last executing test programs: 2m13.359979994s ago: executing program 3 (id=200): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 2m13.256087793s ago: executing program 3 (id=201): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m13.131955493s ago: executing program 3 (id=204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000f"], 0x5c}}, 0x0) 2m12.933910883s ago: executing program 3 (id=208): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) 2m12.482626832s ago: executing program 3 (id=213): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x147842, 0x88) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xd) 2m11.893471061s ago: executing program 3 (id=220): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, 0x20000}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0xf, 0xa, {0x31, 0x8}}]}]}, @IFLA_MTU={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x0) 2m11.859861821s ago: executing program 2 (id=221): mknod(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syz_mount_image$sysv(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x1000000, &(0x7f0000000f40)=ANY=[], 0x1, 0x9ec0, &(0x7f0000015380)="$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") truncate(&(0x7f0000000500)='./file0\x00', 0xff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) 2m11.4973899s ago: executing program 32 (id=220): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, 0x20000}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0xf, 0xa, {0x31, 0x8}}]}]}, @IFLA_MTU={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x0) 2m11.49221366s ago: executing program 2 (id=223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x26, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000ffff00fc0100000000f718376c66264221000029d300000000000000000002000000000000000000000000020010"], 0xb8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 2m11.324146639s ago: executing program 2 (id=226): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {0x0, 0x4, {0xa, 0x4e20, 0x4, @loopback, 0x3}}}, 0x38) 2m11.020804139s ago: executing program 2 (id=228): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2010880, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp869,discard=0x0000000000000009,gid=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,errors=continue,discard,errors=remount-ro\x00iocharset=cp737,grpquota,usrquota,gid=', @ANYRES16, @ANYBLOB=',quota,g\x00\x00=', @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYBLOB=',noquota,subj_type=+-]{.&Q.,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00'], 0x5, 0x6170, &(0x7f00000066c0)="$eJzs3b2PHGcdB/Dfvt5LiHNKEQULoYsTXkKIX4MxBEhSQEGTArlFti6XyMIBZBvkRBY+dA0FFX8BCIkSIUpEwR+QgpaOiopINhIoFYPm7nl8s+td75nz7ezd8/lI65nfPLO7z9x3Z1+8M/sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDf/c73znUi4spP04K1iE9FL6IbsVLX6xGxsr6W1+9HxPOx0xzPRcRgKaK+/s4/z0S8FhEfnYi4d//ORr34/D778e0//O2333/q7b/+fnDmP3+81Xt92nq3b//y33+6e7BtBgAAgNJUVVV10sf8k+nzfbftTgEAc5Ff/6skL1+YuntIt/+rf7z950XYPrVarVar51g3VZPdbRYRsdW8Tv2ewdfxAHDEbMUnbXeBFsm/aP2IeKrtTgALrdN2BzgU9+7f2eikfDvN14P13fZ8LMhI/ludB+d3TJvOMn6MybweX9vRi2en9GdlTn1YJDn/7nj+V3bbh2m9w85/XqblP9w99ak4Of/eeP5jjk/+3Yn5lyrn33+s/HvyBwAAAACABZb//3+t5e9/lw6+KfvyqO9/1+fUBwAAAAAAAAB40g46/t8Dxv8DAACAhVV/Vq/9+sTesmm/xVYvv9yJeHpsfaAw6WSZ1bb7AQAAAAAAAAAAAAAl6e8ew3u5EzGIiKdXV6uqqi9N4/XjOuj1j7rStx9K1vaTPAAA7ProxNi5/J2I5Yi4nH7rb7C6ulpVyyur1Wq1spTfzw6XlquVxufaPK2XLQ338Ya4P6zqG1tuXK9p1uflWe3jt1ff17Dq7aNjT8gg/TWnNLcUNgAku69G97wiHTNV9cy0Nx8wwv5//Nj/2Y+2H6cAAADA4auqquqkn/M+mb7z77bdKQBgLvLr//j3AodSRxzu7avVarVarX5k3VRNdrdZRMRW8zr1ewbD8QPAEbMVn7TdBVok/6L1I+L5tjsBLLRO2x3gUNy7f2ejk/LtNF8P0vju+ViQkfy3OjvXy9efNJ1l/BiTeT2+tqMXz07pz3Nz6sMiyfl3x/O/sts+TOsddv7zMi3/ejvXWuhP23L+vfH8xxyf/LsT8y9Vzr//WPn35A8AAAAAAAss////mu9/8yYDAAAAAAAAwJFz7/6djXzea/7+/zMT1nP+5/GU8+/Iv0g5/+5Y/l8cW6/XmP/4rb38/3X/zsbvbv3z03m63/yX8kwnPbI66RHRSffU6afpQbbuYduD3rC+p0Gn2+unY36qwbtxLa7HZpwdWbeb/h577edG2uueDkbaz4+09x9qvzDSPki/O1Ct5PbTsRE/iuvxzk573bY0Y/uXZ7RXM9pz/j37f5Fy/v3Gpc5/NbV3xqbR2DWb+31zOul+3rz22V+cPeRt2Y/t6D3YtqZ6+0610J+dv8lTw/jJzc0bp29fvXXrxrlIk5Gl5yNNnrCc/2DnsrT3/P/ibnt+3m/urx//fPjQ8/6s/BfFdvSn5v9iY77e3pfn3Lc25PyH6ZLzfye1T9r/j3b+0/f/V1roDwAAAAAAAAAAAAAAADxKVVU7p4i+GREX0/k/bZ2bCQDMV379r5K8XK1Wq9Vq9fGrm6rJ3mgWEfGX5nXq9ww/m3RjAMAi+29E/L3tTtAa+Rcs/95fPX2p7c4Ac3Xzgw9/cPX69c0bN9vuCQAAAAAAAADw/8rjf643xn9+KSLWxtYbGf/1rVg/6Pif/TzzYIDRJzzQ9xTb3WGv2xhu/IXYGZ/79LTxv0/Fo8f/7s+4v8GM9uGM9qUZ7csTl+6lNfFEj4ac/wuN8c7r/E+ODb9ewviv42PelyDnf6rxeK7z/8LYes38q98sXP5b+11xO7oj+Z+59f6Pz9z84MNXr71/9b3N9zZ/eOHcubMXLl68dOnSmXevXd88u/vv4fR6AeT889jXjgMtS84/Zy7/suT8P5dq+Zcl5//5VMu/LDn//H5P/mXJ+efPPvIvS87/5VTLvyw5/y+lWv5lyfm/kmr5lyXn/+VUy78sOf9XUy3/suT8T6da/mXJ+Z9J9T7y9/Pwx0jOP3/DZf8vS84/H9kg/7Lk/M+nWv5lyflfSLX8y5Lzfy3V8i9Lzv8rqZZ/WXL+F1Mt/7Lk/L+aavmXJed/KdXyL0vO/2upln9Zcv5fT7X8y5Lzfz3V8i9Lzv8bqZZ/WXL+30y1/MuS8/9WquVflpz/G6mWf1n2fv/fjBkzZvJM289MAAAAAAAAAAAAAMC4eRxO3PY2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuNUaus74f+Jm92GuHEAMhOPkbsklMCMmSXduJL/zrYsK1AUqBhEIv2K53bRZ8w2uXQJFsGiiRMCqqqJq+oAWE2khVhVVRiVaU5kXVy6vSvqBvKqpKSI2qgAISUktptpo5z/N4ZnZ2zq49Xs+e5/OR4p935sycM2fOzO53ne8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaHfHG+Y+0yiKovlf648tRfGC5t83TW5pXfba672FAAAAwNX639afz92ULjiwghu1LfN3r/jHry8uLi4W7xv93fEvLC6mKyaLYnxjUbSuiy79+/sb7csEjxcTjZG2r0cqVj9acf1YxfXjFddvqLh+Y8X1ExXXL9kBS2wqfx/TurPtrb9uKXdpcXMx3rpue49bPd7YODISf5fT0mjdZnH8aDFfHC/mipmO5ctlG63lv3lHc11vLeK6RtrWta15hPzwE0fiNjTCPt7esa7L9xl9//XF5I9++Ikjf3T22Vt7zcrd0HF/5Xbec2dzOz8VLim3tVFsTPskbudI23Zu6/GcjHZsZ6N1u+bfu7fzuRVu5+jlzVxT3c/5RDHS+vu3W/tprP3Xemk/bQuX/dddRVFcuLzZ3cssWVcxUmzuuGTk8vMzUR6RzftoHkovLsZWdZzesYLjtDlnt3cep92vifj83xFuN7bMNrQ/Td//5IYlz/tqj9Oo+aiXe610H4ODfq0MyzEYj4tvtx70Ez2Pwe3h8X/i7uWPwZ7HTo9jMD3utmPwzqpjcGTDaGub05PQaN3m8jG4o2P50daaGq35zN39j8HpsydOTy987OOvmT9x+NjcsbmTu3bsmNm1e/fevXunj84fn5sp/7zCvT38Nhcj6TVwZ9h38TXwqq5l2w/VxS8P7nU40ed1uKVr2UG/Dse6H1xjbV6QS4/p8rXxSHOnT1wcKZZ5jbWen3uv/nWYHnfb63Cs7XXY83tKj9fh2Apeh81lTt+7sp9Zxtr+67UN1+p7wZa2Y7D755HuY3DQP48MyzE4EY6Lf713+e8F28L2PjG12p9HRpccg+nhhvee5iXp5/2Jva3R67i8rXnFDRuKcwtzZ+5/7PDZs2d2FGGsiZe0HSvdx+vmtsdULDleR1Z9vB6Yf8UTt/W4fEvYVxOvaf4xsexz1Vzmgfv7P1et726992fHpTuLMAZsrfdnr+/mzf2ZsmSf/dlc5lPTV/+zeMqlbe+/48u8/8bc/3y5vnRXj4+Oj5Wv39G0d8Y73o87n6qx1ntXo7Xu56ZX9n48Hv5b6/fjm/u8H2/tWnbQ78fj3Q8uvh83qn7bcXW6n8+JcJwcn+n/ftxcZuvO1R6TY33fj+8KsxH2/6tDUki5qO3YWe64TesaGxsPj2ssrqHzON3Vsfx4yGbNdT2188qO03vuKu9rND26y9bqOJ3sWnbQx2l6v1ruOG1U/fbtynQ/nxPhuLh5V//jtLnM0w9c/XvnpvjXtvfODVXH4PjohuY2j6eDsHy/X9wUj8H7iyPFqeJ4Mdu6dkPreGq01jX14MqOwQ3hv7V+r9za5xi8p2vZQR+D6fvYcsdeY2zpgx+A7udzIhwXTz7Y/xhsLvPGPYP92fWecElapu1n1+7fry33O6/bunbTtfydV3M7/2ZP/9/NNpc5vne1ObP/frovXHJDj/3U/fpd7jU1W6zNftoatvPZvcvvp+b2NJf5wr4VHk8HiqI4/5GHWr/vDf++8mfnvvP1jn936fVvOuc/8tAPbjz6t6vZfgDWv+fLsbn8Xtf2L1Mr+fd/AAAAYF2IuX8kzET+BwAAgNqIuT/+X+GJ/A8AAAC1EXP/WJhJJvl/6xufnX/+fJGa+YtBvD7thofL5WLHdSZ8Pbl4WfPyh7469+O/PL+ydY8URfHTh3+j5/JbH47bVZoM23npTZ2XL73h+RWt/9Cjl5dr769/Kdx/fDz9DoP2zzHrVcGdKYrimzd9rrWeyfdfbM2nHz7Umu++8MTjzWWe21d+HW//zEvK5b8Yyr8Hjh7uuP0zYT98L8yZt/XeH/F2X7v46m173nt5ffF2jTtf2HrYT36gvN/4OTmff7xcPu7n5bb/rz771Neayz/2yt7bf36k9/Y/Fe73q2H+98vL5dufg+bX8XafDtsf1xdvd/9XvtVz+y99plz+9JvL5Q6FGdd/T/h6+5ufnW/fX481Dnc8ruIt5XJx/TPf+e3W9fH+4v13b//EwYsd+6P7+Hj6n8v7me5aPl4e1xP9Rdf6m/fTfnzG9T/1W4c69nPV+i+9+5mXN++3e/33dS032nX77k9s+oNPf67n+uL2HPjT0x2P58C7wus4rP/JD4TjMVz/k0uf61hvdOhdne8/cfkvbTnf8Xiit/6oXP+l1x1rzf+Y/PHv3/CCG1944fbmviuKb7+nvL+q9R/7w1Md2//lW+5tPR/x+tjR717/cuL6z3x06uSphXPzs217tfXZOW8vt2fjxKbNze29Kby3dn998NTZD86dmZyZnCmKyfp+hN4V+0qYPyjHhdXe/t5Hw/N52+99c/Pd//TZePm/PFJefvFt5fetV4XlPh8u31I+f4uNq1z/k3fc0np9N54uv+7osQ/Atu3/uXdFC4bH3/1zQTzeT7/0g6390Lyu9X0jvq6vcvu/O1vezzfCfl0Mn8x85y2X19e+fPxshIvvKV/vV73/wttcfF7/ODzf7/heef9xu+Lj/W74OeZbWzvf7+Lx8Y3zI9333/oUjwvh/aS4UF4fl4r7++Jzt/TcvPg5JMWFW1tf/066n1tX9TCXs/Cxhenj8yfPPTZ9dm7h7PTCxz5+8MSpcyfPHmx9lufBD1Xd/vL70+bW+9Ps3O4HiplNRVGcKmbW4A3r2mx/828r2/7Tjx6Z3TNz9+zc0cPnjp599PTcmWNHFhaOzM0u3H346NG5j1bdfn52/46d+3bt2Tl1bH52/959+3btm5o/eaq5GeVGVdg98+Gpk2cOtm6ysP+BfTsefPCBmakTp2bn9u+ZmZk6V3X71vemqeatf33qzNzxw2fnT8xNLcx/fG7/jn27d++s/DTAE6ePLkxOnzl3cvrcwtyZ6fKxTJ5tXdz83ld1e+pp4d/Kn2e7NcoP4iveed/u9PmsTV/95LJ3VS7S9QGiz4bPovmHF53eu5KvY+4fDzPJJP8DAABADmLu3xBmIv8DAABAbcTcvzHMRP4HAACA2oi5fyLMJJP8r/9/5f3/dvXv/5fX6//n1f8//ZGyVxpv39ViXTf9/9if1//Pw3Xu/1/1+vX/9f/r1/9feX9+vW+//r/+P0sNW/8/5v5NRZFl/gcAAIAcxNy/OcxE/gcAAIDaiLn/hjAT+R8AAABqI+b+F4SZZJL/9f9X1P/fWVW4qn//3/n/9f+L9Xn+//jk6P9nY9X9+/c+0vGl/n+g/6//r/+v/6//z1UbX/aa69X/j7n/xjCTTPI/AAAA5CDm/heGmcj/AAAAUBsx998UZiL/AwAAQG3E3L8lzCST/K//7/z/+v/6/7Xu/1/t+f/bNkb/f31w/v/+evT/b++5oP7/Kvv/E/r/67H/Pz7Y7R/u/n/l5uv/c00M2/n/Y+5/UZhJJvkfAAAAchBz/4vDTOR/AAAAqI2Y+18SZiL/AwAAQG3E3H9zmEkm+V//X/9f/1//X/+/9/qrz/9f/k3/f7jo//fn/P8VnP8/r/7/gLd/uPv/gz7///ibum+v/08vw9b/j7n/pWEmmeR/AAAAyEHM/beEmcj/AAAAUBsx978szET+BwAAgNqIuX9rmEkm+V//X/9f/1//X/+/9/qr+/8l/f/hov/f36D7/6Ndl+v/l/T/9f9r3//v8cOv/j+9DFv/P+b+W8NMMsn/AAAAkIOY+28LM5H/AQAAoDZi7v9/YSbyPwAAANRGzP3bwkwyyf/6//r/+v959f/v26D/r/9fb/r//Tn/fwX9f/1//f8Vnv9/qdX0/zdW3Rm1MWz9/5j7Xx5mkkn+BwAAgBzE3P+KMJMV5/+5L16DzQIAAAAGKOb+28NM/Ps/AAAA1EbM/ZNhJpnkf/3/evX//+Svn7y90P/X/69Yf037//Ew0P/PnP5/f/r/FfT/9f/1/9ek/08+hq3/H3P/HWEmmeR/AAAAyEHM/XeGmcj/AAAAUBsx998VZiL/AwAAQG3E3L89zCST/K//X6/+f6T/r//fb/3Xpv+/KV3u/P+96f+vDf3/HtreFPT/K+j/6/9n3/+PP/3q/zMYw9b/j7n/lWEmmeR/AAAAyEHM/XeHmcj/AAAAUBsx978qzET+BwAAgNqIuf+eMJNM8r/+v/6//r/+f03O/5/o/+dN/78//f8K+v/6/9n3/53/n8Eatv5/zP2vDjPJJP8DAABADmLuvzfMRP4HAACA2oj//2b5/73K/wAAAFBHMfdPhZlkkv/1//X/c+r/N/T/9f/1/2tP/78//f8K+v/6//r/+v8M1LD1/2Puf02YSSb5HwAAAHIQc//9YSbyPwAAANRGzP3TYSbyPwAAANRGzP0zYSaZ5H/9f/3/nPr/zv/f0f+fKAr9f/3/+tH/70//v4L+v/5/3fr/RaH/z3U1bP3/mPt3hJlkkv8BAAAgBzH37wwzkf8BAACgNmLu3xVmIv8DAABAbcTc/0CYSSb5X/9f/1//P9v+v/P/6//Xkv5/f/r/FfT/9f/r1v93/n+us2Hr/8fc/2CYSSb5HwAAAHIQc//uMBP5HwAAAGoj5v49YSbyPwAAANRGzP17w0wyyf/6/zXp///m33esW/9f/7/f+gfT/9+k/x+m/v9wqWn/v/tlccX0/yvo/+v/6//r/zNQw9b/j7l/X5hJJvkfAAAAchBz/2vDTOR/AAAAqI2Y+/9/mIn8DwAAALURc//PhJlkkv/1/2vS/++i/6//32/9zv+v/19nNe3/D4z+fwX9f/1//X/9fwbq2vf/499W1v+PuX9/mEkm+R8AAAByEHP/z4aZyP8AAABQGzH3vy7MRP4HAACA2oi5/0CYSSb5X/9f/1//X///2vT/X1d0G8b+f/Pg0f+vF/3//vT/K+j/6//r/+v/M1DDdv7/mPtfH2aSSf4HAACAHMTc/1CYifwPAAAAtRFz/xvCTOR/AAAAWM82tX8Rc/8bw0wyyf/6//r/+v/6/9X9/3gPzv+v/z/89P/70/+voP+v/6//r//PQA1b/z/m/jeFmWSS/wEAACAHMfe/OcxE/gcAAIDaiLn/LWEm8j8AAADURsz9bw0zyST/6//r/+v/6/9fm/P/17H/v/g/zdvr/w83/f/+9P8r6P/r/+v/6/8zUMPW/4+5/+fCTDLJ/wAAAJCDmPsfDjOR/wEAAKA2Yu5/W5iJ/A8AAAC1EXP/28NMMsn/+v/6//r/+v/6/73X7/z/65P+f3/6/xWGoP/f/J6m/78+t1//X/+fpYat/x9z/zvCTDLJ/wAAAJCDmPt/PsxE/gcAAIDaiLn/nWEm8j8AAADURsz9vxBmkkn+1//X/9f/1//Pov/fvJH+fxb0//vT/29309KLevT/Nzr/v/6//r/+P1ds2Pr/Mfe/K8wkk/wPAAAAOYi5/91hJvI/AAAA1EbM/e8JM5H/AQAAoDZi7n8kzCST/K//n2X/Pz1k/f+S/n8G/X/n/8+G/n9/+v8VhuD8//r/63f79f/1/1lq2Pr/Mfc/GmaSSf4HAACAHMTc/94wE/kfAAAAaiPm/l8MM5H/AQAAoDZi7n9fmEkm+b8G/f+fdBT79P87buf8/9e7/z/WcXzk1P+faHs+03Gp/6//vwb0//vT/6+g/6//P8z9/3A0b1rm9vr/DKNh6//H3P/+MJNM8j8AAADkIOb+Xwozkf8BAACgNmLu/+UwE/kfAAAAaiPm/l8JM8kk/9eg/991Q/3/Qv9/iPr/ncdHTv1/5/9fSv9/bej/96f/X0H/X/9/mPv/FfT/GUbD1v+Puf9Xw0wyyf8AAACQg5j7PxBmIv8DAABAbcTcfzDMRP4HAACA2oi5/1CYSSb5X/+/u/8fz6iq/6//r/+v/6//vx4Nrv//shuLYkX9/z9vXq//r/+v/6//r/+v/89Sw9b/j7n/cJhJJvkfAAAAchBz/6+Fmcj/AAAAUBsx9x8JM5H/AQAAoDZi7p8NM8kk/+v/O///oPr/P9X/1/8P9P970/9fG87/35/+fwX9f/1//X/9fwZq2Pr/MffPhZlkkv8BAACgxtKvg2PuPxpmIv8DAABAbcTcfyzMRP4HAACA2oi5/4NhJpnkf/1//X/n/78e/f+xjuX1/0v6//r/g6D/35/+fwX9f/1//X/9fwZq2Pr/MffPh5lkkv8BAAAgBzH3fyjMRP4HAACA2oi5/8NhJvI/AAAA1EbM/cfDTDLJ//r/+v+59/8bRXHB+f/1/3utX/9/fdL/70//v4L+v/6//r/+PwM1bP3/mPtPhJlkkv8BAAAgBzH3nwwzkf8BAACgNv6PvftokvOu9jjedtmWVHdx70u467u6S1jBS2DLjirWFMnkYEzOYHIOJpiMCSYHk3PO2eQcTTRUiWLmnCONpvW0pGlPP8//fD6bw6g0dI81CP2s+taTu/+ecYv9DwAAAMPI3X+vuKXJ/tf/d+v//0v/P4vn/x/8+fr/ffp//f82HOrvr7i4zz9v////d7j6bvp//b/+f5L+X/+v/+dcc+v/c/ffO25psv8BAACgg9z994lb7H8AAAAYRu7++8Yt9j8AAAAMI3f/1XFLk/2v/+/W/3v+v/5/Q/9/s/5f/79snv8/Tf+/gf5f/6//1/+zVXPr/3P33y9uabL/AQAAoIPc/fePW+x/AAAAGEbu/gfELfY/AAAADCN3/wPjlib7X/+v/9f/6/89/3/96+v/l0n/P03/v4H+X/+v/9f/s1Vz6/9z9z8obmmy/wEAAKCD3P0PjlvsfwAAABhG7v6HxC32PwAAAAwjd/9D45Ym+1//r//X/+v/9f/rX1//v0zXr878nqD/P0z/v8GG/n+10v9PueB+fv2Xt5z3fx76f/0/h82t/8/d/7C4pcn+BwAAgA5y9z88brH/AQAAYBi5+6+JW+x/AAAAGEbu/kfELU32v/5f/6//1//r/9e/vv5/mTz/f9rR+///+5973L1v/+/5/9M8/1//r//nXHPr/3P3Xxu3NNn/AAAA0EHu/kfGLfY/AAAADCN3/6PiFvsfAAAAhpG7/9FxS5P9r/9v0//v1S76f/2//l//Pzr9/zTP/99g77e5U/Wh/l//r//X/3M0c+v/c/c/Jm5psv8BAACgg9z9j41b7H8AAAAYRu7+x8Ut9j8AAAAMI3f/4+OWJvtf/9+m//f8f/2//l//34L+f5r+f4NRnv9/id81u+7nj2rX71//r//nsLn1/7n7nxC3NNn/AAAA0EHu/ifGLfY/AAAADCN3/5PiFvsfAAAAhpG7/8lxS5P9r//X/y+j/89X0P/r//X/+v9p+v9p+v8NRun/L9Gu+/mlv3/9v/6fw+bW/+fuf0rc0mT/AwAAQAe5+58at9j/AAAAMIzc/U+LW+x/AAAAGEbu/qfHLU32v/5f/7+M/t/z//X/+n/9/4XR/0/T/2+g/9f/6//1/2zV3Pr/3P3XxS1N9j8AAAB0kLv/GXGL/Q8AAADDyN3/zLjF/gcAAIBh5O5/VtzSZP/r//X/+n/9v/5//evr/5dJ/z9N/7+B/l//r//X/7NVM+r/z/qsk6tnxy1N9j8AAAB0kLv/OXGL/Q8AAADDyN3/3LjF/gcAAIBh5O5/Xtwy+P6/LPIJ/f9s+v+9nG+s/v/UarXS/6+a9v+nzvr1rO9L/b/+/xjo/6fp/zfQ/+v/9f/6f7ZqRv3/3se5+58ftwy+/wEAAKCT3P0viFvsfwAAABhG7v4Xxi32PwAAAAwjd/+L4pYm+1//P5v+f89Y/b/n/5/7/dGp//f8/8P0/8dD/z9N/7+B/l//r//X/7NVc+v/c/e/OG666spL/hIBAACAmcnd/5K4pcnf/wMAAEAHuftfGrfY/wAAALBQ1x36kdz9L4tbmux//f92+/+rzvox/b/+/9zvD/2//l//f/vT/0/T/2+g/9f/6//1/2zV3Pr/3P0vj1ua7H8AAADoIHf/9XGL/Q8AAADDyN3/irjF/gcAAIBh5O5/ZdzSZP/r/z3/X/+v/9f/r399/f8y6f+nzbv/P12/nej/9f9LfP9b6P9PnPmP+n/GcBH9/+nTp6+53fv/3P2vilua7H8AAADoIHf/q+MW+x8AAACGkbv/hrjF/gcAAIBh5O5/TdzSZP/r/5v2//mtrv/fo//X/697ff3/Mun/p827//f8f/3/st+/5//r/zlsbs//z93/2rilyf4HAACADnL3vy5usf8BAABgGLn7Xx+32P8AAAAwjNz9b4hbmux//X/T/t/z//X/+v/j7v9vW23q/y9f6f+3YBH9/6nzv/7c+/9r9f/6/wnt+v+73PHAh/p//T+Hza3/z93/xrilyf4HAACADnL3vylusf8BAABgGLn73xy32P8AAAAwjNz9N8ZNVzTZ//p//b/+X/+v/1//+sf8/P+rViv9/zYsov+fMPf+3/P/9f9T2vX/59D/6/85bG79f+7+t8QtTfY/AAAAdJC7/61xi/0PAAAAw8jd/7a4xf4HAACAYeTuf3vc0mT/6//1//p//f/w/f+1i+j/V6vox/X/R6P/n6b/30D/r//X/+v/ORa76v9z998UtzTZ/wAAANBB7v53xC32PwAAAAwjd/874xb7HwAAAIaRu/9dcUuT/a//1//r//X/J2bX/5888N/X5Pn/+v8t2WH/f+eV/l//H/T/+v8F9//X6f/Zprk9/z93/7vjlib7HwAAADrI3f+euPWvbu1/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6/+Hf/6//r8Vz/+fpv/fQP+v/9f/e/4/WzW3/j93//vjlib7HwAAADrI3f+BuMX+BwAAgGHk7v9g3GL/AwAAwDBy998ctzTZ//p//b/+X/+v/9//NdT/j0H/P+14+v9T+n/9f/Xzl8X/CvT/+v9Nn8+Y5tb/5+7/UNzSZP8DAABAB7n7Pxy32P8AAAAwjNz9H4lb7H8AAABYpCvW/Fju/o/GLU32v/5f/6//1//r/9e/vv5/mfT/0zz/fwP9/0X28/974KOlPf//3P//0v/r/9m+3ff/+39iy49z938sbmmy/wEAAKCD3P0fj1vsfwAAABhG7v5PxC32PwAAAAwjd/8n45Ym+1//r//X/+v/9f/rX1//v0z6/2n6/w30/zt9fv7S37/+X//PYbvv/w9+nLv/U3FLk/0PAAAAHeTu/3TcYv8DAADAMHL3fyZusf8BAABgGHu7P+Oyhvtf/6//1//r//X/619f/79M+v9p+v8N9P/6f/2//p+tmlv//9m9zzq5+lzc0mT/AwAAQAe5+z8ft9j/AAAAMIzc/V+IW+x/AAAAGEbu/i/GLU32f4P+/8S6n6b/X1r/f/r06Wv0//r/g1/Pmf7/Fv0/Rf8/Tf+/gf5f/6//1/+zVXPr/3P3fyluabL/AQAAoIPc/V+OW+x/AAAAGEbu/q/ELfY/AAAADCN3/1fjlib7v0H/v9as+v+T+n/P/9f/rzz/X/+/Jfr/afr/DUbs/09e+Je/637+qHb9/vX/+n8Om1v/n7v/a3FLk/0PAAAAHeTu/3rcYv8DAADAMHL3fyNusf8BAABgGLn7vxm3NNn/+v/j6///88+uy/P/T63Wv3/9v/5f/6//v73p/6fp/zcYsf+/CLvu55f+/vX/+n8Om1v/n7v/W3FLk/0PAAAAHeTu/3bcYv8DAADAMHL3fydusf8BAABgGLn7vxu3NNn/+v8ZPP9/wP7f8//Xf3/o/2fd/1+u/x+D/n/acP3/DftX/6//n8P71/+f3f/nd7P+v7u59f+5+78XtzTZ/wAAANBB7v7vxy32PwAAAAwjd/8P4hb7HwAAAIaRu/+WuOWs/b+u7R6F/l//r//X/+v/17++/n+Z9P/TLrT/P7E6Wv+fPP9f/6//79r/e/4/++bW/+fu/2Hc4u//AQAAYHGuPM+P5+7/Udxi/wMAAMAwcvf/OG6x/wEAAGAYuft/Erfcevmu3tKx0v/r//X/+n/9//rX1/8vk/5/2nDP/4+r/59V/38n/f8Y/f9qpf/n6ObW/+fu/2nc4u//AQAAYBi5+38Wt9j/AAAAMIzc/T+PW+x/AAAAGEbu/l/ELU32v/5f/3/E/n8vzdT/79P/79P/r6f/Px76/2n6/w30/57/r//3/H+2am79f+7+X8YtTfY/AAAAdJC7/1dxi/0PAAAAw8jd/+u4xf4HAACAYeTu/03c0mT/76z/j3/U+v/F9/+e/6//1//r/2dF/z9N/7+B/l//r//X/7NVc+v/c/f/Nm5psv8BAACgg9z9v4tb7H8AAAAYRu7+38ct9j8AAAAMI3f/H+KWJvvf8//1/zPq/2+68Zz3r//X/6/0//r/i6T/n6b/X69+ofT/+n/9v/6frZpb/5+7/49xS5P9DwAAAB3k7v9T3GL/AwAAwDBy998at9j/AAAAMIzc/X+OW5rsf/2//n9G/f8ez/8/83n6/31r+v+9BlL/r/9fR/8/bZf9/13/e/PLev7/zvv/fAv6f/2//p+tmFv/n7v/L3FLk/0PAAAAHeTu/2vcYv8DAADAMHL3/y1usf8BAABgGLn7/x63NNn/G/r/E/UT9f+T9P8H37/+f/33h/7/yP3/qZXn/+v/N9D/T+vy/P8br7y019f/e/6//l//z3btvv/f++NjfZy7/x9xS5P9DwAAAB3k7r8tbrH/AQAAYBi5+/8Zt9j/AAAAMIzc/f+KW5rsf8//1//r//X/C+r/D3w9+n/9/zr6/2ld+n/P/780u+7nl/7+9f/6fw7bff9/8OPc/f8OAAD//ykxU+A=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0) 2m10.274459377s ago: executing program 2 (id=233): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) 2m9.589464025s ago: executing program 2 (id=236): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xa) 2m9.275860925s ago: executing program 33 (id=236): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xa) 3.937828129s ago: executing program 6 (id=1763): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) creat(&(0x7f0000000080)='./file0/file0\x00', 0x181) 3.433379698s ago: executing program 6 (id=1770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000003c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x15, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 3.144150967s ago: executing program 6 (id=1776): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x1f9, &(0x7f0000000540)="$eJzsmb+LE0EUx78zu5echygWWtjE4sATvc3uRuWaK06wFIQ7Uctg1hDdJJKskAQEg42NpYVg6z9gYZHKws7OVgsVBAtTWgmOzOxsdvJTEg0E7n3g5r7v7byZN283byEBQRCHlq9ffn5+dmXn4AKAo9hEVvu/W+kcbsz/9OLh+ee7V1++/vjqXe3Yo97oegyAEKlt/2X/DIC3exbw+LiyhTCjgU295gG40pIb4Din9U0wOEmuIo0OwHBbu+8Zun5EizBgd+ph6W4lDFw5eHLw5VAAxFD+/S5DCcC63oIZ+TXbnfvFEGjEIgwSsSaSfcYuzStm1U/lt8exa5RA3q9bT590pe1ov2vUzwOHp3UBDPta7yALx3Fy2gw84/yn7XR9K75txvn/wyGXIU5sr0Qav8VKpLFMIR+F+aN4bpGofxZs1CM/0APPqX7v/XjUt9Wo80JCNS4AY5c+bIThtYlRJ4c8Z8z6GCLpAlMfibh/MBs4a/Qn23gr5KPqg3yz3dmuVIvloBzUfL9w2b3oupf8vOrN8Tij/62r/rRhrL82ZW6GZdAqRlHDawFRwxvYfjwaHXf/Tf2HiuGq/3Fs/RIieb2oY2cn78H0H1f/pdqypiZPEARBEARBEARBEARBEAQxFzkw6O8qWfKb2AT862r2nwAAAP//n/luag==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="039b070000"]) 2.917408946s ago: executing program 6 (id=1780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="10010000070a01020000000000000000020000000900010073797a30"], 0x110}}, 0x0) 2.756691386s ago: executing program 6 (id=1785): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0)={[{@lazytime}, {@uqnoenforce}, {@quota}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x7, 0x0, 0x0) 2.401128245s ago: executing program 5 (id=1791): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x8, @local, 0x6}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x10000000, 0x0, 0x400000000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0xfffffffd, 0x33}, 0x0, @in6=@mcast2, 0x2, 0x3, 0x0, 0xfd}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 2.196969425s ago: executing program 5 (id=1794): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="b2cb", 0x2, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) 1.625194483s ago: executing program 0 (id=1800): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.575224693s ago: executing program 6 (id=1801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x1000000, 0x0, 0x0, 0x0) 1.371889513s ago: executing program 1 (id=1802): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 1.213289583s ago: executing program 5 (id=1803): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)="d80000002f0081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a4000140060000090000000000000000000021d67f5194007134cf6ee08000a0e408e8d8ef52298516277ce06bbace8017cbec4c2ee5a7cef4091b14d6ba30dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecfee5de6ccd40dd6e4edef3d93452a92954b4337f97d1d713e0de0932133b9290858", 0xd8}], 0x1}, 0x0) 1.078994772s ago: executing program 5 (id=1804): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000001f00)=""/4073, 0x2482ac861b82b520}, 0x2d) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x90) 925.332842ms ago: executing program 5 (id=1806): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) close(r0) 924.984602ms ago: executing program 1 (id=1807): r0 = socket(0x1, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10063, 0x0) 786.191661ms ago: executing program 1 (id=1809): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 733.331181ms ago: executing program 4 (id=1810): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 727.786701ms ago: executing program 0 (id=1811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r0) 687.617701ms ago: executing program 0 (id=1812): r0 = io_uring_setup(0x709c, &(0x7f0000000280)={0x0, 0x79fd, 0x100, 0x0, 0x12f}) r1 = syz_open_dev$usbmon(&(0x7f0000000340), 0xdf7c416, 0x8000) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000003c0)={0x0, 0x0, 0x8}) close(r0) 597.269011ms ago: executing program 4 (id=1813): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 596.905451ms ago: executing program 1 (id=1814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="080001"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 544.807041ms ago: executing program 4 (id=1815): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) 536.296791ms ago: executing program 0 (id=1816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r2, @ANYBLOB="003000000000000024001280110001006272696467655f736c617665000000000c0005800500190081"], 0x44}}, 0x0) 437.307061ms ago: executing program 1 (id=1817): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r0, 0x10, 0xcf7, 0x2c03) 436.971601ms ago: executing program 0 (id=1818): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 367.72533ms ago: executing program 4 (id=1819): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x294ef98252e47195, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 347.774731ms ago: executing program 0 (id=1820): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) waitid(0x2, 0x0, 0x0, 0x41000004, &(0x7f0000000480)) 144.99735ms ago: executing program 4 (id=1821): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af34514000cc0080020000700020006001f0003000000f6a6bf9082545314000056a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e45", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 72.88001ms ago: executing program 1 (id=1822): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8}) lstat(&(0x7f0000000600)='./bus\x00', &(0x7f0000000d00)) 352.44µs ago: executing program 5 (id=1823): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setrlimit(0x2, &(0x7f0000000080)={0x0, 0x20080000005}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x200000, 0xb) 0s ago: executing program 4 (id=1824): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x31, &(0x7f0000000200)={0x5, 0xf, 0x31, 0x4, [@generic={0x3, 0x10, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xb, 0x0, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x9, 0x6}, @ssp_cap={0x18, 0x10, 0xa, 0xd, 0x3, 0x5, 0xf11, 0x11, [0x1fec00f, 0xffc000, 0xff0030]}]}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) kernel console output (not intermixed with test programs): ac, idProduct=4262, bcdDevice= 0.00 [ 104.614378][ T5399] XFS: attr2 mount option is deprecated. [ 104.620126][ T4527] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.630458][ T4527] usb 2-1: config 0 descriptor?? [ 104.650182][ T5408] REISERFS (device loop0): Using rupasov hash to sort names [ 104.661733][ T5399] XFS (loop6): Mounting V5 Filesystem [ 104.672661][ T5408] REISERFS (device loop0): using 3.5.x disk format [ 104.691550][ T5408] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 104.721523][ T5399] XFS (loop6): Ending clean mount [ 104.736651][ T5399] XFS (loop6): Quotacheck needed: Please wait. [ 104.738236][ T5408] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 104.774991][ T5408] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 104.815872][ T5408] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 104.832742][ T5399] XFS (loop6): Quotacheck: Done. [ 104.882505][ T5408] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 104.905880][ T5408] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 104.935609][ T5408] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 105.066401][ T4527] hid-generic 0003:05AC:4262.0002: hidraw0: USB HID v0.00 Device [HID 05ac:4262] on usb-dummy_hcd.1-1/input0 [ 105.169255][ T4966] XFS (loop6): Unmounting Filesystem [ 105.275359][ T4326] usb 2-1: USB disconnect, device number 3 [ 106.179856][ T5463] loop5: detected capacity change from 0 to 4096 [ 106.199998][ T5463] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 106.290902][ T5463] ntfs3: loop5: failed to convert "c46c" to cp863 [ 106.517713][ T5483] program syz.0.406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.755372][ T5498] hub 4-0:1.0: USB hub found [ 106.764663][ T5500] loop0: detected capacity change from 0 to 256 [ 106.772056][ T5498] hub 4-0:1.0: 1 port detected [ 106.789194][ T5500] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.818587][ T5500] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 106.850191][ T5500] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 107.045444][ T5514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 107.074362][ T5518] capability: warning: `syz.6.423' uses deprecated v2 capabilities in a way that may be insecure [ 107.087502][ T4527] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 107.200872][ T5524] loop6: detected capacity change from 0 to 64 [ 107.215354][ T5523] program syz.4.426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.272502][ T4527] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 107.293926][ T4527] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.318074][ T4527] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.351370][ T4527] usb 6-1: config 0 interface 0 has no altsetting 0 [ 107.375670][ T4527] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.403585][ T5532] hub 4-0:1.0: USB hub found [ 107.405182][ T4527] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.427796][ T5532] hub 4-0:1.0: 1 port detected [ 107.435379][ T4527] usb 6-1: config 0 interface 0 has no altsetting 0 [ 107.458774][ T4527] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.476049][ T4527] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.496409][ T4527] usb 6-1: config 0 interface 0 has no altsetting 0 [ 107.516293][ T4527] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.536523][ T4527] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.573188][ T4527] usb 6-1: config 0 interface 0 has no altsetting 0 [ 107.583473][ T4527] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.626773][ T4527] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.670546][ T4527] usb 6-1: config 0 interface 0 has no altsetting 0 [ 107.690048][ T4527] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.706072][ T4527] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.721993][ T5549] program syz.1.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.737984][ T5550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.439'. [ 107.741500][ T4527] usb 6-1: config 0 interface 0 has no altsetting 0 [ 107.746929][ T5550] netlink: 7 bytes leftover after parsing attributes in process `syz.0.439'. [ 107.804558][ T4527] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.846669][ T4527] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.883167][ T4527] usb 6-1: config 0 interface 0 has no altsetting 0 [ 107.899026][ T4527] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.933004][ T4527] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.964471][ T4527] usb 6-1: config 0 interface 0 has no altsetting 0 [ 107.985246][ T4527] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 108.007335][ T4527] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 108.025978][ T4527] usb 6-1: Product: syz [ 108.030297][ T4527] usb 6-1: Manufacturer: syz [ 108.034909][ T4527] usb 6-1: SerialNumber: syz [ 108.054958][ T4527] usb 6-1: config 0 descriptor?? [ 108.075795][ T5559] netlink: 40 bytes leftover after parsing attributes in process `syz.6.443'. [ 108.087346][ T4527] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 108.300396][ T4527] usb 6-1: USB disconnect, device number 4 [ 108.315475][ T4527] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 108.454496][ T5552] loop1: detected capacity change from 0 to 32768 [ 108.489246][ T5552] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.440 (5552) [ 108.522109][ T5552] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.547049][ T5552] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 108.555866][ T5552] BTRFS info (device loop1): use no compression [ 108.577097][ T5552] BTRFS info (device loop1): turning on sync discard [ 108.583841][ T5552] BTRFS info (device loop1): force clearing of disk cache [ 108.602519][ T5552] BTRFS info (device loop1): enabling auto defrag [ 108.611199][ T5556] loop0: detected capacity change from 0 to 32768 [ 108.617815][ T5552] BTRFS info (device loop1): turning off discard [ 108.624164][ T5552] BTRFS info (device loop1): using free space tree [ 108.645546][ T5556] XFS (loop0): Mounting V5 Filesystem [ 108.685297][ T5556] XFS (loop0): Ending clean mount [ 108.775408][ T4258] XFS (loop0): Unmounting Filesystem [ 108.781133][ T5552] BTRFS info (device loop1): enabling ssd optimizations [ 108.798483][ T5552] BTRFS info (device loop1): rebuilding free space tree [ 109.173147][ T4245] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.643125][ T5609] loop1: detected capacity change from 0 to 512 [ 109.656318][ T5608] loop5: detected capacity change from 0 to 1024 [ 109.682892][ T5609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 109.691257][ T5609] System zones: 1-12 [ 109.736711][ T5609] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.452: corrupted in-inode xattr [ 109.762750][ T5609] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.452: couldn't read orphan inode 15 (err -117) [ 109.776843][ T5608] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 109.798609][ T5608] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.815907][ T5593] loop4: detected capacity change from 0 to 65536 [ 109.819943][ T5609] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.905026][ T5593] XFS (loop4): Mounting V5 Filesystem [ 109.935373][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 109.959085][ T5633] Bluetooth: MGMT ver 1.22 [ 109.972076][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 110.049642][ T5593] XFS (loop4): Ending clean mount [ 110.162677][ T5111] XFS (loop4): Unmounting Filesystem [ 110.589446][ T5654] loop5: detected capacity change from 0 to 4096 [ 110.652782][ T5657] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.889301][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 110.935198][ T5641] loop1: detected capacity change from 0 to 32768 [ 110.952627][ T5641] XFS: ikeep mount option is deprecated. [ 111.025791][ T5650] loop6: detected capacity change from 0 to 32768 [ 111.049361][ T5650] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.470 (5650) [ 111.075811][ T5641] XFS (loop1): Mounting V5 Filesystem [ 111.106177][ T5650] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.113325][ T5656] loop0: detected capacity change from 0 to 32768 [ 111.124427][ T5650] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 111.133237][ T5650] BTRFS info (device loop6): using free space tree [ 111.178188][ T5641] XFS (loop1): Ending clean mount [ 111.187920][ T5641] XFS (loop1): Quotacheck needed: Please wait. [ 111.189294][ T5656] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.239945][ T5650] BTRFS info (device loop6): enabling ssd optimizations [ 111.259932][ T5641] XFS (loop1): Quotacheck: Done. [ 111.277243][ T7] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 111.313445][ T4258] ocfs2: Unmounting device (7,0) on (node local) [ 111.348793][ T4245] XFS (loop1): Unmounting Filesystem [ 111.445943][ T4966] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.483633][ T7] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.492308][ T7] usb 6-1: config 0 has no interface number 0 [ 111.499240][ T7] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 111.510750][ T7] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 111.529267][ T7] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.548648][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.577318][ T7] usb 6-1: config 0 descriptor?? [ 111.589596][ T5667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 111.627217][ T7] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.649634][ T4252] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 111.658365][ T4252] Bluetooth: hci4: Injecting HCI hardware error event [ 111.675284][ T4249] Bluetooth: hci4: hardware error 0x00 [ 111.775328][ T5706] loop1: detected capacity change from 0 to 2048 [ 111.823042][ T4520] usb 6-1: USB disconnect, device number 5 [ 111.836425][ T5706] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.867117][ T26] audit: type=1800 audit(1736823579.424:176): pid=5706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.478" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 112.517507][ T5713] loop0: detected capacity change from 0 to 32768 [ 112.575257][ T5713] XFS (loop0): Mounting V5 Filesystem [ 112.698167][ T5713] XFS (loop0): Ending clean mount [ 112.708963][ T5749] netlink: 'syz.5.494': attribute type 21 has an invalid length. [ 112.716829][ T5749] netlink: 132 bytes leftover after parsing attributes in process `syz.5.494'. [ 112.805719][ T5751] kvm [5750]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled wrmsr: 0x4000004a data 0x0 [ 112.826188][ T4258] XFS (loop0): Unmounting Filesystem [ 113.067178][ T4236] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.190604][ T5747] loop6: detected capacity change from 0 to 32768 [ 113.231612][ T5763] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 113.246391][ T5747] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 113.253280][ T5764] loop5: detected capacity change from 0 to 2048 [ 113.267071][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 113.274050][ T4236] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 113.313049][ T4966] ocfs2: Unmounting device (7,6) on (node local) [ 113.314202][ T4236] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 113.335801][ T5764] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 113.347046][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.365509][ T4236] usb 2-1: Product: syz [ 113.369769][ T4236] usb 2-1: Manufacturer: syz [ 113.374387][ T4236] usb 2-1: SerialNumber: syz [ 113.381663][ T4236] usb 2-1: config 0 descriptor?? [ 113.391755][ T4236] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 113.408137][ T4236] usb 2-1: Detected FT232R [ 113.462279][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 113.594098][ T4236] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 113.755404][ T26] audit: type=1107 audit(1736823581.314:177): pid=5778 uid=0 auid=4 ses=1 subj=unconfined msg='' [ 113.786106][ T5770] loop0: detected capacity change from 0 to 32768 [ 113.820586][ T4236] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 113.896993][ T4249] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 114.018166][ T3582] usb 2-1: USB disconnect, device number 4 [ 114.049588][ T3582] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 114.070813][ T3582] ftdi_sio 2-1:0.0: device disconnected [ 114.624479][ T5784] loop6: detected capacity change from 0 to 40427 [ 114.663632][ T5784] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff [ 114.678931][ T5792] loop0: detected capacity change from 0 to 32768 [ 114.702800][ T5784] F2FS-fs (loop6): invalid crc value [ 114.713041][ T5792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.509 (5792) [ 114.751624][ T5784] F2FS-fs (loop6): Found nat_bits in checkpoint [ 114.921109][ T5784] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 114.991504][ T5803] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 115.030011][ T5803] bond0: (slave bond_slave_0): Releasing backup interface [ 115.152149][ T4966] bio_check_eod: 27 callbacks suppressed [ 115.152167][ T4966] syz-executor: attempt to access beyond end of device [ 115.152167][ T4966] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.290408][ T5796] loop4: detected capacity change from 0 to 131072 [ 115.302973][ T5792] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.313526][ T5796] F2FS-fs (loop4): inline encryption not supported [ 115.346026][ T5792] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 115.355916][ T5796] F2FS-fs (loop4): invalid crc value [ 115.374498][ T5792] BTRFS info (device loop0): using free space tree [ 115.424948][ T5796] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.482773][ T5796] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 115.519350][ T5796] F2FS-fs (loop4): switch discard_unit option is not allowed [ 115.651686][ T5792] BTRFS info (device loop0): enabling ssd optimizations [ 115.670380][ T5834] loop6: detected capacity change from 0 to 128 [ 115.678621][ T5834] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 115.725486][ T5834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.815904][ T5809] loop1: detected capacity change from 0 to 32768 [ 115.837474][ T5834] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 93: 0xcc != 0x00 [ 115.865534][ T5834] UDF-fs: error (device loop6): udf_count_free_bitmap: udf_count_free failed [ 115.886691][ T4258] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.907686][ T5834] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 93: 0xcc != 0x00 [ 115.931459][ T5834] UDF-fs: error (device loop6): udf_count_free_bitmap: udf_count_free failed [ 116.167472][ T5842] kAFS: unparsable volume name [ 116.509898][ T5846] loop6: detected capacity change from 0 to 4096 [ 116.528515][ T5846] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 116.584399][ T5846] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 117.162589][ T5881] fuse: Bad value for 'fd' [ 117.797704][ T5903] loop5: detected capacity change from 0 to 8 [ 118.155092][ T5913] loop5: detected capacity change from 0 to 2048 [ 118.233608][ T5913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 118.263285][ T5913] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.295454][ T5913] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 118.316232][ T5913] EXT4-fs (loop5): This should not happen!! Data will be lost [ 118.316232][ T5913] [ 118.327291][ T5913] EXT4-fs (loop5): Total free blocks count 0 [ 118.333420][ T5913] EXT4-fs (loop5): Free/Dirty block details [ 118.380181][ T5913] EXT4-fs (loop5): free_blocks=2415919104 [ 118.409461][ T5913] EXT4-fs (loop5): dirty_blocks=16 [ 118.447433][ T5913] EXT4-fs (loop5): Block reservation details [ 118.479618][ T5913] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 118.620261][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 118.802819][ T5939] loop6: detected capacity change from 0 to 256 [ 118.823245][ T5939] exfat: Deprecated parameter 'namecase' [ 118.837751][ T5943] loop5: detected capacity change from 0 to 128 [ 118.848146][ T5939] exfat: Deprecated parameter 'utf8' [ 118.875879][ T5939] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 118.914783][ T5943] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 118.986358][ T5943] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.091565][ T5943] fscrypt (loop5, inode 12): Unsupported encryption flags (0x08) [ 119.173704][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 119.614153][ T5959] loop6: detected capacity change from 0 to 512 [ 119.633747][ T5959] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 119.642875][ T5959] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 119.656386][ T5959] EXT4-fs (loop6): orphan cleanup on readonly fs [ 119.665548][ T5959] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 119.676371][ T5959] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 119.688824][ T5959] EXT4-fs (loop6): 1 truncate cleaned up [ 119.694530][ T5959] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 119.746211][ T5947] loop0: detected capacity change from 0 to 32768 [ 119.767155][ T5947] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.570 (5947) [ 119.799207][ T5947] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.810275][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 119.810414][ T5947] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 119.825156][ T5947] BTRFS info (device loop0): turning on sync discard [ 119.832095][ T5947] BTRFS info (device loop0): allowing degraded mounts [ 119.839338][ T5947] BTRFS info (device loop0): metadata ratio 4 [ 119.845724][ T5947] BTRFS info (device loop0): turning off discard [ 119.852253][ T5947] BTRFS info (device loop0): turning on sync discard [ 119.859094][ T5947] BTRFS info (device loop0): disabling tree log [ 119.874106][ T5947] BTRFS info (device loop0): using free space tree [ 119.895436][ T5947] workqueue: max_active 268435457 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 119.963973][ T5947] workqueue: max_active 268435457 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 120.007135][ T5947] workqueue: max_active 268435457 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 120.007528][ T5970] loop6: detected capacity change from 0 to 128 [ 120.068100][ T5970] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 120.095240][ T5970] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.118345][ T5979] mmap: syz.5.583 (5979) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.141916][ T5947] workqueue: max_active 268435457 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 120.167671][ T5947] workqueue: max_active 268435457 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 120.222756][ T5947] workqueue: max_active 268435457 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 120.291940][ T5947] workqueue: max_active 268435457 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 120.354996][ T5947] workqueue: max_active 268435457 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 120.378524][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 120.390034][ T5998] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 120.417238][ T5947] workqueue: max_active 268435457 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 120.454592][ T6001] Zero length message leads to an empty skb [ 120.539938][ T5947] BTRFS info (device loop0): enabling ssd optimizations [ 120.618593][ T4295] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 120.752589][ T4258] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.827234][ T4295] usb 6-1: Using ep0 maxpacket: 16 [ 120.835012][ T4295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.857046][ T4295] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.884786][ T4295] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.904251][ T4295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.934945][ T4295] usb 6-1: config 0 descriptor?? [ 121.304892][ T6034] loop6: detected capacity change from 0 to 4096 [ 121.306771][ T6021] loop1: detected capacity change from 0 to 32768 [ 121.352305][ T6034] ntfs: volume version 3.1. [ 121.363084][ T6021] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.595 (6021) [ 121.371143][ T4295] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0003/input/input7 [ 121.398987][ T6034] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 121.410697][ T6021] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 121.427515][ T6021] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 121.444291][ T6034] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 121.446767][ T6021] BTRFS info (device loop1): setting nodatacow, compression disabled [ 121.484805][ T4295] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 121.497112][ T6021] BTRFS info (device loop1): force clearing of disk cache [ 121.497140][ T6021] BTRFS info (device loop1): enabling ssd optimizations [ 121.497154][ T6021] BTRFS info (device loop1): using spread ssd allocation scheme [ 121.497173][ T6021] BTRFS info (device loop1): doing ref verification [ 121.497211][ T6021] BTRFS info (device loop1): disabling free space tree [ 121.503401][ T6034] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 121.515400][ T6021] BTRFS info (device loop1): not using ssd optimizations [ 121.594505][ T6034] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 121.605200][ T6021] BTRFS info (device loop1): not using spread ssd allocation scheme [ 121.624305][ T6034] ntfs: (device loop6): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 121.786650][ T6058] netlink: 'syz.6.606': attribute type 21 has an invalid length. [ 121.795787][ T4295] usb 6-1: USB disconnect, device number 6 [ 121.803882][ T6058] netlink: 'syz.6.606': attribute type 1 has an invalid length. [ 121.816493][ T6058] netlink: 14374 bytes leftover after parsing attributes in process `syz.6.606'. [ 121.895340][ T6021] BTRFS info (device loop1): rebuilding free space tree [ 121.948815][ T6021] BTRFS info (device loop1): disabling free space tree [ 121.966100][ T6021] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.986106][ T6021] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.154688][ T4245] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 122.165359][ T6075] loop6: detected capacity change from 0 to 1024 [ 122.263292][ T26] audit: type=1800 audit(1736823589.824:178): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.612" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 122.545989][ T6079] loop6: detected capacity change from 0 to 2048 [ 122.626803][ T6079] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 122.772906][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 122.839179][ T4295] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 123.031153][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.627'. [ 123.040615][ T4295] usb 6-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 123.040649][ T4295] usb 6-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.040675][ T4295] usb 6-1: config 1 interface 0 has no altsetting 0 [ 123.143596][ T4295] usb 6-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 123.171225][ T4295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.187010][ T4295] usb 6-1: Product: syz [ 123.191276][ T4295] usb 6-1: Manufacturer: syz [ 123.195922][ T4295] usb 6-1: SerialNumber: syz [ 123.216595][ T6081] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 123.298890][ T6119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.330847][ T6119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.347452][ T6119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.368807][ T6119] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 123.442120][ T4295] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input8 [ 123.810923][ T26] audit: type=1326 audit(1736823591.374:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fcb85d29 code=0x7ffc0000 [ 123.884866][ T26] audit: type=1326 audit(1736823591.404:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6142 comm="syz.6.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fcb85d29 code=0x7ffc0000 [ 124.054402][ T3607] bcm5974 6-1:1.0: could not read from device [ 124.080614][ T4236] usb 6-1: USB disconnect, device number 7 [ 124.100739][ T3607] bcm5974 6-1:1.0: could not read from device [ 124.275036][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.282715][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.584624][ T6141] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 124.626203][ T6150] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 124.982582][ T6153] loop0: detected capacity change from 0 to 40427 [ 125.023746][ T6153] F2FS-fs (loop0): invalid crc value [ 125.042387][ T6153] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.137724][ T6153] F2FS-fs (loop0): Start checkpoint disabled! [ 125.196265][ T6153] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 125.326053][ T6187] loop5: detected capacity change from 0 to 1024 [ 125.378445][ T6187] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 125.397170][ T6187] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.403486][ T4959] kworker/u4:8: attempt to access beyond end of device [ 125.403486][ T4959] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 125.570548][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 125.843536][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'. [ 126.165463][ T6229] loop6: detected capacity change from 0 to 512 [ 126.176168][ T6232] loop0: detected capacity change from 0 to 47 [ 126.187563][ T6229] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.682: inode #1: comm syz.6.682: iget: illegal inode # [ 126.205987][ T6229] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.682: error while reading EA inode 1 err=-117 [ 126.221873][ T6229] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.682: inode #1: comm syz.6.682: iget: illegal inode # [ 126.238053][ T6229] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.682: error while reading EA inode 1 err=-117 [ 126.251251][ T6229] EXT4-fs (loop6): 1 orphan inode deleted [ 126.265495][ T6229] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 126.295025][ T6229] EXT4-fs warning (device loop6): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 126.320117][ T6234] device netdevsim0 entered promiscuous mode [ 126.332101][ T6234] device netdevsim0 left promiscuous mode [ 126.366625][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 126.572248][ T6238] loop6: detected capacity change from 0 to 2048 [ 126.619867][ T6238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.514692][ T6250] loop1: detected capacity change from 0 to 32768 [ 127.989065][ T6273] loop6: detected capacity change from 0 to 40427 [ 128.009711][ T6273] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 128.027308][ T6273] F2FS-fs (loop6): inline encryption not supported [ 128.049705][ T6294] loop0: detected capacity change from 0 to 2048 [ 128.056695][ T6273] F2FS-fs (loop6): invalid crc value [ 128.074424][ T6273] F2FS-fs (loop6): Found nat_bits in checkpoint [ 128.082222][ T6294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.089873][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.5.713'. [ 128.184023][ T6273] F2FS-fs (loop6): Start checkpoint disabled! [ 128.202036][ T6273] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 128.333341][ T4959] kworker/u4:8: attempt to access beyond end of device [ 128.333341][ T4959] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 128.918965][ T6304] loop0: detected capacity change from 0 to 32768 [ 128.926693][ T6304] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.716 (6304) [ 128.952867][ T6304] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.976088][ T6304] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 128.988820][ T6304] BTRFS info (device loop0): enabling auto defrag [ 128.995424][ T6304] BTRFS info (device loop0): max_inline at 0 [ 129.023509][ T6304] BTRFS info (device loop0): enabling ssd optimizations [ 129.034480][ T6304] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 129.053058][ T6308] loop5: detected capacity change from 0 to 32768 [ 129.060022][ T6304] BTRFS info (device loop0): use lzo compression, level 0 [ 129.072311][ T6304] BTRFS info (device loop0): using free space tree [ 129.109998][ T6308] XFS (loop5): Mounting V5 Filesystem [ 129.144226][ T6308] XFS (loop5): Ending clean mount [ 129.232708][ T4258] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.254492][ T4917] XFS (loop5): Unmounting Filesystem [ 130.050617][ T6371] input: syz1 as /devices/virtual/input/input11 [ 130.066293][ T6375] loop5: detected capacity change from 0 to 128 [ 130.129894][ T6375] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 130.148556][ T6375] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.184156][ T6383] loop1: detected capacity change from 0 to 512 [ 130.192322][ T6383] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.267229][ T6383] EXT4-fs (loop1): 1 truncate cleaned up [ 130.284853][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 130.294470][ T6383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.490686][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 131.072217][ T6428] netlink: 100 bytes leftover after parsing attributes in process `syz.0.769'. [ 131.109492][ T6428] netlink: 56 bytes leftover after parsing attributes in process `syz.0.769'. [ 131.763912][ T6453] loop5: detected capacity change from 0 to 4096 [ 131.784109][ T6453] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 131.863097][ T6453] ntfs3: loop5: failed to convert "c46c" to iso8859-14 [ 132.135439][ T6442] ptrace attach of "./syz-executor exec"[4966] was attempted by "./syz-executor exec"[6442] [ 132.531580][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.779'. [ 132.665565][ T6475] loop5: detected capacity change from 0 to 256 [ 132.689260][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.696094][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.744442][ T6475] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x3f264f71, utbl_chksum : 0xe619d30d) [ 132.791571][ T26] audit: type=1800 audit(1736823600.354:181): pid=6475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.782" name="file2" dev="loop5" ino=1048609 res=0 errno=0 [ 132.998526][ T6487] loop1: detected capacity change from 0 to 512 [ 133.092192][ T6487] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.125052][ T6491] loop6: detected capacity change from 0 to 8192 [ 133.132289][ T6487] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.151132][ T6491] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.164656][ T6491] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 133.180234][ T6491] REISERFS (device loop6): using ordered data mode [ 133.186915][ T6491] reiserfs: using flush barriers [ 133.195471][ T6491] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.195974][ T6487] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.788: corrupted inode contents [ 133.217473][ T6491] REISERFS (device loop6): checking transaction log (loop6) [ 133.239418][ T6491] REISERFS (device loop6): Using r5 hash to sort names [ 133.253918][ T6487] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #2: comm syz.1.788: mark_inode_dirty error [ 133.266766][ T6491] reiserfs: enabling write barrier flush mode [ 133.277041][ T6487] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.788: corrupted inode contents [ 133.292985][ T4291] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 133.299057][ T6491] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 133.319914][ T6487] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.788: mark_inode_dirty error [ 133.351891][ T6501] EXT4-fs error (device loop1): ext4_get_first_dir_block:3594: inode #18: comm syz.1.788: directory missing '.' [ 133.480430][ T4291] usb 6-1: Using ep0 maxpacket: 16 [ 133.486675][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 133.490969][ T4291] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.530140][ T4291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.559432][ T4291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.589595][ T4291] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.607041][ T4291] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.642757][ T4291] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 133.672529][ T4291] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 133.687085][ T4291] usb 6-1: Manufacturer: syz [ 133.699863][ T4291] usb 6-1: config 0 descriptor?? [ 134.089373][ T4291] rc_core: IR keymap rc-hauppauge not found [ 134.100361][ T4291] Registered IR keymap rc-empty [ 134.125146][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.187158][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.229750][ T4291] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 134.262392][ T4291] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 134.283377][ T6503] loop0: detected capacity change from 0 to 32768 [ 134.296115][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.387250][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.416406][ T6503] XFS (loop0): Mounting V5 Filesystem [ 134.427097][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.457267][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.507334][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.557210][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.588312][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.599195][ T6503] XFS (loop0): Ending clean mount [ 134.627054][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.636332][ T6503] XFS (loop0): Quotacheck needed: Please wait. [ 134.651006][ T6540] loop1: detected capacity change from 0 to 8 [ 134.677050][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.690770][ T6503] XFS (loop0): Quotacheck: Done. [ 134.707100][ T4291] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 134.744502][ T4291] mceusb 6-1:0.0: Registered р with mce emulator interface version 1 [ 134.770364][ T4291] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 134.804740][ T4291] usb 6-1: USB disconnect, device number 8 [ 134.831443][ T4258] XFS (loop0): Unmounting Filesystem [ 134.972630][ T6524] loop6: detected capacity change from 0 to 40427 [ 134.995521][ T6524] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 135.003896][ T6524] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 135.026705][ T6524] F2FS-fs (loop6): Found nat_bits in checkpoint [ 135.100093][ T6524] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 135.110650][ T6524] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 135.287140][ T4294] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.495867][ T4294] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.502116][ T6566] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 135.527212][ T4294] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.544152][ T4294] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.572454][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.592701][ T6548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.729732][ T6554] loop0: detected capacity change from 0 to 32768 [ 135.905612][ T5709] usb 2-1: USB disconnect, device number 5 [ 136.261400][ T6570] loop5: detected capacity change from 0 to 32768 [ 136.335826][ T6570] XFS (loop5): Mounting V5 Filesystem [ 136.452203][ T6570] XFS (loop5): Ending clean mount [ 136.474621][ T6570] XFS (loop5): Quotacheck needed: Please wait. [ 136.549529][ T6570] XFS (loop5): Quotacheck: Done. [ 136.705971][ T4917] XFS (loop5): Unmounting Filesystem [ 137.346317][ T6628] loop6: detected capacity change from 0 to 256 [ 137.364139][ T6628] exfat: Unknown parameter 'zero_size_dir' [ 137.420289][ T6628] CUSE: info not properly terminated [ 137.642157][ T6638] loop6: detected capacity change from 0 to 2048 [ 137.978416][ T6647] loop0: detected capacity change from 0 to 512 [ 138.015575][ T6647] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 138.045197][ T6647] EXT4-fs (loop0): 1 orphan inode deleted [ 138.052214][ T6647] EXT4-fs (loop0): 1 truncate cleaned up [ 138.063449][ T6647] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 138.406823][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 138.451640][ T6640] loop1: detected capacity change from 0 to 32768 [ 138.473715][ T6640] [ 138.473715][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.473715][ T6640] [ 138.549664][ T6640] [ 138.549664][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.549664][ T6640] [ 138.587038][ T6640] [ 138.587038][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.587038][ T6640] [ 138.617069][ T6640] [ 138.617069][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.617069][ T6640] [ 138.637019][ T6640] [ 138.637019][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.637019][ T6640] [ 138.669546][ T6640] [ 138.669546][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.669546][ T6640] [ 138.808372][ T4959] [ 138.808372][ T4959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.808372][ T4959] [ 138.843966][ T4959] [ 138.843966][ T4959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.843966][ T4959] [ 138.883977][ T6659] loop5: detected capacity change from 0 to 512 [ 138.892525][ T4959] [ 138.892525][ T4959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.892525][ T4959] [ 138.907723][ T6659] EXT4-fs: inline encryption not supported [ 138.937542][ T107] [ 138.937542][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.937542][ T107] [ 138.964383][ T6659] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 138.997929][ T4245] [ 138.997929][ T4245] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.997929][ T4245] [ 139.033326][ T6659] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 139.077158][ T6659] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.852: Corrupt directory, running e2fsck is recommended [ 139.091193][ T4245] [ 139.091193][ T4245] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.091193][ T4245] [ 139.123615][ T6659] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 139.139758][ T6659] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.852: corrupted in-inode xattr [ 139.177764][ T6659] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.852: couldn't read orphan inode 15 (err -117) [ 139.217971][ T6659] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 139.266353][ T6669] loop6: detected capacity change from 0 to 4096 [ 139.291364][ T6659] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.327092][ T6670] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.338100][ T6659] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 139.377033][ T6659] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.852: Corrupt directory, running e2fsck is recommended [ 139.482528][ T6659] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 3: comm syz.5.852: path /106/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 139.548709][ T6659] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 8: comm syz.5.852: path /106/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 139.695013][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 140.462893][ T6691] loop5: detected capacity change from 0 to 32768 [ 140.481052][ T6691] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.865 (6691) [ 140.515648][ T6691] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.543886][ T6691] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 140.572714][ T6691] BTRFS info (device loop5): using free space tree [ 140.703755][ T6691] BTRFS info (device loop5): enabling ssd optimizations [ 140.801698][ T6702] loop0: detected capacity change from 0 to 32768 [ 140.861660][ T6702] loop0: p1 p2 p3 < p5 p6 > [ 140.866742][ T6702] loop0: p1 size 242222080 extends beyond EOD, truncated [ 140.908413][ T6702] loop0: p2 start 4294967295 is beyond EOD, truncated [ 141.285303][ T4917] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.366325][ T6741] program syz.0.881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.982820][ T6753] netlink: 72 bytes leftover after parsing attributes in process `syz.5.880'. [ 142.080067][ T6751] infiniband syz2: set down [ 142.107084][ T6751] infiniband syz2: added ipvlan1 [ 142.254779][ T6745] loop1: detected capacity change from 0 to 32768 [ 142.264177][ T6751] RDS/IB: syz2: added [ 142.269417][ T6751] smc: adding ib device syz2 with port count 1 [ 142.278153][ T6751] smc: ib device syz2 port 1 has pnetid [ 142.303959][ T6745] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 142.327897][ T6745] JBD2: Ignoring recovery information on journal [ 142.505845][ T6745] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 142.575338][ T6743] loop6: detected capacity change from 0 to 65536 [ 142.640911][ T6743] XFS (loop6): Mounting V5 Filesystem [ 142.646606][ T6745] overlayfs: upper fs does not support tmpfile. [ 142.674771][ T6745] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 142.682641][ T6745] overlayfs: failed to set xattr on upper [ 142.696910][ T6745] overlayfs: ...falling back to index=off,metacopy=off. [ 142.728479][ T6745] overlayfs: upper fs missing required features. [ 142.735257][ T6743] XFS (loop6): Ending clean mount [ 142.748910][ T6743] XFS (loop6): Quotacheck needed: Please wait. [ 142.823848][ T6743] XFS (loop6): Quotacheck: Done. [ 142.901277][ T4245] ocfs2: Unmounting device (7,1) on (node local) [ 142.971717][ T4966] XFS (loop6): Unmounting Filesystem [ 143.741222][ T26] audit: type=1326 audit(1736823611.304:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6796 comm="syz.0.901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c8b985d29 code=0x0 [ 143.912061][ T4236] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.097001][ T4236] usb 2-1: Using ep0 maxpacket: 8 [ 144.103929][ T4236] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 144.127207][ T4236] usb 2-1: config 179 has no interface number 0 [ 144.154377][ T4236] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 144.185873][ T4236] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 144.216999][ T4236] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 144.238480][ T4236] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 144.276977][ T4236] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 144.306998][ T4236] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 144.336442][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.356123][ T6790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.611486][ T4236] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input13 [ 144.795793][ T6816] netlink: 'syz.0.908': attribute type 33 has an invalid length. [ 144.820819][ T6816] netlink: 152 bytes leftover after parsing attributes in process `syz.0.908'. [ 144.833675][ T4236] usb 2-1: USB disconnect, device number 6 [ 144.839601][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 144.839643][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 144.861682][ T4236] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 145.020732][ T6824] loop0: detected capacity change from 0 to 128 [ 145.052168][ T6824] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 145.069145][ T6824] ext4 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.196045][ T6824] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 25 (only 1 groups) [ 145.251184][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 145.748914][ T6846] binder: 6845:6846 ioctl c018620c 200005c0 returned -1 [ 146.308151][ T6840] loop1: detected capacity change from 0 to 40427 [ 146.337040][ T6840] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 146.344813][ T6840] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 146.464905][ T6840] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.614922][ T6840] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 146.632483][ T6840] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 146.853126][ T6893] loop6: detected capacity change from 0 to 2048 [ 146.928038][ T6893] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 146.932589][ T6897] netlink: 68 bytes leftover after parsing attributes in process `syz.0.945'. [ 146.951437][ T6893] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.047117][ T4294] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 147.107169][ T6902] netlink: 64 bytes leftover after parsing attributes in process `syz.1.944'. [ 147.116244][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 147.258675][ T4294] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.267428][ T4294] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.282971][ T4294] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.307108][ T4294] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.329760][ T4294] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.344823][ T4294] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.354957][ T4294] usb 6-1: Product: syz [ 147.356234][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 147.359197][ T4294] usb 6-1: Manufacturer: syz [ 147.372625][ T4294] cdc_wdm 6-1:1.0: skipping garbage [ 147.392743][ T4294] cdc_wdm 6-1:1.0: skipping garbage [ 147.400892][ T4294] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 147.426353][ T4294] cdc_wdm 6-1:1.0: Unknown control protocol [ 147.485412][ T6918] loop6: detected capacity change from 0 to 128 [ 147.527041][ T6918] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 147.547350][ T6918] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.580166][ T4294] usb 6-1: USB disconnect, device number 9 [ 147.724174][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 147.801024][ T5701] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.998589][ T5701] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.017040][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.031592][ T6923] loop0: detected capacity change from 0 to 32768 [ 148.039844][ T5701] usb 2-1: config 0 descriptor?? [ 148.048837][ T6923] XFS: ikeep mount option is deprecated. [ 148.059292][ T5701] cp210x 2-1:0.0: cp210x converter detected [ 148.148985][ T6923] XFS (loop0): Mounting V5 Filesystem [ 148.215393][ T6923] XFS (loop0): Ending clean mount [ 148.262764][ T6923] syz.0.955[6923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.262864][ T6923] syz.0.955[6923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.284965][ T6943] loop6: detected capacity change from 0 to 8 [ 148.370557][ T4258] XFS (loop0): Unmounting Filesystem [ 148.452759][ T5701] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 148.490401][ T5701] usb 2-1: cp210x converter now attached to ttyUSB0 [ 148.667355][ T4236] usb 2-1: USB disconnect, device number 7 [ 148.686298][ T4236] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 148.725983][ T4236] cp210x 2-1:0.0: device disconnected [ 148.848600][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.972'. [ 148.870089][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.972'. [ 149.510916][ T6979] loop6: detected capacity change from 0 to 32768 [ 149.523717][ T6979] XFS: ikeep mount option is deprecated. [ 149.559850][ T6979] XFS (loop6): Mounting V5 Filesystem [ 149.572820][ T4236] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.631050][ T6979] XFS (loop6): Ending clean mount [ 149.647337][ T5702] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 149.694723][ T6979] syz.6.977[6979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.694817][ T6979] syz.6.977[6979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.777029][ T4236] usb 2-1: Using ep0 maxpacket: 8 [ 149.805208][ T4236] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 149.817233][ T4966] XFS (loop6): Unmounting Filesystem [ 149.824972][ T4236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.836108][ T4236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.846347][ T4236] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.859918][ T4236] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.870059][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.887708][ T5702] usb 6-1: Using ep0 maxpacket: 32 [ 149.911517][ T5702] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 149.920388][ T5702] usb 6-1: config 0 has no interface number 0 [ 149.926558][ T5702] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 149.937388][ T5702] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 149.947668][ T5702] usb 6-1: config 0 interface 126 has no altsetting 0 [ 149.981066][ T5702] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 150.000964][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.009160][ T5702] usb 6-1: Product: syz [ 150.013576][ T5702] usb 6-1: Manufacturer: syz [ 150.018497][ T5702] usb 6-1: SerialNumber: syz [ 150.028711][ T5702] usb 6-1: config 0 descriptor?? [ 150.045070][ T6989] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 150.052601][ T6989] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 150.096182][ T4236] usb 2-1: GET_CAPABILITIES returned 0 [ 150.102257][ T4236] usbtmc 2-1:16.0: can't read capabilities [ 150.139236][ T6995] loop0: detected capacity change from 0 to 32768 [ 150.159222][ T6995] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.984 (6995) [ 150.201689][ T6995] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 150.215205][ T6995] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 150.226873][ T6995] BTRFS info (device loop0): turning off barriers [ 150.246452][ T6995] BTRFS info (device loop0): enabling all of the rescue options [ 150.260869][ T6995] BTRFS info (device loop0): ignoring data csums [ 150.270137][ T6995] BTRFS info (device loop0): ignoring bad roots [ 150.272133][ T7011] loop6: detected capacity change from 0 to 128 [ 150.280633][ T6995] BTRFS info (device loop0): disabling log replay at mount time [ 150.293790][ T6995] BTRFS info (device loop0): enabling auto defrag [ 150.306512][ T4236] usb 2-1: USB disconnect, device number 8 [ 150.309787][ T6995] BTRFS info (device loop0): turning on sync discard [ 150.313083][ T7011] EXT4-fs (loop6): Test dummy encryption mode enabled [ 150.321160][ T6995] BTRFS info (device loop0): using free space tree [ 150.335227][ T6995] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 150.355206][ T6995] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 150.374295][ T6995] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 150.387302][ T7011] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 150.396077][ T7011] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.419577][ T6995] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 150.453250][ T6995] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 150.490260][ T5702] ir_usb 6-1:0.126: IR Dongle converter detected [ 150.504480][ T6995] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 150.542634][ T6995] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 150.587193][ T6995] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 150.647171][ T6995] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 150.691192][ T5702] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 150.746082][ T6995] BTRFS info (device loop0: state C): enabling ssd optimizations [ 150.797548][ T6995] BTRFS info (device loop0: state MC): enabling all of the rescue options [ 150.806220][ T6995] BTRFS info (device loop0: state MC): turning off discard [ 150.813609][ T6995] BTRFS info (device loop0: state MC): disabling auto defrag [ 150.821165][ T6995] BTRFS info (device loop0: state MC): enabling auto defrag [ 150.828700][ T6995] BTRFS info (device loop0: state MC): turning on sync discard [ 150.871044][ T4258] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 150.894274][ T5702] usb 6-1: USB disconnect, device number 10 [ 150.950366][ T7011] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 150.995426][ T5702] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 151.016280][ T5702] ir_usb 6-1:0.126: device disconnected [ 151.365694][ T7051] loop0: detected capacity change from 0 to 512 [ 151.388961][ T7051] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.454286][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 151.469919][ T7051] EXT4-fs (loop0): 1 truncate cleaned up [ 151.477023][ T7051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 151.568703][ T7051] EXT4-fs (loop0): shut down requested (2) [ 151.603299][ T7051] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 151.614121][ T7049] loop1: detected capacity change from 0 to 32768 [ 151.674372][ T7049] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 151.678193][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 151.874445][ T4245] ocfs2: Unmounting device (7,1) on (node local) [ 152.060004][ T7068] loop6: detected capacity change from 0 to 164 [ 152.106826][ T7068] ISOFS: unable to read i-node block [ 152.127665][ T7068] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 152.293090][ T7054] loop5: detected capacity change from 0 to 32768 [ 152.313087][ T7054] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 152.332829][ T7054] XFS (loop5): Mounting V5 Filesystem [ 152.401880][ T7054] XFS (loop5): Ending clean mount [ 152.417967][ T7054] XFS (loop5): Quotacheck needed: Please wait. [ 152.498288][ T7054] XFS (loop5): Quotacheck: Done. [ 152.566779][ T4917] XFS (loop5): Unmounting Filesystem [ 153.060431][ T7098] netlink: 888 bytes leftover after parsing attributes in process `syz.1.1011'. [ 153.238678][ T7105] loop5: detected capacity change from 0 to 512 [ 153.302874][ T7105] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 153.318320][ T7105] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.371051][ T7111] loop1: detected capacity change from 0 to 4096 [ 153.380491][ T7111] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 153.529320][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 153.623292][ T7120] loop1: detected capacity change from 0 to 16 [ 153.643774][ T7120] erofs: (device loop1): mounted with root inode @ nid 36. [ 153.753913][ T7129] netlink: 956 bytes leftover after parsing attributes in process `syz.1.1026'. [ 153.764300][ T7127] loop5: detected capacity change from 0 to 1024 [ 153.778031][ T7127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.785192][ T7127] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.825629][ T7127] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.834519][ T7127] EXT4-fs (loop5): Test dummy encryption mode enabled [ 153.855243][ T7127] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 154.067028][ T14] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 154.095479][ T7127] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 154.159441][ T7134] loop1: detected capacity change from 0 to 32768 [ 154.176762][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 154.201164][ T7134] JBD2: Ignoring recovery information on journal [ 154.250859][ T7134] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 154.273451][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.294501][ T14] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 154.312729][ T14] usb 1-1: can't read configurations, error -71 [ 154.326183][ T26] audit: type=1800 audit(1736823621.884:183): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1028" name="file1" dev="loop1" ino=16946 res=0 errno=0 [ 154.486167][ T4245] ocfs2: Unmounting device (7,1) on (node local) [ 154.715408][ T7152] loop5: detected capacity change from 0 to 32768 [ 154.760929][ T7152] XFS (loop5): Mounting V5 Filesystem [ 154.825486][ T7152] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 154.878201][ T7152] XFS (loop5): Starting recovery (logdev: internal) [ 154.926874][ T7152] XFS (loop5): Ending recovery (logdev: internal) [ 155.044445][ T7152] XFS (loop5): User initiated shutdown received. [ 155.057077][ T7152] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 155.072936][ T7152] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 155.089206][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 155.107861][ T7179] tap1: tun_chr_ioctl cmd 1074025680 [ 155.204490][ T4917] XFS (loop5): Unmounting Filesystem [ 155.752448][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 156.085912][ T7217] process 'syz.4.1060' launched './file1' with NULL argv: empty string added [ 156.499725][ T7238] loop1: detected capacity change from 0 to 512 [ 156.550466][ T7238] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1069: bg 0: block 393: padding at end of block bitmap is not set [ 156.576073][ T7238] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 156.610263][ T7238] EXT4-fs (loop1): 2 truncates cleaned up [ 156.643753][ T7238] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.719835][ T7250] loop6: detected capacity change from 0 to 128 [ 156.737566][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 156.744872][ T7250] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 156.762753][ T7250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.947306][ T5701] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 157.142350][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 157.159390][ T5701] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 157.170619][ T7264] loop5: detected capacity change from 0 to 128 [ 157.192540][ T5701] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 157.219251][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 157.237872][ T5701] usb 1-1: Product: syz [ 157.242092][ T5701] usb 1-1: Manufacturer: syz [ 157.246695][ T5701] usb 1-1: SerialNumber: syz [ 157.251424][ T26] audit: type=1800 audit(1736823880.810:184): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1080" name="file2" dev="loop5" ino=1048610 res=0 errno=0 [ 157.286753][ T5701] usb 1-1: config 0 descriptor?? [ 157.300145][ T7247] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.527419][ T5701] usb 1-1: USB disconnect, device number 6 [ 158.035559][ T7279] loop5: detected capacity change from 0 to 32768 [ 158.418502][ T7288] loop6: detected capacity change from 0 to 32768 [ 158.434303][ T7288] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.1091 (7288) [ 158.459254][ T7288] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 158.477061][ T7288] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 158.495998][ T7288] BTRFS info (device loop6): enabling disk space caching [ 158.522112][ T7288] BTRFS info (device loop6): force clearing of disk cache [ 158.537106][ T7288] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 158.556731][ T7288] BTRFS info (device loop6): use zstd compression, level 3 [ 158.570960][ T7288] BTRFS info (device loop6): disk space caching is enabled [ 158.699017][ T7288] BTRFS info (device loop6): enabling ssd optimizations [ 158.734076][ T7288] BTRFS info (device loop6): rebuilding free space tree [ 158.784796][ T7288] BTRFS info (device loop6): disabling free space tree [ 158.810419][ T7288] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 158.857004][ T7288] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.026551][ T4966] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 159.839193][ T7364] loop6: detected capacity change from 0 to 256 [ 159.884825][ T7364] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 159.965745][ T7364] exFAT-fs (loop6): error, invalid size(size(0) > aligned(9223372036854777344) [ 159.965745][ T7364] [ 159.983994][ T7364] exFAT-fs (loop6): Filesystem has been set read-only [ 160.067042][ T5701] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.245890][ T7378] loop1: detected capacity change from 0 to 16 [ 160.272485][ T5701] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 160.273214][ T7378] erofs: (device loop1): mounted with root inode @ nid 36. [ 160.299935][ T5701] usb 1-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 160.339175][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.360789][ T5701] usb 1-1: config 0 descriptor?? [ 160.372567][ T5701] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 160.570205][ T5702] usb 1-1: USB disconnect, device number 7 [ 160.737153][ T5701] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 160.947107][ T5701] usb 6-1: Using ep0 maxpacket: 16 [ 160.960009][ T5701] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 160.982905][ T5701] usb 6-1: config 8 has no interface number 0 [ 161.000535][ T5701] usb 6-1: config 8 interface 206 has no altsetting 0 [ 161.017662][ T7411] loop6: detected capacity change from 0 to 1024 [ 161.027718][ T5701] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 161.041168][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.050849][ T5701] usb 6-1: Product: syz [ 161.055383][ T5701] usb 6-1: Manufacturer: syz [ 161.061864][ T5701] usb 6-1: SerialNumber: syz [ 161.301145][ T5701] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 161.312787][ T5701] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 161.329218][ T5701] garmin_gps: probe of ttyUSB0 failed with error -22 [ 161.338780][ T7420] loop6: detected capacity change from 0 to 4096 [ 161.346948][ T5701] usb 6-1: USB disconnect, device number 11 [ 161.359910][ T5701] garmin_gps 6-1:8.206: device disconnected [ 162.002526][ T7454] loop5: detected capacity change from 0 to 8 [ 162.014441][ T7454] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 162.176268][ T7458] loop0: detected capacity change from 0 to 2048 [ 162.219408][ T7462] loop5: detected capacity change from 0 to 4096 [ 162.219943][ T7463] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.255095][ T7462] NILFS (loop5): invalid segment: Checksum error in segment payload [ 162.263758][ T7462] NILFS (loop5): trying rollback from an earlier position [ 162.276408][ T7463] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 162.289563][ T7463] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 162.301901][ T7463] Remounting filesystem read-only [ 162.310623][ T4959] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 162.318041][ T4959] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.319462][ T7462] NILFS (loop5): recovery complete [ 162.326894][ T4959] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.346303][ T4959] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 162.347135][ T7466] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.354376][ T4959] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 162.380156][ T7458] NILFS (loop0): mounting fs with errors [ 162.389970][ T7458] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 162.406375][ T7458] Remounting filesystem read-only [ 162.416073][ T7458] NILFS (loop0): error -5 reading inode: ino=2 [ 162.428482][ T7458] NILFS (loop0): cannot mark inode dirty (ino=2): error -5 loading inode block [ 162.492348][ T4258] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 162.505100][ T4258] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 162.517043][ T4258] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 162.534626][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.543726][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.568048][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.581457][ T4258] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 162.589562][ T4258] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 162.596875][ T4258] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 162.613396][ T4258] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 162.632405][ T4258] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 162.643002][ T4258] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 162.652122][ T4258] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 162.662661][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.700683][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.715187][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.724416][ T4258] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 162.754913][ T4258] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 162.762847][ T4258] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 162.785788][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.795053][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.809270][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.829659][ T4258] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 162.836386][ T4258] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 162.852244][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.863558][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.879282][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.890543][ T4258] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 162.897360][ T4258] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 162.905219][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.920193][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.929236][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 162.954956][ T4258] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 162.969814][ T4258] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 162.987104][ T4258] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 163.002309][ T4258] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 163.016448][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 163.029233][ T4258] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 163.036415][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 163.046111][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 163.055224][ T4258] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 163.062648][ T4258] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 163.315555][ T7480] loop0: detected capacity change from 0 to 8192 [ 163.342610][ T7480] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.369535][ T7480] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 163.410587][ T7480] REISERFS (device loop0): using ordered data mode [ 163.417260][ T7480] reiserfs: using flush barriers [ 163.429543][ T7480] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.450306][ T7480] REISERFS (device loop0): checking transaction log (loop0) [ 163.485715][ T7480] REISERFS (device loop0): Using tea hash to sort names [ 163.543922][ T7480] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 163.724516][ T7494] loop6: detected capacity change from 0 to 128 [ 163.772565][ T7494] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 163.800981][ T7494] sysv_free_block: trying to free block not in datazone [ 163.903056][ T7496] loop0: detected capacity change from 0 to 512 [ 163.917023][ T4966] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 163.936496][ T7496] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.023300][ T7496] EXT4-fs (loop0): 1 truncate cleaned up [ 164.037018][ T7496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 164.121751][ T7504] netlink: 'syz.6.1180': attribute type 29 has an invalid length. [ 164.130574][ T7504] netlink: 'syz.6.1180': attribute type 29 has an invalid length. [ 164.141380][ T7504] netlink: 'syz.6.1180': attribute type 29 has an invalid length. [ 164.151506][ T7504] netlink: 'syz.6.1180': attribute type 29 has an invalid length. [ 164.216006][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 164.973266][ T7525] loop6: detected capacity change from 0 to 1024 [ 165.051105][ T7514] loop5: detected capacity change from 0 to 32768 [ 165.153992][ T7514] XFS (loop5): Mounting V5 Filesystem [ 165.212487][ T7514] XFS (loop5): Ending clean mount [ 165.375558][ T4917] XFS (loop5): Unmounting Filesystem [ 165.398538][ T4236] kernel write not supported for file /snd/midiC2D0 (pid: 4236 comm: kworker/1:2) [ 165.462062][ T7522] loop0: detected capacity change from 0 to 40427 [ 165.488018][ T7522] F2FS-fs (loop0): build fault injection attr: rate: 691, type: 0x3ffff [ 165.501687][ T7522] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 165.528713][ T7522] F2FS-fs (loop0): invalid crc value [ 165.558727][ T7522] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.686590][ T7522] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 165.916019][ T7522] syz.0.1188: attempt to access beyond end of device [ 165.916019][ T7522] loop0: rw=2049, sector=53248, nr_sectors = 256 limit=40427 [ 165.980345][ T7537] loop6: detected capacity change from 0 to 32768 [ 166.016704][ T7537] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1190 (7537) [ 166.053627][ T7537] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.064291][ T7537] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 166.081169][ T7537] BTRFS info (device loop6): enabling auto defrag [ 166.102500][ T7537] BTRFS info (device loop6): doing ref verification [ 166.111068][ T7537] BTRFS info (device loop6): max_inline at 0 [ 166.135514][ T7537] BTRFS info (device loop6): force clearing of disk cache [ 166.172178][ T7537] BTRFS info (device loop6): disabling free space tree [ 166.327102][ T7537] BTRFS info (device loop6): enabling ssd optimizations [ 166.344232][ T7555] loop5: detected capacity change from 0 to 32768 [ 166.345958][ T7537] BTRFS info (device loop6): rebuilding free space tree [ 166.419399][ T7537] BTRFS info (device loop6): disabling free space tree [ 166.426381][ T7537] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.443778][ T7537] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 166.665969][ T4966] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.746274][ T7586] loop0: detected capacity change from 0 to 512 [ 167.216035][ T7600] netlink: 'syz.5.1210': attribute type 10 has an invalid length. [ 167.264352][ T7600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.408539][ T7604] loop1: detected capacity change from 0 to 4096 [ 167.454151][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1216'. [ 167.461727][ T26] audit: type=1804 audit(1736823891.010:185): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1211" name="/newroot/251/file1/file0" dev="loop1" ino=0 res=1 errno=0 [ 167.466697][ T7612] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1216'. [ 168.297740][ T4292] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 168.498842][ T4292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.519246][ T4292] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.541537][ T4292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.544223][ T7647] loop5: detected capacity change from 0 to 4096 [ 168.560133][ T7647] ntfs: (device loop5): load_attribute_list(): Cannot read attribute list since runlist is missing. [ 168.571398][ T7647] ntfs: (device loop5): ntfs_read_locked_inode(): Failed to load attribute list attribute. [ 168.577282][ T4292] usb 1-1: config 0 descriptor?? [ 168.581813][ T7647] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 168.599521][ T7647] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 168.614715][ T7647] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 168.633232][ T7647] ntfs: volume version 3.1. [ 168.639181][ T7647] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 168.651309][ T7647] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 168.697168][ T7647] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 168.717523][ T7647] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 169.000123][ T4292] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 169.022076][ T4292] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input14 [ 169.147557][ T4292] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 169.274262][ T7665] loop1: detected capacity change from 0 to 2048 [ 169.330158][ T7666] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.364130][ T7666] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 169.375945][ T7666] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 169.395924][ T7666] Remounting filesystem read-only [ 169.401125][ T7668] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1242'. [ 169.402780][ T11] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 169.426183][ T11] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 169.434485][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.443419][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.452513][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.466785][ T11] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 169.473560][ T11] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 169.477364][ T4292] usb 1-1: USB disconnect, device number 8 [ 169.486823][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.496158][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.510573][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.521748][ T11] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 169.536029][ T11] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 169.545363][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.558846][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.572674][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.620460][ T11] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 169.627414][ T11] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 169.655029][ T11] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 169.669399][ T11] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 169.687255][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.696197][ T11] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 169.730482][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.740489][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 169.759117][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.761187][ T7676] netlink: 'syz.5.1245': attribute type 1 has an invalid length. [ 169.780685][ T7649] loop6: detected capacity change from 0 to 65536 [ 169.783700][ T7676] netlink: 'syz.5.1245': attribute type 2 has an invalid length. [ 169.787868][ T11] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 169.800853][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1245'. [ 169.804593][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.820716][ T11] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 169.843911][ T11] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 169.873083][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.889413][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.898824][ T11] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.909289][ T7649] XFS (loop6): Mounting V5 Filesystem [ 169.915179][ T7665] NILFS (loop1): mounting fs with errors [ 169.941901][ T7665] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 169.978358][ T7665] Remounting filesystem read-only [ 170.006863][ T7665] NILFS (loop1): error -5 reading inode: ino=18 [ 170.017089][ T7665] NILFS (loop1): cannot mark inode dirty (ino=18): error -5 loading inode block [ 170.039550][ T7649] XFS (loop6): Ending clean mount [ 170.043322][ T7665] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 170.051530][ T7649] XFS (loop6): Quotacheck needed: Please wait. [ 170.061823][ T7665] NILFS (loop1): error -5 reading inode: ino=18 [ 170.068488][ T7665] NILFS (loop1): cannot mark inode dirty (ino=18): error -5 loading inode block [ 170.077931][ T7665] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 170.087659][ T7665] NILFS (loop1): error -5 reading inode: ino=18 [ 170.093993][ T7665] NILFS (loop1): cannot mark inode dirty (ino=18): error -5 loading inode block [ 170.172458][ T7649] XFS (loop6): Quotacheck: Done. [ 170.180911][ T4245] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 170.190857][ T4245] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 170.199091][ T4245] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 170.206526][ T4245] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 170.214305][ T4245] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 170.221819][ T4245] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 170.229335][ T4245] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 170.249870][ T4245] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 170.271592][ T4245] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 170.299748][ T4245] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.317231][ T4966] XFS (loop6): Unmounting Filesystem [ 170.322700][ T4245] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.343341][ T4245] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.388188][ T4245] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 170.395071][ T4245] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 170.403068][ T4245] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 170.410449][ T4245] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 170.424242][ T4245] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.481942][ T4245] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 170.489159][ T4245] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.509454][ T4245] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.518575][ T4245] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 170.536196][ T4245] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 170.538648][ T4292] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.636375][ T7698] program syz.1.1261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.755116][ T4292] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.777706][ T4292] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.813435][ T4292] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.832774][ T4292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.857335][ T4292] usb 1-1: SerialNumber: syz [ 170.965332][ T7707] netlink: 'syz.1.1266': attribute type 1 has an invalid length. [ 170.983659][ T7707] netlink: 'syz.1.1266': attribute type 2 has an invalid length. [ 171.015061][ T7707] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 171.085743][ T4292] usb 1-1: 0:2 : does not exist [ 171.112215][ T4292] usb 1-1: USB disconnect, device number 9 [ 171.142868][ T7715] netlink: 832 bytes leftover after parsing attributes in process `syz.1.1257'. [ 171.286543][ T7717] loop5: detected capacity change from 0 to 2048 [ 171.293998][ T4248] kernel write not supported for file /snd/seq (pid: 4248 comm: kworker/0:4) [ 171.368605][ T7717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.505388][ T7713] loop6: detected capacity change from 0 to 32768 [ 171.563836][ T7727] loop1: detected capacity change from 0 to 1024 [ 171.601228][ T7713] XFS (loop6): Mounting V5 Filesystem [ 171.631250][ T7727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 171.705635][ T7713] XFS (loop6): Ending clean mount [ 171.710996][ T7727] EXT4-fs error (device loop1): ext4_xattr_ibody_get:603: inode #2: comm syz.1.1262: corrupted in-inode xattr [ 171.715587][ T7713] XFS (loop6): Quotacheck needed: Please wait. [ 171.835280][ T7713] XFS (loop6): Quotacheck: Done. [ 171.842142][ T4245] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2739: inode #2: comm syz-executor: corrupted in-inode xattr [ 171.874291][ T7743] netlink: 'syz.0.1267': attribute type 21 has an invalid length. [ 171.966663][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 172.045814][ T4966] XFS (loop6): Unmounting Filesystem [ 172.263591][ T7753] loop0: detected capacity change from 0 to 4096 [ 172.334988][ T7758] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.774777][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 172.774792][ T26] audit: type=1326 audit(1736823896.330:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.0.1284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c8b985d29 code=0x0 [ 173.258399][ T7773] loop5: detected capacity change from 0 to 32768 [ 173.259686][ T7768] loop1: detected capacity change from 0 to 32768 [ 173.266078][ T7773] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1282 (7773) [ 173.284120][ T7768] XFS: attr2 mount option is deprecated. [ 173.299684][ T7773] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.318247][ T7773] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 173.328797][ T7773] BTRFS info (device loop5): enabling auto defrag [ 173.335454][ T7773] BTRFS info (device loop5): doing ref verification [ 173.342213][ T7773] BTRFS info (device loop5): use no compression [ 173.348957][ T7773] BTRFS info (device loop5): force clearing of disk cache [ 173.356231][ T7773] BTRFS info (device loop5): max_inline at 4096 [ 173.362984][ T7773] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 173.372742][ T7773] BTRFS info (device loop5): use zstd compression, level 3 [ 173.384265][ T7773] BTRFS info (device loop5): using free space tree [ 173.394191][ T7768] XFS (loop1): Mounting V5 Filesystem [ 173.438338][ T7778] loop6: detected capacity change from 0 to 32768 [ 173.465682][ T7801] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1289'. [ 173.468930][ T7768] XFS (loop1): Ending clean mount [ 173.483889][ T7768] XFS (loop1): Quotacheck needed: Please wait. [ 173.513066][ T7778] XFS (loop6): Mounting V5 Filesystem [ 173.534191][ T7768] XFS (loop1): Quotacheck: Done. [ 173.554539][ T7773] BTRFS info (device loop5): enabling ssd optimizations [ 173.564738][ T7773] BTRFS info (device loop5): rebuilding free space tree [ 173.565420][ T7778] XFS (loop6): Ending clean mount [ 173.656463][ T26] audit: type=1800 audit(1736823897.210:187): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1282" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 173.750268][ T4245] XFS (loop1): Unmounting Filesystem [ 173.783724][ T4966] XFS (loop6): Unmounting Filesystem [ 173.879986][ T26] audit: type=1326 audit(1736823897.440:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8b985d29 code=0x7ffc0000 [ 173.944767][ T26] audit: type=1326 audit(1736823897.480:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8b985d29 code=0x7ffc0000 [ 173.997058][ T26] audit: type=1326 audit(1736823897.480:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c8b985d29 code=0x7ffc0000 [ 174.043129][ T26] audit: type=1326 audit(1736823897.480:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8b985d29 code=0x7ffc0000 [ 174.099744][ T4917] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.110777][ T26] audit: type=1326 audit(1736823897.480:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c8b97cce7 code=0x7ffc0000 [ 174.133882][ T26] audit: type=1326 audit(1736823897.480:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c8b921f29 code=0x7ffc0000 [ 174.162621][ T26] audit: type=1326 audit(1736823897.480:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c8b97cce7 code=0x7ffc0000 [ 174.185443][ T26] audit: type=1326 audit(1736823897.480:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c8b921f29 code=0x7ffc0000 [ 174.333109][ T7831] syz.6.1293[7831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.333211][ T7831] syz.6.1293[7831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.521769][ T7837] loop5: detected capacity change from 0 to 512 [ 174.554891][ T7833] loop0: detected capacity change from 0 to 2048 [ 174.582202][ T7837] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1296: casefold flag without casefold feature [ 174.600555][ T7833] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.610112][ T7837] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1296: couldn't read orphan inode 15 (err -117) [ 174.664429][ T7837] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 174.775415][ T7842] loop6: detected capacity change from 0 to 1024 [ 174.783393][ T4917] EXT4-fs (loop5): unmounting filesystem. [ 174.831422][ T7842] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 174.840771][ T7842] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.983373][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 175.228773][ T7860] overlayfs: failed to clone lowerpath [ 175.531696][ T7870] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1312'. [ 176.253623][ T7858] loop0: detected capacity change from 0 to 32768 [ 176.265644][ T7858] XFS: noikeep mount option is deprecated. [ 176.404887][ T7858] XFS (loop0): Mounting V5 Filesystem [ 176.495570][ T7858] XFS (loop0): Ending clean mount [ 176.564012][ T7858] XFS (loop0): Quotacheck needed: Please wait. [ 176.731801][ T7858] XFS (loop0): Quotacheck: Done. [ 177.013082][ T7895] loop5: detected capacity change from 0 to 8192 [ 177.056590][ T7895] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 177.090960][ T7862] loop6: detected capacity change from 0 to 262144 [ 177.099278][ T7895] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 177.109933][ T7895] REISERFS (device loop5): using ordered data mode [ 177.117510][ T7895] reiserfs: using flush barriers [ 177.125920][ T7895] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.155555][ T4258] XFS (loop0): Unmounting Filesystem [ 177.157404][ T7895] REISERFS (device loop5): checking transaction log (loop5) [ 177.170156][ T7862] F2FS-fs (loop6): Found nat_bits in checkpoint [ 177.224961][ T7862] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 177.258890][ T7895] REISERFS (device loop5): Using rupasov hash to sort names [ 177.268596][ T7895] REISERFS (device loop5): using 3.5.x disk format [ 177.295220][ T7895] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 177.339515][ T7895] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 177.377103][ T7895] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 177.402683][ T7895] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 177.478892][ T7895] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 177.529317][ T7895] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 177.561043][ T7895] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 179.126271][ T7964] loop0: detected capacity change from 0 to 2048 [ 179.227629][ T7964] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 179.272172][ T7964] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 179.339091][ T7964] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 179.362246][ T7964] EXT4-fs (loop0): This should not happen!! Data will be lost [ 179.362246][ T7964] [ 179.371998][ T7964] EXT4-fs (loop0): Total free blocks count 0 [ 179.378124][ T7964] EXT4-fs (loop0): Free/Dirty block details [ 179.384042][ T7964] EXT4-fs (loop0): free_blocks=2415919104 [ 179.390302][ T7964] EXT4-fs (loop0): dirty_blocks=16 [ 179.395499][ T7964] EXT4-fs (loop0): Block reservation details [ 179.402215][ T7964] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 179.526563][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 180.278545][ T8006] binder: 8004:8006 ioctl 400c620e 200014c0 returned -22 [ 180.695133][ T8021] kAFS: unparsable volume name [ 180.847048][ T4249] Bluetooth: hci0: command 0x0406 tx timeout [ 181.627125][ T4236] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 181.768244][ T8029] loop6: detected capacity change from 0 to 131072 [ 181.782318][ T8029] F2FS-fs (loop6): inline encryption not supported [ 181.790764][ T8029] F2FS-fs (loop6): invalid crc value [ 181.844093][ T8029] F2FS-fs (loop6): Found nat_bits in checkpoint [ 181.847008][ T4236] usb 1-1: Using ep0 maxpacket: 16 [ 181.864814][ T4236] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 181.884341][ T4236] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 181.897107][ T8029] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 181.931662][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.951331][ T4236] usb 1-1: Product: syz [ 181.960056][ T4236] usb 1-1: Manufacturer: syz [ 181.973031][ T4236] usb 1-1: SerialNumber: syz [ 181.989979][ T4236] usb 1-1: config 0 descriptor?? [ 182.001646][ T8029] F2FS-fs (loop6): switch discard_unit option is not allowed [ 182.013802][ T4236] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 182.033634][ T4236] usb 1-1: Detected FT232R [ 182.217537][ T4236] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 182.375485][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 182.375530][ T26] audit: type=1107 audit(1736823905.930:252): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 182.440604][ T4236] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 182.684116][ T4326] usb 1-1: USB disconnect, device number 10 [ 182.704797][ T4326] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 182.736086][ T4326] ftdi_sio 1-1:0.0: device disconnected [ 183.262065][ T8066] loop6: detected capacity change from 0 to 32768 [ 183.323262][ T8066] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 183.500338][ T4966] ocfs2: Unmounting device (7,6) on (node local) [ 184.221144][ T8110] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1413'. [ 184.336383][ T8086] loop0: detected capacity change from 0 to 65536 [ 184.409084][ T8086] XFS (loop0): Mounting V5 Filesystem [ 184.500662][ T8086] XFS (loop0): Ending clean mount [ 184.622054][ T4258] XFS (loop0): Unmounting Filesystem [ 184.763376][ T8132] program syz.1.1422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.883107][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'. [ 185.289729][ T8159] loop6: detected capacity change from 0 to 128 [ 185.333146][ T8159] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 185.348270][ T8159] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.373237][ T8159] fscrypt (loop6, inode 12): Unsupported encryption flags (0x08) [ 185.423944][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 185.467512][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'. [ 185.630696][ T8178] loop1: detected capacity change from 0 to 128 [ 185.644158][ T8178] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 185.663037][ T8178] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.850706][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 186.161694][ T26] audit: type=1326 audit(1736823909.720:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8195 comm="syz.4.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa850585d29 code=0x7ffc0000 [ 186.161742][ T8197] loop1: detected capacity change from 0 to 1024 [ 186.183949][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.247059][ T8197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 186.289444][ T8205] netlink: 'syz.5.1455': attribute type 1 has an invalid length. [ 186.290194][ T8197] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 186.327199][ T8197] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1 with error 28 [ 186.339667][ T8197] EXT4-fs (loop1): This should not happen!! Data will be lost [ 186.339667][ T8197] [ 186.349620][ T8197] EXT4-fs (loop1): Total free blocks count 0 [ 186.355684][ T8197] EXT4-fs (loop1): Free/Dirty block details [ 186.361679][ T8197] EXT4-fs (loop1): free_blocks=68451041280 [ 186.368448][ T8197] EXT4-fs (loop1): dirty_blocks=48 [ 186.373579][ T8197] EXT4-fs (loop1): Block reservation details [ 186.379680][ T8197] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 186.403545][ T8207] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 186.561437][ T4326] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 186.748974][ T4326] usb 1-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 186.777286][ T4326] usb 1-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.817606][ T4326] usb 1-1: config 1 interface 0 has no altsetting 0 [ 186.837606][ T4326] usb 1-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 186.857025][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.865046][ T4326] usb 1-1: Product: syz [ 186.877438][ T4326] usb 1-1: Manufacturer: syz [ 186.892331][ T4326] usb 1-1: SerialNumber: syz [ 186.903826][ T8202] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 186.964829][ T8226] loop1: detected capacity change from 0 to 47 [ 187.128655][ T4326] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input15 [ 187.754540][ T3607] bcm5974 1-1:1.0: could not read from device [ 187.755071][ T4326] usb 1-1: USB disconnect, device number 11 [ 187.768110][ T3607] bcm5974 1-1:1.0: could not read from device [ 188.741167][ T8294] loop0: detected capacity change from 0 to 128 [ 188.743659][ T8269] loop1: detected capacity change from 0 to 40427 [ 188.756617][ T8269] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 188.783270][ T8269] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 188.802204][ T8294] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 188.820346][ T8294] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.858578][ T8269] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.951183][ T8269] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 188.959364][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 188.960775][ T8269] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 189.484209][ T8309] loop6: detected capacity change from 0 to 32768 [ 189.691802][ T8322] loop1: detected capacity change from 0 to 2048 [ 190.302938][ T8345] loop0: detected capacity change from 0 to 4096 [ 190.519658][ T8362] netlink: 'syz.1.1524': attribute type 10 has an invalid length. [ 190.554619][ T8364] loop0: detected capacity change from 0 to 4096 [ 190.565757][ T8362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.596507][ T8367] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.873080][ T8376] netlink: 'syz.0.1541': attribute type 10 has an invalid length. [ 190.904650][ T8376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.488306][ T8400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1540'. [ 191.527948][ T8400] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1540'. [ 192.030756][ T8422] rdma_rxe: rxe_register_device failed with error -23 [ 192.048685][ T8422] rdma_rxe: failed to add ipvlan1 [ 192.340330][ T8429] tap1: tun_chr_ioctl cmd 1074025681 [ 192.533163][ T26] audit: type=1326 audit(1736823916.090:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8430 comm="syz.5.1558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85b3985d29 code=0x0 [ 194.131148][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.138553][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.412952][ T8471] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1574'. [ 194.446986][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1574'. [ 194.990851][ T8491] netlink: 'syz.6.1593': attribute type 49 has an invalid length. [ 195.017070][ T8491] netlink: 'syz.6.1593': attribute type 49 has an invalid length. [ 195.206415][ T8505] bond0: option all_slaves_active: invalid value (129) [ 195.206419][ T8504] loop6: detected capacity change from 0 to 512 [ 195.288448][ T8504] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 195.316313][ T8504] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.405940][ T8504] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 195.464252][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 195.517468][ T8514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.989040][ T8522] loop6: detected capacity change from 0 to 2048 [ 196.018537][ T8522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.163484][ T8511] loop0: detected capacity change from 0 to 32768 [ 196.396442][ T8511] XFS (loop0): Mounting V5 Filesystem [ 196.445627][ T8533] loop6: detected capacity change from 0 to 1024 [ 196.467250][ T8511] XFS (loop0): Ending clean mount [ 196.473601][ T8540] netlink: 'syz.4.1601': attribute type 5 has an invalid length. [ 196.482480][ T8388] syz.1.1547 (8388) used greatest stack depth: 17920 bytes left [ 196.488358][ T8511] XFS (loop0): Quotacheck needed: Please wait. [ 196.581584][ T8511] XFS (loop0): Quotacheck: Done. [ 196.705690][ T4696] hfsplus: b-tree write err: -5, ino 4 [ 196.719270][ T4258] XFS (loop0): Unmounting Filesystem [ 196.731196][ T8549] loop1: detected capacity change from 0 to 512 [ 196.751754][ T8549] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 196.814968][ T8549] EXT4-fs (loop1): 1 truncate cleaned up [ 196.822905][ T8549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.925395][ T8549] EXT4-fs (loop1): shut down requested (2) [ 196.974595][ T8549] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 197.065176][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 197.213609][ T8566] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.223192][ T8566] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.232091][ T8566] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.240921][ T8566] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.345377][ T8566] device vxlan0 entered promiscuous mode [ 197.354843][ T8566] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.363999][ T8566] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.373032][ T8566] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.382578][ T8566] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.646207][ T8560] loop0: detected capacity change from 0 to 40427 [ 197.684934][ T8560] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 197.708376][ T8560] F2FS-fs (loop0): invalid crc value [ 197.732228][ T8560] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.847009][ T8560] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.928196][ T8570] loop6: detected capacity change from 0 to 32768 [ 197.994008][ T8570] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 198.010758][ T8570] XFS (loop6): Mounting V5 Filesystem [ 198.032930][ T4258] syz-executor: attempt to access beyond end of device [ 198.032930][ T4258] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.095394][ T8570] XFS (loop6): Ending clean mount [ 198.135683][ T8570] XFS (loop6): Quotacheck needed: Please wait. [ 198.231793][ T8570] XFS (loop6): Quotacheck: Done. [ 198.387230][ T4966] XFS (loop6): Unmounting Filesystem [ 198.751305][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 198.780653][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1619'. [ 198.821177][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 199.077935][ T8627] loop6: detected capacity change from 0 to 256 [ 199.215367][ T8634] netlink: 'syz.0.1639': attribute type 3 has an invalid length. [ 199.243431][ T8634] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1639'. [ 199.928973][ T26] audit: type=1326 audit(1736824179.493:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09fcb7cce7 code=0x7ffc0000 [ 199.994646][ T26] audit: type=1326 audit(1736824179.523:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09fcb21f29 code=0x7ffc0000 [ 200.071816][ T26] audit: type=1326 audit(1736824179.523:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09fcb7cce7 code=0x7ffc0000 [ 200.124690][ T8660] loop1: detected capacity change from 0 to 8192 [ 200.136110][ T26] audit: type=1326 audit(1736824179.523:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09fcb21f29 code=0x7ffc0000 [ 200.179828][ T8660] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 200.230947][ T8660] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 200.254277][ T26] audit: type=1326 audit(1736824179.523:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09fcb7cce7 code=0x7ffc0000 [ 200.302039][ T8660] REISERFS (device loop1): using ordered data mode [ 200.308785][ T8660] reiserfs: using flush barriers [ 200.314969][ T26] audit: type=1326 audit(1736824179.523:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09fcb21f29 code=0x7ffc0000 [ 200.315012][ T8660] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.338062][ T8660] REISERFS (device loop1): checking transaction log (loop1) [ 200.366475][ T8660] REISERFS (device loop1): Using tea hash to sort names [ 200.375330][ T8660] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 200.455072][ T26] audit: type=1326 audit(1736824179.523:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fcb85d29 code=0x7ffc0000 [ 200.496692][ T26] audit: type=1326 audit(1736824179.523:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09fcb7cce7 code=0x7ffc0000 [ 200.571230][ T26] audit: type=1326 audit(1736824179.523:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09fcb21f29 code=0x7ffc0000 [ 200.634675][ T26] audit: type=1326 audit(1736824179.523:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09fcb85d29 code=0x7ffc0000 [ 200.670667][ T8677] loop0: detected capacity change from 0 to 128 [ 200.682092][ T8677] EXT4-fs (loop0): Test dummy encryption mode enabled [ 200.702942][ T8677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 200.723158][ T8677] ext4 filesystem being mounted at /307/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 200.853676][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 201.608435][ T8707] overlayfs: failed to clone upperpath [ 202.494036][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 202.538363][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 203.451862][ T8781] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 204.469988][ T8797] loop0: detected capacity change from 0 to 32768 [ 204.531626][ T8797] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 204.564894][ T8797] JBD2: Ignoring recovery information on journal [ 204.644116][ T8797] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 204.721141][ T8797] overlayfs: upper fs does not support tmpfile. [ 204.739118][ T8797] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 204.746203][ T8797] overlayfs: failed to set xattr on upper [ 204.753189][ T8797] overlayfs: ...falling back to index=off,metacopy=off. [ 204.760740][ T8797] overlayfs: upper fs missing required features. [ 204.856418][ T4258] ocfs2: Unmounting device (7,0) on (node local) [ 205.180384][ T8840] loop0: detected capacity change from 0 to 128 [ 205.195551][ T8840] EXT4-fs (loop0): Test dummy encryption mode enabled [ 205.233162][ T8840] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 205.252249][ T8840] ext4 filesystem being mounted at /326/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.433122][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 205.442330][ T8834] loop1: detected capacity change from 0 to 32768 [ 205.524543][ T8834] XFS (loop1): Mounting V5 Filesystem [ 205.565574][ T8859] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1735'. [ 205.595811][ T8862] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 205.646324][ T8834] XFS (loop1): Ending clean mount [ 205.672746][ T8862] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 205.735719][ T8862] Error parsing options; rc = [-22] [ 205.744230][ T8868] loop6: detected capacity change from 0 to 512 [ 205.744853][ T4245] XFS (loop1): Unmounting Filesystem [ 205.880726][ T8868] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 205.916110][ T8875] loop0: detected capacity change from 0 to 512 [ 205.922640][ T8868] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.945351][ T8875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.972663][ T8875] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1745: bad orphan inode 131083 [ 206.029609][ T8875] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 206.135077][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 206.219783][ T4258] EXT4-fs (loop0): unmounting filesystem. [ 206.315587][ T8882] netlink: 'syz.6.1746': attribute type 5 has an invalid length. [ 206.455144][ T4252] Bluetooth: hci3: command 0x0406 tx timeout [ 206.461234][ T4252] Bluetooth: hci2: command 0x0406 tx timeout [ 206.470744][ T8888] ./bus: Can't open blockdev [ 206.713411][ T8907] input: syz0 as /devices/virtual/input/input16 [ 206.939702][ T8917] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1762'. [ 206.947994][ T8919] loop6: detected capacity change from 0 to 512 [ 206.986416][ T8919] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 207.042301][ T8919] EXT4-fs (loop6): 1 orphan inode deleted [ 207.056986][ T8919] EXT4-fs (loop6): 1 truncate cleaned up [ 207.087900][ T8919] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 207.131911][ T8919] EXT4-fs (loop6): shut down requested (0) [ 207.325740][ T8932] loop1: detected capacity change from 0 to 512 [ 207.332951][ T8910] loop0: detected capacity change from 0 to 40427 [ 207.343347][ T8910] F2FS-fs (loop0): invalid crc value [ 207.355277][ T8932] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 207.381737][ T4966] EXT4-fs (loop6): unmounting filesystem. [ 207.405399][ T8910] F2FS-fs (loop0): Found nat_bits in checkpoint [ 207.447361][ T8932] __quota_error: 3 callbacks suppressed [ 207.447378][ T8932] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 207.476119][ T8932] EXT4-fs warning (device loop1): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 207.524710][ T8910] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 207.583930][ T4258] syz-executor: attempt to access beyond end of device [ 207.583930][ T4258] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.632891][ T4245] EXT4-fs (loop1): unmounting filesystem. [ 207.749246][ T8953] loop6: detected capacity change from 0 to 16 [ 207.755203][ T8955] vxcan1: tx address claim with dest, not broadcast [ 207.777370][ T8953] erofs: (device loop6): mounted with root inode @ nid 36. [ 207.914234][ T8959] MPI: mpi too large (187712 bits) [ 207.948608][ T8962] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1780'. [ 208.076655][ T8967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1783'. [ 208.217412][ T8975] loop0: detected capacity change from 0 to 1024 [ 208.251389][ T8977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1787'. [ 208.746687][ T8972] loop6: detected capacity change from 0 to 32768 [ 208.875564][ T8972] XFS (loop6): Mounting V5 Filesystem [ 209.000962][ T8972] XFS (loop6): Ending clean mount [ 209.032456][ T8972] XFS (loop6): Quotacheck needed: Please wait. [ 209.105458][ T8972] XFS (loop6): Quotacheck: Done. [ 209.218559][ T8989] loop1: detected capacity change from 0 to 32768 [ 209.253436][ T4966] XFS (loop6): Unmounting Filesystem [ 209.316391][ T8989] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 209.514711][ T4245] ocfs2: Unmounting device (7,1) on (node local) [ 209.634519][ T9018] netlink: 'syz.5.1803': attribute type 1 has an invalid length. [ 210.148066][ T14] kernel read not supported for file /usbmon9 (pid: 14 comm: kworker/0:1) [ 210.223183][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 210.256432][ T9046] device xfrm1 entered promiscuous mode [ 210.362891][ T9052] loop1: detected capacity change from 0 to 1024 [ 210.371815][ T9052] EXT4-fs: Ignoring removed nobh option [ 210.378039][ T9052] EXT4-fs: Ignoring removed bh option [ 210.384979][ T9052] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.477889][ T9052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 210.687152][ T46] wlan0: Trigger new scan to find an IBSS to join [ 210.696563][ T9064] netlink: 'syz.4.1821': attribute type 32 has an invalid length. [ 210.768984][ T4315] ------------[ cut here ]------------ [ 210.775149][ T4315] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 210.786270][ T4315] WARNING: CPU: 1 PID: 4315 at net/mac80211/rate.c:385 __rate_control_send_low+0x653/0x890 [ 210.796320][ T4315] Modules linked in: [ 210.800275][ T4315] CPU: 1 PID: 4315 Comm: kworker/u4:6 Not tainted 6.1.124-syzkaller #0 [ 210.808555][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.818659][ T4315] Workqueue: events_unbound cfg80211_wiphy_work [ 210.824923][ T4315] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 210.831209][ T4315] Code: 48 8b 14 24 0f 85 db 01 00 00 8b 0a 48 c7 c7 80 14 23 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 3d 01 21 f7 <0f> 0b e9 79 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 210.850863][ T4315] RSP: 0018:ffffc900045273a0 EFLAGS: 00010246 [ 210.856974][ T4315] RAX: 3efafd4c6542fb00 RBX: 000000000000000c RCX: ffff88802713d940 [ 210.864978][ T4315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.872990][ T4315] RBP: ffff88807aa07168 R08: ffffffff8152b84e R09: fffff520008a4dd5 [ 210.881014][ T4315] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000800 [ 210.889032][ T4315] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 210.897047][ T4315] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 210.905995][ T4315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.912623][ T4315] CR2: 00007ffe83674fb8 CR3: 000000006196a000 CR4: 00000000003506e0 [ 210.920695][ T4315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 210.928709][ T4315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 210.936696][ T4315] Call Trace: [ 210.940016][ T4315] [ 210.942958][ T4315] ? __warn+0x15a/0x520 [ 210.947156][ T4315] ? __rate_control_send_low+0x653/0x890 [ 210.952814][ T4315] ? report_bug+0x2af/0x500 [ 210.957364][ T4315] ? __rate_control_send_low+0x653/0x890 [ 210.963020][ T4315] ? handle_bug+0x3d/0x70 [ 210.967389][ T4315] ? exc_invalid_op+0x16/0x40 [ 210.972080][ T4315] ? asm_exc_invalid_op+0x16/0x20 [ 210.977154][ T4315] ? __warn_printk+0x28e/0x350 [ 210.981944][ T4315] ? __rate_control_send_low+0x653/0x890 [ 210.987632][ T4315] ? ieee80211_scan_state_send_probe+0x38b/0x920 [ 210.993988][ T4315] rate_control_send_low+0x1a8/0x770 [ 210.999331][ T4315] rate_control_get_rate+0x20a/0x5d0 [ 211.004648][ T4315] ieee80211_tx_h_rate_ctrl+0xc62/0x19e0 [ 211.010344][ T4315] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 211.016355][ T4315] ? ieee80211_queue_skb+0xd0/0x2300 [ 211.021691][ T4315] invoke_tx_handlers_late+0xb2/0x1910 [ 211.027193][ T4315] ? ieee80211_tx_h_select_key+0x1177/0x16a0 [ 211.033199][ T4315] ? invoke_tx_handlers_early+0xa0d/0x1d30 [ 211.039065][ T4315] ieee80211_tx+0x2df/0x460 [ 211.043589][ T4315] ? ieee80211_skb_resize+0x640/0x640 [ 211.049030][ T4315] ? ieee80211_xmit+0x307/0x3e0 [ 211.053903][ T4315] ? __ieee80211_tx_skb_tid_band+0x49a/0x610 [ 211.059787][ T9071] mmap: syz.5.1823 (9071): VmData 37462016 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 211.072242][ T4315] __ieee80211_tx_skb_tid_band+0x4de/0x610 [ 211.072341][ T4315] ? ieee80211_scan_state_send_probe+0x4b6/0x920 [ 211.072368][ T4315] ieee80211_scan_state_send_probe+0x575/0x920 [ 211.072413][ T4315] ieee80211_scan_work+0x612/0x1d70 [ 211.072466][ T4315] ? ieee80211_can_scan+0x200/0x200 [ 211.072490][ T4315] ? do_raw_spin_unlock+0x137/0x8a0 [ 211.072512][ T4315] ? _raw_spin_unlock_irq+0x1f/0x40 [ 211.072534][ T4315] ? lockdep_hardirqs_on+0x94/0x130 [ 211.072558][ T4315] cfg80211_wiphy_work+0x21a/0x250 [ 211.072584][ T4315] ? process_one_work+0x7a9/0x11d0 [ 211.072604][ T4315] process_one_work+0x8a9/0x11d0 [ 211.072645][ T4315] ? worker_detach_from_pool+0x260/0x260 [ 211.072671][ T4315] ? _raw_spin_lock_irqsave+0x120/0x120 [ 211.072689][ T4315] ? kthread_data+0x4e/0xc0 [ 211.072714][ T4315] ? wq_worker_running+0x97/0x190 [ 211.072731][ T4315] worker_thread+0xa47/0x1200 [ 211.072750][ T4315] ? _raw_spin_unlock+0x40/0x40 [ 211.072769][ T4315] ? release_firmware_map_entry+0x186/0x186 [ 211.168932][ T4315] ? _raw_spin_unlock+0x40/0x40 [ 211.173825][ T4315] kthread+0x28d/0x320 [ 211.177934][ T4315] ? worker_clr_flags+0x190/0x190 [ 211.182973][ T4315] ? kthread_blkcg+0xd0/0xd0 [ 211.187605][ T4315] ret_from_fork+0x1f/0x30 [ 211.192074][ T4315] [ 211.195104][ T4315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 211.202394][ T4315] CPU: 1 PID: 4315 Comm: kworker/u4:6 Not tainted 6.1.124-syzkaller #0 [ 211.210640][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 211.220696][ T4315] Workqueue: events_unbound cfg80211_wiphy_work [ 211.226950][ T4315] Call Trace: [ 211.230226][ T4315] [ 211.233159][ T4315] dump_stack_lvl+0x1e3/0x2cb [ 211.237856][ T4315] ? nf_tcp_handle_invalid+0x642/0x642 [ 211.243324][ T4315] ? panic+0x764/0x764 [ 211.247402][ T4315] ? 0xffffffffa0000960 [ 211.251584][ T4315] ? vscnprintf+0x59/0x80 [ 211.255929][ T4315] panic+0x318/0x764 [ 211.259835][ T4315] ? __warn+0x169/0x520 [ 211.263997][ T4315] ? memcpy_page_flushcache+0xfc/0xfc [ 211.269385][ T4315] ? ret_from_fork+0x1f/0x30 [ 211.273992][ T4315] __warn+0x348/0x520 [ 211.277985][ T4315] ? __rate_control_send_low+0x653/0x890 [ 211.283634][ T4315] report_bug+0x2af/0x500 [ 211.287968][ T4315] ? __rate_control_send_low+0x653/0x890 [ 211.293621][ T4315] handle_bug+0x3d/0x70 [ 211.297785][ T4315] exc_invalid_op+0x16/0x40 [ 211.302300][ T4315] asm_exc_invalid_op+0x16/0x20 [ 211.307172][ T4315] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 211.313415][ T4315] Code: 48 8b 14 24 0f 85 db 01 00 00 8b 0a 48 c7 c7 80 14 23 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 3d 01 21 f7 <0f> 0b e9 79 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 211.333012][ T4315] RSP: 0018:ffffc900045273a0 EFLAGS: 00010246 [ 211.339073][ T4315] RAX: 3efafd4c6542fb00 RBX: 000000000000000c RCX: ffff88802713d940 [ 211.347041][ T4315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.355000][ T4315] RBP: ffff88807aa07168 R08: ffffffff8152b84e R09: fffff520008a4dd5 [ 211.362976][ T4315] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000800 [ 211.370934][ T4315] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 211.378919][ T4315] ? __warn_printk+0x28e/0x350 [ 211.383712][ T4315] ? ieee80211_scan_state_send_probe+0x38b/0x920 [ 211.390040][ T4315] rate_control_send_low+0x1a8/0x770 [ 211.395326][ T4315] rate_control_get_rate+0x20a/0x5d0 [ 211.400618][ T4315] ieee80211_tx_h_rate_ctrl+0xc62/0x19e0 [ 211.406285][ T4315] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 211.412296][ T4315] ? ieee80211_queue_skb+0xd0/0x2300 [ 211.417596][ T4315] invoke_tx_handlers_late+0xb2/0x1910 [ 211.423068][ T4315] ? ieee80211_tx_h_select_key+0x1177/0x16a0 [ 211.429065][ T4315] ? invoke_tx_handlers_early+0xa0d/0x1d30 [ 211.434883][ T4315] ieee80211_tx+0x2df/0x460 [ 211.439386][ T4315] ? ieee80211_skb_resize+0x640/0x640 [ 211.444768][ T4315] ? ieee80211_xmit+0x307/0x3e0 [ 211.449607][ T4315] ? __ieee80211_tx_skb_tid_band+0x49a/0x610 [ 211.455571][ T4315] __ieee80211_tx_skb_tid_band+0x4de/0x610 [ 211.461370][ T4315] ? ieee80211_scan_state_send_probe+0x4b6/0x920 [ 211.467684][ T4315] ieee80211_scan_state_send_probe+0x575/0x920 [ 211.473835][ T4315] ieee80211_scan_work+0x612/0x1d70 [ 211.479062][ T4315] ? ieee80211_can_scan+0x200/0x200 [ 211.484262][ T4315] ? do_raw_spin_unlock+0x137/0x8a0 [ 211.489454][ T4315] ? _raw_spin_unlock_irq+0x1f/0x40 [ 211.494654][ T4315] ? lockdep_hardirqs_on+0x94/0x130 [ 211.499852][ T4315] cfg80211_wiphy_work+0x21a/0x250 [ 211.504976][ T4315] ? process_one_work+0x7a9/0x11d0 [ 211.510075][ T4315] process_one_work+0x8a9/0x11d0 [ 211.515007][ T4315] ? worker_detach_from_pool+0x260/0x260 [ 211.520645][ T4315] ? _raw_spin_lock_irqsave+0x120/0x120 [ 211.526201][ T4315] ? kthread_data+0x4e/0xc0 [ 211.530693][ T4315] ? wq_worker_running+0x97/0x190 [ 211.535700][ T4315] worker_thread+0xa47/0x1200 [ 211.540368][ T4315] ? _raw_spin_unlock+0x40/0x40 [ 211.545218][ T4315] ? release_firmware_map_entry+0x186/0x186 [ 211.551095][ T4315] ? _raw_spin_unlock+0x40/0x40 [ 211.556032][ T4315] kthread+0x28d/0x320 [ 211.560099][ T4315] ? worker_clr_flags+0x190/0x190 [ 211.565139][ T4315] ? kthread_blkcg+0xd0/0xd0 [ 211.569716][ T4315] ret_from_fork+0x1f/0x30 [ 211.574125][ T4315] [ 211.577424][ T4315] Kernel Offset: disabled [ 211.581842][ T4315] Rebooting in 86400 seconds..