force zlib compression, level 3 [ 702.033491][T24739] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 702.088503][T24739] BTRFS info (device loop4): use lzo compression, level 0 [ 702.136140][T24739] BTRFS info (device loop4): turning on flush-on-commit [ 702.168739][T24739] BTRFS info (device loop4): enabling auto defrag [ 702.176355][T24778] ALSA: mixer_oss: invalid OSS volume '' [ 702.207600][T24739] BTRFS info (device loop4): max_inline at 4096 [ 702.213949][T24739] BTRFS info (device loop4): using free space tree [ 702.412828][T24794] loop0: detected capacity change from 0 to 2048 [ 702.517603][T24803] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 702.565032][T24739] BTRFS info (device loop4): enabling ssd optimizations [ 703.171730][ T4279] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 703.443498][ T6028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (6028) [ 703.924128][T24809] loop8: detected capacity change from 0 to 32768 [ 703.966051][T24809] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 scanned by syz.8.8378 (24809) [ 704.207737][T24809] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 704.225229][T24809] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 704.276416][T24809] BTRFS info (device loop8): turning off barriers [ 704.334867][T24809] BTRFS info (device loop8): turning on async discard [ 704.370934][T24809] BTRFS info (device loop8): doing ref verification [ 704.398197][T24809] BTRFS info (device loop8): using free space tree [ 704.577208][T24869] loop2: detected capacity change from 0 to 1024 [ 704.807309][T24809] BTRFS info (device loop8): enabling ssd optimizations [ 704.954768][T11549] hfsplus: b-tree write err: -5, ino 25 [ 704.965169][T11549] hfsplus: b-tree write err: -5, ino 4 [ 704.970812][T11549] hfsplus: b-tree write err: -5, ino 2 [ 705.007540][T11549] hfsplus: b-tree write err: -5, ino 17 [ 705.349411][T20651] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 705.467629][T24894] loop5: detected capacity change from 0 to 4096 [ 705.523781][T24894] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 705.749545][T24910] loop4: detected capacity change from 0 to 512 [ 705.911972][T24910] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 705.955240][T24910] ext4 filesystem being mounted at /1695/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.173202][T24894] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 706.273835][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 706.418041][T24926] loop2: detected capacity change from 0 to 64 [ 707.139148][T24946] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8422'. [ 707.244960][T24951] loop2: detected capacity change from 0 to 256 [ 707.333722][T24951] FAT-fs (loop2): Directory bread(block 64) failed [ 707.361809][T24951] FAT-fs (loop2): Directory bread(block 65) failed [ 707.392969][T24951] FAT-fs (loop2): Directory bread(block 66) failed [ 707.432717][T24951] FAT-fs (loop2): Directory bread(block 67) failed [ 707.472388][T24951] FAT-fs (loop2): Directory bread(block 68) failed [ 707.499540][T24951] FAT-fs (loop2): Directory bread(block 69) failed [ 707.504973][T24848] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 707.517096][T24951] FAT-fs (loop2): Directory bread(block 70) failed [ 707.544194][T24951] FAT-fs (loop2): Directory bread(block 71) failed [ 707.578547][T24951] FAT-fs (loop2): Directory bread(block 72) failed [ 707.602640][T24951] FAT-fs (loop2): Directory bread(block 73) failed [ 707.705546][T24933] loop5: detected capacity change from 0 to 32768 [ 707.708147][T24848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.744223][T24933] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.8416 (24933) [ 707.770494][T24848] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 707.775359][T24958] loop8: detected capacity change from 0 to 2048 [ 707.820589][T24848] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 707.823585][T24958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 707.855376][T24848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.927106][T24848] usb 1-1: config 0 descriptor?? [ 707.940865][T24933] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 707.965805][T24848] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 708.003176][T24848] dvb-usb: bulk message failed: -22 (3/0) [ 708.005593][T24933] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 708.044311][T24848] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 708.069792][T24933] BTRFS info (device loop5): turning off barriers [ 708.090015][T24933] BTRFS info (device loop5): turning on async discard [ 708.103263][T24848] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 708.116421][T24933] BTRFS info (device loop5): doing ref verification [ 708.152361][T24848] usb 1-1: media controller created [ 708.158509][T24950] dvb-usb: bulk message failed: -22 (2/0) [ 708.170756][T24944] loop4: detected capacity change from 0 to 32768 [ 708.175469][T24933] BTRFS info (device loop5): using free space tree [ 708.191514][T24848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.239024][T24848] dvb-usb: bulk message failed: -22 (6/0) [ 708.248131][T24848] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 708.276274][T24944] JBD2: Ignoring recovery information on journal [ 708.312765][T24944] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 708.353548][T24848] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input41 [ 708.390309][T24848] dvb-usb: schedule remote query interval to 150 msecs. [ 708.390503][T24944] JBD2: bad block at offset 32 [ 708.397973][T24848] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 708.446330][T24848] usb 1-1: USB disconnect, device number 15 [ 708.488342][T24848] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 708.572818][T24944] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 708.679531][T24933] BTRFS info (device loop5): enabling ssd optimizations [ 709.061648][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 709.114755][T14988] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 709.127470][T24999] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8431'. [ 709.849020][T24993] loop2: detected capacity change from 0 to 32768 [ 709.917663][ T27] audit: type=1800 audit(2000000366.960:660): pid=24993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8429" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 709.918721][T24993] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 709.918721][T24993] [ 710.084481][T24993] ERROR: (device loop2): remounting filesystem as read-only [ 710.121204][T24993] ialloc: diAlloc returned -5! [ 710.264118][T25017] loop8: detected capacity change from 0 to 2048 [ 710.318704][T25017] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 710.434990][T25024] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 710.437243][T25017] syz.8.8437: attempt to access beyond end of device [ 710.437243][T25017] loop8: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 711.259734][T25056] loop2: detected capacity change from 0 to 64 [ 711.650484][T25070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8458'. [ 711.943999][T25075] loop0: detected capacity change from 0 to 2048 [ 712.091336][T25075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 712.140779][T25075] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 712.243371][T24033] EXT4-fs (loop0): unmounting filesystem. [ 712.305076][T10364] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 712.409278][ T9821] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 712.417182][T25094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8466'. [ 712.435359][T25055] loop5: detected capacity change from 0 to 32768 [ 712.518566][T10364] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 712.546218][T10364] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.587245][T10364] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 712.606221][T10364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.632934][T10364] hub 5-1:4.0: USB hub found [ 712.655165][ T9821] usb 9-1: Using ep0 maxpacket: 32 [ 712.670362][ T9821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.713468][ T9821] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 712.763717][ T9821] usb 9-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 712.803353][ T9821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.848451][T10364] hub 5-1:4.0: 2 ports detected [ 712.849341][ T9821] usb 9-1: config 0 descriptor?? [ 712.853398][T10364] usb 5-1: selecting invalid altsetting 1 [ 712.895999][T10364] hub 5-1:4.0: Using single TT (err -22) [ 713.283467][T10364] usb 5-1: USB disconnect, device number 37 [ 713.321650][ T9821] wacom 0003:056A:00FA.0024: unexpected long global item [ 713.347730][ T9821] wacom 0003:056A:00FA.0024: parse failed [ 713.374212][ T9821] wacom: probe of 0003:056A:00FA.0024 failed with error -22 [ 713.568111][ T9821] usb 9-1: USB disconnect, device number 13 [ 714.290650][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.300503][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.308561][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.317015][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.326375][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.344705][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.354989][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.368394][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.387421][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.401958][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.416551][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.434583][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.448591][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.457247][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.475245][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.494197][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.514570][ T4317] hid-generic 0006:0004:0009.0025: unknown main item tag 0x0 [ 714.571904][ T4317] hid-generic 0006:0004:0009.0025: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 714.861629][T25162] fido_id[25162]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 715.204951][ T9821] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 715.331596][T25187] loop5: detected capacity change from 0 to 2048 [ 715.372536][T25187] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 715.395091][ T9821] usb 3-1: Using ep0 maxpacket: 8 [ 715.402877][ T9821] usb 3-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 715.440799][ T9821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 715.469488][ T9821] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 715.501561][ T9821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.545783][ T9821] usb 3-1: config 0 descriptor?? [ 715.975685][ T9821] hid (null): invalid report_count 45596 [ 716.015820][ T9821] logitech-djreceiver 0003:046D:C534.0026: invalid report_count 45596 [ 716.024083][ T9821] logitech-djreceiver 0003:046D:C534.0026: item 0 2 1 9 parsing failed [ 716.066935][ T9821] logitech-djreceiver 0003:046D:C534.0026: logi_dj_probe: parse failed [ 716.102174][ T9821] logitech-djreceiver: probe of 0003:046D:C534.0026 failed with error -22 [ 716.205385][T10364] usb 3-1: USB disconnect, device number 32 [ 716.470625][T25226] loop4: detected capacity change from 0 to 4096 [ 716.533764][T25226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 716.570693][T25226] EXT4-fs (loop4): Test dummy encryption mode enabled [ 716.611075][T25226] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 716.627971][T25226] System zones: 0-5 [ 716.645088][T25226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 716.885154][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 717.091098][T25242] netlink: 822 bytes leftover after parsing attributes in process `syz.4.8520'. [ 717.112076][T25244] loop8: detected capacity change from 0 to 256 [ 717.225962][T25216] loop5: detected capacity change from 0 to 32768 [ 717.442873][T25216] XFS (loop5): Mounting V5 Filesystem [ 717.558518][T25216] XFS (loop5): Ending clean mount [ 717.817969][T14988] XFS (loop5): Unmounting Filesystem [ 717.978698][T25274] CIFS mount error: No usable UNC path provided in device string! [ 717.978698][T25274] [ 718.005296][T25274] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 719.477074][T25321] loop0: detected capacity change from 0 to 4096 [ 719.600401][T25321] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 719.625819][T25321] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 719.683663][T25321] EXT4-fs warning (device loop0): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 719.850519][T24033] EXT4-fs (loop0): unmounting filesystem. [ 719.906151][T25334] loop4: detected capacity change from 0 to 8192 [ 719.984091][T25334] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 721.256175][T25352] loop0: detected capacity change from 0 to 32768 [ 721.320664][T25352] JBD2: Ignoring recovery information on journal [ 721.524615][T25352] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 721.556817][T25395] loop4: detected capacity change from 0 to 2048 [ 721.669689][T25401] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 721.684354][ T4285] [ 721.684380][ T4285] ====================================================== [ 721.684388][ T4285] WARNING: possible circular locking dependency detected [ 721.684396][ T4285] syzkaller #0 Not tainted [ 721.684408][ T4285] ------------------------------------------------------ [ 721.684414][ T4285] kworker/u5:5/4285 is trying to acquire lock: [ 721.684426][ T4285] ffff888075e10428 (&hdev->lock){+.+.}-{3:3}, at: discov_off+0x86/0x1f0 [ 721.684484][ T4285] [ 721.684484][ T4285] but task is already holding lock: [ 721.684491][ T4285] ffffc90003e17d00 ((work_completion)(&(&hdev->discov_off)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 721.684536][ T4285] [ 721.684536][ T4285] which lock already depends on the new lock. [ 721.684536][ T4285] [ 721.684542][ T4285] [ 721.684542][ T4285] the existing dependency chain (in reverse order) is: [ 721.684549][ T4285] [ 721.684549][ T4285] -> #1 ((work_completion)(&(&hdev->discov_off)->work)){+.+.}-{0:0}: [ 721.684577][ T4285] __flush_work+0x122/0xac0 [ 721.684594][ T4285] __cancel_work_timer+0x3f4/0x560 [ 721.684610][ T4285] mgmt_index_removed+0x269/0x310 [ 721.684626][ T4285] hci_unregister_dev+0x2ee/0x500 [ 721.684650][ T4285] vhci_release+0x7f/0xd0 [ 721.684671][ T4285] __fput+0x20a/0x8b0 [ 721.684688][ T4285] task_work_run+0x1d0/0x260 [ 721.684708][ T4285] do_exit+0x9d5/0x2570 [ 721.684730][ T4285] do_group_exit+0x229/0x2e0 [ 721.684753][ T4285] __x64_sys_exit_group+0x3b/0x40 [ 721.684780][ T4285] do_syscall_64+0x4c/0xa0 [ 721.684798][ T4285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 721.684824][ T4285] [ 721.684824][ T4285] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 721.684850][ T4285] __lock_acquire+0x2d18/0x7c40 [ 721.684872][ T4285] lock_acquire+0x1bb/0x4a0 [ 721.684893][ T4285] __mutex_lock+0x12d/0xae0 [ 721.684909][ T4285] discov_off+0x86/0x1f0 [ 721.684931][ T4285] process_one_work+0x8ab/0x1160 [ 721.684950][ T4285] worker_thread+0xaf5/0x12a0 [ 721.684968][ T4285] kthread+0x29d/0x330 [ 721.684982][ T4285] ret_from_fork+0x1f/0x30 [ 721.685002][ T4285] [ 721.685002][ T4285] other info that might help us debug this: [ 721.685002][ T4285] [ 721.685009][ T4285] Possible unsafe locking scenario: [ 721.685009][ T4285] [ 721.685015][ T4285] CPU0 CPU1 [ 721.763641][T25395] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 721.766511][ T4285] ---- ---- [ 721.766519][ T4285] lock((work_completion)(&(&hdev->discov_off)->work)); [ 721.766536][ T4285] lock(&hdev->lock); [ 721.766550][ T4285] lock((work_completion)(&(&hdev->discov_off)->work)); [ 721.766564][ T4285] lock(&hdev->lock); [ 721.766576][ T4285] [ 721.766576][ T4285] *** DEADLOCK *** [ 721.766576][ T4285] [ 721.766581][ T4285] 2 locks held by kworker/u5:5/4285: [ 721.766593][ T4285] #0: ffff88802c9f0938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 721.766656][ T4285] #1: ffffc90003e17d00 ((work_completion)(&(&hdev->discov_off)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 721.896371][T25395] Remounting filesystem read-only [ 721.898141][ T4285] [ 721.898141][ T4285] stack backtrace: [ 721.898152][ T4285] CPU: 0 PID: 4285 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 721.898173][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 721.898186][ T4285] Workqueue: hci0 discov_off [ 722.021550][ T4285] Call Trace: [ 722.024869][ T4285] [ 722.027926][ T4285] dump_stack_lvl+0x188/0x24e [ 722.032668][ T4285] ? load_image+0x410/0x410 [ 722.037222][ T4285] ? show_regs_print_info+0x12/0x12 [ 722.042468][ T4285] ? print_circular_bug+0x12b/0x1a0 [ 722.047718][ T4285] check_noncircular+0x296/0x330 [ 722.052708][ T4285] ? deref_stack_reg+0x18e/0x220 [ 722.057697][ T4285] ? add_chain_block+0x9b0/0x9b0 [ 722.062697][ T4285] ? lockdep_lock+0xf1/0x1f0 [ 722.067333][ T4285] ? unwind_next_frame+0x1769/0x1fd0 [ 722.072671][ T4285] ? _find_first_zero_bit+0xd2/0x100 [ 722.078112][ T4285] __lock_acquire+0x2d18/0x7c40 [ 722.083054][ T4285] ? stack_trace_snprint+0xe0/0xe0 [ 722.088208][ T4285] ? check_noncircular+0x189/0x330 [ 722.093410][ T4285] ? verify_lock_unused+0x140/0x140 [ 722.098658][ T4285] ? lockdep_unlock+0x142/0x2e0 [ 722.103641][ T4285] ? lockdep_lock+0x1f0/0x1f0 [ 722.108381][ T4285] ? add_lock_to_list+0x191/0x280 [ 722.113457][ T4285] lock_acquire+0x1bb/0x4a0 [ 722.118006][ T4285] ? discov_off+0x86/0x1f0 [ 722.122560][ T4285] ? __might_sleep+0xd0/0xd0 [ 722.127193][ T4285] ? read_lock_is_recursive+0x10/0x10 [ 722.132693][ T4285] ? verify_lock_unused+0x140/0x140 [ 722.137943][ T4285] __mutex_lock+0x12d/0xae0 [ 722.142492][ T4285] ? discov_off+0x86/0x1f0 [ 722.146970][ T4285] ? discov_off+0x86/0x1f0 [ 722.151442][ T4285] ? mutex_lock_nested+0x10/0x10 [ 722.156424][ T4285] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 722.163144][ T4285] discov_off+0x86/0x1f0 [ 722.167440][ T4285] ? send_cancel_destroy+0x20/0x20 [ 722.172605][ T4285] ? _raw_spin_unlock_irq+0x1f/0x40 [ 722.177938][ T4285] ? process_one_work+0x7b4/0x1160 [ 722.183120][ T4285] process_one_work+0x8ab/0x1160 [ 722.188107][ T4285] ? worker_detach_from_pool+0x240/0x240 [ 722.193788][ T4285] ? _raw_spin_lock_irq+0xb7/0xf0 [ 722.198955][ T4285] ? _raw_spin_lock_irqsave+0x100/0x100 [ 722.204568][ T4285] ? wq_worker_running+0x97/0x190 [ 722.209728][ T4285] worker_thread+0xaf5/0x12a0 [ 722.214462][ T4285] kthread+0x29d/0x330 [ 722.218579][ T4285] ? worker_clr_flags+0x1a0/0x1a0 [ 722.223646][ T4285] ? kthread_blkcg+0xd0/0xd0 [ 722.228288][ T4285] ret_from_fork+0x1f/0x30 [ 722.232771][ T4285] [ 722.235865][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.246004][ T4279] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 722.257993][T24033] ocfs2: Unmounting device (7,0) on (node local) [ 722.479846][T25403] loop5: detected capacity change from 0 to 32768 [ 722.504757][T25403] JBD2: Ignoring recovery information on journal [ 722.567332][T25418] loop0: detected capacity change from 0 to 64 [ 722.591027][T25403] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 722.616757][T24033] hfs: node 4:3 still has 2 user(s)! [ 722.660293][T14988] ocfs2: Unmounting device (7,5) on (node local)