last executing test programs: 3m36.846023766s ago: executing program 2 (id=4613): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000180)) 3m36.480222768s ago: executing program 2 (id=4618): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) 3m33.545079781s ago: executing program 2 (id=4648): setresuid(0xee00, 0xee01, 0xee01) setreuid(0xee01, 0x0) 3m33.296491345s ago: executing program 2 (id=4654): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000001240)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x2}}, {@quota}, {@noquota}, {@discard}]}, 0x1, 0x6142, &(0x7f0000009100)="$eJzs3c1vHGcdB/Df7JtfQtKoh6pECLlteCmleS0hUKDpAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqqVON/TzOeLKbtet4Z+35fCRn5rfPzO4z/u54dzMz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/+0U/PFxFx7TfphpMRX4h+RC9iqapXImJp5WRefhARL8Zmc7wQEcOFiGr9zX+ei3gjIj4+EfHw0b3V6uYLu+zHD//6rz/97NhP/vmX4dn//+1O/81Jy929+/v//f3+/rYZAAAAuqYsy7JIH/NPpc/3vbY7BQDMRH79L5N8u3ru6vU5649arVarD2FdV453v15ExHp9neo9g8PxAHDIrMcnbXeBFsm/0wYRcaztTgBzrWi7AxyIh4/urRYp36L+erCy1Z7PBdmR/3qxfX3HpOk0zXNMZvX82oh+PD+hP0sz6sM8yfn3mvlf22ofpeUOOv9ZmZT/aOvSp87J+feb+Tccnfx7Y/Pvqpz/YE/59+UPAAAAAABzLP///8mWj/8u7H9TduVpx39XZtQHAAAAAAAAAHjW9jv+3zbj/wEAAMDcqj6rV/5w4vFtk76Lrbr9ahFxvLE80DHpYpnltvsBAAAAAAAAAAAAAF0y2DqH92oRMYyI48vLZVlWP3XNeq/2u/5h1/Xthy5r+488AABs+fhE41r+ImIxIq6m7/obLi8vl+Xi0nK5XC4t5Pezo4XFcqn2uTZPq9sWRrt4QzwYldWdLdbWq5v2eXlae/P+qscalf1ddGw2WgwcACJi69XooVekI6Ysn4u23+VwONj/jx77P7vR9vMUAAAAOHhlWZZF+jrvU+mYf6/tTgEAM5Ff/5vHBdRqtVqtVh+9uq4c7369iIj1+jrVewbD8QPAIbMen7TdBVok/04bRMSLbXcCmGtF2x3gQDx8dG+1SPkW9deDNL57PhdkR/7rxeZ6ef1x02ma55jM6vm1Ef14fkJ/XphRH+ZJzr/XzP/aVvsoLXfQ+c/KpPyr7TzZQn/alvPvN/NvODr598bm31U5/8Ge8u/LHwAAAAAA5lj+//+Tc3X8d/R5N2eqpx3/XTmwRwUAAAAAAACAg/Xw0b3VfN1rPv7/pTHLuf7zaMr5F/LvpJx/r5H/1xvL9WvzD95+nP9/H91b/fOd/3wxT3eb/0KeKdIzq0jPiCI9UjFI0/1s3ZM2hv1R9UjDotcfpHN+yuG7cSNuxlqc27FsL/0+NtuPP3lfVU+Hm+1lf2v9CzvaB9vt+f4v7mgfpjOdyqXcfiZW45dxM97ZbK/aFnZsf/6lPLY45fdTTmnP+fft/52U8x/Ufqr8l1N70ZhWHnzUe2K/r0/HPc6VG1/+3bmD35ypNqK/vW111fa93EJ/Nn8nx0bx69trt87cvX7nzq3zkSY7br0QafKM5fyH6Wf77/8rW+357359f33w0WjP+c+LjRhMzP+V2ny1va/OuG9tyPmP0k/O/53UPn7/P8z5T97/X2uhPwAAAAAAAAAAAAAAAPA0ZVluXiJ6JSIupet/2ro2EwCYrSvp2yXKJN8+q7o/48dTqw95XcxZf2Zaf1rOV3/U6sNY15XjvVUvIuIf9XUuRcRvx90ZADDPPo2If7fdCVoj/w7L3/dXTU+33Rlgpm5/8OHPr9+8uXbrdts9AQAAAAAAAAA+rzz+50pt/OfTZVnebyy3Y/zXt2Nlv+N/bg9kvT3A6ISBqvt736an2eiN+r3acOMvxaTxv4fbc4/bzz/RtScG5G4YTmkfTWlfmNK+OKV97IUeNTn/l2rjnZ+OiFON4de7MP5rc8z7Lsj5v1x7Plf5f62xXD3/8o+HOf/ejvzP3nn/V2dvf/Dh6zfev/7e2ntrv7h4/vy5i5cuXb58+ey7N26undv6t8UeH6ycfx772nmg3ZLzz5nLv1ty/l9Jtfy7Jef/1VTLv1ty/vn9nvy7JeefP/vIv1ty/q+mWv7dkvP/Rqrl3y05/9dSLf9uyfl/M9V7zH/afz8z53L+r6fa/t8tOf8zqZZ/t+T8z6Z6l/kvHXS/mI2cfz7CZf/vlpx/PrNB/t2S87+Qavl3S87/Yqrl3y05/zdSLf9uyfl/K9Xy75ac/6VUy79bcv7fTrX8uyXnfznV8u+WnP93Ui3/bsn5fzfV8u+WnP+bqZZ/t+T8v5fqPeX/jK/NY/Zy/t9Ptf2/W3L+P0i1/Lsl5/9WquXfLY+//9+MGTNm8kzbf5kAAAAAAAAAAAAAgKZZnE7c9jYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIddb3Az+zN6+dm4GQv5O/gbVjjHE22fUlvtC6mHBtuJVAUtJLbNe7dhZ8i9cuSRrJjgIlEkZFFW3Di7aAojZvKqwqL2gVUF6gVpUqkfYFfYOoUHkRVQEFpEptFbLVnHmeZ2dmZ2d2veP1zDmfj5T84pkzc86ceWZ2v+t8dwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAepveO/3FSpZl1X/yf63Psuur/712bH1+2buu9RECAAAAK/XL/N+v3pQuOLiEG9Vt849v/f7zc3Nzc9mnB/9k+Ktzc+mKsSwbXpNl+XXR5R8/WKnfJngqG60M1P15oMPuBztcP9Th+uEO1490uH5Nh+tHO1y/4AQssLb285j8zrbk/7m+dkqzm7Ph/LotLW71VGXNwED8WU6ukt9mbvhYNpOdyKazyYbta9tW8u1f2FTd14eyuK+Bun1trK6Qnz9xNB5DJZzjLQ37mr/P6KfvycZ+8fMnjv7VuVdubTU7noaG+6sd57bN1eP8fLikdqyVbE06J/E4B+qOc2OL52Sw4Tgr+e2q/918nK8u8TgH5w9zVTU/56PZQP7fL+Xnaaj+x3rpPG0Ml/337VmWXZw/7OZtFuwrG8jWNVwyMP/8jNZWZPU+qkvpjdnQstbppiWs0+qc2tK4TptfE/H53xRuN7TIMdQ/TT99cqTueX9t7krWaVR91Iu9VprXYLdfK72yBuO6eCl/0E+3XINbwuN/Yuvia7Dl2mmxBtPjrluDmzutwYGRwfyY05NQyW8zvwZ3NGw/mO+pks+Xt7ZfgxPnTp6ZmH3s8TtnTh45Pn18+tSuHTsmd+3Zs2/fvoljMyemJ2v/vsKz3fvWZQPpNbA5nLv4GnhH07b1S3XuGyML3n+v9HU42uZ1uL5p226/DoeaH1xldV6QC9d07bXxqepJH700kC3yGsufn+0rfx2mx133Ohyqex22/JrS4nU4tITXYXWbM9uX9j3LUN0/rY5h8a8FK1uD6+vWYPP3I81rsNvfj/TKGhwN6+KH2xf/WrAxHO/T48v9fmRwwRpMDze891QvSd/vj+7LR6t1eVv1iutGsvOz02fvevTIuXNnd2RhrIo31a2V5vW6ru4xZQvW68Cy1+vBmbc+fVuLy9eHczV6Z/Vfo4s+V9Vtdt/V/rnKv7q1Pp8Nl+7Mwuiy1T6frb6aV8/nSJZ97XtP3vedJ7723kXPZzVvfn5i5d+Lp1xa9/47vMj7b8z9r9f2l+7qqcHhodrrdzCdneGG9+PGp2oof++q5Pt+dWJp78fD4Z/Vfj++uc378Yambbv9fjzc/ODi+3Gl0087Vqb5+RwN6+TEZPv34+o2G3Yud00OtX0/vj3MSjj/7wxJIeWiurWz2LpN+xoaGg6PayjuoXGd7mrYfjhks+q+ntt5Zet02+21+xpMj27eaq3TsaZtu71O08++FlunlU4/fbsyzc/naFgXN+9qv06r27y4e+XvnWvjf9a9d450WoPDgyPVYx5OizB/v8/m1sY1eFd2NDudncim8mtH8vVUyfc1fvfS1uBI+Ge13ys3tFmD25q27fYaTF/HFlt7laGFD74Lmp/P0bAunrm7/RqsbvO+vd393nVbuCRtU/e9a/PP1xb7mddtTafpaq2VoXCc39vb/mez1W1O7Ftuzmx/nu4Il1zX4jw1v34Xe01NZatznjaE43xl3+LnqXo81W2+un+J6+lglmUXHrkn/3lv+PuVvz3/g+cb/t6l1d/pXHjknp/dcOwflnP8APS/12tjXe1rXd3fTC3l7/8BAACAvhBz/0CYifwPAAAAhRFzf/y/whP5HwAAAAoj5v6hMJOS5P8N73tl5vULWWrmzwXx+nQa7q1tFzuuk+HPY3Pzqpff8+z0f/39haXteyDLstfu/YOW22+4Nx5XzVg4zsvvb7x8gefvXNK+D99/Ie23vr/+9XD/8fEsdRm0quBOZln2wk1fzvcz9uClfL547+F83nfx6aeq27y6v/bnePuX31Tb/s9D+ffgsSMNt385nIefhDn54dbnI97uW5feuXHvA/P7i7erbL4xf9jPPFS73/h7cr7yVG37eJ4XO/7vfOm5b1W3f/TtrY//wkDr438u3O+zYf7PW2rb1z8H1T/H230hHH/cX7zdXd/8bsvjv/zF2vZnPlDb7nCYcf/bwp+3fOCVmfrz9WjlSMPjyj5Y2y7uf/IHf5RfH+8v3n/z8Y8eutRwPprXx4v/Wrufiabt4+VxP9HfNe2/ej/16zPu/7k/PNxwnjvt//J9L7+ler/N+7+jabszj2zP9z9/f42/sekvvvDllvuLx3Pwb840PJ6Dnwiv47D/Zx4K6zFc/7+Xa/fX/NsVDn+i8f0nbv/19RcaHk/0oV/U9n/53cfzuWZ07brrrr/hxotvq567LHtpTe3+Ou3/+F+ebjj+b9xSOx/x+tjRb97/YuL+z35u/NTp2fMzU+msPnFT/rtzPlI7nni8N4X31uY/Hzp97uHps2OTY5NZNlbcX6F3xb4Z5s9q42L7recWvINuvz88n7f92Qvrtv7Ll+Ll//ap2uWXPlz7uvWOsN1XwuXrw/O3vP0v9MymW/LXd+XFcIRzC39f8Eps3PKf+5a0YXj8zd8XxPV+5s0P5+ehel3+dSO+rld4/D+aqt3Pt8N5nQu/mXnzLfP7q98+/m6ES5+svd5XfP7C21x8Xv86PN8f/Unt/uNxxcf7o/B9zHc3NL7fxfXx7QsDzfef/xaPi+H9JLtYuz5uFc/3pVdvaXl48feQZBdvzf/8x+l+bl3Ww1zM7GOzEydmTp1/dOLc9Oy5idnHHj908vT5U+cO5b/L89BnOt1+/v1pXf7+NDW9Z3eWv1udro2r7Fof/5n7j07tndw6NX3syPlj5+4/M332+NHZ2aPTU7Nbjxw7Nv25TrefmTqwY+f+XXt3jh+fmTqwb//+XfvHZ06drh5G7aA62DP52fFTZw/lN5k9sHv/jrvv3j05fvL01PSBvZOT4+c73T7/2jRevfXvj5+dPnHk3MzJ6fHZmcenD+zYv2fPzo6/DfDkmWOzYxNnz5+aOD87fXai9ljGzuUXV7/2dbo9xTT777XvZ5tVar+IL/v4HXvS72etevbJRe+qtknTLxB9Jfwumn96w5l9S/lzzP3DYSYlyf8AAABQBjH3j4SZyP8AAABQGDH3rwkzkf8BAACgMGLuHw0zKUn+L1z/f8OFJe1f/1//v/586f+XrP//yV7r/9feL/T/u2Ol/Xv9/0D/X/9f/1//X/+fLui1/n/M/WuzrJT5HwAAAMog5v51YSbyPwAAABRGzP3XhZnI/wAAAFAYMfdfH2ZSkvyv/3+1+/+D+v/6//r/cV3q/+v/rwL9//b0/zvQ/5/IytX/v9jN49f/1/9noV7r/8fcf0OYSUnyPwAAAJRBzP03hpnI/wAAAFAYMfffFGYi/wMAAEBhxNy/PsykJPlf/9/n/+v/6//r/7fev/5/f9L/b0//vwP9f5//r/+v/09X9Vr/P+b+N4SZlCT/AwAAQBnE3P/GMBP5HwAAAHrP0JXdLOb+N4WZLMj/V7gDAAAA4JqLuf/mrKkIXpK//9f/1//X/9f/1/9vvf+l9/8HM/3/3qH/357+fwf6//r/+v/6/3RVr/X/89yfjWZvDjMpSf4HAACAMoi5/5YwE/kfAAAACiPm/v8XZiL/AwAAQGHE3L8hzKQk+V//X/9f/1//X/+/9f59/n9/0v9vT/+/A/1//X/9f/1/uqrX+v8x998aZlKS/A8AAABlEHP/bWEm8j8AAAAURsz9/z/MRP4HAACAwoi5f2OYSUnyv/5/j/f/Y3NU/1//X/9f/1//f0n0/9vT/+9A/1//X/9f/5+u6rX+f8z9bwkzKUn+BwAAgDKIuf+tYSbyPwAAABRGzP1vCzOR/wEAAKAwYu4fCzMpSf7X/+9S/3/LDQsu8/n/+v9pfYSp/6//r/9/9en/t6f/34H+v/6//r/+P13Va/3/mPs3hZmUJP8DAABAGcTcvznMRP4HAACAwoi5//YwE/kfAAAACiPm/i1hJiXJ//r/Pf75//r/+v/6//r/+v/Lov/fnv5/B/r/+v/6//r/dFWv9f9j7n97mElJ8j8AAACUQcz9W8NM5H8AAAAojJj73xFmIv8DAABAYcTcvy3MpCT5X/9f/1//X/9f/7/1/vX/+5P+f3v6/x3o/+v/6//r/9NVvdb/j7n/nWEmJcn/AAAAUAYx928PM5H/AQAAoDBi7r8jzET+BwAAgMKIuX88zKQk+V//X/9f/1//X/+/9f71//uT/n97+v8d6P/r/+v/6//TVb3W/4+5/84wk5LkfwAAACiDmPvvCjOR/wEAAKAwYu6fCDOR/wEAAKAwYu6fDDMpSf7X/9f/1//X/19W//9t8/er/1+j/99b9P/b0//vQP9f//+a9/+H9f8plF7r/8fcvyPMpCT5HwAAAMog5v6dYSbyPwAAABRGzP27wkzkfwAAACiMmPt3h5mUJP/r/+v/6//r//v8/9b71//vT/r/7XW//x8fov6//r/+v8//1/9noV7r/8fcf3eYSUnyPwAAAJRBzP17wkzkfwAAACiMmPv3hpnI/wAAAFAYMffvCzMpSf7X/9f/1//X/9f/b71//f/+pP/fns//70D/X/9f/1//n67qtf5/zP37w0xKkv8BAACgDGLuf1eYifwPAAAAhRFz/6+Emcj/AAAAUBgx9/9qmElJ8r/+v/6//r/+v/5/6/3r//envu3/174M6//r/+v/9/Hx6//r/7NQr/X/Y+4/EGZSkvwPAAAAZRBz/6+Fmcj/AAAAUBgx9787zET+BwAAgMKIuf9gmElJ8r/+v/6//r/+v/5/6/3r//envu3/ByXr/480X6D/r//fz8ev/6//z0K91v+Puf89YSYlyf8AAABQBjH33xNmIv8DAABAYcTc/94wE/kfAAAACiPm/veFmZQk/+v/6//r/+v/6/+33r/+f3/S/2+vx/r/C+j/6//38/Hr/+v/s1Cv9f9j7n9/mElJ8j8AAACUQcz9Hwgzkf8BAACgMGLu/2CYifwPAAAAhRFz/4fCTEqS//X/9f/1//X/9f9b71//vz/p/7en/9+B/n/B+v9jN+j/6/9ztbRKQAtdWf//+tcW3eEK+/8x9/96mElJ8j8AAACUQcz994aZyP8AAABQGDH3fzjMRP4HAACAwoi5/yNhJiXJ/yvq/4/o/0f6/43Hr//fen3o/+v/6/9fffr/7fVZ//+XN4bL9f9r9P97+/h7sv//48X6/3Nrmm+v/8/VcGX9/5a60v+Puf+jYSYlyf8AAABQBjH3fyzMRP4HAACAwoi5/+NhJvI/AAAAFEbM/b8RZlKS/O/z/6vHMd9e1v/X/88v0P/X/9f/71v6/+31Wf/f5/830f/v7ePvyf6/z//nGuu1/n/M/Z8IMylJ/gcAAIAyiLn/vjAT+R8AAAAKI+b+T4aZyP8AAABQGDH3fyrMpCT5X//f5//r/+v/6/+33r/+f3/S/29P/78D/X/9/17r//+H/j/9rdf6/zH33x9mUpL8DwAAAGUQc/8DYSbyPwAAABRGzP2/GWYi/wMAAEBhxNz/6TCTkuR//f9+6f+P6f/r/+v/Nz0e/X/9/1b0/9vT/+9A/1//v9f6/z7/nz7Xa/3/mPsfDDNZev4fXfKWAAAAwDURc/9vhZmU5O//AQAAoAxi7v/tMBP5HwAAAAoj5v7fCTMpSf7X/++X/r/P/8/0//X/mx6P/r/+fyur1/+P7zz6//r/+v+R/r/+v/4/zXqt/x9z/++GmZQk/wMAAEAZxNz/UJiJ/A8AAAB9odX/k90s5v5DYSbyPwAAABRGzP2Hw0xKkv/1//X/9f97tP//p5v/+Yff/9jhHfr/+v/6/8uyqp//X33x+/x//X/9/0T/X/9f/59mvdb/j7n/SJhJSfI/AAAAlEHM/b8XZiL/AwAAQGHE3H80zET+BwAAgMKIuX8qzKQk+V//X/9f/79H+v+VSpYV5PP/4/nQ/2/Utf5/fNPV/29pVfv/D8z3xPX/l9v/H2l5qf6//n8/H7/+v/4/C/Va/z/m/ukwk5LkfwAAACiDkPsHjtXm/BXyPwAAABRGzP3Hw0zkfwAAACiMmPsfDjMpSf7X/9f/1//vkf5/8+f/93H/3+f/t+bz/1eH/n97vdP/b03/X/+/n49f/1//n4V6rf8fc/9MmElJ8j8AAACUQcz9nwkzkf8BAACgMGLu/2yYifwPAAAAhRFz/4kwk5Lkf/1//X/9f/1//f/W+9f/70/6/+3p/3eg/6//r/+v/09X9Vr/P+b+k2EmJcn/AAAAUAYx958KM5H/AQAA+D/27qPJ0ru64/gde2TPlF6AF95o71fg0sKu8s5+AV5444Vd5fLCsi0HskYgkgCRs0DkLIIEQiSRk0QSiIzIGUQQWYShqD7nzHTP7ef2DLenn+d/Pp/NsWcYbkM1kn7SfOvPMHL3XxG32P8AAAAwjNz9/xm3NNn/+n/9/7D9/9/o//f7fP2//n9k+v9p+v8N9P/6f/2//p+tmlv/n7v/v+KWJvsfAAAAOsjd/99xi/0PAAAAw8jdf2XcYv8DAADAMHL3/0/c0mT/7+n/j6169v+Z8er/R+r/vf+/7+fr//X/I7u4/f/Vf/gjn/5f/6//D/p//b/+n73m1v/n7v/fuKXJ/gcAAIAOcvf/X9xi/wMAAMAwcvf/f9xi/wMAAMAwcvffL25psv+9/+/9f/2//l//v/7z9f/L5P3/aZ36/yvvuvQ/7r3lL289n8/X/+v/9f/6f7Zrbv1/7v77xy27h9/f7f3rUQAAAGA5cvc/IG5p8s//AQAAoIPc/Q+MW+x/AAAAGEbu/gfFLU32v/5f/6//1//r/9d/vv5/mfT/0zr1/xfy+fp//b/+X//Pds2t/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBi5+6+KW+x/AAAAGEbu/lNxS5P9r/8//P7/t/p//X9c/b/+X/9/+PT/0/T/G+j/9f/6f/0/WzW3/j93/9VxS5P9DwAAAB3k7n9o3GL/AwAAwDBy9z8sbrH/AQAAYBi5+6+JW5rsf/2/9//1//p//f/6z9f/L5P+f9rF7//X/Rlyf/r/xff/l+j/9f/6f852nv3/fRN/2N5K/5+7/+FxS5P9DwAAAB3k7n9E3GL/AwAAwDBy9z8ybrH/AQAAYBi5+x8VtzTZ//p//b/+X/+v/1//+fr/ZdL/T5vN+//Hjq/9Yf3/4vt/7//r//X/7DK39/9z9z86bmmy/wEAAKCD3P3Xxi32PwAAAAwjd/9j4hb7HwAAAIaRu/+xcUuT/a//1//r//X/+v/1nz/V/9961ten/58X/f+02fT/+9D/6/+X/PXr//X/nGtu/X/u/sfFLU32PwAAAHSQu/+6uMX+BwAAgGHk7n983GL/AwAAwDBy9z8hbmmy/9f3/2d+Xv9/MPr/3V+//n/998e2+v/8d9T/T/b/f+v9/570/9P0/xvo//X/+v/9+v+Tm369/p915tb/5+5/YtzSZP8DAABAB7n7nxS32P8AAAAwjNz9T45b7H8AAAAYRu7+p8QtTfa/9//1//r/5fX/3v/fcZTv/68uev9/XP9/QPr/afr/DfT/+n/9v/f/2aq59f+5+58atzTZ/wAAANBB7v6nxS32PwAAACzD2b93YO9vKA25+58et9j/AAAAMIzc/c+IW5rsf/2//l//r//v3f+fWEj/7/3/g9L/T9P/b3C0/f+xQfv/44P1/zfs9+vn0P9fpf9nZnb1/7ed+fGj6v9z9z8zbmmy/wEAAKCD3P3PilvsfwAAABhG7v5nxy32PwAAAAwjd//1cUuT/X/o/f/J/T9b/6//1//r/4++/1/K+//6/4PS/0/T/2/g/X/v/3v/X//PVu3q/89yVP1/7v7nxC1N9j8AAAB0kLv/uXGL/Q8AAADDyN1/Q9xi/wMAAMAwcvc/L25psv+31P9ff+01f+39/z30//r/vd8f+n/9v/7/8On/p+n/N9D/6//1//p/tmpu/X/u/ufHLU32PwAAAHSQu/8FcYv9DwAAAMPI3f/CuMX+BwAAgGHk7n9R3NJk/x/6+/8TOvT/+eP6f/3/Sv+v/9f/XxRt+/9j6/5MdK59+v87/u3UP+z+Ef2//l//r//X/7MFs+j/T5/5q8vc/S+OW5rsfwAAAOggd/9L4hb7HwAAAIaRu/+lcYv9DwAAAMPI3f+yuGWQ/X9iw8/r/73/r//X/+v/13++/n+Z2vb/B+T9/w30//p//b/+n62aRf9/1v+fu//lccsg+x8AAABY1e5/Rdxi/wMAAMAwcve/Mm6x/wEAAGAYuftfFbc02f/6f/2//l//r/9f//n6/2XS/0/T/2+g/9f/6//1/2zV3Pr/3P03xi1N9j8AAAB0kLv/1XGL/Q8AAADDyN3/mrjF/gcAAIBh5O5/bdzSZP/r//X/+n/9v/5//efr/5dJ/z9N/79arW6a+ALW9f+n/1z/r//X/+v/uUBz6/9z978ubmmy/wEAAKCD3P03xS32PwAAAAwjd//NcYv9DwAAAMPI3f/6uKXJ/tf/6//1//p//f/6z9f/L5P+f5r+fwPv/+v/9f/6f7Zqbv1/7v43xC1N9j8AAAB0kLv/lrjF/gcAAIBh5O5/Y9xi/wMAAMAwcvffGrc02f/6f/2//l//r/9f//n6/2U6vP5/pf/X/+v/N9D/6//1/+w1t/4/d/+b4pYm+x8AAAA6yN3/5rjF/gcAAIBh5O5/S9xi/wMAAMAwcve/NW5psv/1//p//b/+X/+//vP1/8vk/f9p+v8N9P/6f/2//p+tmlv/n7v/bXFLk/0PAAAAHeTuvy1usf8BAABgGLn73x632P8AAAAwjNz974hbmux//b/+f3f/v1rp//X/+v8dF6H/P7HS/2+d/n+a/n8D/f+Y/f+frAbq/0/u++v1/8zR3Pr/3P3vjFua7H8AAADoIHf/u+IW+x8AAACGkbv/3XGL/Q8AAADDyN3/nrilyf7X/+v/vf+v/9f/r/987/8vk/5/mv5/A/3/mP2/9//1/xyZufX/ufvfG7c02f8AAADQQe7+98Ut9j8AAAAMI3f/++MW+x8AAACGkbv/Azv3zN8AaLL/9f/6f/2//n9v/39qpf9f6f8XS/8/Tf+/gf5f/6//1/+zVXPr/2P3rz4YtzTZ/wAAANBB7v7b4xb7HwAAAIaRu/+OuMX+BwAAgGHk7v9Q3NJk/+v/9f/6/2X2/ye8/6//1/+vNZf+//LL//5O/b/+X/+v/9f/6/+7m1v/n7v/w3FLk/0PAAAAHeTu/0jcYv8DAADAMHL3fzRusf8BAABgGLn7Pxa3NNn/5/b/l6x2CtUd6/r/aNT0/2fR/+/++vX/678/lvL+v/5/h/5/mebS/3v//8K+fv2//n/JX/959f+XnfvrD7P//90B/reg/+cwzK3/z91/Z9zSZP8DAABAB7n7Px632P8AAAAwjNz9n4hb7H8AAAAYRu7+u+KWJvvf+//6f/2//l//v/7z9f/LpP+fpv/fQP+v//f+/xX/8qf6f7Znbv1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNzSZP/r//X/+n/9v/5//efr/5dJ/z9N/7+B/l//r//3/j9bNbf+P3f/Z+OWJvsfAAAAOsjd/7m4xf4HAACAYeTu/3zcYv8DAADAMHL3fyFuabL/t9//X6b/D/r/ufT//6z/3/P5+n/9/8hm0v/nt9WR9P+XTPyc/n8D/b/+X/+v/2er5tb/5+6/O25psv8BAACgg9z9X4xb7H8AAAAYRu7+L8Ut9j8AAAAMI3f/l+OWJvvf+/+9+v9jq479v/f/9f/6/05m0v97/1//r//X/+v/9f/MsP/P3f+VuKXJ/gcAAICl+se/+ve7D/qvzd3/1bjF/gcAAIBh5O7/Wtxi/wMAAMAwcvd/PW5psv/1/736/57v/+v/9f/6/070/9P0/xvo//X/+n/9P1s1t/4/d/834pazht/x8/5PCQAAAMxJ7v5vxi1N/vk/AAAAdJC7/1txyzn7//QBf1c7AAAAMDe5+78dtzT55//6/5n3/6vx+/97Vvp//f8O/b/+fxv0/9P+yP7/9DH9v/5/gv5f/6//Z6+59f+5+78TtzTZ/wAAADCoXX9HIXf/d+MW+x8AAACGkbv/e3GL/Q8AAADDyN3//bilyf7X/8+8/7+g9/9P1v+1hP7f+/+H2P9fd2Lt5+v/9f8j0/9P8/7/Bvr/Bff/+Udl/b/+nzmZW/+fu/+euKXJ/gcAAIAOcvf/IG6x/wEAAGAYuft/GLfY/wAAADCM3P0/ilua7H/9/4j9/7Le/9f/e///wvv/v7j01O3/9K8336j/54yL2f/n94L+X/+v/9/h/X/9v/6fvebW/+fu/3Hc0mT/AwAAQAe5+++NW+x/AAAAGEbu/p/ELfY/AAAADCN3/0/jlib7X/+v/59L/5//XR9B/39qef1/NsXd+3/v/+v/z+X9/2n6/w30//p//b/+n62aW/+fu/9ncUuT/Q8AAAAd5O7/edxi/wMAAMAwcvf/Im6x/wEAAGAYuft/Gbc02f/r+/8/q5/X/x+M/n/31+/9//XfH97/1//r/w+f/n+a/n8D/b/+X/+v/2er5tb/5+7/VdzSZP8DAABAB7n774tb7H8AAAAYRu7+X8ct9j8AAAAMI3f/b+KWJvvf+//6f/2//l//v/7z9f/LpP+fpv/fQP+v/9f/6//Zqrn1/7n7fx8AAP//XXxspA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m31.328302049s ago: executing program 2 (id=4680): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'dummy0\x00', @link_local}) 3m29.997342551s ago: executing program 2 (id=4695): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe00000100000000140001"], 0x30}}, 0x0) 3m29.433049023s ago: executing program 32 (id=4695): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe00000100000000140001"], 0x30}}, 0x0) 2m24.876836496s ago: executing program 0 (id=5565): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x242, 0x161) write$tcp_mem(r0, &(0x7f000003eec0)={0x6, 0x20, 0x20000000000001, 0x20, 0x2000000000002}, 0x48) 2m24.487628341s ago: executing program 0 (id=5570): r0 = syz_open_dev$video(&(0x7f0000000280), 0x7fffffff, 0x8280) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000001c0)={0x7, {0xe, 0x7, 0xc647, 0xfff}}) 2m24.091684176s ago: executing program 0 (id=5576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) 2m23.758475393s ago: executing program 0 (id=5581): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xe8, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0x0, 0x0, 'veth0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xe8, 0x0, {0x0, 0x74020000}, [@common=@inet=@hashlimit1={{0x58}, {'\x00', {0x10, 0x4282, 0x1, 0x8, 0x7b4, 0x8, 0x796, 0x40, 0x20}, {0xfff}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 2m23.502807476s ago: executing program 0 (id=5585): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}]}, 0xf8}}, 0x20000000) 2m23.147916345s ago: executing program 0 (id=5590): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000e80)={0x14, 0x26, 0x1, 0x70b525, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0xffffffff, 0x0, 0x80}, 0x0) 2m20.239780028s ago: executing program 1 (id=5635): fspick(0xffffffffffffff9c, &(0x7f00000009c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) syz_emit_ethernet(0x6a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd60fc414a00343c0020010000000000000000000000000001fe8000000000000000000000000000aa6203000000000000c910ff"], 0x0) 2m20.084870214s ago: executing program 1 (id=5640): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x2, 0x0, 0x0, 0x168b57, 0xffffffffffffffff, 0x7, 0x23e4b3}) 2m19.867921098s ago: executing program 1 (id=5645): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10) 2m19.680112183s ago: executing program 1 (id=5648): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000000)={0x48}) 2m19.47850032s ago: executing program 1 (id=5652): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, 0x0, 0x0) 2m19.295854595s ago: executing program 1 (id=5656): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x7}}, 0x14}}, 0x2400e844) 2m8.766919839s ago: executing program 33 (id=5590): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000032c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000e80)={0x14, 0x26, 0x1, 0x70b525, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0xffffffff, 0x0, 0x80}, 0x0) 2m4.886998934s ago: executing program 34 (id=5656): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x7}}, 0x14}}, 0x2400e844) 2.106108367s ago: executing program 8 (id=7634): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.062146731s ago: executing program 4 (id=7635): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") 1.871640324s ago: executing program 7 (id=7636): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 1.840970136s ago: executing program 6 (id=7637): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x3) 1.758680909s ago: executing program 8 (id=7639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000100001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="48030400000000002c001a800800028004000180200002801c00018008001f00ff0f00000800010006fcffff07000800a600000008001b00"], 0x54}}, 0x20044080) 1.650782181s ago: executing program 3 (id=7640): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 1.636731762s ago: executing program 7 (id=7641): r0 = syz_open_dev$video(&(0x7f0000000040), 0xad4, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0x5, 0x34524742, 0x5, 0x4, [{0x8, 0x9}, {0x7, 0x9}, {0x5}, {0xd, 0x8}, {0xd, 0xe0}, {0x4, 0x7ff}, {0x2, 0x3}, {0xfffffffc, 0xa}], 0xff, 0x28, 0x8, 0x1, 0x5}}) 1.580252359s ago: executing program 4 (id=7642): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x28100, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 1.562322655s ago: executing program 6 (id=7643): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x6, 0xa, 0x0, 0x0, @str='\x80\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.43602534s ago: executing program 8 (id=7644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x80, 0x7}}, [@mark={0xc, 0x15, {0x0, 0x100}}]}, 0x5c}}, 0x4004040) 1.380209189s ago: executing program 7 (id=7645): r0 = socket(0xa, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 1.379899503s ago: executing program 3 (id=7646): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/igmp6\x00') pread64(r0, &(0x7f0000000100)=""/126, 0x7e, 0x7) 1.379599801s ago: executing program 5 (id=7647): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x200010, &(0x7f0000000040)=ANY=[], 0x0, 0x663, &(0x7f0000000540)="$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") mount$9p_fd(0x0, &(0x7f0000004280)='./file0\x00', 0x0, 0x1200422, 0x0) 1.30669853s ago: executing program 4 (id=7648): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.214012952s ago: executing program 6 (id=7649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 1.126272898s ago: executing program 8 (id=7650): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)) 1.050280099s ago: executing program 7 (id=7651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x158, 0xc8, 0x8, 0x158, 0x5803, 0x158, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 1.000090814s ago: executing program 3 (id=7652): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) 878.555947ms ago: executing program 4 (id=7653): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000480)={0x3e, 0x2, 0x4, "55ac07d4c7e2d18700000000000000e6a800", 0x31303453}) 792.49147ms ago: executing program 6 (id=7654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x5014) 745.744212ms ago: executing program 7 (id=7655): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x541b, 0x0) 726.365144ms ago: executing program 5 (id=7656): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000180)={0xfd, 0x73, 0x8, 0x7, 0x7f}) 656.250073ms ago: executing program 8 (id=7657): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 568.205977ms ago: executing program 4 (id=7658): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000940)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@fat=@nfs_stale_rw}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@quiet}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7da5}}, {@nodots}, {@fat=@tz_utc}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") mount$nfs4(&(0x7f0000000040)='.> [ 705.658131][ T6069] loop6: p4 size 589824 extends beyond EOD, truncated [ 705.710505][T20940] syz.7.6478: attempt to access beyond end of device [ 705.710505][T20940] loop7: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 705.721489][T21008] loop6: p1 p3 p4 [ 705.721489][T21008] p1: [ 705.783027][T21008] loop6: p4 size 589824 extends beyond EOD, truncated [ 705.899896][T19325] syz-executor: attempt to access beyond end of device [ 705.899896][T19325] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 705.989593][T19325] CPU: 0 UID: 0 PID: 19325 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 705.989635][T19325] Tainted: [L]=SOFTLOCKUP [ 705.989646][T19325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 705.989661][T19325] Call Trace: [ 705.989671][T19325] [ 705.989682][T19325] dump_stack_lvl+0xe8/0x150 [ 705.989728][T19325] f2fs_handle_critical_error+0x37c/0x540 [ 705.989768][T19325] f2fs_write_end_io+0xcdb/0xff0 [ 705.989827][T19325] __submit_merged_bio+0x256/0x700 [ 705.989867][T19325] __submit_merged_write_cond+0x3c9/0x4e0 [ 705.989909][T19325] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 705.989958][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990003][T19325] f2fs_write_data_pages+0x2975/0x35e0 [ 705.990082][T19325] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 705.990142][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990174][T19325] ? css_rstat_updated+0x23a/0x530 [ 705.990234][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990266][T19325] ? rcu_is_watching+0x15/0xb0 [ 705.990306][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990337][T19325] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 705.990380][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990412][T19325] ? lru_gen_update_size+0x7c9/0xd10 [ 705.990463][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990500][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990531][T19325] ? __lock_acquire+0x6b5/0x2cf0 [ 705.990576][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990622][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990659][T19325] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 705.990697][T19325] do_writepages+0x32e/0x550 [ 705.990738][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990773][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990809][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.990841][T19325] ? do_raw_spin_unlock+0xf5/0x210 [ 705.990875][T19325] filemap_fdatawrite+0x1e9/0x2f0 [ 705.990922][T19325] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 705.991007][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.991042][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.991081][T19325] ? do_raw_spin_unlock+0xf5/0x210 [ 705.991122][T19325] f2fs_sync_dirty_inodes+0x30e/0x860 [ 705.991178][T19325] f2fs_write_checkpoint+0x9df/0x26a0 [ 705.991257][T19325] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 705.991360][T19325] kill_f2fs_super+0x314/0x720 [ 705.991404][T19325] ? __pfx_kill_f2fs_super+0x10/0x10 [ 705.991456][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.991487][T19325] ? lockdep_hardirqs_on+0x7a/0x110 [ 705.991530][T19325] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.991578][T19325] deactivate_locked_super+0xbc/0x130 [ 705.991624][T19325] cleanup_mnt+0x437/0x4d0 [ 705.991653][T19325] ? _raw_spin_unlock_irq+0x23/0x50 [ 705.991697][T19325] task_work_run+0x1d9/0x270 [ 705.991732][T19325] ? __pfx_task_work_run+0x10/0x10 [ 705.991774][T19325] exit_to_user_mode_loop+0xed/0x480 [ 705.991805][T19325] ? rcu_is_watching+0x15/0xb0 [ 705.991849][T19325] do_syscall_64+0x32d/0xf80 [ 705.991874][T19325] ? trace_irq_disable+0x3b/0x150 [ 705.991914][T19325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.991950][T19325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.991977][T19325] RIP: 0033:0x7f50b9b9d9d7 [ 705.992002][T19325] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 705.992024][T19325] RSP: 002b:00007ffe811eaa08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 705.992052][T19325] RAX: 0000000000000000 RBX: 00007f50b9c32050 RCX: 00007f50b9b9d9d7 [ 705.992071][T19325] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe811eaac0 [ 705.992088][T19325] RBP: 00007ffe811eaac0 R08: 00007ffe811ebac0 R09: 00000000ffffffff [ 705.992107][T19325] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe811ebb50 [ 705.992130][T19325] R13: 00007f50b9c32050 R14: 00000000000ae3b8 R15: 00007ffe811ebb90 [ 705.992172][T19325] [ 705.992184][T19325] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 706.394526][T21024] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 706.461945][T21041] loop5: detected capacity change from 0 to 4096 [ 706.536925][T21024] bond2: option packets_per_slave: allowed values 0 - 65535 [ 706.558625][T21024] bond2 (unregistering): Released all slaves [ 706.616771][ T5822] udevd[5822]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 706.635834][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 706.673707][ T6218] udevd[6218]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 706.674037][ T5830] udevd[5830]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 706.760517][ T5830] udevd[5830]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 706.760877][ T6218] udevd[6218]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 706.770976][ T5822] udevd[5822]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 706.798246][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 706.808141][T16022] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 707.016169][T16022] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 707.053232][T16022] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.069656][T16022] usb 9-1: Product: syz [ 707.099498][T16022] usb 9-1: Manufacturer: syz [ 707.104247][T16022] usb 9-1: SerialNumber: syz [ 707.176537][T16022] usb 9-1: config 0 descriptor?? [ 707.205229][T16022] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 707.632838][T16022] gspca_sunplus: reg_w_riv err -71 [ 707.638170][T16022] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 707.716024][T16022] usb 9-1: USB disconnect, device number 5 [ 707.776830][ T31] audit: type=1326 audit(1773297980.456:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.6.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8559c799 code=0x7ffc0000 [ 707.870640][ T31] audit: type=1326 audit(1773297980.456:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.6.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8559c799 code=0x7ffc0000 [ 707.971083][ T31] audit: type=1326 audit(1773297980.498:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.6.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fbf8559c799 code=0x7ffc0000 [ 708.039205][ T31] audit: type=1326 audit(1773297980.498:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.6.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8559c799 code=0x7ffc0000 [ 708.068833][ T31] audit: type=1326 audit(1773297980.498:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.6.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8559c799 code=0x7ffc0000 [ 708.191374][T21083] loop5: detected capacity change from 0 to 128 [ 708.684736][T21099] netlink: 'syz.7.6555': attribute type 1 has an invalid length. [ 708.684767][T21099] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6555'. [ 708.686724][T21059] loop3: detected capacity change from 0 to 32768 [ 708.692414][T21059] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6537 (21059) [ 708.715707][T21059] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 708.715750][T21059] BTRFS info (device loop3): using sha256 checksum algorithm [ 708.836425][T21113] loop4: detected capacity change from 0 to 2048 [ 708.878368][T21113] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 708.925374][T21059] BTRFS info (device loop3): enabling ssd optimizations [ 708.974696][T21059] BTRFS info (device loop3): turning on async discard [ 709.024540][T21059] BTRFS info (device loop3): enabling free space tree [ 709.323664][ T5821] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 709.636105][T21139] netlink: 'syz.6.6568': attribute type 28 has an invalid length. [ 709.678681][T21139] netlink: 'syz.6.6568': attribute type 3 has an invalid length. [ 709.762195][T21139] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6568'. [ 710.137547][T16057] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 710.340698][T16057] usb 8-1: Using ep0 maxpacket: 8 [ 710.399692][T16057] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.461294][T16057] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 710.470398][T16057] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.521665][T21171] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 710.569214][T16057] usb 8-1: config 0 descriptor?? [ 710.579096][T16057] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 710.659386][T21177] cifs: Bad value for 'source' [ 710.848553][T21179] loop3: detected capacity change from 0 to 2048 [ 710.904987][T21179] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 710.929023][T21184] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 710.972144][T16057] gspca_vc032x: reg_w err -71 [ 710.977276][T16057] vc032x 8-1:0.0: probe with driver vc032x failed with error -71 [ 711.004209][T16057] usb 8-1: USB disconnect, device number 3 [ 711.403528][T21174] loop4: detected capacity change from 0 to 32768 [ 711.403718][T21175] loop6: detected capacity change from 0 to 32768 [ 711.436117][T21175] (syz.6.6585,21175,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 711.451055][T21174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6586 (21174) [ 711.470389][T21175] (syz.6.6585,21175,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 711.559425][T21175] JBD2: Ignoring recovery information on journal [ 711.618747][T21174] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 711.661680][T21174] BTRFS info (device loop4): using sha256 checksum algorithm [ 711.672424][T21175] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 711.759526][T21175] (syz.6.6585,21175,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 711.955673][T21174] BTRFS info (device loop4): enabling ssd optimizations [ 712.005313][T21222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.013408][T21222] IPv6: NLM_F_CREATE should be set when creating new route [ 712.014011][T21174] BTRFS info (device loop4): turning on async discard [ 712.020684][T21222] IPv6: NLM_F_CREATE should be set when creating new route [ 712.036393][T21174] BTRFS info (device loop4): enabling free space tree [ 712.053065][T21175] (syz.6.6585,21175,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 712.168309][T21175] (syz.6.6585,21175,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 712.242718][T21175] (syz.6.6585,21175,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 712.266057][T21175] (syz.6.6585,21175,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 712.322593][T21175] (syz.6.6585,21175,0):ocfs2_quota_read:201 ERROR: status = -5 [ 712.337882][ T5826] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 712.357987][T21175] Quota error (device loop6): find_block_dqentry: Can't read quota tree block 6 [ 712.443214][T21175] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 712.455267][T21236] loop5: detected capacity change from 0 to 512 [ 712.472664][T21175] (syz.6.6585,21175,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 712.507055][T21175] (syz.6.6585,21175,1):ocfs2_mknod:318 ERROR: status = -5 [ 712.548002][T21175] (syz.6.6585,21175,1):ocfs2_mknod:506 ERROR: status = -5 [ 712.573795][T21236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.590792][T21175] (syz.6.6585,21175,0):ocfs2_mkdir:662 ERROR: status = -5 [ 712.632357][T21236] ext4 filesystem being mounted at /1155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 712.703525][T21233] loop3: detected capacity change from 0 to 4096 [ 712.715795][T21246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6607'. [ 712.733406][T21236] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6608: bg 0: block 248: padding at end of block bitmap is not set [ 712.801903][T21233] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 712.817195][T21236] Quota error (device loop5): write_blk: dquota write failed [ 712.877198][T21233] ntfs3(loop3): ino=1a, mi_enum_attr [ 712.910807][T21236] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 712.921218][T21233] ntfs3(loop3): ino=1a, mi_enum_attr [ 712.940697][T21233] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 712.956630][T21236] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.6608: Failed to acquire dquot type 0 [ 712.995917][T16693] ocfs2: Unmounting device (7,6) on (node local) [ 713.014971][T21233] ntfs3(loop3): ino=5, "/" indx_read_ra [ 713.294254][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.339495][T21254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6616'. [ 713.558817][T21258] netlink: 'syz.5.6617': attribute type 5 has an invalid length. [ 713.690275][T21265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.042632][ T791] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 714.204359][ T791] usb 6-1: Using ep0 maxpacket: 16 [ 714.223028][ T791] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 714.251142][ T791] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 714.290330][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.298382][ T791] usb 6-1: Product: syz [ 714.307818][ T791] usb 6-1: Manufacturer: syz [ 714.314979][ T791] usb 6-1: SerialNumber: syz [ 714.335100][ T791] r8152-cfgselector 6-1: Unknown version 0x0000 [ 714.355584][ T791] r8152-cfgselector 6-1: config 0 descriptor?? [ 714.433369][T21298] tmpfs: Group quota block hardlimit too large. [ 714.790975][ T791] r8152-cfgselector 6-1: USB disconnect, device number 100 [ 715.063341][T16057] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 715.245860][T16057] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 715.260615][T16057] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 715.298907][T16057] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.328538][T16057] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 715.346899][T16057] usb 4-1: config 1 has no interface number 0 [ 715.360290][T16057] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 715.382043][T21333] loop7: detected capacity change from 0 to 128 [ 715.391157][T16057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.443474][T16057] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 715.559123][T21337] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6657'. [ 715.580157][T21337] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6657'. [ 715.643622][T16057] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 715.673572][T16057] snd_usb_pod 4-1:1.1: invalid control EP [ 715.679401][T16057] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 715.706078][T16057] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 715.739085][T16057] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 715.755335][T21346] loop5: detected capacity change from 0 to 64 [ 715.854335][ T791] usb 4-1: USB disconnect, device number 98 [ 716.140136][ T31] audit: type=1326 audit(1773297989.244:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21358 comm="syz.8.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d79c799 code=0x7ffc0000 [ 716.182669][T21356] loop5: detected capacity change from 0 to 2048 [ 716.227690][ T31] audit: type=1326 audit(1773297989.286:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21358 comm="syz.8.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f244d79c799 code=0x7ffc0000 [ 716.283415][T21356] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 716.304604][ T31] audit: type=1326 audit(1773297989.286:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21358 comm="syz.8.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d79c799 code=0x7ffc0000 [ 716.418573][ T5840] udevd[5840]: incorrect nilfs2 checksum on /dev/loop5 [ 716.428674][ T31] audit: type=1326 audit(1773297989.286:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21358 comm="syz.8.6666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d79c799 code=0x7ffc0000 [ 716.442053][T21371] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 716.797181][T21384] loop3: detected capacity change from 0 to 8 [ 716.865419][T21384] SQUASHFS error: zstd decompression error: 10 [ 716.906276][T21384] SQUASHFS error: zstd decompression failed, data probably corrupt [ 716.957103][T21384] SQUASHFS error: Failed to read block 0x62b: -5 [ 716.993174][T21384] SQUASHFS error: Unable to read metadata cache entry [629] [ 717.021628][T21384] SQUASHFS error: Unable to read directory block [629:ff26] [ 717.149141][T21398] loop7: detected capacity change from 0 to 512 [ 717.212406][T21400] loop5: detected capacity change from 0 to 1764 [ 717.271845][T21398] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 717.279672][T21398] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 717.355125][T21398] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #13: comm syz.7.6683: iget: bad i_size value: 12154757448730 [ 717.372446][T21398] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 717.374795][T21398] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.6683: couldn't read orphan inode 13 (err -117) [ 717.384157][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 717.384188][ C0] EXT4-fs (loop7): initial error at time 1773297990: ext4_orphan_get:1391: inode 13 [ 717.384231][ C0] EXT4-fs (loop7): last error at time 1773297990: ext4_orphan_get:1391: inode 13 [ 717.454512][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6689'. [ 717.476640][T21398] loop7: lost filesystem error report for type 5 error -117 [ 717.497931][T21398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.757554][T19325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.909555][T16065] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 718.100658][T16065] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 127 [ 718.118834][T16065] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.167916][T16065] usb 7-1: config 0 has no interfaces? [ 718.206925][T16065] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 718.231322][T16065] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 718.273936][T16065] usb 7-1: Product: syz [ 718.278210][T16065] usb 7-1: Manufacturer: syz [ 718.312388][T16065] usb 7-1: SerialNumber: syz [ 718.313474][T21443] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 718.330212][T16065] usb 7-1: config 0 descriptor?? [ 718.427202][T21447] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 718.457177][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6708'. [ 718.475431][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6708'. [ 718.911367][T21464] loop7: detected capacity change from 0 to 256 [ 718.961743][ T5910] usb 7-1: USB disconnect, device number 11 [ 719.070170][T21464] FAT-fs (loop7): Directory bread(block 64) failed [ 719.097636][T21464] FAT-fs (loop7): Directory bread(block 65) failed [ 719.120498][T21464] FAT-fs (loop7): Directory bread(block 66) failed [ 719.153023][T21464] FAT-fs (loop7): Directory bread(block 67) failed [ 719.185923][T21464] FAT-fs (loop7): Directory bread(block 68) failed [ 719.218014][T21464] FAT-fs (loop7): Directory bread(block 69) failed [ 719.218738][T21472] loop5: detected capacity change from 0 to 256 [ 719.251907][T21464] FAT-fs (loop7): Directory bread(block 70) failed [ 719.277716][T21464] FAT-fs (loop7): Directory bread(block 71) failed [ 719.337261][T21464] FAT-fs (loop7): Directory bread(block 72) failed [ 719.355222][T21472] FAT-fs (loop5): Directory bread(block 64) failed [ 719.379260][T21464] FAT-fs (loop7): Directory bread(block 73) failed [ 719.381676][T21472] FAT-fs (loop5): Directory bread(block 65) failed [ 719.453526][T21472] FAT-fs (loop5): Directory bread(block 66) failed [ 719.480247][T21472] FAT-fs (loop5): Directory bread(block 67) failed [ 719.529032][T21472] FAT-fs (loop5): Directory bread(block 68) failed [ 719.535718][T21472] FAT-fs (loop5): Directory bread(block 69) failed [ 719.578221][T21472] FAT-fs (loop5): Directory bread(block 70) failed [ 719.590838][T21472] FAT-fs (loop5): Directory bread(block 71) failed [ 719.609853][ T31] audit: type=1800 audit(1773297992.887:172): pid=21464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6714" name="file2" dev="loop7" ino=1048660 res=0 errno=0 [ 719.642834][T21472] FAT-fs (loop5): Directory bread(block 72) failed [ 719.657100][T21472] FAT-fs (loop5): Directory bread(block 73) failed [ 719.770831][T21487] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6725'. [ 719.820529][T21487] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6725'. [ 719.914493][T21490] loop3: detected capacity change from 0 to 8 [ 719.960372][T21490] SQUASHFS error: xz decompression failed, data probably corrupt [ 719.980468][T21494] netlink: 'syz.4.6729': attribute type 11 has an invalid length. [ 720.005520][T21490] SQUASHFS error: Failed to read block 0x108: -5 [ 720.025807][T21490] SQUASHFS error: Unable to read metadata cache entry [106] [ 720.059501][T21490] SQUASHFS error: Unable to read inode 0x11f [ 720.370341][T21506] loop6: detected capacity change from 0 to 512 [ 720.459236][T21506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.469795][T21511] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 720.525853][T21506] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.815165][T16693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.152308][T21537] SET target dimension over the limit! [ 721.201357][T21544] loop6: detected capacity change from 0 to 512 [ 721.222659][T21544] EXT4-fs: Ignoring removed orlov option [ 721.254616][T21544] EXT4-fs: Ignoring removed bh option [ 721.283014][T21544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 721.342260][T21544] EXT4-fs (loop6): orphan cleanup on readonly fs [ 721.390158][T21544] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6753: bg 0: block 248: padding at end of block bitmap is not set [ 721.406229][T21544] loop6: lost filesystem error report for type 5 error -117 [ 721.414649][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 721.428414][ C0] EXT4-fs (loop6): last error at time 1773297994: ext4_validate_block_bitmap:441 [ 721.440007][T21544] Quota error (device loop6): write_blk: dquota write failed [ 721.447556][T21544] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 721.462354][T21544] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.6753: Failed to acquire dquot type 1 [ 721.474324][T21544] loop6: lost filesystem error report for type 5 error -117 [ 721.482525][T21544] EXT4-fs (loop6): 1 truncate cleaned up [ 721.525159][T21544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 721.575858][T21544] EXT4-fs: Ignoring removed orlov option [ 721.596255][T21554] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 721.613043][T21544] EXT4-fs: Ignoring removed bh option [ 721.619290][T21544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 721.629862][T21554] exFAT-fs (nullb0): invalid boot record signature [ 721.662650][T21554] exFAT-fs (nullb0): failed to read boot sector [ 721.681110][T21554] exFAT-fs (nullb0): failed to recognize exfat type [ 721.701469][T21544] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 721.776401][T21544] EXT4-fs error (device loop6): __ext4_remount:6804: comm syz.6.6753: Abort forced by user [ 721.792697][T21563] loop4: detected capacity change from 0 to 128 [ 721.835296][T21544] EXT4-fs (loop6): Remounting filesystem read-only [ 721.863058][T21544] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 721.871914][T21544] ext4 filesystem being remounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 721.888357][T21563] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 721.932237][T21563] ext4 filesystem being mounted at /1108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 722.028091][T21563] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 722.090195][T21574] loop8: detected capacity change from 0 to 1764 [ 722.099881][T16693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.118612][ T5826] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 722.215429][T21574] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 722.422619][T21583] loop4: detected capacity change from 0 to 1024 [ 722.548656][T21583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.681658][T21591] loop5: detected capacity change from 0 to 256 [ 722.704667][T21583] EXT4-fs warning (device loop4): ext4_rmdir:3185: inode #11: comm syz.4.6768: empty directory 'file1' has too many links (111) [ 722.720728][T21591] exfat: Deprecated parameter 'namecase' [ 722.825012][T21591] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 722.905121][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.928502][T21591] exFAT-fs (loop5): error, in sector 160, dentry 5 should be unused, but 0xc1 [ 723.280278][T21573] loop3: detected capacity change from 0 to 32768 [ 723.385183][T21573] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 723.523900][T21626] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6787'. [ 723.534059][T21626] vlan0: entered promiscuous mode [ 723.656121][T21573] XFS (loop3): Ending clean mount [ 723.882073][ T5821] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 724.136488][T21647] netlink: 'syz.7.6796': attribute type 1 has an invalid length. [ 724.164991][T21647] netlink: 244 bytes leftover after parsing attributes in process `syz.7.6796'. [ 724.310552][T21651] xt_socket: unknown flags 0x50 [ 724.434292][T21653] loop5: detected capacity change from 0 to 2048 [ 724.511515][T21653] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 724.613223][T21661] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 724.634162][T21660] IPv6: NLM_F_CREATE should be specified when creating new route [ 724.970711][T21672] usb usb8: usbfs: process 21672 (syz.5.6807) did not claim interface 0 before use [ 725.122226][T21681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6811'. [ 725.429269][T21693] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 725.896996][T21710] loop5: detected capacity change from 0 to 64 [ 726.124264][ T31] audit: type=1326 audit(1773297999.722:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21713 comm="syz.8.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d79c799 code=0x7ffc0000 [ 726.221351][ T31] audit: type=1326 audit(1773297999.722:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21713 comm="syz.8.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d79c799 code=0x7ffc0000 [ 726.285849][ T31] audit: type=1326 audit(1773297999.754:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21713 comm="syz.8.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f244d79c799 code=0x7ffc0000 [ 726.395691][ T31] audit: type=1326 audit(1773297999.754:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21713 comm="syz.8.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d79c799 code=0x7ffc0000 [ 726.493445][ T31] audit: type=1326 audit(1773297999.754:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21713 comm="syz.8.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244d79c799 code=0x7ffc0000 [ 726.899819][T16057] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 727.028259][T21706] loop7: detected capacity change from 0 to 32768 [ 727.049047][T21706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6823 (21706) [ 727.098733][T21706] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 727.100580][T16057] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 727.141449][T21706] BTRFS info (device loop7): using sha256 checksum algorithm [ 727.155135][T21708] loop3: detected capacity change from 0 to 40427 [ 727.177458][T16057] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 727.208880][T21708] F2FS-fs (loop3): Invalid log sectorsize (14) [ 727.220680][T16057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.229731][T21708] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 727.286645][T21708] F2FS-fs (loop3): build fault injection rate: 14 [ 727.297509][T21758] loop6: detected capacity change from 0 to 256 [ 727.310014][T21708] F2FS-fs (loop3): build fault injection type: 0x1 [ 727.321442][T21708] F2FS-fs (loop3): invalid crc value [ 727.336599][T21706] BTRFS info (device loop7): enabling ssd optimizations [ 727.345001][T21708] F2FS-fs (loop3): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x3165/0x4a80 [ 727.367195][T21708] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12) [ 727.389495][T21706] BTRFS info (device loop7): turning on async discard [ 727.456408][T21706] BTRFS info (device loop7): enabling free space tree [ 727.628050][T16057] ath6kl: Failed to read usb control message: -71 [ 727.634804][T16057] ath6kl: Unable to read the bmi data from the device: -71 [ 727.662800][T16057] ath6kl: Unable to recv target info: -71 [ 727.711487][T16057] ath6kl: Failed to init ath6kl core: -71 [ 727.746047][T16057] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 727.763917][T19325] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 727.803703][T16057] usb 5-1: USB disconnect, device number 110 [ 728.826004][T21802] loop6: detected capacity change from 0 to 128 [ 728.834545][T21798] loop4: detected capacity change from 0 to 1024 [ 729.336371][T21816] netlink: 'syz.4.6868': attribute type 1 has an invalid length. [ 729.476084][T21823] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6871'. [ 730.158931][T21844] loop5: detected capacity change from 0 to 1024 [ 730.198512][T21844] EXT4-fs: Ignoring removed oldalloc option [ 730.284330][T21844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.300010][T21808] loop8: detected capacity change from 0 to 32768 [ 730.398779][T21808] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 730.452717][T21808] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 730.502239][T21827] loop4: detected capacity change from 0 to 32768 [ 730.578040][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.929004][T21866] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6892'. [ 730.961673][T21867] nbd: couldn't find a device at index 17 [ 731.493954][T21884] loop6: detected capacity change from 0 to 1024 [ 731.568587][T21884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.630793][T21884] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: comm syz.6.6902: directory missing '..' [ 731.878519][T16693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.916043][T21900] loop5: detected capacity change from 0 to 1764 [ 732.910537][T21946] netlink: 276 bytes leftover after parsing attributes in process `syz.8.6929'. [ 732.920298][T16057] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 733.115855][T16057] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 733.168101][T16057] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.176196][T16057] usb 4-1: Product: syz [ 733.202943][T16057] usb 4-1: Manufacturer: syz [ 733.215111][T16057] usb 4-1: SerialNumber: syz [ 733.229757][ T31] audit: type=1326 audit(1773298007.187:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21959 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 733.272939][T16057] usb 4-1: config 0 descriptor?? [ 733.297963][T16057] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 733.326000][ T31] audit: type=1326 audit(1773298007.187:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21959 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 733.437258][ T31] audit: type=1326 audit(1773298007.229:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21959 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 733.520421][ T31] audit: type=1326 audit(1773298007.229:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21959 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 733.625208][ T31] audit: type=1326 audit(1773298007.229:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21959 comm="syz.4.6936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 733.690804][ T5910] usb 4-1: USB disconnect, device number 99 [ 733.690873][T21972] loop6: detected capacity change from 0 to 2048 [ 733.708391][T21976] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6944'. [ 733.730898][T21972] EXT4-fs: Ignoring removed mblk_io_submit option [ 733.764054][T21972] EXT4-fs: Ignoring removed i_version option [ 733.845769][T21972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.969094][T16693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.443690][T21997] hfs: unable to load iocharset "io#harset" [ 734.511026][T22006] netlink: 'syz.8.6957': attribute type 7 has an invalid length. [ 734.567869][T22006] netlink: 'syz.8.6957': attribute type 8 has an invalid length. [ 734.711044][ T5910] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 734.776768][ T31] audit: type=1326 audit(1773298008.814:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22015 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 734.785319][T22010] loop3: detected capacity change from 0 to 4096 [ 734.818905][T22010] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 734.859226][ T31] audit: type=1326 audit(1773298008.814:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22015 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 734.883716][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 734.883808][T22018] sctp: [Deprecated]: syz.8.6963 (pid 22018) Use of int in max_burst socket option. [ 734.883808][T22018] Use struct sctp_assoc_value instead [ 734.891932][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 734.946100][T22020] Cannot find del_set index 4 as target [ 734.957901][ T31] audit: type=1326 audit(1773298008.814:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22015 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 734.985991][ T5910] usb 5-1: config 4 interface 0 has no altsetting 0 [ 735.004467][T22010] ntfs3(loop3): ino=19, mi_enum_attr [ 735.020278][ T5910] usb 5-1: string descriptor 0 read error: -22 [ 735.032201][ T5910] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 735.051589][ T5910] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 735.073742][ T31] audit: type=1326 audit(1773298008.814:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22015 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 735.119554][T22010] ntfs3(loop3): failed to convert "c46c" to cp850 [ 735.128134][ T5910] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 735.146020][ T31] audit: type=1326 audit(1773298008.867:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22015 comm="syz.5.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f374275cfce code=0x7ffc0000 [ 735.170527][ T5910] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 735.170906][ T5910] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 735.192650][T22010] ntfs3(loop3): ino=20, mi_enum_attr [ 735.248753][ T5910] usb 5-1: media controller created [ 735.272475][T22024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.281145][T22026] netlink: 'syz.7.6966': attribute type 7 has an invalid length. [ 735.305213][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 735.414608][ T5910] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 735.436460][ T5910] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 735.593915][ T5910] DVB: Unable to find symbol qt1010_attach() [ 735.807213][ T5910] usb 5-1: USB disconnect, device number 111 [ 736.628124][T22075] bridge1: entered promiscuous mode [ 736.663700][T22075] bridge1: entered allmulticast mode [ 737.204163][T16022] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 737.265100][T22100] loop5: detected capacity change from 0 to 4096 [ 737.323359][T22107] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 737.398067][T16022] usb 8-1: Using ep0 maxpacket: 8 [ 737.420872][T22100] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 737.445819][T16022] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.466519][T22100] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 737.474719][T16022] usb 8-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 737.509152][T22100] Remounting filesystem read-only [ 737.531666][T22100] NILFS (loop5): error -5 truncating bmap (ino=12) [ 737.541786][T16022] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.563277][T22111] bond2: option ad_select: invalid value (6) [ 737.591240][T22111] bond2 (unregistering): Released all slaves [ 737.597052][T16022] usb 8-1: Product: syz [ 737.601548][T16022] usb 8-1: Manufacturer: syz [ 737.628982][T16022] usb 8-1: SerialNumber: syz [ 737.654929][T16022] usb 8-1: config 0 descriptor?? [ 737.676929][T22116] loop6: detected capacity change from 0 to 128 [ 737.718755][T16022] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 737.732725][ T5832] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 737.739906][T16022] usb 8-1: selecting invalid altsetting 1 [ 737.876439][T16022] gspca_stk014: init reg: 0x00 [ 737.901454][T16022] stk014 8-1:0.0: probe with driver stk014 failed with error -5 [ 738.097962][T16022] usb 8-1: USB disconnect, device number 4 [ 738.170860][T22129] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 738.170860][T22129] The task syz.8.7016 (22129) triggered the difference, watch for misbehavior. [ 738.313209][T22135] loop5: detected capacity change from 0 to 256 [ 738.322848][T22135] exfat: Deprecated parameter 'utf8' [ 738.329777][T22135] exfat: Deprecated parameter 'namecase' [ 738.347910][T22135] exfat: Deprecated parameter 'namecase' [ 738.361983][T22135] exfat: Deprecated parameter 'utf8' [ 738.378827][T22137] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 738.391726][T22137] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 738.426653][T22135] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 738.498754][T22141] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 738.538227][T22141] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 738.757920][T22147] loop5: detected capacity change from 0 to 512 [ 738.802386][T22147] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.7025: corrupted inode contents [ 738.837805][T22147] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 738.839283][T22147] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 738.848570][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 738.848598][ C1] EXT4-fs (loop5): initial error at time 1773298013: ext4_do_update_inode:5569: inode 15 [ 738.848643][ C1] EXT4-fs (loop5): last error at time 1773298013: ext4_do_update_inode:5569: inode 15 [ 738.890308][T22147] loop5: lost filesystem error report for type 5 error -117 [ 738.915087][T22147] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.7025: corrupted inode contents [ 738.935089][T22147] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 738.935660][T22147] EXT4-fs error (device loop5): ext4_evict_inode:303: inode #15: comm syz.5.7025: mark_inode_dirty error [ 738.981100][T22153] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 738.989728][T22147] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 738.993316][T22147] EXT4-fs (loop5): 1 orphan inode deleted [ 739.021532][T22153] bond2 (unregistering): Released all slaves [ 739.060436][T22147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.171663][T22155] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 739.185917][T22155] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 739.196783][ T5910] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 739.313307][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.371983][T22168] loop6: detected capacity change from 0 to 1024 [ 739.378163][ T5910] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 739.396041][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 739.415533][ T5910] usb 5-1: Product: syz [ 739.425513][ T5910] usb 5-1: SerialNumber: syz [ 739.459476][ T5910] usb 5-1: config 0 descriptor?? [ 739.482171][T22168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.690201][ T5910] hso 5-1:0.0: Failed to find BULK IN ep [ 739.739990][T22178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.771075][T16693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.901938][T16057] usb 5-1: USB disconnect, device number 112 [ 740.047296][T22188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7043'. [ 740.225999][T22196] sg_write: data in/out 294879/136 bytes for SCSI command 0x2-- guessing data in; [ 740.225999][T22196] program syz.7.7046 not setting count and/or reply_len properly [ 740.374775][T22200] loop3: detected capacity change from 0 to 4096 [ 740.398911][T22200] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 740.531728][T22200] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 740.588384][T22200] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 740.753782][T22213] loop8: detected capacity change from 0 to 256 [ 740.850558][T22213] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 741.378719][T22233] usb usb8: usbfs: process 22233 (syz.6.7067) did not claim interface 1 before use [ 741.447040][T22230] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 741.522535][T22230] bond2 (unregistering): Released all slaves [ 741.550209][T22241] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7070'. [ 741.624477][T22240] loop7: detected capacity change from 0 to 2048 [ 741.696967][T22246] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 741.761068][T22240] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 741.879195][T22240] Remounting filesystem read-only [ 742.042022][T22227] loop5: detected capacity change from 0 to 32768 [ 742.128009][T22227] JBD2: Ignoring recovery information on journal [ 742.134690][ T5910] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 742.294622][T22227] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 742.317729][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.336329][ T5910] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 742.374191][ T5910] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 742.437016][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.471651][ T5910] usb 4-1: config 0 descriptor?? [ 742.708208][ T5910] Bluetooth: Can't get state to change to load ram patch err [ 742.730748][ T5832] ocfs2: Unmounting device (7,5) on (node local) [ 742.758979][ T5910] Bluetooth: Loading patch file failed [ 742.764528][ T5910] ath3k 4-1:0.0: probe with driver ath3k failed with error -121 [ 742.916164][ T5910] usb 4-1: USB disconnect, device number 100 [ 743.387532][T22290] loop5: detected capacity change from 0 to 256 [ 743.488479][T22290] FAT-fs (loop5): Directory bread(block 64) failed [ 743.512572][T22290] FAT-fs (loop5): Directory bread(block 65) failed [ 743.553447][T22290] FAT-fs (loop5): Directory bread(block 66) failed [ 743.608534][T22290] FAT-fs (loop5): Directory bread(block 67) failed [ 743.615348][T22290] FAT-fs (loop5): Directory bread(block 68) failed [ 743.680337][T22290] FAT-fs (loop5): Directory bread(block 69) failed [ 743.694391][T22290] FAT-fs (loop5): Directory bread(block 70) failed [ 743.716844][T22290] FAT-fs (loop5): Directory bread(block 71) failed [ 743.769124][T22290] FAT-fs (loop5): Directory bread(block 72) failed [ 743.775761][T22290] FAT-fs (loop5): Directory bread(block 73) failed [ 744.015221][T22273] loop7: detected capacity change from 0 to 32768 [ 744.089621][T22276] loop6: detected capacity change from 0 to 32768 [ 744.191486][T22276] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 744.250834][T22312] loop3: detected capacity change from 0 to 256 [ 744.382739][T22312] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 744.463811][T22276] XFS (loop6): Ending clean mount [ 744.493395][T22312] exFAT-fs (loop3): valid_size(10) is greater than size(0) [ 744.510019][T22276] XFS (loop6): Quotacheck needed: Please wait. [ 744.672033][T22276] XFS (loop6): Quotacheck: Done. [ 745.022873][T22298] loop8: detected capacity change from 0 to 32768 [ 745.032217][T16693] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 745.035610][T22332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7110'. [ 745.061936][T22298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.7096 (22298) [ 745.143309][T22298] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 745.187244][T22337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7103'. [ 745.207030][T22298] BTRFS info (device loop8): using sha256 checksum algorithm [ 745.264594][T22337] bridge_slave_1: left allmulticast mode [ 745.270315][T22337] bridge_slave_1: left promiscuous mode [ 745.341255][T22337] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.488921][T22350] netlink: 'syz.4.7114': attribute type 21 has an invalid length. [ 745.566125][T22298] BTRFS info (device loop8): enabling ssd optimizations [ 745.574670][T22337] bridge_slave_0: left allmulticast mode [ 745.599841][T22337] bridge_slave_0: left promiscuous mode [ 745.605779][T22337] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.619051][T22298] BTRFS info (device loop8): turning on async discard [ 745.625836][T22298] BTRFS info (device loop8): enabling free space tree [ 745.635462][T22359] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7112'. [ 745.827651][T19449] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 747.018117][T22390] loop3: detected capacity change from 0 to 4096 [ 747.141915][T22390] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 747.198150][T22390] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 747.515471][T22412] netlink: 'syz.7.7141': attribute type 21 has an invalid length. [ 747.524182][T22364] loop5: detected capacity change from 0 to 32768 [ 747.577458][T22412] netlink: 'syz.7.7141': attribute type 1 has an invalid length. [ 747.579591][T22364] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7118 (22364) [ 747.596698][T22412] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7141'. [ 747.754845][T22364] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 747.835494][T22364] BTRFS info (device loop5): using sha256 checksum algorithm [ 747.979151][T16022] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 748.159816][T16022] usb 4-1: Using ep0 maxpacket: 16 [ 748.175279][T16022] usb 4-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 748.179254][T22364] BTRFS info (device loop5): enabling ssd optimizations [ 748.236338][T22364] BTRFS info (device loop5): turning on async discard [ 748.243596][T22364] BTRFS info (device loop5): enabling free space tree [ 748.244144][T16022] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 748.335190][T16022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 115, changing to 10 [ 748.390027][T16022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 25189, setting to 1024 [ 748.433494][T16022] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 748.450599][T22443] loop8: detected capacity change from 0 to 2048 [ 748.503252][T22443] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 748.533433][T16022] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 748.549921][T16022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.590471][T22406] loop4: detected capacity change from 0 to 32768 [ 748.607300][T16022] usb 4-1: Product: syz [ 748.620827][T16022] usb 4-1: Manufacturer: syz [ 748.645492][T16022] usb 4-1: SerialNumber: syz [ 748.646610][ T5832] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 748.699100][T16022] usb 4-1: config 0 descriptor?? [ 749.035823][T16022] rc_core: IR keymap rc-xbox-dvd not found [ 749.069378][T16022] Registered IR keymap rc-empty [ 749.104806][T16022] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 749.171999][T16022] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49 [ 749.300505][T16022] usb 4-1: USB disconnect, device number 101 [ 749.300578][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 749.533987][ T31] kauditd_printk_skb: 162 callbacks suppressed [ 749.534013][ T31] audit: type=1326 audit(1773298024.311:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22468 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 749.693136][ T31] audit: type=1326 audit(1773298024.322:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22468 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 749.772058][ T31] audit: type=1326 audit(1773298024.322:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22468 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 749.873029][ T31] audit: type=1326 audit(1773298024.322:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22468 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 750.044164][T22485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.083277][ T5910] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 750.293360][ T5910] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 750.329319][ T5910] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 750.391667][ T5910] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 750.422797][ T5910] usb 7-1: config 1 interface 0 has no altsetting 0 [ 750.481583][ T5910] usb 7-1: string descriptor 0 read error: -22 [ 750.488140][ T5910] usb 7-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 750.526238][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 750.582841][ T5910] usb 7-1: 0:2 : does not exist [ 750.794507][ T5910] usb-storage 7-1:1.1: USB Mass Storage device detected [ 750.797282][ T31] audit: type=1400 audit(1773298025.623:354): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=22505 comm="syz.7.7179" [ 751.101726][T22513] loop3: detected capacity change from 0 to 4096 [ 751.184582][T22513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.210649][ T5910] usb 7-1: us122l: couldn't allocate write buffer [ 751.220015][ T5910] snd-usb-us122l 7-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 751.238703][ T5910] usb 7-1: USB disconnect, device number 12 [ 751.417501][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.787375][T22501] loop4: detected capacity change from 0 to 32768 [ 751.937685][T22501] JBD2: Ignoring recovery information on journal [ 751.964294][T22499] loop8: detected capacity change from 0 to 32768 [ 752.123360][T22534] loop3: detected capacity change from 0 to 512 [ 752.152811][T22501] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 752.205690][T22534] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 752.273752][T22501] (syz.4.7177,22501,1):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 752.332232][T22534] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 752.350882][T22501] (syz.4.7177,22501,0):ocfs2_prepare_dir_for_insert:4335 ERROR: status = -2 [ 752.359739][T22501] (syz.4.7177,22501,0):ocfs2_mknod:302 ERROR: status = -2 [ 752.424099][T22501] (syz.4.7177,22501,1):ocfs2_mknod:506 ERROR: status = -2 [ 752.432098][T22501] (syz.4.7177,22501,1):ocfs2_mkdir:662 ERROR: status = -2 [ 752.445864][T22534] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 752.454025][T22534] System zones: 0-2, 18-18, 34-35 [ 752.539036][T22534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.624770][ T5826] ocfs2: Unmounting device (7,4) on (node local) [ 752.716214][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.728857][T22521] loop7: detected capacity change from 0 to 32768 [ 752.767095][T22521] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7184 (22521) [ 752.905305][T22521] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 752.943653][T22521] BTRFS info (device loop7): using xxhash64 checksum algorithm [ 752.984298][T22547] --map-set only usable from mangle table [ 752.988861][T22548] netlink: 'syz.3.7196': attribute type 1 has an invalid length. [ 752.998971][T22521] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 753.027101][T22548] netlink: 2096 bytes leftover after parsing attributes in process `syz.3.7196'. [ 753.094798][T22548] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7196'. [ 753.302953][T22521] BTRFS info (device loop7): rebuilding free space tree [ 753.376978][T22575] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7193'. [ 753.387389][T22572] loop5: detected capacity change from 0 to 512 [ 753.394637][T22521] BTRFS info (device loop7): disabling free space tree [ 753.407717][T22521] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 753.418769][T22572] EXT4-fs: Ignoring removed oldalloc option [ 753.446757][T22521] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 753.524423][T22521] BTRFS info (device loop7): setting nodatasum [ 753.562407][T22521] BTRFS info (device loop7): allowing degraded mounts [ 753.569604][T22572] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.7199: inode has both inline data and extents flags [ 753.607677][T22521] BTRFS info (device loop7): turning on async discard [ 753.626353][T22572] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 753.635971][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 753.651684][ C1] EXT4-fs (loop5): initial error at time 1773298028: ext4_orphan_get:1391: inode 15 [ 753.658134][T22521] BTRFS info (device loop7): enabling disk space caching [ 753.661191][ C1] EXT4-fs (loop5): last error at time 1773298028: ext4_orphan_get:1391: inode 15 [ 753.673852][T22572] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7199: couldn't read orphan inode 15 (err -117) [ 753.710736][T22585] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 753.731778][T22521] BTRFS info (device loop7): force clearing of disk cache [ 753.759031][T22572] loop5: lost filesystem error report for type 5 error -117 [ 753.763333][T22572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.770066][T22521] BTRFS info (device loop7): force zlib compression, level 3 [ 754.004332][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.428998][T22606] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7215'. [ 754.503824][T22609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7217'. [ 754.536810][T22611] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 754.590918][T19325] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 754.719101][T22616] loop5: detected capacity change from 0 to 256 [ 754.860908][T22616] FAT-fs (loop5): Directory bread(block 64) failed [ 754.893487][T22616] FAT-fs (loop5): Directory bread(block 65) failed [ 754.912816][T22616] FAT-fs (loop5): Directory bread(block 66) failed [ 754.919534][T22616] FAT-fs (loop5): Directory bread(block 67) failed [ 754.988639][T22616] FAT-fs (loop5): Directory bread(block 68) failed [ 755.065391][T22616] FAT-fs (loop5): Directory bread(block 69) failed [ 755.072255][T22616] FAT-fs (loop5): Directory bread(block 70) failed [ 755.158270][T22616] FAT-fs (loop5): Directory bread(block 71) failed [ 755.176234][T22629] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 755.186285][T22616] FAT-fs (loop5): Directory bread(block 72) failed [ 755.232123][T22616] FAT-fs (loop5): Directory bread(block 73) failed [ 755.399970][T22633] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 755.788055][T22644] AppArmor: change_hat: Invalid input '0' [ 756.041234][T22652] loop7: detected capacity change from 0 to 256 [ 756.210683][T22624] loop8: detected capacity change from 0 to 32768 [ 756.306377][T22658] netlink: 26 bytes leftover after parsing attributes in process `syz.5.7240'. [ 756.354156][T22624] JBD2: Ignoring recovery information on journal [ 756.477750][T22624] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 756.575621][T22624] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 756.633214][T22624] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 756.699299][T22624] OCFS2: File system is now read-only. [ 756.726761][T22624] (syz.8.7224,22624,1):ocfs2_search_chain:1923 ERROR: status = -30 [ 756.762950][T22624] (syz.8.7224,22624,1):ocfs2_search_chain:2011 ERROR: status = -30 [ 756.809690][T22624] (syz.8.7224,22624,1):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 756.865206][T22624] (syz.8.7224,22624,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 756.873787][T22624] (syz.8.7224,22624,1):ocfs2_claim_new_inode:2392 ERROR: status = -30 [ 756.983797][T22624] (syz.8.7224,22624,1):ocfs2_claim_new_inode:2407 ERROR: status = -30 [ 757.019265][T22624] (syz.8.7224,22624,1):ocfs2_mknod_locked:642 ERROR: status = -30 [ 757.047173][T22686] netlink: 'syz.3.7253': attribute type 61 has an invalid length. [ 757.062065][T22624] (syz.8.7224,22624,1):ocfs2_mknod:389 ERROR: status = -30 [ 757.122873][T22624] (syz.8.7224,22624,1):ocfs2_mknod:506 ERROR: status = -30 [ 757.130153][T22624] (syz.8.7224,22624,1):ocfs2_mkdir:662 ERROR: status = -30 [ 757.406832][T22700] loop7: detected capacity change from 0 to 128 [ 757.441099][T22700] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 757.461722][T19449] ocfs2: Unmounting device (7,8) on (node local) [ 757.484375][T22700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.539101][T22704] netlink: 'syz.4.7263': attribute type 1 has an invalid length. [ 758.941688][T22754] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7287'. [ 758.950631][T22754] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7287'. [ 759.030353][T22757] netlink: 'syz.4.7288': attribute type 10 has an invalid length. [ 759.057834][T22757] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7288'. [ 759.069830][T22754] ip6gre1: entered promiscuous mode [ 759.536425][T22781] QAT: Stopping all acceleration devices. [ 759.929604][T22793] xt_CT: No such helper "snmp" [ 760.235475][T22803] loop3: detected capacity change from 0 to 4096 [ 760.251598][T22812] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7315'. [ 760.297803][T22803] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 760.343569][T22803] ntfs3(loop3): ino=1a, mi_enum_attr [ 760.349196][T22803] ntfs3(loop3): ino=1a, mi_enum_attr [ 760.369315][T22803] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 760.389382][T16065] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 760.447446][T22816] netlink: 'syz.4.7316': attribute type 2 has an invalid length. [ 760.471829][T22803] ntfs3(loop3): ino=1a, mi_enum_attr [ 760.573280][T16065] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 760.603971][T16065] usb 8-1: config 0 has no interface number 0 [ 760.638229][T16065] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 760.694108][T16065] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 760.760748][T16065] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 760.769867][T16065] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.828476][T16065] usb 8-1: Product: syz [ 760.848627][T16065] usb 8-1: Manufacturer: syz [ 760.853789][T22826] loop6: detected capacity change from 0 to 136 [ 760.866422][T16065] usb 8-1: SerialNumber: syz [ 760.899334][T16065] usb 8-1: config 0 descriptor?? [ 760.916108][T22808] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 760.954406][T22826] rock: directory entry would overflow storage [ 760.997292][T22826] rock: sig=0x4f50, size=4, remaining=3 [ 760.997631][T16065] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 761.048095][T22826] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 761.060575][T16065] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 761.192886][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 761.301163][T22804] loop8: detected capacity change from 0 to 32768 [ 761.368216][T22804] (syz.8.7311,22804,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 761.407306][ T5910] usb 8-1: USB disconnect, device number 5 [ 761.417844][T16065] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 761.442022][ T5910] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 761.445808][T22804] (syz.8.7311,22804,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 761.473509][ T5910] cyberjack 8-1:0.69: device disconnected [ 761.558802][T22804] JBD2: Ignoring recovery information on journal [ 761.597632][T16065] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 761.613059][T16065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 761.621629][T16065] usb 5-1: Product: syz [ 761.625857][T16065] usb 5-1: Manufacturer: syz [ 761.630824][T16065] usb 5-1: SerialNumber: syz [ 761.641477][T16065] usb 5-1: config 0 descriptor?? [ 761.651278][T16065] gspca_main: sq905-2.14.0 probing 2770:9120 [ 761.679747][T22804] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 761.802496][T22804] ocfs2: Unmounting device (7,8) on (node local) [ 761.848954][T16065] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 761.865816][T16065] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 761.899972][T16065] usb 5-1: USB disconnect, device number 113 [ 762.284980][T22836] loop5: detected capacity change from 0 to 32768 [ 762.303955][T22836] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7327 (22836) [ 762.349639][T22852] loop6: detected capacity change from 0 to 256 [ 762.359226][T22836] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 762.429063][T22836] BTRFS info (device loop5): using sha256 checksum algorithm [ 762.625941][T22843] loop3: detected capacity change from 0 to 32768 [ 762.640271][T22843] (syz.3.7330,22843,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 762.703479][T22836] BTRFS info (device loop5): rebuilding free space tree [ 762.734000][T22843] (syz.3.7330,22843,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 762.811676][T22836] BTRFS info (device loop5): enabling ssd optimizations [ 762.838866][T22836] BTRFS info (device loop5): using spread ssd allocation scheme [ 762.869301][T22843] JBD2: Ignoring recovery information on journal [ 762.930841][T22836] BTRFS info (device loop5): turning on async discard [ 762.938507][T22836] BTRFS info (device loop5): enabling free space tree [ 762.951115][T22836] BTRFS info (device loop5): force clearing of disk cache [ 763.041581][T22843] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 763.222816][ T5832] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 763.738949][ T5821] ocfs2: Unmounting device (7,3) on (node local) [ 763.944894][T22901] loop7: detected capacity change from 0 to 512 [ 763.968756][ T31] audit: type=1326 audit(1773298039.461:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.4.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 763.996492][T22902] bridge2: entered promiscuous mode [ 764.073887][ T31] audit: type=1326 audit(1773298039.461:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.4.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 764.195882][ T31] audit: type=1326 audit(1773298039.461:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.4.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 764.251570][T22906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7353'. [ 764.279484][T22906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7353'. [ 764.312464][ T31] audit: type=1326 audit(1773298039.503:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.4.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 764.445717][ T31] audit: type=1326 audit(1773298039.503:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.4.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 764.551452][ T31] audit: type=1326 audit(1773298039.503:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.4.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 764.659449][ T31] audit: type=1326 audit(1773298039.503:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.4.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 764.759173][ T31] audit: type=1326 audit(1773298039.503:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22903 comm="syz.4.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 764.815427][T22925] loop7: detected capacity change from 0 to 256 [ 764.888541][T22926] loop8: detected capacity change from 0 to 256 [ 765.053045][T22934] loop4: detected capacity change from 0 to 512 [ 765.109151][T22926] FAT-fs (loop8): Directory bread(block 64) failed [ 765.115722][T22934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.115847][T22934] ext4 filesystem being mounted at /1206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 765.138970][T22926] FAT-fs (loop8): Directory bread(block 65) failed [ 765.180659][T22926] FAT-fs (loop8): Directory bread(block 66) failed [ 765.187330][T22926] FAT-fs (loop8): Directory bread(block 67) failed [ 765.250855][T22944] libceph: resolve '0' (ret=-3): failed [ 765.265879][T22926] FAT-fs (loop8): Directory bread(block 68) failed [ 765.272443][T22926] FAT-fs (loop8): Directory bread(block 69) failed [ 765.309939][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.330401][T22926] FAT-fs (loop8): Directory bread(block 70) failed [ 765.345482][T22950] loop6: detected capacity change from 0 to 64 [ 765.374428][T22926] FAT-fs (loop8): Directory bread(block 71) failed [ 765.418413][T22926] FAT-fs (loop8): Directory bread(block 72) failed [ 765.461670][T22926] FAT-fs (loop8): Directory bread(block 73) failed [ 765.489641][ T31] audit: type=1326 audit(1773298041.057:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22952 comm="syz.5.7375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 765.588804][T22957] loop3: detected capacity change from 0 to 512 [ 765.595851][ T31] audit: type=1326 audit(1773298041.099:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22952 comm="syz.5.7375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 765.701322][T22957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 765.880646][T22957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.961569][T22957] ext4 filesystem being mounted at /1260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.238723][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.476897][T22985] kernel read not supported for file / »°7:ä´ (pid: 22985 comm: syz.3.7386) [ 766.535043][T22986] loop4: detected capacity change from 0 to 1024 [ 766.569100][T22986] EXT4-fs: Ignoring removed nobh option [ 766.591210][T22986] EXT4-fs: Ignoring removed bh option [ 766.658054][T22992] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 766.678742][T22986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.697415][T22992] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 766.713503][T22992] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7391: Corrupt directory, running e2fsck is recommended [ 766.727240][T22986] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.7388: iget: bogus i_mode (7755) [ 766.821954][T22999] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7394'. [ 766.877742][T22999] ..0·: renamed from hsr0 [ 766.907269][T22999] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 766.918016][T22999] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 766.930645][T22992] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 766.939999][T22999] ..0·: entered allmulticast mode [ 766.945674][T22999] hsr_slave_0: entered allmulticast mode [ 766.954802][T22999] hsr_slave_1: entered allmulticast mode [ 766.965303][T22992] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.7391: corrupted in-inode xattr: invalid ea_ino [ 766.966054][T22999] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 766.997492][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.001446][T22992] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 767.008515][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 767.024211][ C0] EXT4-fs (loop5): initial error at time 1773298042: ext4_iget_extra_inode:5025: inode 15 [ 767.034291][ C0] EXT4-fs (loop5): last error at time 1773298042: ext4_iget_extra_inode:5025: inode 15 [ 767.085056][T22992] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7391: couldn't read orphan inode 15 (err -117) [ 767.109903][T22992] loop5: lost filesystem error report for type 5 error -117 [ 767.172105][T22992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.275572][T22992] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #2: comm syz.5.7391: corrupted xattr block 255: invalid header [ 767.497669][T22992] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #2: comm syz.5.7391: corrupted xattr block 255: invalid header [ 767.642049][T22989] set_capacity_and_notify: 1 callbacks suppressed [ 767.642072][T22989] loop6: detected capacity change from 0 to 32768 [ 767.698040][T22989] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7390 (22989) [ 767.722190][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.758171][T22989] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 767.787868][T22989] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 767.840187][T22989] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 767.989733][T16022] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 768.058976][T22989] BTRFS info (device loop6): rebuilding free space tree [ 768.118767][T22989] BTRFS info (device loop6): disabling free space tree [ 768.134728][T23034] bond4: option lp_interval: invalid value (18446744073709551613) [ 768.151963][T22989] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 768.153638][T16022] usb 9-1: Using ep0 maxpacket: 16 [ 768.170959][T22989] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 768.183523][T23034] bond4: option lp_interval: allowed values 1 - 2147483647 [ 768.190189][T16022] usb 9-1: unable to get BOS descriptor or descriptor too short [ 768.219775][T16022] usb 9-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 768.223215][T22989] BTRFS info (device loop6): setting nodatasum [ 768.240654][T23034] bond4 (unregistering): Released all slaves [ 768.252788][T16022] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.265638][T22989] BTRFS info (device loop6): allowing degraded mounts [ 768.269121][T23052] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7411'. [ 768.276489][T16022] usb 9-1: Product: syz [ 768.290108][T22989] BTRFS info (device loop6): turning on async discard [ 768.297521][T16022] usb 9-1: Manufacturer: syz [ 768.302464][T16022] usb 9-1: SerialNumber: syz [ 768.314311][T22989] BTRFS info (device loop6): enabling disk space caching [ 768.322505][T22989] BTRFS info (device loop6): force clearing of disk cache [ 768.338308][T22989] BTRFS info (device loop6): force zlib compression, level 3 [ 768.609340][T16022] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 768.634976][T16022] usb 9-1: MIDIStreaming interface descriptor not found [ 768.932761][ T5910] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 768.943621][T16022] usb 9-1: USB disconnect, device number 6 [ 768.994000][T16693] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 769.113760][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 769.146154][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.174392][ T5910] usb 5-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 769.209128][ T5910] usb 5-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0x28, changing to 0x8 [ 769.276652][ T5910] usb 5-1: config 6 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 8547, setting to 1024 [ 769.327263][ T5910] usb 5-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 769.397499][ T5910] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 769.426253][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.477683][ T5910] usb 5-1: Product: syz [ 769.494488][ T5910] usb 5-1: Manufacturer: syz [ 769.499119][ T5910] usb 5-1: SerialNumber: syz [ 769.561542][T23064] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 769.602336][ T5910] hso 5-1:6.0: Can't find BULK IN endpoint [ 769.706925][T23085] loop7: detected capacity change from 0 to 1024 [ 769.856387][ T5910] usb 5-1: USB disconnect, device number 114 [ 770.171451][T23104] block nbd7: NBD_DISCONNECT [ 770.309937][T23107] loop8: detected capacity change from 0 to 16 [ 770.377826][T23107] erofs (device loop8): mounted with root inode @ nid 36. [ 770.980907][T23138] loop8: detected capacity change from 0 to 512 [ 771.010280][T23138] EXT4-fs: Ignoring removed orlov option [ 771.016017][T23138] EXT4-fs: Ignoring removed mblk_io_submit option [ 771.083118][T23138] EXT4-fs (loop8): orphan cleanup on readonly fs [ 771.092321][T23138] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 771.171223][T23138] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.7453: attempt to clear invalid blocks 2 len 1 [ 771.275742][T23138] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 771.275911][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 771.291568][ C0] EXT4-fs (loop8): initial error at time 1773298047: ext4_clear_blocks:876: inode 13 [ 771.301130][ C0] EXT4-fs (loop8): last error at time 1773298047: ext4_clear_blocks:876: inode 13 [ 771.411009][T23138] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 771.412087][T23155] loop3: detected capacity change from 0 to 8 [ 771.547989][T23138] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.7453: invalid indirect mapped block 1819239214 (level 0) [ 771.666500][T23138] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 771.675603][T23138] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.7453: invalid indirect mapped block 1819239214 (level 1) [ 771.766396][T23138] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 771.767895][T23138] EXT4-fs (loop8): 1 truncate cleaned up [ 771.837343][T23138] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 772.096929][T19449] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.123763][T23176] loop5: detected capacity change from 0 to 128 [ 772.168993][T23176] FAT-fs (loop5): Directory bread(block 11554) failed [ 772.228493][T23176] FAT-fs (loop5): Directory bread(block 11555) failed [ 772.235425][T23176] FAT-fs (loop5): Directory bread(block 11556) failed [ 772.250196][T23181] xt_TCPMSS: Only works on TCP SYN packets [ 772.271380][T23176] FAT-fs (loop5): Directory bread(block 11557) failed [ 772.298549][T23176] FAT-fs (loop5): Directory bread(block 11558) failed [ 772.316370][T23176] FAT-fs (loop5): Directory bread(block 11559) failed [ 772.341883][T23176] FAT-fs (loop5): Directory bread(block 11560) failed [ 772.368492][T23176] FAT-fs (loop5): Directory bread(block 11561) failed [ 772.401448][T23176] FAT-fs (loop5): Directory bread(block 11562) failed [ 772.435284][T23176] FAT-fs (loop5): Directory bread(block 11563) failed [ 772.776755][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 772.776778][ T31] audit: type=1326 audit(1773298048.711:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23198 comm="syz.4.7482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x0 [ 773.060104][T23207] loop3: detected capacity change from 0 to 1764 [ 773.318505][ T5829] Bluetooth: hci6: command 0x0406 tx timeout [ 773.385728][T23221] netlink: 'syz.7.7491': attribute type 8 has an invalid length. [ 773.412929][ T31] audit: type=1326 audit(1773298049.372:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23220 comm="syz.5.7493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 773.435641][ T31] audit: type=1326 audit(1773298049.372:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23220 comm="syz.5.7493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 773.530427][ T31] audit: type=1326 audit(1773298049.435:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23220 comm="syz.5.7493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 773.533206][T23183] loop8: detected capacity change from 0 to 32768 [ 773.636868][ T31] audit: type=1326 audit(1773298049.435:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23220 comm="syz.5.7493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 773.690778][T23183] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 773.707836][T23228] loop4: detected capacity change from 0 to 512 [ 773.724057][ T31] audit: type=1326 audit(1773298049.435:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23220 comm="syz.5.7493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 773.753915][T23183] JBD2: Ignoring recovery information on journal [ 773.834490][T23183] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 773.885932][T23239] program syz.7.7499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 773.936416][T23228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.949555][T23228] ext4 filesystem being mounted at /1227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 774.009132][T23239] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 774.141566][T23244] netlink: 'syz.5.7502': attribute type 2 has an invalid length. [ 774.177731][T23244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7502'. [ 774.252936][T19449] ocfs2: Unmounting device (7,8) on (node local) [ 774.266215][T23246] bond1: Removing last ns target with arp_interval on [ 774.328134][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.370130][T23250] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7506'. [ 774.441020][T23250] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7506'. [ 774.453891][T23251] loop3: detected capacity change from 0 to 2048 [ 774.494587][T23250] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7506'. [ 774.500943][T23251] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 774.561852][T23251] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 775.134781][T23273] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 775.185063][T23276] loop3: detected capacity change from 0 to 64 [ 775.836741][T23253] loop8: detected capacity change from 0 to 32768 [ 775.974933][T23301] loop3: detected capacity change from 0 to 1024 [ 776.023562][T23301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.506659][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.593622][T23328] loop7: detected capacity change from 0 to 64 [ 776.622067][T23329] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7543'. [ 777.275779][T23344] loop7: detected capacity change from 0 to 4096 [ 777.288442][ T31] audit: type=1326 audit(1773298053.446:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.4.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 777.304931][T23344] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 777.371435][ T31] audit: type=1326 audit(1773298053.446:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.4.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 777.471920][ T31] audit: type=1326 audit(1773298053.446:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.4.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 777.530199][T23344] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 777.573227][T23344] ntfs3(loop7): ino=19, mi_enum_attr [ 777.581350][ T31] audit: type=1326 audit(1773298053.446:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.4.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 777.595165][T23361] tc_dump_action: action bad kind [ 777.640420][T23366] comedi comedi1: rti800: I/O port conflict (0x3,16) [ 777.695993][ T31] audit: type=1326 audit(1773298053.446:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.4.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 777.696088][T23344] ntfs3(loop7): failed to convert "c46c" to iso8859-7 [ 777.801411][ T31] audit: type=1326 audit(1773298053.446:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.4.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 777.835665][T23344] ntfs3(loop7): ino=20, mi_enum_attr [ 777.947326][T23372] netlink: 100 bytes leftover after parsing attributes in process `syz.5.7564'. [ 778.180893][ T31] audit: type=1326 audit(1773298053.446:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.4.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 778.246354][ T31] audit: type=1326 audit(1773298053.446:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23349 comm="syz.4.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aea59c799 code=0x7ffc0000 [ 778.886219][T16065] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 779.057675][T16065] usb 9-1: Using ep0 maxpacket: 32 [ 779.070409][T16065] usb 9-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice= 1.f3 [ 779.105355][T16065] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 779.113591][T16065] usb 9-1: SerialNumber: syz [ 779.124102][T23406] loop5: detected capacity change from 0 to 256 [ 779.405728][T16065] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 779.443949][T16065] dvb_usb_af9015 9-1:253.0: probe with driver dvb_usb_af9015 failed with error -22 [ 779.514414][T23421] loop5: detected capacity change from 0 to 1024 [ 779.523999][T16065] usb 9-1: USB disconnect, device number 7 [ 779.564800][T23421] EXT4-fs: Ignoring removed orlov option [ 779.629543][T23424] loop6: detected capacity change from 0 to 256 [ 779.649229][T23421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.738319][T23424] FAT-fs (loop6): Directory bread(block 64) failed [ 779.771732][T23424] FAT-fs (loop6): Directory bread(block 65) failed [ 779.808613][T23424] FAT-fs (loop6): Directory bread(block 66) failed [ 779.821187][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.839993][T23424] FAT-fs (loop6): Directory bread(block 67) failed [ 779.854953][T23424] FAT-fs (loop6): Directory bread(block 68) failed [ 779.886044][T23424] FAT-fs (loop6): Directory bread(block 69) failed [ 779.892750][T23424] FAT-fs (loop6): Directory bread(block 70) failed [ 779.923947][T23424] FAT-fs (loop6): Directory bread(block 71) failed [ 779.943221][T23424] FAT-fs (loop6): Directory bread(block 72) failed [ 779.949867][T23424] FAT-fs (loop6): Directory bread(block 73) failed [ 780.488432][ T31] audit: type=1326 audit(1773298056.795:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23458 comm="syz.5.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 780.601350][ T31] audit: type=1326 audit(1773298056.795:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23458 comm="syz.5.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 780.705445][T23465] netlink: 'syz.7.7608': attribute type 21 has an invalid length. [ 780.713371][T23465] netlink: 'syz.7.7608': attribute type 6 has an invalid length. [ 780.714954][ T31] audit: type=1326 audit(1773298056.795:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23458 comm="syz.5.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f374279c799 code=0x7ffc0000 [ 780.781209][T23465] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7608'. [ 780.836228][ T31] audit: type=1326 audit(1773298056.869:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23458 comm="syz.5.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f374275cfce code=0x7ffc0000 [ 780.857308][T23469] loop8: detected capacity change from 0 to 4096 [ 780.875726][T23473] netlink: 'syz.3.7613': attribute type 3 has an invalid length. [ 780.906817][T23469] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 780.938565][ T31] audit: type=1326 audit(1773298056.869:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23458 comm="syz.5.7606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f374275cfce code=0x7ffc0000 [ 781.080241][T16557] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 781.194120][T23484] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 781.209889][T23485] loop4: detected capacity change from 0 to 1024 [ 781.259079][T23485] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 781.305118][T16557] usb 6-1: Using ep0 maxpacket: 8 [ 781.342982][T16557] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 781.360955][T16557] usb 6-1: config 179 has no interface number 0 [ 781.397804][T16557] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 781.466414][T16557] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 781.514723][T16557] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 781.571669][T16557] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 781.604128][T16557] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 781.637431][T23499] loop7: detected capacity change from 0 to 16 [ 781.664230][T16557] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 781.730558][T16557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.742482][T23499] erofs (device loop7): mounted with root inode @ nid 36. [ 781.756617][T23472] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 782.194417][T16057] usb 6-1: USB disconnect, device number 101 [ 782.194486][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 782.208841][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 782.363423][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 782.363446][ T31] audit: type=1326 audit(1773298058.769:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7aea59c5c7 code=0x7ffc0000 [ 782.402684][T23519] loop4: detected capacity change from 0 to 2048 [ 782.496629][ T31] audit: type=1326 audit(1773298058.822:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7aea55cfce code=0x7ffc0000 [ 782.562404][ T31] audit: type=1326 audit(1773298058.822:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7aea59c42b code=0x7ffc0000 [ 782.676702][ T31] audit: type=1326 audit(1773298058.832:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7aea55cfce code=0x7ffc0000 [ 782.772158][ T31] audit: type=1326 audit(1773298058.832:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7aea59c42b code=0x7ffc0000 [ 782.860966][T23535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.898086][ T31] audit: type=1326 audit(1773298058.843:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7aea59c42b code=0x7ffc0000 [ 782.948828][ T31] audit: type=1326 audit(1773298058.895:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f7aea59adda code=0x7ffc0000 [ 782.991894][ T31] audit: type=1326 audit(1773298058.895:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f7aea59adda code=0x7ffc0000 [ 783.025757][ T31] audit: type=1326 audit(1773298058.895:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f7aea59adda code=0x7ffc0000 [ 783.042297][T23541] loop5: detected capacity change from 0 to 1024 [ 783.071860][ T31] audit: type=1326 audit(1773298058.895:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f7aea59adda code=0x7ffc0000 [ 783.148025][T23541] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 783.212082][T23543] bond2: entered allmulticast mode [ 783.271430][T23541] hfsplus: filesystem is marked journaled, leaving read-only. [ 783.648637][T23564] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7657'. [ 783.760595][T23568] loop4: detected capacity change from 0 to 256 [ 783.845592][T23572] snd_dummy snd_dummy.0: control 0:3:8:syz0:0 is already present [ 783.926703][T23577] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7663'. [ 783.951162][T23573] loop7: detected capacity change from 0 to 2048 [ 784.016895][T23573] loop7: p1 p2 < > p3 < p5 > p4 [ 784.022697][T23573] loop7: partition table partially beyond EOD, truncated [ 784.030857][T23573] loop7: p1 size 917504 extends beyond EOD, truncated [ 784.134594][ T32] INFO: task syz.1.5656:18980 blocked for more than 143 seconds. [ 784.158577][T23573] loop7: p2 start 4278190080 is beyond EOD, truncated [ 784.177552][ T32] Tainted: G L syzkaller #0 [ 784.195380][T23577] bond1: option lacp_active: invalid value (5) [ 784.201716][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 784.204648][T23573] loop7: p4 start 150994949 is beyond EOD, [ 784.210671][ T32] task:syz.1.5656 state:D stack:27392 pid:18980 tgid:18979 ppid:5819 task_flags:0x400040 flags:0x00080002 [ 784.235979][ T32] Call Trace: [ 784.244507][ T32] [ 784.247475][ T32] __schedule+0x15dd/0x52d0 [ 784.257323][ T32] ? __pfx___schedule+0x10/0x10 [ 784.268850][ T32] ? schedule+0x90/0x360 [ 784.278199][ T32] schedule+0x164/0x360 [ 784.289365][T23573] truncated [ 784.290007][ T32] schedule_preempt_disabled+0x13/0x30 [ 784.302442][T23573] loop7: p5 size 917504 extends beyond EOD, truncated [ 784.321077][ T32] __mutex_lock+0x7fe/0x1300 [ 784.338441][ T32] ? __mutex_lock+0x5ac/0x1300 [ 784.356936][ T32] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 784.410387][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 784.429260][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.441002][ T32] ? __nlmsg_put+0xef/0x1b0 [ 784.454538][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.472475][ T32] ? genlmsg_put+0x137/0x2e0 [ 784.489345][ T32] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 784.496261][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.511753][ T32] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 784.530240][ T32] genl_family_rcv_msg_doit+0x22a/0x330 [ 784.543335][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.549466][ T32] ? __asan_memcpy+0x40/0x70 [ 784.556332][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 784.581921][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.587946][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 784.595757][ T32] genl_rcv_msg+0x61c/0x7a0 [ 784.600748][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 784.606019][ T32] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 784.613148][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 784.618318][ T32] netlink_rcv_skb+0x232/0x4b0 [ 784.623729][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 784.629234][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 784.634927][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.642846][ T32] ? down_read+0x272/0x2e0 [ 784.647482][ T32] ? genl_rcv+0xd/0x40 [ 784.652476][ T32] genl_rcv+0x28/0x40 [ 784.656799][ T32] netlink_unicast+0x80f/0x9b0 [ 784.662306][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 784.668212][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.674558][ T32] ? skb_put+0x11b/0x210 [ 784.679593][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.685514][ T32] netlink_sendmsg+0x813/0xb40 [ 784.690967][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 784.703962][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.704802][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 784.710347][ T32] ? aa_sock_msg_perm+0xf1/0x1b0 [ 784.725375][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.731183][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.736474][ T5822] udevd[5822]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 784.737484][ T32] ____sys_sendmsg+0x972/0x9f0 [ 784.747322][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 784.752969][ T32] ? futex_unqueue+0x211/0x240 [ 784.768417][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 784.774401][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.780268][ T32] ? import_iovec+0x73/0xa0 [ 784.786684][ T32] ___sys_sendmsg+0x2a5/0x360 [ 784.796870][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 784.802400][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.808138][ T32] ? futex_wait+0x29a/0x380 [ 784.812898][ T32] ? __fget_files+0x2a/0x420 [ 784.817544][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.829141][ T32] ? __fget_files+0x3a0/0x420 [ 784.833999][ T32] __x64_sys_sendmsg+0x1bd/0x2a0 [ 784.839146][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 784.844648][ T32] ? rcu_is_watching+0x15/0xb0 [ 784.849576][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 784.855374][ T32] do_syscall_64+0x14d/0xf80 [ 784.860214][ T32] ? trace_irq_disable+0x3b/0x150 [ 784.865286][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.871765][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.878149][ T32] RIP: 0033:0x7f568519c799 [ 784.882628][ T32] RSP: 002b:00007f5686033028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.891170][ T32] RAX: ffffffffffffffda RBX: 00007f5685415fa0 RCX: 00007f568519c799 [ 784.899655][ T32] RDX: 000000002400e844 RSI: 0000200000000140 RDI: 0000000000000003 [ 784.907700][ T32] RBP: 00007f5685232c99 R08: 0000000000000000 R09: 0000000000000000 [ 784.915825][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.923840][ T32] R13: 00007f5685416038 R14: 00007f5685415fa0 R15: 00007ffdb73d1bf8 [ 784.931978][ T32] [ 784.935162][ T32] [ 784.935162][ T32] Showing all locks held in the system: [ 784.939532][T23577] bond1 (unregistering): Released all slaves [ 784.942897][ T32] 1 lock held by khungtaskd/32: [ 784.942921][ T32] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 784.970729][ T32] 3 locks held by kworker/u8:3/50: [ 784.976403][ T32] #0: ffff888031b31148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 784.988481][ T32] #1: ffffc90000ba7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 785.001547][ T32] #2: ffffffff8fbccd88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 785.011206][ T32] 5 locks held by kworker/u8:4/59: [ 785.016347][ T32] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 785.026572][ T32] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 785.035594][ T32] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 785.044683][ T32] #3: ffffffff9a5352e8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 785.055375][ T32] #4: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0 [ 785.065256][ T32] 3 locks held by kworker/u8:5/108: [ 785.070520][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 785.082340][ T32] #1: ffffc90002687c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 785.093651][ T32] #2: ffffffff8fbccd88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 785.102770][ T32] 2 locks held by getty/5573: [ 785.107485][ T32] #0: ffff888036c100a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 785.117357][ T32] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 785.127842][ T32] 2 locks held by syz.0.5590/18836: [ 785.133055][ T32] #0: ffffffff8fc3ab30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 785.141498][ T32] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 785.151839][ T32] 2 locks held by syz.1.5656/18980: [ 785.157215][ T32] #0: ffffffff8fc3ab30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 785.165622][ T32] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 785.175994][ T32] 3 locks held by syz.8.7663/23577: [ 785.181207][ T32] #0: ffffffff9011c580 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 785.191196][ T32] #1: ffffffff8fbccd88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 785.200414][ T32] #2: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 785.213426][ T32] [ 785.216270][ T32] ============================================= [ 785.216270][ T32] [ 785.224873][ T32] NMI backtrace for cpu 0 [ 785.224901][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 785.224935][ T32] Tainted: [L]=SOFTLOCKUP [ 785.224945][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 785.224962][ T32] Call Trace: [ 785.224972][ T32] [ 785.224985][ T32] dump_stack_lvl+0xe8/0x150 [ 785.225029][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 785.225065][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 785.225111][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 785.225149][ T32] sys_info+0x135/0x170 [ 785.225180][ T32] watchdog+0xfd9/0x1030 [ 785.225230][ T32] ? watchdog+0x21a/0x1030 [ 785.225282][ T32] kthread+0x388/0x470 [ 785.225310][ T32] ? __pfx_watchdog+0x10/0x10 [ 785.225349][ T32] ? __pfx_kthread+0x10/0x10 [ 785.225378][ T32] ret_from_fork+0x51e/0xb90 [ 785.225419][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 785.225452][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.225485][ T32] ? __switch_to+0xc7d/0x1450 [ 785.225522][ T32] ? __pfx_kthread+0x10/0x10 [ 785.225551][ T32] ret_from_fork_asm+0x1a/0x30 [ 785.225612][ T32] [ 785.225622][ T32] Sending NMI from CPU 0 to CPUs 1: [ 785.351558][ C1] NMI backtrace for cpu 1 [ 785.351585][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.351619][ C1] Tainted: [L]=SOFTLOCKUP [ 785.351629][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 785.351645][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 785.351691][ C1] Code: fe 6c 02 e9 8e 62 62 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 82 1b 00 fb f4 67 62 62 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 785.351715][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 785.351741][ C1] RAX: 000000000004d2ab RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 785.351763][ C1] RDX: 0000000000000001 RSI: ffffffff8def4b08 RDI: ffffffff8c27b400 [ 785.351784][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 785.351807][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff90118bb0 [ 785.351830][ C1] R13: 1ffff11003ad8000 R14: 0000000000000001 R15: 0000000000000001 [ 785.351853][ C1] FS: 0000000000000000(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 785.351878][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 785.351899][ C1] CR2: 0000001b33916ff8 CR3: 00000000761f1000 CR4: 0000000000350ef0 [ 785.351922][ C1] Call Trace: [ 785.351934][ C1] [ 785.351945][ C1] default_idle+0x9/0x20 [ 785.351976][ C1] default_idle_call+0x72/0xb0 [ 785.352010][ C1] do_idle+0x1bd/0x500 [ 785.352051][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 785.352094][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.352140][ C1] ? __pfx_do_idle+0x10/0x10 [ 785.352180][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.352224][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 785.352267][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.352310][ C1] cpu_startup_entry+0x43/0x60 [ 785.352352][ C1] start_secondary+0x101/0x110 [ 785.352388][ C1] common_startup_64+0x13e/0x147 [ 785.352433][ C1] [ 785.576658][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 785.583581][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 785.594372][ T32] Tainted: [L]=SOFTLOCKUP [ 785.598721][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 785.608796][ T32] Call Trace: [ 785.612110][ T32] [ 785.615053][ T32] vpanic+0x56c/0xa60 [ 785.619107][ T32] ? __pfx___schedule+0x10/0x10 [ 785.623974][ T32] ? __pfx_vpanic+0x10/0x10 [ 785.628490][ T32] ? __pfx_console_unlock+0x10/0x10 [ 785.633712][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.639452][ T32] panic+0xc5/0xd0 [ 785.643185][ T32] ? __pfx_panic+0x10/0x10 [ 785.647615][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.653255][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 785.658650][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.664312][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 785.670575][ T32] watchdog+0x1023/0x1030 [ 785.674958][ T32] ? watchdog+0x21a/0x1030 [ 785.679427][ T32] kthread+0x388/0x470 [ 785.683506][ T32] ? __pfx_watchdog+0x10/0x10 [ 785.688198][ T32] ? __pfx_kthread+0x10/0x10 [ 785.692813][ T32] ret_from_fork+0x51e/0xb90 [ 785.697471][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 785.702592][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 785.708360][ T32] ? __switch_to+0xc7d/0x1450 [ 785.713050][ T32] ? __pfx_kthread+0x10/0x10 [ 785.717646][ T32] ret_from_fork_asm+0x1a/0x30 [ 785.722484][ T32] [ 785.725599][ T32] Kernel Offset: disabled [ 785.729939][ T32] Rebooting in 86400 seconds..