last executing test programs: 16m35.678343712s ago: executing program 0 (id=2072): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@multiplanar_mmap={0x2, 0x8, 0x4, 0x20, 0xc, {}, {0x4, 0xc, 0x7, 0x3, 0x8, 0x8, "887fb4da"}, 0x9cd, 0x1, {0x0}, 0x1}) 16m35.38079752s ago: executing program 0 (id=2076): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffc0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16m34.970442172s ago: executing program 0 (id=2082): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0xc010, &(0x7f0000000440)=',pd_3\xd4\xa9\x93\xae\x1c>\xe4\xcf\x05l%\xb0\xa2\xfaW*0^\x16\xad?0\xbe\xc7q/.\x93\x1d\xe3)\x88j{\xf6u\x89\xdc\xeb\xd9\xe9\x80\x8c\xfb\'\xd6\xde/#\xb1\xaa\xdc}\x88\xecc\x97\xbb\xa4\x91!0\x89\x92\xf6[Q\xde\xb1\x88\x87\xce\xb3\xeb+\x9a\xe7\xca\xea\xf8\f\xf9\xab\xccrH\xb9\x8eo\xadr\x89\a\xb6N6\x80J\x9e\x9b\xbe\xad\x96\x93\x9e\xed\x8bo\xe7\xfd\xaf\xe7U\xe5\xe0\xb1\xaf\x1c\xd5\x8cL\xaf`\xea\v\xc3\xd6\xeeJbv4\xd8\xc4\rw.0\xbd\xe9D`\xc9ZoBx\xa5\xf6e\xf9d\x95\xa0\x0f\x9e\x81\x15\xce\xd7\xb3\xd8\xf9\x03\xf2\xe4\x91\xbb\xb4\x99=\xd9\\\xc9\x93\xd9\x9d\x17\x1b(\x17E?O)\xa5\xf9\x92cQ\xa6O>\xbeE\"N\xb7\x88\xabpx\x9f\xc8\xeeA4D,\xea5n\xe9\xb2\"W]r\x94\xe5\xf9\f\xc2\xd9\xf9)\x95xi\x83\xae0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014000c80100003"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 41.153895016s ago: executing program 3 (id=12725): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 40.957263712s ago: executing program 3 (id=12727): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a04447, &(0x7f0000000640)=ANY=[], 0x8, 0x1e6, &(0x7f0000000400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@random={'user.', 'user.syz\x00'}, 0x0, 0x0) 40.747066547s ago: executing program 3 (id=12728): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd700005000000020000000900010073797a3000000000090003"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 34.479848522s ago: executing program 3 (id=12761): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 34.011634485s ago: executing program 35 (id=12761): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 7.126876112s ago: executing program 7 (id=12869): unshare(0x28000600) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 6.960094566s ago: executing program 6 (id=12871): recvmmsg(0xffffffffffffffff, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000004200)=[{0x0}, {&(0x7f0000001e40)=""/219, 0xdb}], 0x2}, 0x1d52a}], 0x1, 0x2, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 6.84714556s ago: executing program 7 (id=12872): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) 6.021259453s ago: executing program 6 (id=12877): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0d000000010001", 0x7) 5.814401149s ago: executing program 6 (id=12878): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 4.909360714s ago: executing program 5 (id=12880): r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) 4.588207533s ago: executing program 7 (id=12881): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000380)={0x1, 0x0, 0x6, &(0x7f0000000340)={0x15, "732a5473c2bf273690bb713bd646baab088d08b240d1e9ee96e13c49e155462c86"}}) 4.547962434s ago: executing program 5 (id=12882): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x9}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x4, 0x34565559, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x2, 0x1, 0x6}}) 3.60569712s ago: executing program 6 (id=12883): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) 2.576146919s ago: executing program 6 (id=12888): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000002200)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@gid}, {@uid}, {@discard_size={'discard', 0x3d, 0x2}}, {@usrquota}, {}, {@noquota}, {@discard}]}, 0x1, 0x6142, &(0x7f0000009100)="$eJzs3c1vHGcdB/Df7JtfQtKoh6pECLlteCmleS0hUKDpAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqqVON/TzOeLKbtet4Z+35fCRn5rfPzO4z/u54dzMz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/+0U/PFxFx7TfphpMRX4h+RC9iqapXImJp5WRefhARL8Zmc7wQEcOFiGr9zX+ei3gjIj4+EfHw0b3V6uYLu+zHD//6rz/97NhP/vmX4dn//+1O/81Jy929+/v//f3+/rYZAAAAuqYsy7JIH/NPpc/3vbY7BQDMRH79L5N8u3ru6vU5649arVarD2FdV453v15ExHp9neo9g8PxAHDIrMcnbXeBFsm/0wYRcaztTgBzrWi7AxyIh4/urRYp36L+erCy1Z7PBdmR/3qxfX3HpOk0zXNMZvX82oh+PD+hP0sz6sM8yfn3mvlf22ofpeUOOv9ZmZT/aOvSp87J+feb+Tccnfx7Y/Pvqpz/YE/59+UPAAAAAABzLP///8mWj/8u7H9TduVpx39XZtQHAAAAAAAAAHjW9jv+3zbj/wEAAMDcqj6rV/5w4vFtk76Lrbr9ahFxvLE80DHpYpnltvsBAAAAAAAAAAAAAF0y2DqH92oRMYyI48vLZVlWP3XNeq/2u/5h1/Xthy5r+488AABs+fhE41r+ImIxIq6m7/obLi8vl+Xi0nK5XC4t5Pezo4XFcqn2uTZPq9sWRrt4QzwYldWdLdbWq5v2eXlae/P+qscalf1ddGw2WgwcACJi69XooVekI6Ysn4u23+VwONj/jx77P7vR9vMUAAAAOHhlWZZF+jrvU+mYf6/tTgEAM5Ff/5vHBdRqtVqtVh+9uq4c7369iIj1+jrVewbD8QPAIbMen7TdBVok/04bRMSLbXcCmGtF2x3gQDx8dG+1SPkW9deDNL57PhdkR/7rxeZ6ef1x02ma55jM6vm1Ef14fkJ/XphRH+ZJzr/XzP/aVvsoLXfQ+c/KpPyr7TzZQn/alvPvN/NvODr598bm31U5/8Ge8u/LHwAAAAAA5lj+//+Tc3X8d/R5N2eqpx3/XTmwRwUAAAAAAACAg/Xw0b3VfN1rPv7/pTHLuf7zaMr5F/LvpJx/r5H/1xvL9WvzD95+nP9/H91b/fOd/3wxT3eb/0KeKdIzq0jPiCI9UjFI0/1s3ZM2hv1R9UjDotcfpHN+yuG7cSNuxlqc27FsL/0+NtuPP3lfVU+Hm+1lf2v9CzvaB9vt+f4v7mgfpjOdyqXcfiZW45dxM97ZbK/aFnZsf/6lPLY45fdTTmnP+fft/52U8x/Ufqr8l1N70ZhWHnzUe2K/r0/HPc6VG1/+3bmD35ypNqK/vW111fa93EJ/Nn8nx0bx69trt87cvX7nzq3zkSY7br0QafKM5fyH6Wf77/8rW+357359f33w0WjP+c+LjRhMzP+V2ny1va/OuG9tyPmP0k/O/53UPn7/P8z5T97/X2uhPwAAAAAAAAAAAAAAAPA0ZVluXiJ6JSIupet/2ro2EwCYrSvp2yXKJN8+q7o/48dTqw95XcxZf2Zaf1rOV3/U6sNY15XjvVUvIuIf9XUuRcRvx90ZADDPPo2If7fdCVoj/w7L3/dXTU+33Rlgpm5/8OHPr9+8uXbrdts9AQAAAAAAAAA+rzz+50pt/OfTZVnebyy3Y/zXt2Nlv+N/bg9kvT3A6ISBqvt736an2eiN+r3acOMvxaTxv4fbc4/bzz/RtScG5G4YTmkfTWlfmNK+OKV97IUeNTn/l2rjnZ+OiFON4de7MP5rc8z7Lsj5v1x7Plf5f62xXD3/8o+HOf/ejvzP3nn/V2dvf/Dh6zfev/7e2ntrv7h4/vy5i5cuXb58+ey7N26undv6t8UeH6ycfx772nmg3ZLzz5nLv1ty/l9Jtfy7Jef/1VTLv1ty/vn9nvy7JeefP/vIv1ty/q+mWv7dkvP/Rqrl3y05/9dSLf9uyfl/M9V7zH/afz8z53L+r6fa/t8tOf8zqZZ/t+T8z6Z6l/kvHXS/mI2cfz7CZf/vlpx/PrNB/t2S87+Qavl3S87/Yqrl3y05/zdSLf9uyfl/K9Xy75ac/6VUy79bcv7fTrX8uyXnfznV8u+WnP93Ui3/bsn5fzfV8u+WnP+bqZZ/t+T8v5fqPeX/jK/NY/Zy/t9Ptf2/W3L+P0i1/Lsl5/9WquXfLY+//9+MGTNm8kzbf5kAAAAAAAAAAAAAgKZZnE7c9jYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIddb3Az+zN6+dm4GQv5O/gbVjjHE22fUlvtC6mHBtuJVAUtJLbNe7dhZ8i9cuSRrJjgIlEkZFFW3Di7aAojZvKqwqL2gVUF6gVpUqkfYFfYOoUHkRVQEFpEptFbLVnHmeZ2dmZ2d2veP1zDmfj5T84pkzc86ceWZ2v+t8dwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAepveO/3FSpZl1X/yf63Psuur/712bH1+2buu9RECAAAAK/XL/N+v3pQuOLiEG9Vt849v/f7zc3Nzc9mnB/9k+Ktzc+mKsSwbXpNl+XXR5R8/WKnfJngqG60M1P15oMPuBztcP9Th+uEO1490uH5Nh+tHO1y/4AQssLb285j8zrbk/7m+dkqzm7Ph/LotLW71VGXNwED8WU6ukt9mbvhYNpOdyKazyYbta9tW8u1f2FTd14eyuK+Bun1trK6Qnz9xNB5DJZzjLQ37mr/P6KfvycZ+8fMnjv7VuVdubTU7noaG+6sd57bN1eP8fLikdqyVbE06J/E4B+qOc2OL52Sw4Tgr+e2q/918nK8u8TgH5w9zVTU/56PZQP7fL+Xnaaj+x3rpPG0Ml/337VmWXZw/7OZtFuwrG8jWNVwyMP/8jNZWZPU+qkvpjdnQstbppiWs0+qc2tK4TptfE/H53xRuN7TIMdQ/TT99cqTueX9t7krWaVR91Iu9VprXYLdfK72yBuO6eCl/0E+3XINbwuN/Yuvia7Dl2mmxBtPjrluDmzutwYGRwfyY05NQyW8zvwZ3NGw/mO+pks+Xt7ZfgxPnTp6ZmH3s8TtnTh45Pn18+tSuHTsmd+3Zs2/fvoljMyemJ2v/vsKz3fvWZQPpNbA5nLv4GnhH07b1S3XuGyML3n+v9HU42uZ1uL5p226/DoeaH1xldV6QC9d07bXxqepJH700kC3yGsufn+0rfx2mx133Ohyqex22/JrS4nU4tITXYXWbM9uX9j3LUN0/rY5h8a8FK1uD6+vWYPP3I81rsNvfj/TKGhwN6+KH2xf/WrAxHO/T48v9fmRwwRpMDze891QvSd/vj+7LR6t1eVv1iutGsvOz02fvevTIuXNnd2RhrIo31a2V5vW6ru4xZQvW68Cy1+vBmbc+fVuLy9eHczV6Z/Vfo4s+V9Vtdt/V/rnKv7q1Pp8Nl+7Mwuiy1T6frb6aV8/nSJZ97XtP3vedJ7723kXPZzVvfn5i5d+Lp1xa9/47vMj7b8z9r9f2l+7qqcHhodrrdzCdneGG9+PGp2oof++q5Pt+dWJp78fD4Z/Vfj++uc378Yambbv9fjzc/ODi+3Gl0087Vqb5+RwN6+TEZPv34+o2G3Yud00OtX0/vj3MSjj/7wxJIeWiurWz2LpN+xoaGg6PayjuoXGd7mrYfjhks+q+ntt5Zet02+21+xpMj27eaq3TsaZtu71O08++FlunlU4/fbsyzc/naFgXN+9qv06r27y4e+XvnWvjf9a9d450WoPDgyPVYx5OizB/v8/m1sY1eFd2NDudncim8mtH8vVUyfc1fvfS1uBI+Ge13ys3tFmD25q27fYaTF/HFlt7laGFD74Lmp/P0bAunrm7/RqsbvO+vd393nVbuCRtU/e9a/PP1xb7mddtTafpaq2VoXCc39vb/mez1W1O7Ftuzmx/nu4Il1zX4jw1v34Xe01NZatznjaE43xl3+LnqXo81W2+un+J6+lglmUXHrkn/3lv+PuVvz3/g+cb/t6l1d/pXHjknp/dcOwflnP8APS/12tjXe1rXd3fTC3l7/8BAACAvhBz/0CYifwPAAAAhRFzf/y/whP5HwAAAAoj5v6hMJOS5P8N73tl5vULWWrmzwXx+nQa7q1tFzuuk+HPY3Pzqpff8+z0f/39haXteyDLstfu/YOW22+4Nx5XzVg4zsvvb7x8gefvXNK+D99/Ie23vr/+9XD/8fEsdRm0quBOZln2wk1fzvcz9uClfL547+F83nfx6aeq27y6v/bnePuX31Tb/s9D+ffgsSMNt385nIefhDn54dbnI97uW5feuXHvA/P7i7erbL4xf9jPPFS73/h7cr7yVG37eJ4XO/7vfOm5b1W3f/TtrY//wkDr438u3O+zYf7PW2rb1z8H1T/H230hHH/cX7zdXd/8bsvjv/zF2vZnPlDb7nCYcf/bwp+3fOCVmfrz9WjlSMPjyj5Y2y7uf/IHf5RfH+8v3n/z8Y8eutRwPprXx4v/Wrufiabt4+VxP9HfNe2/ej/16zPu/7k/PNxwnjvt//J9L7+ler/N+7+jabszj2zP9z9/f42/sekvvvDllvuLx3Pwb840PJ6Dnwiv47D/Zx4K6zFc/7+Xa/fX/NsVDn+i8f0nbv/19RcaHk/0oV/U9n/53cfzuWZ07brrrr/hxotvq567LHtpTe3+Ou3/+F+ebjj+b9xSOx/x+tjRb97/YuL+z35u/NTp2fMzU+msPnFT/rtzPlI7nni8N4X31uY/Hzp97uHps2OTY5NZNlbcX6F3xb4Z5s9q42L7recWvINuvz88n7f92Qvrtv7Ll+Ll//ap2uWXPlz7uvWOsN1XwuXrw/O3vP0v9MymW/LXd+XFcIRzC39f8Eps3PKf+5a0YXj8zd8XxPV+5s0P5+ehel3+dSO+rld4/D+aqt3Pt8N5nQu/mXnzLfP7q98+/m6ES5+svd5XfP7C21x8Xv86PN8f/Unt/uNxxcf7o/B9zHc3NL7fxfXx7QsDzfef/xaPi+H9JLtYuz5uFc/3pVdvaXl48feQZBdvzf/8x+l+bl3Ww1zM7GOzEydmTp1/dOLc9Oy5idnHHj908vT5U+cO5b/L89BnOt1+/v1pXf7+NDW9Z3eWv1udro2r7Fof/5n7j07tndw6NX3syPlj5+4/M332+NHZ2aPTU7Nbjxw7Nv25TrefmTqwY+f+XXt3jh+fmTqwb//+XfvHZ06drh5G7aA62DP52fFTZw/lN5k9sHv/jrvv3j05fvL01PSBvZOT4+c73T7/2jRevfXvj5+dPnHk3MzJ6fHZmcenD+zYv2fPzo6/DfDkmWOzYxNnz5+aOD87fXai9ljGzuUXV7/2dbo9xTT777XvZ5tVar+IL/v4HXvS72etevbJRe+qtknTLxB9Jfwumn96w5l9S/lzzP3DYSYlyf8AAABQBjH3j4SZyP8AAABQGDH3rwkzkf8BAACgMGLuHw0zKUn+L1z/f8OFJe1f/1//v/586f+XrP//yV7r/9feL/T/u2Ol/Xv9/0D/X/9f/1//X/+fLui1/n/M/WuzrJT5HwAAAMog5v51YSbyPwAAABRGzP3XhZnI/wAAAFAYMfdfH2ZSkvyv/3+1+/+D+v/6//r/cV3q/+v/rwL9//b0/zvQ/5/IytX/v9jN49f/1/9noV7r/8fcf0OYSUnyPwAAAJRBzP03hpnI/wAAAFAYMfffFGYi/wMAAEBhxNy/PsykJPlf/9/n/+v/6//r/7fev/5/f9L/b0//vwP9f5//r/+v/09X9Vr/P+b+N4SZlCT/AwAAQBnE3P/GMBP5HwAAAHrP0JXdLOb+N4WZLMj/V7gDAAAA4JqLuf/mrKkIXpK//9f/1//X/9f/1/9vvf+l9/8HM/3/3qH/357+fwf6//r/+v/6/3RVr/X/89yfjWZvDjMpSf4HAACAMoi5/5YwE/kfAAAACiPm/v8XZiL/AwAAQGHE3L8hzKQk+V//X/9f/1//X/+/9f59/n9/0v9vT/+/A/1//X/9f/1/uqrX+v8x998aZlKS/A8AAABlEHP/bWEm8j8AAAAURsz9/z/MRP4HAACAwoi5f2OYSUnyv/5/j/f/Y3NU/1//X/9f/1//f0n0/9vT/+9A/1//X/9f/5+u6rX+f8z9bwkzKUn+BwAAgDKIuf+tYSbyPwAAABRGzP1vCzOR/wEAAKAwYu4fCzMpSf7X/+9S/3/LDQsu8/n/+v9pfYSp/6//r/9/9en/t6f/34H+v/6//r/+P13Va/3/mPs3hZmUJP8DAABAGcTcvznMRP4HAACAwoi5//YwE/kfAAAACiPm/i1hJiXJ//r/Pf75//r/+v/6//r/+v/Lov/fnv5/B/r/+v/6//r/dFWv9f9j7n97mElJ8j8AAACUQcz9W8NM5H8AAAAojJj73xFmIv8DAABAYcTcvy3MpCT5X/9f/1//X/9f/7/1/vX/+5P+f3v6/x3o/+v/6//r/9NVvdb/j7n/nWEmJcn/AAAAUAYx928PM5H/AQAAoDBi7r8jzET+BwAAgMKIuX88zKQk+V//X/9f/1//X/+/9f71//uT/n97+v8d6P/r/+v/6//TVb3W/4+5/84wk5LkfwAAACiDmPvvCjOR/wEAAKAwYu6fCDOR/wEAAKAwYu6fDDMpSf7X/9f/1//X/19W//9t8/er/1+j/99b9P/b0//vQP9f//+a9/+H9f8plF7r/8fcvyPMpCT5HwAAAMog5v6dYSbyPwAAABRGzP27wkzkfwAAACiMmPt3h5mUJP/r/+v/6//r//v8/9b71//vT/r/7XW//x8fov6//r/+v8//1/9noV7r/8fcf3eYSUnyPwAAAJRBzP17wkzkfwAAACiMmPv3hpnI/wAAAFAYMffvCzMpSf7X/9f/1//X/9f/b71//f/+pP/fns//70D/X/9f/1//n67qtf5/zP37w0xKkv8BAACgDGLuf1eYifwPAAAAhRFz/6+Emcj/AAAAUBgx9/9qmElJ8r/+v/6//r/+v/5/6/3r//envu3/174M6//r/+v/9/Hx6//r/7NQr/X/Y+4/EGZSkvwPAAAAZRBz/6+Fmcj/AAAAUBgx9787zET+BwAAgMKIuf9gmElJ8r/+v/6//r/+v/5/6/3r//envu3/ByXr/480X6D/r//fz8ev/6//z0K91v+Puf89YSYlyf8AAABQBjH33xNmIv8DAABAYcTc/94wE/kfAAAACiPm/veFmZQk/+v/6//r/+v/6/+33r/+f3/S/2+vx/r/C+j/6//38/Hr/+v/s1Cv9f9j7n9/mElJ8j8AAACUQcz9Hwgzkf8BAACgMGLu/2CYifwPAAAAhRFz/4fCTEqS//X/9f/1//X/9f9b71//vz/p/7en/9+B/n/B+v9jN+j/6/9ztbRKQAtdWf//+tcW3eEK+/8x9/96mElJ8j8AAACUQcz994aZyP8AAABQGDH3fzjMRP4HAACAwoi5/yNhJiXJ/yvq/4/o/0f6/43Hr//fen3o/+v/6/9fffr/7fVZ//+XN4bL9f9r9P97+/h7sv//48X6/3Nrmm+v/8/VcGX9/5a60v+Puf+jYSYlyf8AAABQBjH3fyzMRP4HAACAwoi5/+NhJvI/AAAAFEbM/b8RZlKS/O/z/6vHMd9e1v/X/88v0P/X/9f/71v6/+31Wf/f5/830f/v7ePvyf6/z//nGuu1/n/M/Z8IMylJ/gcAAIAyiLn/vjAT+R8AAAAKI+b+T4aZyP8AAABQGDH3fyrMpCT5X//f5//r/+v/6/+33r/+f3/S/29P/78D/X/9/17r//+H/j/9rdf6/zH33x9mUpL8DwAAAGUQc/8DYSbyPwAAABRGzP2/GWYi/wMAAEBhxNz/6TCTkuR//f9+6f+P6f/r/+v/Nz0e/X/9/1b0/9vT/+9A/1//v9f6/z7/nz7Xa/3/mPsfDDNZev4fXfKWAAAAwDURc/9vhZmU5O//AQAAoAxi7v/tMBP5HwAAAAoj5v7fCTMpSf7X/++X/r/P/8/0//X/mx6P/r/+fyur1/+P7zz6//r/+v+R/r/+v/4/zXqt/x9z/++GmZQk/wMAAEAZxNz/UJiJ/A8AAAB9odX/k90s5v5DYSbyPwAAABRGzP2Hw0xKkv/1//X/9f97tP//p5v/+Yff/9jhHfr/+v/6/8uyqp//X33x+/x//X/9/0T/X/9f/59mvdb/j7n/SJhJSfI/AAAAlEHM/b8XZiL/AwAAQGHE3H80zET+BwAAgMKIuX8qzKQk+V//X/9f/79H+v+VSpYV5PP/4/nQ/2/Utf5/fNPV/29pVfv/D8z3xPX/l9v/H2l5qf6//n8/H7/+v/4/C/Va/z/m/ukwk5LkfwAAACiDkPsHjtXm/BXyPwAAABRGzP3Hw0zkfwAAACiMmPsfDjMpSf7X/9f/1//vkf5/8+f/93H/3+f/t+bz/1eH/n97vdP/b03/X/+/n49f/1//n4V6rf8fc/9MmElJ8j8AAACUQcz9nwkzkf8BAACgMGLu/2yYifwPAAAAhRFz/4kwk5Lkf/1//X/9f/1//f/W+9f/70/6/+3p/3eg/6//r/+v/09X9Vr/P+b+k2EmJcn/AAAAUAYx958KM5H/AQAA+D/27qPJ0ru64/gde2TPlF6AF95o71fg0sKu8s5+AV5444Vd5fLCsi0HskYgkgCRs0DkLIIEQiSRk0QSiIzIGUQQWYShqD7nzHTP7ef2DLenn+d/Pp/NsWcYbkM1kn7SfOvPMHL3XxG32P8AAAAwjNz9/xm3NNn/+n/9/7D9/9/o//f7fP2//n9k+v9p+v8N9P/6f/2//p+tmlv/n7v/v+KWJvsfAAAAOsjd/99xi/0PAAAAw8jdf2XcYv8DAADAMHL3/0/c0mT/7+n/j6169v+Z8er/R+r/vf+/7+fr//X/I7u4/f/Vf/gjn/5f/6//D/p//b/+n73m1v/n7v/fuKXJ/gcAAIAOcvf/X9xi/wMAAMAwcvf/f9xi/wMAAMAwcvffL25psv+9/+/9f/2//l//v/7z9f/L5P3/aZ36/yvvuvQ/7r3lL289n8/X/+v/9f/6f7Zrbv1/7v77xy27h9/f7f3rUQAAAGA5cvc/IG5p8s//AQAAoIPc/Q+MW+x/AAAAGEbu/gfFLU32v/5f/6//1//r/9d/vv5/mfT/0zr1/xfy+fp//b/+X//Pds2t/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBi5+6+KW+x/AAAAGEbu/lNxS5P9r/8//P7/t/p//X9c/b/+X/9/+PT/0/T/G+j/9f/6f/0/WzW3/j93/9VxS5P9DwAAAB3k7n9o3GL/AwAAwDBy9z8sbrH/AQAAYBi5+6+JW5rsf/2/9//1//p//f/6z9f/L5P+f9rF7//X/Rlyf/r/xff/l+j/9f/6f852nv3/fRN/2N5K/5+7/+FxS5P9DwAAAB3k7n9E3GL/AwAAwDBy9z8ybrH/AQAAYBi5+x8VtzTZ//p//b/+X/+v/1//+fr/ZdL/T5vN+//Hjq/9Yf3/4vt/7//r//X/7DK39/9z9z86bmmy/wEAAKCD3P3Xxi32PwAAAAwjd/9j4hb7HwAAAIaRu/+xcUuT/a//1//r//X/+v/1nz/V/9961ten/58X/f+02fT/+9D/6/+X/PXr//X/nGtu/X/u/sfFLU32PwAAAHSQu/+6uMX+BwAAgGHk7n983GL/AwAAwDBy9z8hbmmy/9f3/2d+Xv9/MPr/3V+//n/998e2+v/8d9T/T/b/f+v9/570/9P0/xvo//X/+v/9+v+Tm369/p915tb/5+5/YtzSZP8DAABAB7n7nxS32P8AAAAwjNz9T45b7H8AAAAYRu7+p8QtTfa/9//1//r/5fX/3v/fcZTv/68uev9/XP9/QPr/afr/DfT/+n/9v/f/2aq59f+5+58atzTZ/wAAANBB7v6nxS32PwAAACzD2b93YO9vKA25+58et9j/AAAAMIzc/c+IW5rsf/2//l//r//v3f+fWEj/7/3/g9L/T9P/b3C0/f+xQfv/44P1/zfs9+vn0P9fpf9nZnb1/7ed+fGj6v9z9z8zbmmy/wEAAKCD3P3PilvsfwAAABhG7v5nxy32PwAAAAwjd//1cUuT/X/o/f/J/T9b/6//1//r/4++/1/K+//6/4PS/0/T/2/g/X/v/3v/X//PVu3q/89yVP1/7v7nxC1N9j8AAAB0kLv/uXGL/Q8AAADDyN1/Q9xi/wMAAMAwcvc/L25psv+31P9ff+01f+39/z30//r/vd8f+n/9v/7/8On/p+n/N9D/6//1//p/tmpu/X/u/ufHLU32PwAAAHSQu/8FcYv9DwAAAMPI3f/CuMX+BwAAgGHk7n9R3NJk/x/6+/8TOvT/+eP6f/3/Sv+v/9f/XxRt+/9j6/5MdK59+v87/u3UP+z+Ef2//l//r//X/7MFs+j/T5/5q8vc/S+OW5rsfwAAAOggd/9L4hb7HwAAAIaRu/+lcYv9DwAAAMPI3f+yuGWQ/X9iw8/r/73/r//X/+v/13++/n+Z2vb/B+T9/w30//p//b/+n62aRf9/1v+fu//lccsg+x8AAABY1e5/Rdxi/wMAAMAwcve/Mm6x/wEAAGAYuftfFbc02f/6f/2//l//r/9f//n6/2XS/0/T/2+g/9f/6//1/2zV3Pr/3P03xi1N9j8AAAB0kLv/1XGL/Q8AAADDyN3/mrjF/gcAAIBh5O5/bdzSZP/r//X/+n/9v/5//efr/5dJ/z9N/79arW6a+ALW9f+n/1z/r//X/+v/uUBz6/9z978ubmmy/wEAAKCD3P03xS32PwAAAAwjd//NcYv9DwAAAMPI3f/6uKXJ/tf/6//1//p//f/6z9f/L5P+f5r+fwPv/+v/9f/6f7Zqbv1/7v43xC1N9j8AAAB0kLv/lrjF/gcAAIBh5O5/Y9xi/wMAAMAwcvffGrc02f/6f/2//l//r/9f//n6/2U6vP5/pf/X/+v/N9D/6//1/+w1t/4/d/+b4pYm+x8AAAA6yN3/5rjF/gcAAIBh5O5/S9xi/wMAAMAwcve/NW5psv/1//p//b/+X/+//vP1/8vk/f9p+v8N9P/6f/2//p+tmlv/n7v/bXFLk/0PAAAAHeTuvy1usf8BAABgGLn73x632P8AAAAwjNz974hbmux//b/+f3f/v1rp//X/+v8dF6H/P7HS/2+d/n+a/n8D/f+Y/f+frAbq/0/u++v1/8zR3Pr/3P3vjFua7H8AAADoIHf/u+IW+x8AAACGkbv/3XGL/Q8AAADDyN3/nrilyf7X/+v/vf+v/9f/r/987/8vk/5/mv5/A/3/mP2/9//1/xyZufX/ufvfG7c02f8AAADQQe7+98Ut9j8AAAAMI3f/++MW+x8AAACGkbv/Azv3zN8AaLL/9f/6f/2//n9v/39qpf9f6f8XS/8/Tf+/gf5f/6//1/+zVXPr/2P3rz4YtzTZ/wAAANBB7v7b4xb7HwAAAIaRu/+OuMX+BwAAgGHk7v9Q3NJk/+v/9f/6/2X2/ye8/6//1/+vNZf+//LL//5O/b/+X/+v/9f/6/+7m1v/n7v/w3FLk/0PAAAAHeTu/0jcYv8DAADAMHL3fzRusf8BAABgGLn7Pxa3NNn/5/b/l6x2CtUd6/r/aNT0/2fR/+/++vX/678/lvL+v/5/h/5/mebS/3v//8K+fv2//n/JX/959f+XnfvrD7P//90B/reg/+cwzK3/z91/Z9zSZP8DAABAB7n7Px632P8AAAAwjNz9n4hb7H8AAAAYRu7+u+KWJvvf+//6f/2//l//v/7z9f/LpP+fpv/fQP+v//f+/xX/8qf6f7Znbv1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNzSZP/r//X/+n/9v/5//efr/5dJ/z9N/7+B/l//r//3/j9bNbf+P3f/Z+OWJvsfAAAAOsjd/7m4xf4HAACAYeTu/3zcYv8DAADAMHL3fyFuabL/t9//X6b/D/r/ufT//6z/3/P5+n/9/8hm0v/nt9WR9P+XTPyc/n8D/b/+X/+v/2er5tb/5+6/O25psv8BAACgg9z9X4xb7H8AAAAYRu7+L8Ut9j8AAAAMI3f/l+OWJvvf+/+9+v9jq479v/f/9f/6/05m0v97/1//r//X/+v/9f/MsP/P3f+VuKXJ/gcAAICl+se/+ve7D/qvzd3/1bjF/gcAAIBh5O7/Wtxi/wMAAMAwcvd/PW5psv/1/736/57v/+v/9f/6/070/9P0/xvo//X/+n/9P1s1t/4/d/834pazht/x8/5PCQAAAMxJ7v5vxi1N/vk/AAAAdJC7/1txyzn7//QBf1c7AAAAMDe5+78dtzT55//6/5n3/6vx+/97Vvp//f8O/b/+fxv0/9P+yP7/9DH9v/5/gv5f/6//Z6+59f+5+78TtzTZ/wAAADCoXX9HIXf/d+MW+x8AAACGkbv/e3GL/Q8AAADDyN3//bilyf7X/8+8/7+g9/9P1v+1hP7f+/+H2P9fd2Lt5+v/9f8j0/9P8/7/Bvr/Bff/+Udl/b/+nzmZW/+fu/+euKXJ/gcAAIAOcvf/IG6x/wEAAGAYuft/GLfY/wAAADCM3P0/ilua7H/9/4j9/7Le/9f/e///wvv/v7j01O3/9K8336j/54yL2f/n94L+X/+v/9/h/X/9v/6fvebW/+fu/3Hc0mT/AwAAQAe5+++NW+x/AAAAGEbu/p/ELfY/AAAADCN3/0/jlib7X/+v/59L/5//XR9B/39qef1/NsXd+3/v/+v/z+X9/2n6/w30//p//b/+n62aW/+fu/9ncUuT/Q8AAAAd5O7/edxi/wMAAMAwcvf/Im6x/wEAAGAYuft/Gbc02f/r+/8/q5/X/x+M/n/31+/9//XfH97/1//r/w+f/n+a/n8D/b/+X/+v/2er5tb/5+7/VdzSZP8DAABAB7n774tb7H8AAAAYRu7+X8ct9j8AAAAMI3f/b+KWJvvf+//6f/2//l//v/7z9f/LpP+fpv/fQP+v/9f/6//Zqrn1/7n7fx8AAP//XXxspA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 2.570162639s ago: executing program 5 (id=12889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) 2.329337046s ago: executing program 1 (id=12890): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) 2.224141719s ago: executing program 5 (id=12891): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 1.979962485s ago: executing program 1 (id=12892): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x100e1, &(0x7f00000001c0)=ANY=[], 0xfc, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x820b8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.881991418s ago: executing program 5 (id=12893): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000480)) 1.832512959s ago: executing program 7 (id=12894): syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0xc1, &(0x7f0000000180)=ANY=[@ANYBLOB="050fc1000403100b14100400b712d041d36c2d8515ec26ba5affb8d69d10006a66a17ba6f3dfb30a417a26ff2e4476046cf4fcbdcab3217b7d513caa2a7bdf813a16cbaeb21d16be222d8b2fc82fdd7c7306e1750e080000007ad5a82e61874f93f90908472dc3a55f7839b7a8a792ca8ad7288d07c59222e0f1084128bc0f7e461141d0cff03ceee9a0a78c6b75375f665646b6539fea8b40743ace635189d1c8892209e0d07db2a52a192efa5fe8187c75382f9a9fd57dfd081000668a8cc7c3"]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) 1.540531748s ago: executing program 5 (id=12895): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 720.44639ms ago: executing program 1 (id=12896): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x0, 0x8d9, 0x403, 0x9, 0xf, 0x8000}) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffe, 0x6, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000200)="2b04002000b7", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}) 618.751253ms ago: executing program 6 (id=12897): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000017c0)=""/4092, &(0x7f0000000100)=0xffc) 517.233706ms ago: executing program 7 (id=12898): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 482.007947ms ago: executing program 1 (id=12899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x7, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private1}, {0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x21}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010100}, {0x0, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 253.876353ms ago: executing program 1 (id=12900): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./file1\x00', 0x8680, &(0x7f0000020b00)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8], 0xfd, 0x2a1, &(0x7f0000000100)="$eJzs3b9u01wYx/HfcdI270tV3D8ICTEVKjGhtgwglkqod8DChChNkKpaRYIi0U6BGXEB7NwCF8DIVDEjsTExMBaWoHN8Quw0jpMoqZP0+5ESJfZ57OfYxz1+UrURgAvrwfb3j3d+2IeRSipJui8FkipSWdIVXa28OjjcO4xq1W4bKrkI+zClrDa7B7VOi22c25cX2ndlzSeXYTQq31QvOgcUz139HQTSnL863frKuWc2Ghd90JtTneq1ForOAwBQLD//B36en48XKQikNT/tp+f/yZ5Aza+GU3QeI/M5Z31i/ndVVsPY83vZrWrVe3YI6K4PcVWi9KfvgzareGSlbjBNXlXpcgn+e7YX1W7vPo+qgd5qy5tpNVtxz9V46DY1a1r7+s3ZTa/GHfOZ5UpurT+XXB9mbB82g5NW/okmy8PdYz7zxZyYxybUB1X/3f+VG8YeDHc8wrYzFee/nr1F18tZuVbJs5Rosuh2ci19xLv2sqSMikTN87ao9AcEYV6eLmqpLSru3UZO1HLHqM2cqJX2qNZozo4cNfPePDKr+qlP2k7c/wf2aK+plyvTtnEt/cjo2p+yaxm6+cRfdfXrHVsGg/YIA3inp7qnhZdHx/s7UVR7MbUv7JU4BmkcHe//boxFGjtR1BwE45LP1L6wB7mQvTfnncG3U9hPJpyj1knvM5DfzUwLe99l4vovUa+su5s1+xSm79PnkrG5tWBiixsZtcGSe/4/u4JLMVJdjczKoK3m6rxHV3PduCXd7GWPsdDnOX62Bgky2/qqJ3z+DwAAAAAAAAAAAAAAAAAAMGmG9ycHFWWtKrqPAAAAAAAAAAAAAAAAAAAAAABMulF8/6//7/DmTJtevv/3oeJ3Zc1rZhg9BJDlbwAAAP//e1SAFg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 229.555574ms ago: executing program 7 (id=12901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 0s ago: executing program 1 (id=12902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x48, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): k_simulate: vblank timer overrun [ 1162.111786][T16891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.507815][T17488] loop5: detected capacity change from 0 to 256 [ 1162.565011][ C0] vkms_vblank_simulate: vblank timer overrun [ 1162.603795][T17488] FAT-fs (loop5): Directory bread(block 64) failed [ 1162.630321][T17488] FAT-fs (loop5): Directory bread(block 65) failed [ 1162.644350][T17488] FAT-fs (loop5): Directory bread(block 66) failed [ 1162.707236][T17488] FAT-fs (loop5): Directory bread(block 67) failed [ 1162.713960][T17488] FAT-fs (loop5): Directory bread(block 68) failed [ 1162.746198][T17488] FAT-fs (loop5): Directory bread(block 69) failed [ 1162.785675][T17488] FAT-fs (loop5): Directory bread(block 70) failed [ 1162.807980][T17488] FAT-fs (loop5): Directory bread(block 71) failed [ 1162.814697][T17488] FAT-fs (loop5): Directory bread(block 72) failed [ 1162.851606][T17488] FAT-fs (loop5): Directory bread(block 73) failed [ 1162.868145][T17500] loop3: detected capacity change from 0 to 4096 [ 1162.885452][T16891] hsr_slave_0: entered promiscuous mode [ 1162.998136][T16891] hsr_slave_1: entered promiscuous mode [ 1163.027309][T16891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1163.065255][T16891] Cannot create hsr debugfs directory [ 1163.245187][T17500] ntfs3: loop3: failed to convert "0080" to macinuit [ 1163.307558][T17500] ntfs3: loop3: failed to convert name for inode 1e. [ 1163.410741][T17541] siw: device registration error -23 [ 1164.321318][T17516] loop1: detected capacity change from 0 to 32768 [ 1164.430547][T17516] ialloc: diAlloc returned -5! [ 1164.461531][T17607] loop5: detected capacity change from 0 to 128 [ 1164.496356][T17607] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1164.537263][T17607] hpfs: filesystem error: improperly stopped [ 1164.543342][T17607] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1164.601920][T17607] hpfs: You really don't want any checks? You are crazy... [ 1164.672107][T17607] hpfs: hpfs_map_sector(): read error [ 1164.687646][T17607] hpfs: code page support is disabled [ 1164.705562][T17607] hpfs: hpfs_map_4sectors(): unaligned read [ 1164.732455][T17607] hpfs: hpfs_map_4sectors(): unaligned read [ 1164.761630][T17607] hpfs: filesystem error: unable to find root dir [ 1165.101282][T17624] loop1: detected capacity change from 0 to 64 [ 1165.185121][T17624] hfs: invalid extent max_key_len 775 [ 1165.207780][T17624] hfs: unable to open extent tree [ 1165.212945][T17624] hfs: can't find a HFS filesystem on dev loop1 [ 1165.345982][T17624] syz.1.12311: attempt to access beyond end of device [ 1165.345982][T17624] loop1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1165.358150][T17571] loop3: detected capacity change from 0 to 32768 [ 1165.396993][T17571] (syz.3.12307,17571,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1165.415852][T17571] (syz.3.12307,17571,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1165.495690][T17571] JBD2: Ignoring recovery information on journal [ 1165.594965][T17571] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1165.868627][T17571] (syz.3.12307,17571,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 1165.908222][T17571] (syz.3.12307,17571,1):update_backups:188 ERROR: status = -12 [ 1165.943211][T17571] ocfs2: Failed to update super blocks on 7,3 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 1166.064261][T17667] loop1: detected capacity change from 0 to 1024 [ 1166.139452][T17667] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1166.274315][T16891] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1166.374733][T17667] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.12317: lblock 2 mapped to illegal pblock 2 (length 1) [ 1166.401407][T17667] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1166.428918][T16891] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1166.462342][T17667] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.12317: lblock 0 mapped to illegal pblock 48 (length 1) [ 1166.543910][T17667] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1166.565663][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 1166.568075][T17667] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.12317: Failed to acquire dquot type 0 [ 1166.590602][T17667] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1166.632910][T17667] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.12317: mark_inode_dirty error [ 1166.657059][T16891] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1166.685873][T17667] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1166.731473][T17667] EXT4-fs (loop1): 1 orphan inode deleted [ 1166.786656][T16891] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1166.803649][ T49] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1166.899567][ T49] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1166.932049][ T49] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 1166.940296][T17667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.402862][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.416829][T16891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.440788][ T42] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 1167.502836][ T42] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1167.529700][T16891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.549671][ T42] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 1167.623561][ T5773] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1167.648092][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.655284][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.681810][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.689057][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.714958][ T5773] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1167.749445][ T5773] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1168.317704][ T27] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1168.509805][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 1168.517963][ T27] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1168.547704][ T27] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1168.582674][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1168.611216][ T27] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1168.637956][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.670865][ T27] usb 4-1: Product: syz [ 1168.675120][ T27] usb 4-1: Manufacturer: syz [ 1168.705665][ T27] usb 4-1: SerialNumber: syz [ 1168.726270][T16891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.736932][ T27] usb 4-1: config 0 descriptor?? [ 1169.186803][ T27] gs_usb 4-1:0.0: Configuring for 40 interfaces [ 1169.388963][ T27] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1169.408544][T17763] syz.5.12334 (17763) used greatest stack depth: 17896 bytes left [ 1169.416343][ T27] gs_usb: probe of 4-1:0.0 failed with error -71 [ 1169.441476][ T27] usb 4-1: USB disconnect, device number 93 [ 1169.724243][T16891] veth0_vlan: entered promiscuous mode [ 1169.771911][T16891] veth1_vlan: entered promiscuous mode [ 1169.854652][T17797] loop5: detected capacity change from 0 to 256 [ 1169.866503][T16891] veth0_macvtap: entered promiscuous mode [ 1169.880097][T17797] exfat: Deprecated parameter 'utf8' [ 1169.885500][T17797] exfat: Deprecated parameter 'namecase' [ 1169.916172][T16891] veth1_macvtap: entered promiscuous mode [ 1169.922608][T17797] exfat: Deprecated parameter 'namecase' [ 1169.929105][T17797] exfat: Deprecated parameter 'utf8' [ 1169.962640][T17797] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1170.031488][T16891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1170.073406][T16891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.114362][T16891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1170.178483][T16891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.210978][T16891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.233717][T16891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1170.290715][T16891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.317338][T16891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1170.347264][T16891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.402735][T16891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.439346][T16891] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.468988][T16891] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.507274][T16891] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.516070][T16891] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.810273][T27939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.855445][T27939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.945248][T27939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.998029][T27939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.138206][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12351'. [ 1171.151353][T17849] netlink: 'syz.5.12351': attribute type 1 has an invalid length. [ 1171.163226][T17849] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12351'. [ 1171.835947][T17820] loop1: detected capacity change from 0 to 32768 [ 1172.147920][T17847] loop3: detected capacity change from 0 to 32768 [ 1172.732572][T17897] loop3: detected capacity change from 0 to 128 [ 1172.802482][T17897] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1172.868453][T17897] hpfs: filesystem error: improperly stopped [ 1172.878564][T17897] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1172.886367][T17897] hpfs: You really don't want any checks? You are crazy... [ 1172.923889][T17865] loop6: detected capacity change from 0 to 32768 [ 1172.941774][T17897] hpfs: Code page index out of array [ 1172.977964][T17897] hpfs: code page support is disabled [ 1172.995988][T17897] hpfs: hpfs_map_4sectors(): unaligned read [ 1173.002654][T17897] hpfs: hpfs_map_4sectors(): unaligned read [ 1173.038906][T17897] hpfs: filesystem error: unable to find root dir [ 1173.066890][T17865] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1173.131741][T17897] hpfs: hpfs_map_4sectors(): unaligned read [ 1173.135259][T17865] XFS (loop6): Ending clean mount [ 1173.240811][T17865] XFS (loop6): Quotacheck needed: Please wait. [ 1173.458785][T17865] XFS (loop6): Quotacheck: Done. [ 1173.759919][T16891] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1174.062838][T17903] loop1: detected capacity change from 0 to 32768 [ 1174.146422][T17903] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 1174.260664][T17961] loop5: detected capacity change from 0 to 128 [ 1174.422817][T17961] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1174.437643][T17961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1174.540455][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 1175.299101][ T28] audit: type=1326 audit(1777546679.136:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17999 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6239cdd9 code=0x7ffc0000 [ 1175.366256][ T28] audit: type=1326 audit(1777546679.136:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17999 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6239cdd9 code=0x7ffc0000 [ 1175.458056][ T28] audit: type=1326 audit(1777546679.166:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17999 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4a6239cdd9 code=0x7ffc0000 [ 1175.541462][T18009] loop5: detected capacity change from 0 to 512 [ 1175.547799][ T28] audit: type=1326 audit(1777546679.176:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17999 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a6239cb42 code=0x7ffc0000 [ 1175.547852][ T28] audit: type=1326 audit(1777546679.176:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17999 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a6239cb42 code=0x7ffc0000 [ 1175.547897][ T28] audit: type=1326 audit(1777546679.186:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17999 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6239cdd9 code=0x7ffc0000 [ 1175.547942][ T28] audit: type=1326 audit(1777546679.256:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17999 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f4a6239cdd9 code=0x7ffc0000 [ 1175.547987][ T28] audit: type=1326 audit(1777546679.256:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17999 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4a6239cdd9 code=0x7ffc0000 [ 1175.548033][ T28] audit: type=1326 audit(1777546679.256:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17999 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6239cdd9 code=0x7ffc0000 [ 1175.548077][ T28] audit: type=1326 audit(1777546679.256:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17999 comm="syz.3.12379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a6239cdd9 code=0x7ffc0000 [ 1175.889580][T18009] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.12381: invalid indirect mapped block 10 (level 1) [ 1175.972268][T18009] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.12381: invalid indirect mapped block 8 (level 1) [ 1176.062049][T18009] EXT4-fs (loop5): 1 truncate cleaned up [ 1176.088665][T18009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.244022][T18033] loop6: detected capacity change from 0 to 256 [ 1176.275949][T18033] exfat: Deprecated parameter 'namecase' [ 1176.315461][T18033] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1176.348604][T15437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.466826][T18039] loop3: detected capacity change from 0 to 512 [ 1176.509136][T18039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1176.586295][T18045] loop5: detected capacity change from 0 to 128 [ 1176.638040][T18039] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1176.646061][T18039] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1176.655598][T18045] FAT-fs (loop5): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 1176.678524][T18039] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1176.685131][T18039] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1176.699983][T18039] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1176.708579][T18039] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.12388: bg 0: block 40: padding at end of block bitmap is not set [ 1176.725195][T18039] EXT4-fs (loop3): Remounting filesystem read-only [ 1176.733451][T18039] EXT4-fs (loop3): 1 truncate cleaned up [ 1176.741151][T18039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1176.761401][T17993] loop1: detected capacity change from 0 to 32768 [ 1176.889976][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.924403][T17993] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1176.985564][T17993] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1177.016088][T17993] BTRFS info (device loop1): force clearing of disk cache [ 1177.072164][T17993] BTRFS info (device loop1): force zlib compression, level 3 [ 1177.111001][T17993] BTRFS info (device loop1): enabling auto defrag [ 1177.157758][T17993] BTRFS info (device loop1): max_inline at 0 [ 1177.174033][T17993] BTRFS info (device loop1): enabling disk space caching [ 1177.225532][T17993] BTRFS info (device loop1): disk space caching is enabled [ 1177.261411][T18072] loop5: detected capacity change from 0 to 256 [ 1177.280102][T18072] exfat: Deprecated parameter 'namecase' [ 1177.325318][T18072] exfat: Deprecated parameter 'namecase' [ 1177.384331][T18072] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 1177.548733][T17993] BTRFS info (device loop1): enabling ssd optimizations [ 1177.555813][T17993] BTRFS info (device loop1): auto enabling async discard [ 1177.574019][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.580862][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.610732][T17993] BTRFS info (device loop1): rebuilding free space tree [ 1177.661862][T17993] BTRFS info (device loop1): disabling free space tree [ 1177.680634][T17993] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1177.712195][T17993] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1178.026479][T18089] loop3: detected capacity change from 0 to 32768 [ 1178.104865][T17993] BTRFS error (device loop1: state M): unrecognized mount option 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿ0x0000000000000000ÿÿÿÿ' [ 1178.207999][T18117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1178.215329][T18117] IPv6: NLM_F_CREATE should be set when creating new route [ 1178.257254][T18089] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 1178.285167][ T5773] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1178.303469][T18089] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1178.487563][T18089] XFS (loop3): Ending clean mount [ 1178.525822][T18089] XFS (loop3): Quotacheck needed: Please wait. [ 1178.597832][ T5787] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop1 scanned by udevd (5787) [ 1178.691341][T18089] XFS (loop3): Quotacheck: Done. [ 1178.812928][ T3317] kernel write not supported for file /snd/midiC2D0 (pid: 3317 comm: kworker/0:0) [ 1178.827509][T18136] loop6: detected capacity change from 0 to 2048 [ 1178.971793][T18136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1179.059003][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1179.286852][T16891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.464116][T18154] loop5: detected capacity change from 0 to 4096 [ 1179.540302][T18154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1179.746177][T18154] EXT4-fs: can't change dax mount option while remounting [ 1179.865428][T15437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.979863][T18174] loop5: detected capacity change from 0 to 1024 [ 1180.124674][T16033] hfsplus: b-tree write err: -5, ino 25 [ 1180.140412][T16033] hfsplus: b-tree write err: -5, ino 4 [ 1180.177624][T16033] hfsplus: b-tree write err: -5, ino 2 [ 1180.183270][T16033] hfsplus: b-tree write err: -5, ino 26 [ 1180.552882][T18191] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1180.561590][T18151] F2FS-fs (loop1): invalid crc value [ 1180.601009][T18151] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1180.622962][T18191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1180.707579][T18191] System zones: 1-3, 19-19, 35-36 [ 1180.714499][T18191] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1180.822982][T18191] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.917675][T18151] F2FS-fs (loop1): Start checkpoint disabled! [ 1180.967341][T18151] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1181.016039][T15437] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1181.349105][ T27] kernel write not supported for file bpf-map (pid: 27 comm: kworker/1:1) [ 1181.452697][T18227] set_capacity_and_notify: 2 callbacks suppressed [ 1181.452715][T18227] loop3: detected capacity change from 0 to 1764 [ 1181.488820][T27939] kworker/u4:5: attempt to access beyond end of device [ 1181.488820][T27939] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1181.550918][T27939] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1181.565097][T27939] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1181.767749][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1181.767766][ T28] audit: type=1326 audit(1777546685.606:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.5.12428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1181.803369][T18237] loop6: detected capacity change from 0 to 4096 [ 1181.845588][ T28] audit: type=1326 audit(1777546685.606:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.5.12428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1181.913979][ T28] audit: type=1326 audit(1777546685.616:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.5.12428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1181.969912][T18237] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1182.008796][ T28] audit: type=1326 audit(1777546685.636:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.5.12428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f742db9cb42 code=0x7ffc0000 [ 1182.045153][T18237] ntfs3: loop6: Failed to load $Extend (-22). [ 1182.060720][T18237] ntfs3: loop6: Failed to initialize $Extend. [ 1182.101691][ T28] audit: type=1326 audit(1777546685.646:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.5.12428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f742db9cb42 code=0x7ffc0000 [ 1182.156072][ T28] audit: type=1326 audit(1777546685.656:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.5.12428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1182.182587][T18247] loop5: detected capacity change from 0 to 256 [ 1182.197495][ T28] audit: type=1326 audit(1777546685.656:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.5.12428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1182.285435][T18248] ntfs3: loop6: ino=1b, "file0" directory corrupted [ 1182.337954][ T28] audit: type=1326 audit(1777546685.666:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.5.12428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1182.438994][ T28] audit: type=1326 audit(1777546685.666:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.5.12428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1182.570371][ T28] audit: type=1326 audit(1777546685.666:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18239 comm="syz.5.12428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1183.297664][ T3317] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1183.499244][ T3317] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1183.523000][ T3317] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1183.545318][ T3317] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.570812][ T3317] usb 2-1: config 220 has no interface number 2 [ 1183.579963][ T3317] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1183.614764][ T3317] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1183.632855][ T3317] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1183.655392][ T3317] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1183.687018][ T3317] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1183.706943][ T3317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.735514][ T3317] usb 2-1: Product: syz [ 1183.749631][ T3317] usb 2-1: Manufacturer: syz [ 1183.764565][ T3317] usb 2-1: SerialNumber: syz [ 1183.791748][T18306] loop3: detected capacity change from 0 to 4096 [ 1183.977018][T18306] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1184.009674][T18306] ntfs3: loop3: Failed to load $Extend (-22). [ 1184.015983][T18306] ntfs3: loop3: Failed to initialize $Extend. [ 1184.054546][ T3317] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1184.071439][ T3317] usb 2-1: No valid video chain found. [ 1184.081987][ T3317] usb 2-1: selecting invalid altsetting 0 [ 1184.134928][ T3317] usb 2-1: selecting invalid altsetting 0 [ 1184.155695][T18306] ntfs3: loop3: ino=1b, "file0" directory corrupted [ 1184.167856][ T3317] usbtest: probe of 2-1:220.1 failed with error -22 [ 1184.200231][ T3317] usb 2-1: USB disconnect, device number 85 [ 1184.248703][T18272] loop6: detected capacity change from 0 to 40427 [ 1184.299598][T18272] F2FS-fs (loop6): invalid crc value [ 1184.318450][T18272] F2FS-fs (loop6): Ignore s_resuid=3, s_resgid=0 w/o reserve_root [ 1184.392913][T18272] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1184.609832][T18272] F2FS-fs (loop6): Start checkpoint disabled! [ 1184.618688][T18272] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1184.742503][T18272] F2FS-fs (loop6): disabling checkpoint not compatible with read-only [ 1185.167917][T18360] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.12451'. [ 1185.197827][T18360] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.12451'. [ 1185.405336][T18334] loop5: detected capacity change from 0 to 32768 [ 1185.555235][T18334] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 1185.579301][T18334] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1185.638786][T18383] overlay: Unknown parameter '\yzkaller' [ 1185.792631][T18334] XFS (loop5): Ending clean mount [ 1185.802925][T18334] XFS (loop5): Quotacheck needed: Please wait. [ 1186.046967][T18334] XFS (loop5): Quotacheck: Done. [ 1186.177939][T15437] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1186.373654][T18415] loop1: detected capacity change from 0 to 256 [ 1186.592923][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12466'. [ 1186.720382][T18415] FAT-fs (loop1): Directory bread(block 64) failed [ 1186.727007][T18415] FAT-fs (loop1): Directory bread(block 65) failed [ 1186.779848][T18415] FAT-fs (loop1): Directory bread(block 66) failed [ 1186.786580][T18415] FAT-fs (loop1): Directory bread(block 67) failed [ 1186.868293][T18415] FAT-fs (loop1): Directory bread(block 68) failed [ 1186.875002][T18415] FAT-fs (loop1): Directory bread(block 69) failed [ 1186.929796][T18415] FAT-fs (loop1): Directory bread(block 70) failed [ 1186.936402][T18415] FAT-fs (loop1): Directory bread(block 71) failed [ 1186.957858][T18415] FAT-fs (loop1): Directory bread(block 72) failed [ 1186.964472][T18415] FAT-fs (loop1): Directory bread(block 73) failed [ 1187.528552][ T27] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1187.676986][T18453] loop3: detected capacity change from 0 to 4096 [ 1187.735968][T18461] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1187.760088][ T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.780613][ T27] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1187.808319][ T27] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1187.827956][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.845678][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1187.845695][ T28] audit: type=1800 audit(1777546691.686:5699): pid=18453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12472" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1187.905367][ T27] usb 6-1: config 0 descriptor?? [ 1187.951641][ T27] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1187.981651][ T27] dvb-usb: bulk message failed: -22 (3/0) [ 1188.007532][T18458] loop1: detected capacity change from 0 to 4096 [ 1188.011700][ T27] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1188.094155][ T27] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1188.149930][ T27] usb 6-1: media controller created [ 1188.169288][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1188.241350][ T27] dvb-usb: bulk message failed: -22 (6/0) [ 1188.272232][ T27] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1188.317846][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61 [ 1188.384110][ T27] dvb-usb: schedule remote query interval to 150 msecs. [ 1188.424550][ T27] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1188.482179][ T27] usb 6-1: USB disconnect, device number 3 [ 1188.628600][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1188.683590][T18498] loop3: detected capacity change from 0 to 64 [ 1189.150978][T18444] loop6: detected capacity change from 0 to 40427 [ 1189.219170][T18444] F2FS-fs (loop6): invalid crc value [ 1189.274819][T18444] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1189.306802][T18526] loop3: detected capacity change from 0 to 256 [ 1189.349938][T18526] exfat: Deprecated parameter 'namecase' [ 1189.355708][T18526] exfat: Deprecated parameter 'namecase' [ 1189.484151][T18444] F2FS-fs (loop6): Start checkpoint disabled! [ 1189.494283][T18526] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 1189.563177][T18444] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1189.669993][T18526] exFAT-fs (loop3): invalid start cluster (4278190088) [ 1190.089110][ T49] kworker/u4:3: attempt to access beyond end of device [ 1190.089110][ T49] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1190.165319][T18502] loop1: detected capacity change from 0 to 32768 [ 1190.172156][ T49] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1190.224511][ T49] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1190.239441][T18502] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1190.607741][T18502] XFS (loop1): Ending clean mount [ 1190.651132][T18576] loop3: detected capacity change from 0 to 1024 [ 1190.881701][T18585] hfsplus: request for non-existent node 134217728 in B*Tree [ 1190.927684][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1190.942000][T18585] hfsplus: request for non-existent node 134217728 in B*Tree [ 1191.369877][T18600] loop3: detected capacity change from 0 to 2048 [ 1191.471574][T18600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1191.502979][T18600] ext4 filesystem being mounted at /3352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1191.684604][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.027494][T18631] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 1192.317699][T18644] netlink: 'syz.5.12501': attribute type 5 has an invalid length. [ 1192.339781][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12501'. [ 1192.377244][T18644] ip6erspan0: entered promiscuous mode [ 1192.389725][T18647] loop1: detected capacity change from 0 to 512 [ 1192.791187][T18674] loop6: detected capacity change from 0 to 2048 [ 1192.829186][T18674] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1192.921925][T18681] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1194.242165][T18696] loop3: detected capacity change from 0 to 32768 [ 1194.336872][T18696] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1194.454706][T18696] XFS (loop3): Ending clean mount [ 1194.491114][T18696] XFS (loop3): Quotacheck needed: Please wait. [ 1194.657548][T10311] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1194.780868][T18696] XFS (loop3): Quotacheck: Done. [ 1194.881019][ T5777] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1194.897647][T10311] usb 6-1: Using ep0 maxpacket: 8 [ 1194.921235][T10311] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1194.961136][T10311] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1194.974010][T10311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.983270][T10311] usb 6-1: Product: syz [ 1194.988269][T10311] usb 6-1: Manufacturer: syz [ 1194.993014][T10311] usb 6-1: SerialNumber: syz [ 1195.035957][T10311] usb 6-1: config 0 descriptor?? [ 1195.065515][T10311] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1195.107296][T10311] usb 6-1: setting power ON [ 1195.142270][T10311] dvb-usb: bulk message failed: -22 (2/0) [ 1195.168856][T10311] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1195.218349][T10311] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1195.247912][T10311] usb 6-1: media controller created [ 1195.357810][T10311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1195.414219][T10311] usb 6-1: selecting invalid altsetting 6 [ 1195.446574][T10311] usb 6-1: digital interface selection failed (-22) [ 1195.466826][T10311] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1195.480346][T18795] loop6: detected capacity change from 0 to 512 [ 1195.529916][T10311] usb 6-1: setting power OFF [ 1195.536406][T10311] dvb-usb: bulk message failed: -22 (2/0) [ 1195.600670][T18795] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.12531: Unrecognised inode hash code 255 [ 1195.612741][T10311] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1195.659466][T18795] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.12531: Corrupt directory, running e2fsck is recommended [ 1195.687478][T10311] (NULL device *): no alternate interface [ 1195.737504][T18795] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1195.819864][T18795] EXT4-fs error (device loop6): ext4_iget_extra_inode:4739: inode #15: comm syz.6.12531: corrupted in-inode xattr: invalid ea_ino [ 1195.835791][T10311] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1195.878489][T18795] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.12531: couldn't read orphan inode 15 (err -117) [ 1195.926624][T10311] usb 6-1: USB disconnect, device number 4 [ 1196.023483][T18795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.123383][T18795] EXT4-fs error (device loop6): ext4_xattr_set_entry:1670: inode #2: comm syz.6.12531: corrupted xattr entries [ 1196.174207][T18828] loop1: detected capacity change from 0 to 512 [ 1196.214848][T18828] EXT4-fs: Ignoring removed orlov option [ 1196.254293][T18828] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1196.305326][T18828] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1196.376158][T18828] EXT4-fs (loop1): 1 truncate cleaned up [ 1196.420932][T18828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.438717][T16891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.461548][T18836] loop3: detected capacity change from 0 to 2048 [ 1196.527688][T18828] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1196.570676][T18828] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1196.650106][T18836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1196.714512][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.973780][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.315272][T18929] loop6: detected capacity change from 0 to 1024 [ 1198.394470][T18937] loop3: detected capacity change from 0 to 512 [ 1198.443751][T18937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1198.495571][T18937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e028, mo2=0002] [ 1198.517620][T18937] System zones: 1-12 [ 1198.532351][T18937] EXT4-fs (loop3): 1 truncate cleaned up [ 1198.539851][T18937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1198.565235][ T2949] hfsplus: b-tree write err: -5, ino 25 [ 1198.591996][ T2949] hfsplus: b-tree write err: -5, ino 4 [ 1198.618767][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.626176][ T2949] hfsplus: b-tree write err: -5, ino 2 [ 1199.306641][T18979] loop1: detected capacity change from 0 to 1024 [ 1199.347659][T18979] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 1199.383555][T18979] System zones: 0-1, 3-36 [ 1199.417425][T18979] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.12570: bad orphan inode 134217728 [ 1199.470859][T18979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1199.656911][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.837444][T19004] loop1: detected capacity change from 0 to 512 [ 1200.224772][T19024] loop1: detected capacity change from 0 to 8 [ 1200.404403][T19024] SQUASHFS error: xz decompression failed, data probably corrupt [ 1200.431772][T19024] SQUASHFS error: Failed to read block 0x60: -5 [ 1200.481557][T19029] loop6: detected capacity change from 0 to 4096 [ 1200.500998][T19024] SQUASHFS error: xz decompression failed, data probably corrupt [ 1200.549428][T19024] SQUASHFS error: Failed to read block 0x60: -5 [ 1200.577480][ T28] audit: type=1800 audit(1777546704.416:5700): pid=19024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12576" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 1200.805291][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12578'. [ 1201.747538][T26419] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1201.819607][T19055] loop6: detected capacity change from 0 to 40427 [ 1201.840907][T19055] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1201.879118][T19055] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1201.910061][T19055] F2FS-fs (loop6): invalid crc value [ 1201.933884][T19055] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1201.968055][T26419] usb 6-1: Using ep0 maxpacket: 32 [ 1201.989247][T26419] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.020585][T26419] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1202.051629][T26419] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1202.063930][T26419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.079127][T26419] usb 6-1: config 0 descriptor?? [ 1202.128711][T19055] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 1202.136001][T19055] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1202.254801][T19055] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 1202.529322][T26419] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 1202.552377][T26419] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 1202.577551][T26419] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 1202.604565][T26419] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 1202.639427][T26419] dragonrise 0003:0079:0011.001E: unknown main item tag 0x0 [ 1202.667744][T26419] dragonrise 0003:0079:0011.001E: unbalanced collection at end of report description [ 1202.693168][T26419] dragonrise 0003:0079:0011.001E: parse failed [ 1202.717560][T26419] dragonrise: probe of 0003:0079:0011.001E failed with error -22 [ 1202.749549][T26419] usb 6-1: USB disconnect, device number 5 [ 1202.932908][T19130] loop6: detected capacity change from 0 to 512 [ 1202.953274][T19130] EXT4-fs: Ignoring removed i_version option [ 1202.957992][T19130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1202.999189][T19130] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.12597: invalid indirect mapped block 4294967295 (level 1) [ 1203.007363][T19130] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.12597: invalid indirect mapped block 4294967295 (level 1) [ 1203.018626][T19130] EXT4-fs (loop6): 2 truncates cleaned up [ 1203.020042][T19130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1203.213327][T16891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.554027][T19154] loop3: detected capacity change from 0 to 512 [ 1203.628267][T19154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1203.643062][T19154] ext4 filesystem being mounted at /3380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1203.830698][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.157970][T19178] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1204.302407][T19171] loop6: detected capacity change from 0 to 8192 [ 1204.337833][T19181] loop3: detected capacity change from 0 to 128 [ 1204.375046][T19171] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1204.467645][T19171] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 1204.480474][T19151] loop5: detected capacity change from 0 to 32768 [ 1204.491273][T19151] gfs2: fsid=Ô±rÐÛ»ð_î [ 1204.491273][T19151] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 1204.491273][T19151] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ" [ 1204.508838][T19151] gfs2: fsid=Ô±rÐÛ»ð_î [ 1204.508838][T19151] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ: Now mounting FS (format 0)... [ 1204.538801][T19151] gfs2: fsid=Ô±rÐÛ»ð_î [ 1204.538801][T19151] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ.s: journal 0 mapped with 5 extents in 0ms [ 1204.573240][T19171] REISERFS (device loop6): using ordered data mode [ 1204.605882][T19151] gfs2: fsid=Ô±rÐÛ»ð_î [ 1204.605882][T19151] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ.s: first mount done, others may mount [ 1204.625242][T19171] reiserfs: using flush barriers [ 1204.641907][T19181] syz.3.12614: attempt to access beyond end of device [ 1204.641907][T19181] loop3: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 1204.685252][T19171] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1204.737871][T19171] REISERFS (device loop6): checking transaction log (loop6) [ 1204.781282][T19171] REISERFS (device loop6): Using r5 hash to sort names [ 1204.836961][T19171] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1205.013144][T19204] loop1: detected capacity change from 0 to 128 [ 1205.439990][T19226] loop5: detected capacity change from 0 to 512 [ 1205.529407][T19226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.567364][T19226] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.005653][T15437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.061384][T19253] loop1: detected capacity change from 0 to 4096 [ 1206.195781][T19253] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 1206.230704][T19253] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1206.343472][ T28] audit: type=1800 audit(1777546710.176:5701): pid=19253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12624" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 1206.377744][T19253] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 1206.451614][T17451] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 1206.481331][ T5773] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 1206.507457][ T5773] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1206.514514][ T5773] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 1206.557268][ T42] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 1206.704585][T19278] syz_tun: entered promiscuous mode [ 1206.724511][T19278] vlan2: entered promiscuous mode [ 1206.962086][T19246] loop6: detected capacity change from 0 to 40427 [ 1206.990171][T19246] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 1206.990200][T19246] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1207.012503][T19246] F2FS-fs (loop6): invalid crc value [ 1207.034133][T19246] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1207.238231][T19246] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1207.238263][T19246] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1207.461023][T16891] syz-executor: attempt to access beyond end of device [ 1207.461023][T16891] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1207.493263][T16891] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1207.679865][T19318] loop1: detected capacity change from 0 to 1024 [ 1207.738394][T19321] loop5: detected capacity change from 0 to 16 [ 1207.758201][T19321] erofs: (device loop5): mounted with root inode @ nid 36. [ 1207.850416][T19321] erofs: (device loop5): z_erofs_readahead: readahead error at folio 461 @ nid 36 [ 1207.860073][T26419] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1207.893698][T19321] erofs: (device loop5): z_erofs_readahead: readahead error at folio 460 @ nid 36 [ 1207.926161][T19321] erofs: (device loop5): z_erofs_readahead: readahead error at folio 340 @ nid 36 [ 1207.944323][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1207.954322][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1207.966796][T19321] syz.5.12640: attempt to access beyond end of device [ 1207.966796][T19321] loop5: rw=524288, sector=22873858832, nr_sectors = 16 limit=16 [ 1207.986422][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1208.009447][T19321] syz.5.12640: attempt to access beyond end of device [ 1208.009447][T19321] loop5: rw=524288, sector=22873858840, nr_sectors = 16 limit=16 [ 1208.047288][T19321] syz.5.12640: attempt to access beyond end of device [ 1208.047288][T19321] loop5: rw=524288, sector=14519143264, nr_sectors = 16 limit=16 [ 1208.082179][T19321] syz.5.12640: attempt to access beyond end of device [ 1208.082179][T19321] loop5: rw=524288, sector=14519143272, nr_sectors = 16 limit=16 [ 1208.107020][T26419] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.128717][T26419] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1208.138940][T19321] syz.5.12640: attempt to access beyond end of device [ 1208.138940][T19321] loop5: rw=524288, sector=63675288, nr_sectors = 16 limit=16 [ 1208.153755][T26419] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1208.163601][T26419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.169060][T19321] syz.5.12640: attempt to access beyond end of device [ 1208.169060][T19321] loop5: rw=524288, sector=63675296, nr_sectors = 16 limit=16 [ 1208.192254][T26419] usb 4-1: config 0 descriptor?? [ 1208.208308][T26419] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1208.223493][T19321] syz.5.12640: attempt to access beyond end of device [ 1208.223493][T19321] loop5: rw=524288, sector=16240345096, nr_sectors = 16 limit=16 [ 1208.224403][T26419] dvb-usb: bulk message failed: -22 (3/0) [ 1208.264548][T26419] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1208.281259][T26419] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1208.287704][T19321] syz.5.12640: attempt to access beyond end of device [ 1208.287704][T19321] loop5: rw=524288, sector=16240345104, nr_sectors = 16 limit=16 [ 1208.312901][T26419] usb 4-1: media controller created [ 1208.323797][T26419] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1208.341990][T26419] dvb-usb: bulk message failed: -22 (6/0) [ 1208.353265][T26419] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1208.374870][T26419] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input62 [ 1208.387012][T10311] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1208.414825][T26419] dvb-usb: schedule remote query interval to 150 msecs. [ 1208.453903][T26419] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1208.499817][T26419] usb 4-1: USB disconnect, device number 94 [ 1208.560108][T26419] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1208.577540][T10311] usb 2-1: Using ep0 maxpacket: 32 [ 1208.592062][T10311] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1208.634862][T10311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1208.654220][T10311] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1208.679835][T10311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.696867][T10311] usb 2-1: config 0 descriptor?? [ 1208.911331][T19373] loop6: detected capacity change from 0 to 1024 [ 1209.013287][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1209.028010][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1209.044027][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1209.054472][ T49] hfsplus: b-tree write err: -5, ino 26 [ 1209.151034][T10311] acrux 0003:1A34:0802.001F: unknown global tag 0xd [ 1209.171317][T10311] acrux 0003:1A34:0802.001F: item 0 1 1 13 parsing failed [ 1209.199490][T10311] acrux 0003:1A34:0802.001F: parse failed [ 1209.205369][T10311] acrux: probe of 0003:1A34:0802.001F failed with error -22 [ 1209.273635][T19381] loop5: detected capacity change from 0 to 4096 [ 1209.289414][T19381] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1209.403211][ T5761] usb 2-1: USB disconnect, device number 86 [ 1209.615997][T19381] ntfs3: loop5: ino=9, attr_set_size [ 1209.632904][T19404] loop3: detected capacity change from 0 to 512 [ 1209.641112][T19381] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1209.653883][T19404] EXT4-fs: Ignoring removed orlov option [ 1209.671767][T19404] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1209.717872][T19404] EXT4-fs (loop3): 1 orphan inode deleted [ 1209.724332][T19404] EXT4-fs (loop3): 1 truncate cleaned up [ 1209.749528][T19404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1209.843096][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.065760][T19420] QAT: Invalid ioctl 21531 [ 1210.112437][T19425] loop1: detected capacity change from 0 to 1024 [ 1210.131838][T19425] EXT4-fs: Ignoring removed bh option [ 1210.187689][T19425] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1210.254518][T19425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1210.419122][T17826] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1210.449821][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.502066][T19446] loop5: detected capacity change from 0 to 256 [ 1210.522914][T19446] exfat: Deprecated parameter 'utf8' [ 1210.568186][T19446] exfat: Deprecated parameter 'utf8' [ 1210.621110][T17826] usb 7-1: Using ep0 maxpacket: 32 [ 1210.632496][T17826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.661706][T17826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.673813][T17826] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1210.698115][T19446] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1210.719375][T17826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.748395][T17826] usb 7-1: config 0 descriptor?? [ 1211.016359][T19470] loop3: detected capacity change from 0 to 256 [ 1211.039397][T19470] exfat: Deprecated parameter 'utf8' [ 1211.060729][T19470] exfat: Deprecated parameter 'utf8' [ 1211.105651][T19470] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1211.222199][T17826] nintendo 0003:057E:200E.0020: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.6-1/input0 [ 1211.279683][T19486] vivid-000: ================= START STATUS ================= [ 1211.321668][T19486] vivid-000: Radio HW Seek Mode: [ 1211.321744][T17826] nintendo 0003:057E:200E.0020: Failed charging grip handshake [ 1211.349621][T17826] nintendo 0003:057E:200E.0020: Failed to initialize controller; ret=-110 [ 1211.360989][T19486] Bounded [ 1211.364024][T19486] vivid-000: Radio Programmable HW Seek: false [ 1211.376825][T17826] nintendo 0003:057E:200E.0020: probe - fail = -110 [ 1211.395952][T17826] nintendo: probe of 0003:057E:200E.0020 failed with error -110 [ 1211.432278][T19486] vivid-000: RDS Rx I/O Mode: Block I/O [ 1211.450395][T17826] usb 7-1: USB disconnect, device number 2 [ 1211.463238][T19486] vivid-000: Generate RBDS Instead of RDS: false [ 1211.487820][T19486] vivid-000: RDS Reception: false [ 1211.507431][T19486] vivid-000: RDS Program Type: 0 inactive [ 1211.519871][T19486] vivid-000: RDS PS Name: inactive [ 1211.549663][T19486] vivid-000: RDS Radio Text: inactive [ 1211.575161][T19486] vivid-000: RDS Traffic Announcement: false inactive [ 1211.607615][T19486] vivid-000: RDS Traffic Program: false inactive [ 1211.614064][T19486] vivid-000: RDS Music: false inactive [ 1211.640756][T19486] vivid-000: ================== END STATUS ================== [ 1212.369769][T19533] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1212.376305][T19533] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1212.401200][T19533] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1212.414393][T19533] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1212.414448][T19533] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1212.414494][T19533] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1212.414541][T19533] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1212.414631][T19533] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1212.414676][T19533] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1212.414720][T19533] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1212.414800][T19533] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1212.414845][T19533] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1212.414889][T19533] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 1212.414971][T19533] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1212.415017][T19533] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1212.415061][T19533] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1212.415106][T19533] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1212.415151][T19533] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 1213.123164][T19570] loop1: detected capacity change from 0 to 512 [ 1213.180221][T19570] EXT4-fs error (device loop1): __ext4_iget:5078: inode #11: block 1: comm syz.1.12685: invalid block [ 1213.214494][T19580] loop6: detected capacity change from 0 to 1024 [ 1213.222205][T19580] EXT4-fs: Ignoring removed bh option [ 1213.232332][T19570] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.12685: couldn't read orphan inode 11 (err -117) [ 1213.261584][T19570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1213.292049][T19580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1213.377250][T10311] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1213.474308][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.513848][T16891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1213.592868][T19591] loop5: detected capacity change from 0 to 128 [ 1213.606404][T10311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.620522][T10311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.664435][T10311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.718644][T10311] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1213.742311][T10311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.772374][T10311] usb 4-1: config 0 descriptor?? [ 1213.855593][T19604] netlink: 'syz.6.12692': attribute type 4 has an invalid length. [ 1214.242904][T10311] wacom 0003:056A:0000.0021: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 1214.276203][T10311] wacom 0003:056A:0000.0021: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0 [ 1214.325345][T10311] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0021/input/input63 [ 1214.495045][T10311] usb 4-1: USB disconnect, device number 95 [ 1214.530147][T19628] fido_id[19628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1214.546468][T19640] loop6: detected capacity change from 0 to 1024 [ 1214.558805][T19640] EXT4-fs: Ignoring removed bh option [ 1214.621969][T19640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1214.724114][T16891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.881888][T19662] loop6: detected capacity change from 0 to 256 [ 1214.905489][T19662] exfat: Deprecated parameter 'namecase' [ 1214.932594][T19662] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1215.048770][T19667] loop5: detected capacity change from 0 to 64 [ 1215.379056][T19689] loop3: detected capacity change from 0 to 64 [ 1216.025304][T19720] loop6: detected capacity change from 0 to 512 [ 1216.058963][T19720] EXT4-fs: Ignoring removed bh option [ 1216.084994][T19720] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1216.107633][T19720] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1216.176785][T19720] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.12715: inode has both inline data and extents flags [ 1216.229629][T19720] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.12715: couldn't read orphan inode 15 (err -117) [ 1216.308507][T19720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1216.462581][T16891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.584045][T19705] loop1: detected capacity change from 0 to 32768 [ 1216.622603][T19705] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1216.683152][T19705] XFS (loop1): Ending clean mount [ 1216.715518][T19705] XFS (loop1): syz.1.12711 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 1216.782865][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1217.408223][T19765] netlink: 'syz.3.12724': attribute type 3 has an invalid length. [ 1217.555170][T19737] loop5: detected capacity change from 0 to 40427 [ 1217.572482][T19759] loop6: detected capacity change from 0 to 32768 [ 1217.622700][T19737] F2FS-fs (loop5): invalid crc value [ 1217.686651][T19737] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1217.723276][T19785] loop3: detected capacity change from 0 to 16 [ 1217.731278][T19759] XFS (loop6): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 1217.792649][T19785] erofs: (device loop3): mounted with root inode @ nid 36. [ 1217.875993][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1217.886217][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1217.906149][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1217.915600][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1217.928977][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1217.938389][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1217.947722][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1217.956532][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1217.966850][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1217.976808][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1217.986230][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1217.996008][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.030130][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.039627][T19737] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1218.074909][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.104993][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.137832][T16891] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1218.157625][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.166496][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.218416][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.224863][T19737] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 1218.240423][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.267958][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.283330][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.306910][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.367983][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.399649][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.429142][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.454373][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.508044][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.517019][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.556223][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.593262][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.627995][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.636909][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.716756][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.753410][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.770234][T19805] loop1: detected capacity change from 0 to 64 [ 1218.788974][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.816745][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.881917][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.938526][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1218.970956][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.018012][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.026980][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.086952][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.105110][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.115420][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.133152][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.142752][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.169861][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.198529][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.219339][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.238356][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.258924][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.275864][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.298217][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.338109][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.357931][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.366968][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.384172][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.395094][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.404661][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.415102][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.440460][T26419] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1219.459825][T19821] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1219.469146][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.492503][T19821] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1219.499988][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.521640][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.529164][T19821] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1219.543255][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.556607][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.568971][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.574591][T19821] ntfs: volume version 3.1. [ 1219.585699][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.596958][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.613339][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.624684][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.644239][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.652828][T26419] usb 2-1: Using ep0 maxpacket: 16 [ 1219.666205][T26419] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 1219.674736][T26419] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1219.688576][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.696838][T26419] usb 2-1: config 0 has no interface number 0 [ 1219.709535][T26419] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1219.725354][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.740577][T26419] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1219.759332][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.776329][T26419] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1219.814754][T26419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.823510][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.836550][T26419] usb 2-1: Product: syz [ 1219.842572][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.856817][T26419] usb 2-1: Manufacturer: syz [ 1219.864451][T26419] usb 2-1: SerialNumber: syz [ 1219.873810][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.898324][T26419] usb 2-1: config 0 descriptor?? [ 1219.904492][T19816] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1219.917780][T16891] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1219.929659][T19816] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1219.938040][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.947031][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.958097][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.966988][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.977854][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1219.989738][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.002019][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.019328][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.044531][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.089227][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.110899][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.135562][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.159328][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.184906][T19816] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1220.191888][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.205799][T19816] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1220.228279][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.257725][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.287544][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.296891][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.325822][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.349110][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.369251][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.397791][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.407345][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.416707][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.426962][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.436851][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.459937][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.470031][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.479539][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.489068][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.504580][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.514025][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.525245][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.534705][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.544038][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.558072][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.568099][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.577636][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.586785][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.597032][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.606669][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.616131][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.630891][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.657445][T26419] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1220.674816][T26419] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1220.688598][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.714396][T26419] asix: probe of 2-1:0.251 failed with error -71 [ 1220.722100][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.740879][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.750290][T26419] usb 2-1: USB disconnect, device number 87 [ 1220.762240][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.771976][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.782998][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.792319][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.819566][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.844193][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.863174][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.884174][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.904023][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.943110][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.963116][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1220.982596][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.003965][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.025822][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.036447][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.049275][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.063734][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.085979][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.098938][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.108250][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.123792][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.133070][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.142406][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.151901][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.173109][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.183235][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.193356][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.212799][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.262608][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.296920][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.323591][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.348054][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.364281][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.408927][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.434044][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.459837][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.492430][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.511768][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.538109][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.547026][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.569150][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.595907][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.620288][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.638112][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.646989][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.678112][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.697695][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.706591][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.754691][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.798294][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.817812][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.826751][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.855270][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.884532][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.909621][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.935038][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.962196][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1221.988099][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.002549][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.045856][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.068549][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.087878][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.096801][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.126008][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.159454][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.176532][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.208813][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.228290][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.245708][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.260193][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.269494][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.279030][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.288378][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.297970][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.307948][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.329582][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.344476][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.359690][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.386267][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.407002][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.427376][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.449246][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.464821][T19869] set_capacity_and_notify: 1 callbacks suppressed [ 1222.464838][T19869] loop1: detected capacity change from 0 to 40427 [ 1222.483760][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.494809][T19869] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 1222.495144][T19898] loop6: detected capacity change from 0 to 256 [ 1222.512841][T19869] F2FS-fs (loop1): invalid crc value [ 1222.521683][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.543104][T19869] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1222.554300][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.583456][T19898] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1222.615154][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.646397][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.681324][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.691770][T19869] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1222.720215][ T28] audit: type=1800 audit(1777546726.566:5702): pid=19898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12754" name="file1" dev="loop6" ino=1048876 res=0 errno=0 [ 1222.725774][T19898] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008) [ 1222.753530][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.773711][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.793948][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.806238][T19898] exFAT-fs (loop6): Filesystem has been set read-only [ 1222.827732][T19898] exFAT-fs (loop6): error, failed to bmap (inode : ffff88807710c8e0 iblock : 8, err : -5) [ 1222.839632][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.868813][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.877595][T19898] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008) [ 1222.899350][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.907848][T19898] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008) [ 1222.930810][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.949943][ T5773] bio_check_eod: 22 callbacks suppressed [ 1222.949959][ T5773] syz-executor: attempt to access beyond end of device [ 1222.949959][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1222.960124][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1222.998388][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.012252][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.015187][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1223.023608][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.042785][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.088760][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.113199][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.138209][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.192637][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.205414][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.223817][T19909] loop6: detected capacity change from 0 to 128 [ 1223.229952][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.251606][T19909] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1223.261685][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.287503][T19911] loop5: detected capacity change from 0 to 512 [ 1223.295130][T19911] EXT4-fs: Ignoring removed bh option [ 1223.300042][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.331134][T19909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1223.346704][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.380693][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.399967][T19911] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1223.406816][T19911] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1223.407850][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.465776][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.495324][T19911] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.12756: inode has both inline data and extents flags [ 1223.540544][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.567035][T19911] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.12756: couldn't read orphan inode 15 (err -117) [ 1223.585985][ T5777] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 1223.594107][T19911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1223.732587][T15437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.950164][T19931] loop5: detected capacity change from 0 to 1024 [ 1223.989877][T19931] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1224.107903][T19931] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 2: comm syz.5.12759: lblock 2 mapped to illegal pblock 2 (length 1) [ 1224.132414][T19931] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1224.213011][T19931] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 48: comm syz.5.12759: lblock 0 mapped to illegal pblock 48 (length 1) [ 1224.320624][T19931] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1224.367352][T19931] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.12759: Failed to acquire dquot type 0 [ 1224.437831][ T2949] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 1224.438792][T19931] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1224.468628][ T2949] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.504850][T19931] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.12759: mark_inode_dirty error [ 1224.567877][T19931] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1224.597218][T19931] EXT4-fs (loop5): 1 orphan inode deleted [ 1224.618028][T19931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.647197][T27939] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1224.713206][T27939] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1224.750500][T27939] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 1224.799770][ T2949] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.826370][T19931] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1224.876254][T19931] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1224.892225][T19931] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 48: comm syz.5.12759: lblock 0 mapped to illegal pblock 48 (length 1) [ 1224.935618][T19931] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 1224.957527][T19931] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1225.032529][ T2949] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.063480][T15437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.265860][ T2949] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.369754][T19962] loop1: detected capacity change from 0 to 64 [ 1225.434311][T19966] loop5: detected capacity change from 0 to 512 [ 1225.491291][T19966] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1225.580024][T19966] EXT4-fs (loop5): 1 truncate cleaned up [ 1225.692430][T19966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1225.768286][T19947] loop6: detected capacity change from 0 to 32768 [ 1225.797513][ T28] audit: type=1800 audit(1777546729.626:5703): pid=19966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12768" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 1225.885552][T19947] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1225.896831][ T2949] ~ÿ: left promiscuous mode [ 1225.919402][T19947] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1225.948790][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1225.967283][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1225.978865][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1225.992291][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1226.013955][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1226.023385][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1226.347218][ T2949] tipc: Disabling bearer [ 1226.358220][T19947] XFS (loop6): Ending clean mount [ 1226.376559][ T2949] tipc: Left network mode [ 1226.416894][T15437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.447893][T19947] XFS (loop6): Quotacheck needed: Please wait. [ 1226.557911][T19947] XFS (loop6): Quotacheck: Done. [ 1226.869567][T16891] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1227.170643][T20035] tipc: Enabling of bearer rejected, failed to enable media [ 1227.384246][T20050] loop5: detected capacity change from 0 to 512 [ 1227.518860][T20050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.646885][T26419] IPVS: starting estimator thread 0... [ 1227.738457][T20062] IPVS: using max 17 ests per chain, 40800 per kthread [ 1227.856938][T15437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.118872][ T51] Bluetooth: hci3: command tx timeout [ 1228.273950][T20106] netlink: 766 bytes leftover after parsing attributes in process `syz.1.12782'. [ 1228.381606][T27939] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1228.668480][T19987] chnl_net:caif_netlink_parms(): no params data found [ 1229.064914][ T2949] dvmrp0 (unregistering): left allmulticast mode [ 1229.155884][T20168] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12786'. [ 1229.377735][T17826] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1229.602950][T17826] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1229.623898][T20202] loop6: detected capacity change from 0 to 8192 [ 1229.636560][T19987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.647680][T17826] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1229.655836][T17826] usb 6-1: Product: syz [ 1229.672116][T19987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.685513][T17826] usb 6-1: Manufacturer: syz [ 1229.694887][T20202] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1229.712513][T19987] bridge_slave_0: entered allmulticast mode [ 1229.723647][T17826] usb 6-1: SerialNumber: syz [ 1229.738804][T19987] bridge_slave_0: entered promiscuous mode [ 1229.757486][T17826] usb 6-1: config 0 descriptor?? [ 1229.789606][T20202] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 1229.828315][T20202] REISERFS (device loop6): using ordered data mode [ 1229.834903][T20202] reiserfs: using flush barriers [ 1229.842704][T20202] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1229.861218][T20202] REISERFS (device loop6): checking transaction log (loop6) [ 1229.906101][T19987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.934135][T19987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.959583][T19987] bridge_slave_1: entered allmulticast mode [ 1229.981492][T19987] bridge_slave_1: entered promiscuous mode [ 1230.129939][T20202] REISERFS (device loop6): Using tea hash to sort names [ 1230.145719][T20202] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1230.166320][T17826] usb 6-1: USB disconnect, device number 6 [ 1230.197217][ T51] Bluetooth: hci3: command tx timeout [ 1230.301445][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1230.419670][T19987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.481050][T19987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.709051][T20295] loop1: detected capacity change from 0 to 512 [ 1230.718041][T20295] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1230.771730][T20295] EXT4-fs (loop1): 1 truncate cleaned up [ 1230.848817][T20295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1231.007384][ T28] audit: type=1800 audit(1777546734.826:5704): pid=20295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12793" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 1231.104077][T19987] team0: Port device team_slave_0 added [ 1231.154662][T19987] team0: Port device team_slave_1 added [ 1231.417745][T20336] loop6: detected capacity change from 0 to 1024 [ 1231.455734][T19987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.493556][T20336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1231.500093][T19987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.559997][T20351] loop5: detected capacity change from 0 to 256 [ 1231.592080][T20351] FAT-fs (loop5): Unrecognized mount option "unx_xl!te=1" or missing value [ 1231.601613][T19987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.614797][T19987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.622122][T19987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.678059][T19987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.710021][T20336] EXT4-fs error (device loop6): ext4_search_dir:1549: inode #12: block 7: comm syz.6.12794: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 1231.756203][ T5788] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1231.828440][T20336] EXT4-fs (loop6): Remounting filesystem read-only [ 1231.837748][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.988293][ T2949] hsr_slave_0: left promiscuous mode [ 1232.025344][ T2949] hsr_slave_1: left promiscuous mode [ 1232.032589][T16891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.052834][T20369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12797'. [ 1232.089772][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1232.108026][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.148097][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.155688][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.243949][ T2949] bridge_slave_0: left allmulticast mode [ 1232.253264][ T2949] bridge_slave_0: left promiscuous mode [ 1232.261606][T20375] loop1: detected capacity change from 0 to 512 [ 1232.270581][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.280364][ T51] Bluetooth: hci3: command tx timeout [ 1232.354362][ T2949] batadv0: left allmulticast mode [ 1232.360015][ T2949] batadv0: left promiscuous mode [ 1232.369358][ T2949] veth1_macvtap: left promiscuous mode [ 1232.370614][T20375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.375031][ T2949] veth0_macvtap: left allmulticast mode [ 1232.407252][ T2949] veth0_macvtap: left promiscuous mode [ 1232.427507][ T2949] veth1_vlan: left promiscuous mode [ 1232.541805][T20378] loop6: detected capacity change from 0 to 4096 [ 1232.631947][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.784297][T20378] ntfs3: loop6: ino=5, "/" directory corrupted [ 1232.811912][T20378] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1233.112284][T20351] loop5: detected capacity change from 0 to 32768 [ 1233.188518][T20351] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1233.269342][ T2949] bond5 (unregistering): Released all slaves [ 1233.601893][T20351] XFS (loop5): Ending clean mount [ 1233.788590][T15437] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1233.895264][T20386] loop1: detected capacity change from 0 to 32768 [ 1233.921283][T20414] loop6: detected capacity change from 0 to 2048 [ 1234.023655][T20386] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1234.088724][T20427] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1234.191872][T20386] XFS (loop1): Ending clean mount [ 1234.204890][T20386] XFS (loop1): Quotacheck needed: Please wait. [ 1234.295576][T20386] XFS (loop1): Quotacheck: Done. [ 1234.367653][ T51] Bluetooth: hci3: command tx timeout [ 1234.391884][ T28] audit: type=1800 audit(1777546738.236:5705): pid=20414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12805" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1234.645749][ T2949] bond4 (unregistering): Released all slaves [ 1234.874347][T20441] tmpfs: Cannot disable swap on remount [ 1234.902025][ T2949] bond3 (unregistering): Released all slaves [ 1235.160796][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1235.348214][T17826] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 1235.568420][T17826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1235.579987][T17826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1235.591183][T17826] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1235.669593][T17826] usb 7-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1235.686291][T17826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.734388][T17826] usb 7-1: config 0 descriptor?? [ 1235.742947][T20444] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1235.990533][ T2949] bond2 (unregistering): Released all slaves [ 1236.089287][T20468] binder: 20467:20468 ioctl c0306201 0 returned -14 [ 1236.214944][T20471] loop5: detected capacity change from 0 to 512 [ 1236.241150][T17826] petalynx 0003:18B1:0037.0022: ignoring exceeding usage max [ 1236.253747][T17826] petalynx 0003:18B1:0037.0022: usage index exceeded [ 1236.264951][T17826] petalynx 0003:18B1:0037.0022: item 0 4 2 0 parsing failed [ 1236.276780][T17826] petalynx 0003:18B1:0037.0022: parse failed [ 1236.284113][T17826] petalynx: probe of 0003:18B1:0037.0022 failed with error -22 [ 1236.321193][ T2949] bond1 (unregistering): Released all slaves [ 1236.340797][T20471] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.12814: invalid indirect mapped block 10 (level 1) [ 1236.386116][T20471] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.12814: invalid indirect mapped block 8 (level 1) [ 1236.402339][T20471] EXT4-fs (loop5): 1 truncate cleaned up [ 1236.410408][T20471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.463521][T20471] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 1236.509888][T17826] usb 7-1: USB disconnect, device number 3 [ 1236.588003][T15437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.751958][ T28] audit: type=1326 audit(1777546740.596:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20462 comm="syz.1.12811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f859ad9cdd9 code=0x7fc00000 [ 1237.201389][T20508] loop6: detected capacity change from 0 to 64 [ 1238.201492][T20521] loop5: detected capacity change from 0 to 32768 [ 1238.304538][T20521] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1238.554262][T20516] loop6: detected capacity change from 0 to 40427 [ 1238.605391][T20516] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 1238.624950][T20516] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1238.679108][T20516] F2FS-fs (loop6): invalid crc value [ 1238.726042][T20521] XFS (loop5): Ending clean mount [ 1239.031882][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.038510][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.057826][T15437] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1239.091252][T20516] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1239.107164][T20516] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1239.958367][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 1240.406470][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 1241.010096][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.564697][T20552] loop1: detected capacity change from 0 to 262144 [ 1241.619920][T20552] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1241.676001][T20552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1241.706436][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.147326][ T27] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1242.243823][T20569] loop5: detected capacity change from 0 to 32768 [ 1242.271128][T20569] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop5 scanned by syz.5.12832 (20569) [ 1242.343716][T20569] BTRFS info (device loop5): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1242.387921][T20569] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1242.409737][ T27] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 1242.418145][ T27] usb 7-1: config 0 has no interface number 0 [ 1242.424325][ T27] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1242.437176][T20569] BTRFS info (device loop5): using free space tree [ 1242.470182][ T27] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1242.484854][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.494777][ T27] usb 7-1: Product: syz [ 1242.537114][ T27] usb 7-1: Manufacturer: syz [ 1242.541890][ T27] usb 7-1: SerialNumber: syz [ 1242.586695][ T27] usb 7-1: config 0 descriptor?? [ 1242.715348][ T27] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 1242.877424][T20569] BTRFS info (device loop5): enabling ssd optimizations [ 1242.884559][T20569] BTRFS info (device loop5): auto enabling async discard [ 1242.990531][ T5761] usb 7-1: USB disconnect, device number 4 [ 1243.012566][ T5761] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 1243.163395][T15437] BTRFS info (device loop5): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1243.374547][ T2949] team0 (unregistering): Port device bridge0 removed [ 1243.599034][ T2949] bond0 (unregistering): Released all slaves [ 1243.996326][T20632] loop6: detected capacity change from 0 to 65 [ 1244.070047][T20632] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1244.115427][T20632] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1244.434459][T20642] loop5: detected capacity change from 0 to 64 [ 1244.813823][T19987] hsr_slave_0: entered promiscuous mode [ 1244.846143][T20679] tipc: Can't bind to reserved service type 1 [ 1244.853321][T19987] hsr_slave_1: entered promiscuous mode [ 1244.874765][T19987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1244.911472][T19987] Cannot create hsr debugfs directory [ 1244.976855][T20686] loop6: detected capacity change from 0 to 1024 [ 1245.524414][ T28] audit: type=1326 audit(1777546749.366:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20756 comm="syz.5.12847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1245.581746][ T28] audit: type=1326 audit(1777546749.366:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20756 comm="syz.5.12847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1245.637949][ T28] audit: type=1326 audit(1777546749.366:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20756 comm="syz.5.12847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1245.663314][ T28] audit: type=1326 audit(1777546749.396:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20756 comm="syz.5.12847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1245.686901][T20774] netlink: 'syz.6.12846': attribute type 10 has an invalid length. [ 1245.720507][T20774] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1245.735984][ T28] audit: type=1326 audit(1777546749.396:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20756 comm="syz.5.12847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1245.763749][T20774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1245.814246][ T28] audit: type=1326 audit(1777546749.396:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20756 comm="syz.5.12847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1245.904247][ T28] audit: type=1326 audit(1777546749.396:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20756 comm="syz.5.12847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1245.953431][T20776] loop1: detected capacity change from 0 to 1024 [ 1246.025307][ T28] audit: type=1326 audit(1777546749.396:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20756 comm="syz.5.12847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1246.077281][ T28] audit: type=1326 audit(1777546749.396:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20756 comm="syz.5.12847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1246.125741][T19987] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1246.174690][ T28] audit: type=1326 audit(1777546749.406:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20756 comm="syz.5.12847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f742db9cdd9 code=0x7ffc0000 [ 1246.211109][T19987] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1246.240265][T19987] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1246.291017][T19987] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1246.422186][ T2949] IPVS: stop unused estimator thread 0... [ 1246.592472][T20808] loop6: detected capacity change from 0 to 1024 [ 1246.684714][T19987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1246.738328][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1246.775529][T19987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1246.833140][T16033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.840436][T16033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1246.893436][T16033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.900901][T16033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.937876][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1246.946721][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1246.961025][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1247.011874][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1247.063671][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1247.111546][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1247.151306][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1247.187614][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1247.208123][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.232894][ T9] usbtmc: probe of 2-1:16.0 failed with error -22 [ 1247.327620][ T5761] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1247.469012][ T9] usb 2-1: USB disconnect, device number 88 [ 1247.532009][ T5761] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1247.553799][ T5761] usb 7-1: config 0 has no interface number 0 [ 1247.577024][ T5761] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1247.602203][ T5761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.615168][ T5761] usb 7-1: Product: syz [ 1247.619760][ T5761] usb 7-1: Manufacturer: syz [ 1247.624407][ T5761] usb 7-1: SerialNumber: syz [ 1247.634714][ T5761] usb 7-1: config 0 descriptor?? [ 1247.647510][ T23] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1247.654500][ T5761] usb 7-1: selecting invalid altsetting 1 [ 1247.661604][ T5761] dvb_ttusb_budget: ttusb_init_controller: error [ 1247.671296][ T5761] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1247.705133][T19987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.843943][ T5761] DVB: Unable to find symbol stv0299_attach() [ 1247.859276][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.898699][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.918530][ T23] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1247.939984][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.963363][ T23] usb 6-1: config 0 descriptor?? [ 1248.046252][ T5761] DVB: Unable to find symbol tda8083_attach() [ 1248.057262][ T9] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 1248.075196][ T5761] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1248.098660][ T5761] usb 7-1: USB disconnect, device number 5 [ 1248.261355][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1248.277592][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1248.302027][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1248.328109][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 1248.351051][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1248.370576][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1248.397243][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1248.414549][ T23] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 1248.437951][ T23] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 1248.444828][ T23] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 1248.461290][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.471021][ T23] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 1248.489853][ T23] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 1248.496729][ T23] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 1248.510114][T19987] veth0_vlan: entered promiscuous mode [ 1248.526549][ T9] usbtmc 2-1:16.0: bulk endpoints not found [ 1248.527497][ T23] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 1248.582970][ T23] arvo 0003:1E7D:30D4.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 1248.583004][T19987] veth1_vlan: entered promiscuous mode [ 1248.652904][ T23] arvo 0003:1E7D:30D4.0023: couldn't init struct arvo_device [ 1248.715150][ T23] arvo 0003:1E7D:30D4.0023: couldn't install keyboard [ 1248.743587][ T23] arvo: probe of 0003:1E7D:30D4.0023 failed with error -71 [ 1248.773102][T19987] veth0_macvtap: entered promiscuous mode [ 1248.795710][ T23] usb 6-1: USB disconnect, device number 7 [ 1248.828277][T19987] veth1_macvtap: entered promiscuous mode [ 1248.834896][ T9] usb 2-1: USB disconnect, device number 89 [ 1248.916655][T20914] fido_id[20914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1248.971223][T19987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.015938][T19987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.033057][T19987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.044348][T19987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.057186][T19987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.075554][T19987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.089426][T19987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.104164][T19987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.115522][T19987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.134586][T19987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.143603][T20937] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12859'. [ 1249.160033][T20937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12859'. [ 1249.189899][T19987] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.199477][T19987] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.227552][T19987] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.236336][T19987] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.486435][T16033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.501893][T16033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1249.606990][T16033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1249.634100][T16033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.724209][T20945] loop6: detected capacity change from 0 to 32768 [ 1250.919793][T20962] loop5: detected capacity change from 0 to 131072 [ 1250.939096][T20962] F2FS-fs (loop5): Test dummy encryption mode enabled [ 1250.951118][T20945] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1250.961823][T20962] F2FS-fs (loop5): invalid crc value [ 1251.007981][T20962] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1251.059041][T20962] F2FS-fs (loop5): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 1251.073194][T20962] F2FS-fs (loop5): Failed to read root inode [ 1251.401619][T20945] XFS (loop6): Ending clean mount [ 1251.664209][T16891] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1252.464674][T21040] ieee802154 phy0 wpan0: encryption failed: -22 [ 1252.743883][T21047] Bluetooth: MGMT ver 1.22 [ 1252.987833][T21052] loop6: detected capacity change from 0 to 512 [ 1253.074363][T21052] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1253.166627][T21052] EXT4-fs (loop6): 1 truncate cleaned up [ 1253.208429][T21052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1253.245189][T21024] loop7: detected capacity change from 0 to 32768 [ 1253.326257][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1253.326275][ T28] audit: type=1800 audit(1777546757.166:5739): pid=21052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12878" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 1253.491465][T21024] JBD2: Ignoring recovery information on journal [ 1253.582440][T21024] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1254.252003][T19987] ocfs2: Unmounting device (7,7) on (node local) [ 1254.860641][T21073] loop1: detected capacity change from 0 to 131072 [ 1254.883506][T21073] F2FS-fs (loop1): Test dummy encryption mode enabled [ 1254.894397][T21073] F2FS-fs (loop1): invalid crc value [ 1254.935687][T21073] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1254.988704][T21073] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 1254.998633][T21073] F2FS-fs (loop1): Failed to read root inode [ 1255.083012][T16891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.337649][T21100] ipvlan2: entered promiscuous mode [ 1255.344820][T21100] bridge0: port 3(ipvlan2) entered blocking state [ 1255.357794][T21100] bridge0: port 3(ipvlan2) entered disabled state [ 1255.370841][T21100] ipvlan2: entered allmulticast mode [ 1255.386496][T21100] bridge0: entered allmulticast mode [ 1255.400903][T21100] ipvlan2: left allmulticast mode [ 1255.429787][T21100] bridge0: left allmulticast mode [ 1255.557910][T26419] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1255.765334][T26419] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1255.816731][T26419] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.847241][T26419] usb 8-1: Product: syz [ 1255.851485][T26419] usb 8-1: Manufacturer: syz [ 1255.876136][T26419] usb 8-1: SerialNumber: syz [ 1255.896185][T26419] usb 8-1: config 0 descriptor?? [ 1255.943060][T26419] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1255.982089][T26419] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1256.019849][T26419] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1256.077240][T26419] usb 8-1: media controller created [ 1256.216443][T26419] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1256.444990][T15445] Bluetooth: hci0: command 0x0406 tx timeout [ 1256.485521][T26419] DVB: Unable to find symbol mt352_attach() [ 1256.769641][T26419] DVB: Unable to find symbol nxt6000_attach() [ 1256.775801][T26419] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1256.862135][T26419] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input66 [ 1256.873559][T21156] loop1: detected capacity change from 0 to 1024 [ 1256.925565][T21156] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1256.956730][T26419] dvb-usb: schedule remote query interval to 1000 msecs. [ 1257.003978][T21156] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.12892: lblock 2 mapped to illegal pblock 2 (length 1) [ 1257.007606][T26419] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1257.033291][T21156] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1257.045425][T21156] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.12892: lblock 0 mapped to illegal pblock 48 (length 1) [ 1257.093832][T26419] dvb-usb: bulk message failed: -22 (7/0) [ 1257.110452][T21156] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1257.127773][T26419] dvb-usb: bulk message failed: -22 (7/0) [ 1257.172033][T26419] usb 8-1: USB disconnect, device number 2 [ 1257.178360][T21156] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.12892: Failed to acquire dquot type 0 [ 1257.271133][T21156] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 1257.325158][T21156] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.12892: mark_inode_dirty error [ 1257.371957][T26419] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1257.398725][T21156] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1257.448785][T21156] EXT4-fs (loop1): 1 orphan inode deleted [ 1257.455853][T21156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1257.481061][T27939] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1257.531810][T27939] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1257.583885][T27939] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 1257.629516][T21156] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1257.676100][T21156] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1257.716475][T21156] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.12892: lblock 0 mapped to illegal pblock 48 (length 1) [ 1257.747320][T21156] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 1257.769634][T21156] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1257.827543][T21137] loop6: detected capacity change from 0 to 32768 [ 1257.895035][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.269562][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12899'. [ 1258.287279][T21203] netlink: 'syz.1.12899': attribute type 2 has an invalid length. [ 1258.458729][T21211] loop1: detected capacity change from 0 to 64 [ 1258.528151][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12901'. [ 1258.547266][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12901'. [ 1258.556293][T21215] netlink: 'syz.7.12901': attribute type 15 has an invalid length. [ 1258.616902][T16033] ------------[ cut here ]------------ [ 1258.622668][T16033] kernel BUG at fs/hfs/inode.c:449! [ 1258.677312][T16033] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1258.683482][T16033] CPU: 1 PID: 16033 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1258.691135][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1258.701229][T16033] Workqueue: writeback wb_workfn (flush-7:1) [ 1258.707280][T16033] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 1258.712859][T16033] Code: c7 c1 00 03 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 03 31 97 e8 f0 f9 83 ff e9 62 fe ff ff e8 d6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 1258.732478][T16033] RSP: 0018:ffffc90004c4f340 EFLAGS: 00010293 [ 1258.738571][T16033] RAX: ffffffff825b5f2a RBX: ffff888076645ca8 RCX: ffff88802c861e00 [ 1258.746564][T16033] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 1258.754581][T16033] RBP: ffffc90004c4f4d0 R08: ffff88802c861e00 R09: 0000000000000003 [ 1258.762611][T16033] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 1258.770634][T16033] R13: 1ffff92000989e6c R14: ffff888076645c58 R15: 0000000000000000 [ 1258.778650][T16033] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1258.787613][T16033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1258.794223][T16033] CR2: 00007efe365ca4c0 CR3: 0000000061ef1000 CR4: 00000000003506e0 [ 1258.802226][T16033] Call Trace: [ 1258.805539][T16033] [ 1258.808499][T16033] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1258.813906][T16033] ? __rwlock_init+0x150/0x150 [ 1258.818717][T16033] __writeback_single_inode+0x705/0xec0 [ 1258.824291][T16033] writeback_sb_inodes+0x7cd/0xf50 [ 1258.829442][T16033] ? queue_io+0x550/0x550 [ 1258.833807][T16033] ? rcu_is_watching+0x15/0xb0 [ 1258.838616][T16033] wb_writeback+0x46a/0xbf0 [ 1258.843170][T16033] ? queue_io+0x3b1/0x550 [ 1258.847553][T16033] ? percpu_ref_tryget+0x250/0x250 [ 1258.852703][T16033] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1258.858736][T16033] ? _raw_spin_unlock_irq+0x23/0x50 [ 1258.863975][T16033] wb_workfn+0x400/0xe60 [ 1258.868265][T16033] ? inode_wait_for_writeback+0x230/0x230 [ 1258.874022][T16033] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1258.880031][T16033] ? read_lock_is_recursive+0x20/0x20 [ 1258.885431][T16033] ? _raw_spin_unlock_irq+0x23/0x50 [ 1258.890665][T16033] ? process_scheduled_works+0x96f/0x15d0 [ 1258.896410][T16033] ? process_scheduled_works+0x96f/0x15d0 [ 1258.902159][T16033] process_scheduled_works+0xa5d/0x15d0 [ 1258.907745][T16033] ? worker_attach_to_pool+0x380/0x380 [ 1258.913234][T16033] ? assign_work+0x3d2/0x5d0 [ 1258.917857][T16033] worker_thread+0xa55/0xfc0 [ 1258.922473][T16033] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1258.928402][T16033] ? _raw_spin_unlock+0x40/0x40 [ 1258.933280][T16033] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1258.939234][T16033] kthread+0x2fa/0x390 [ 1258.943358][T16033] ? pr_cont_work+0x560/0x560 [ 1258.948070][T16033] ? kthread_blkcg+0xd0/0xd0 [ 1258.952693][T16033] ret_from_fork+0x48/0x80 [ 1258.957148][T16033] ? kthread_blkcg+0xd0/0xd0 [ 1258.961792][T16033] ret_from_fork_asm+0x11/0x20 [ 1258.966595][T16033] [ 1258.969636][T16033] Modules linked in: [ 1258.988824][T16033] ---[ end trace 0000000000000000 ]--- [ 1258.994357][T16033] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 1259.000409][T16033] Code: c7 c1 00 03 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 03 31 97 e8 f0 f9 83 ff e9 62 fe ff ff e8 d6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 1259.020706][T16033] RSP: 0018:ffffc90004c4f340 EFLAGS: 00010293 [ 1259.026879][T16033] RAX: ffffffff825b5f2a RBX: ffff888076645ca8 RCX: ffff88802c861e00 [ 1259.036216][T16033] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 1259.045066][T16033] RBP: ffffc90004c4f4d0 R08: ffff88802c861e00 R09: 0000000000000003 [ 1259.054571][T16033] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 1259.062889][T16033] R13: 1ffff92000989e6c R14: ffff888076645c58 R15: 0000000000000000 [ 1259.071133][T16033] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1259.080535][T16033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1259.089203][T16033] CR2: 00007fb36b84f0d1 CR3: 000000002e1d0000 CR4: 00000000003506e0 [ 1259.104318][T16033] Kernel panic - not syncing: Fatal exception [ 1259.111107][T16033] Kernel Offset: disabled [ 1259.115453][T16033] Rebooting in 86400 seconds..