last executing test programs: 3m23.272572867s ago: executing program 1 (id=2): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000000)="32871f8816dd4c429153572931e7f524755f1a82", 0x14) 3m23.064489204s ago: executing program 1 (id=8): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x44c, &(0x7f0000000d80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x14a0, &(0x7f0000000740)=ANY=[], 0x1, 0x0, 0x0) 3m22.337094429s ago: executing program 1 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3m19.821988804s ago: executing program 1 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x3c}}, 0x0) 3m19.590273832s ago: executing program 32 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x3c}}, 0x0) 1m31.808306978s ago: executing program 5 (id=1262): sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x20, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x11) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1m31.662843563s ago: executing program 5 (id=1264): r0 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0xb, 0xfffffff3, 0x5, 0x6, 0xdd}) 1m31.47183974s ago: executing program 5 (id=1266): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1m31.103955052s ago: executing program 5 (id=1269): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x6, 0xf, 0x1) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000180)=0xb515, 0x9, 0x1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 1m30.86648133s ago: executing program 5 (id=1272): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) 1m30.669486677s ago: executing program 5 (id=1274): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@part={'part', 0x3d, 0x5}}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$eJzs3U1rXNcdB+DfHY9lywVbSezELQGLGNqmovaMxk3dbuqWUrQIJVDoKgSEPY6Ex0qQJkUJpVXft/0I6UJfoLvsAukiq3bdlbah0L12LvfOHWlsKYoUK5pR/Txw5pxzzz3nnvu/LzN3hJgAz6yFuTQ3UmRh7vX1sr612eltbXYeDstJziVpJM1BlmIlKT5J7mSQ8vVyYT1c8XnbefWzSx9de+vTNwe1Zp2q9RsH9TucjTplNsmZOj+u8e4+9XjFY3t4fRg4GLdHe2wcpftTXrfAJCgG75t7zCQXkpyvPwekvjs0TnZ2x+9IdzkAAAA4pS5tZzvruTjueQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBpUv/+f1GnxrA8m2L4+/9T9bLU5VPt43FPAAAAAAAAAACOwbXtbGc9F4f1R0X1N/9Xqsrl6vVreS9r6WY1N7KexfTTz2raSWZGBppaX+z3V9uH6Dm/b8/5k9lfAAAAAAAAAPg/9fss7P79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJkGRnBlkVbo8LM+k0UxyPslUud5G8q9h+TT7eNwTAAAAgBNwaTvbWc/FYf1RUT3zv1g995/Pe1lJP8vpp5du7lXfBQye+htbm53e1mbnYZn2jvvj/x5pGtWIGXz3sP+Wr1ZrTOd+lqslN3I376SXe2lUPUtXh/PZf16/K+dU/Kh2yJndq/Nyz/9a55NhporI2Z2ItOq5ldF47uBIHPHoPLmldho73/xc/gpifqHOy/3580THfH7k7Hvx4Egk3/vlv5eWeisPlu6vzU3OLn1JT0aiMxKJl56pSLSqSFzZqS/kZ/lF5jKbN7Ka5fwqi+mnm9n8tCot1udz+TpzcKTuPFZ744tmMlUfl8Fd9GhzeqXqezHL+Xneyb10czs/yK3czu3cynxaaY0c4SuHuOobR7vqr3+7Lkwn+UudT4Yyrs+NxHX0njtTtY0u2Y3S88d/b2x+oy6U2/hDnU+GJyPRHonECwdH4m+Pyte13sqD1aXFdw+5vW/VeXkd/Wmi3iXK8+X58mBVtcfPjrLthX3b2lXb5Z22xp62KzttX3SlTtWf4faONF+1vbRvW6dquzrStt/nLQAm3oXvXJia/s/0P6c/nP7j9NL06+d/cu72uZencvYfZ3/YbJ35ZuPl4u/5ML/Zff4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vLX3P3iw2Ot1VxUUFJ7Jwm/3bRr3nQn4qt3sP3z35tr7H3x3+eHi2923uyudW+3Oa7far3W+f/P+cq/bGrzudpga52yB47T7pj/umQAAAAAAAAAAAACHdRL/YDDufQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOt4W5NDdSpN260SrrW5udXpmG5d01m0kaSYpfJ8UnyZ0MUmZGhis+bzuvfnbpo2tvffrm7ljN4fqNg/odzkadMpvkTJ0f13h3n3q8YmcPy4BdHwYOxu1/AQAA//96kwu1") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1m29.469519937s ago: executing program 2 (id=1279): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1m29.072534371s ago: executing program 2 (id=1283): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x12, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m28.022068987s ago: executing program 2 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000000)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) 1m27.817724154s ago: executing program 2 (id=1290): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000380)={[{@autodefrag}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@ssd_spread}, {@discard_async}, {@nodatacow}]}, 0xfe, 0x5122, &(0x7f0000006440)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6) fallocate(r0, 0x10, 0x0, 0x1001f3) 1m26.312535875s ago: executing program 2 (id=1295): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) 1m26.099319482s ago: executing program 2 (id=1296): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 1m15.499271391s ago: executing program 33 (id=1274): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@part={'part', 0x3d, 0x5}}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1m11.028994822s ago: executing program 34 (id=1296): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 3.09404385s ago: executing program 6 (id=2043): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./bus\x00', 0x1004010, &(0x7f0000001040)=ANY=[], 0x11, 0xadc, &(0x7f0000000340)="$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") creat(&(0x7f0000000040)='./file2\x00', 0x8) truncate(&(0x7f0000000080)='./file2\x00', 0x6000) 2.81462332s ago: executing program 3 (id=2047): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x5, 0x10ffff, 0xfffffffd}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000001040)) 2.777316081s ago: executing program 7 (id=2048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.516725169s ago: executing program 3 (id=2050): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d0000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.512597419s ago: executing program 6 (id=2051): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe, 0x3, @loopback, 0x2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) 2.47705334s ago: executing program 7 (id=2052): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) write(r0, &(0x7f0000000040)="240000001a00df0214f9f407000904001f000000ff030002000200000800200001000000", 0x24) 2.201977799s ago: executing program 3 (id=2053): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x4, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x7, 0x9}, {&(0x7f0000000000)=[{0x400, 0x6, 0x1, 0x7f, 0xd}], 0x1, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x4, 0x100000001}}) 2.201578639s ago: executing program 7 (id=2054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000200000a400004803c0001800b00010065787468647200002c0002800500020089000000080003400000000008000440000000470800064000000002080001400000ed120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 2.201522409s ago: executing program 4 (id=2055): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xfba, @ipv4={'\x00', '\xff\xff', @local}, 0x9}]}, &(0x7f0000000100)=0x10) 2.18821446s ago: executing program 0 (id=2056): unshare(0x2040400) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') lseek(r0, 0x0, 0x1) 2.145310121s ago: executing program 6 (id=2057): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x1}, 0xc) 1.959166777s ago: executing program 7 (id=2058): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 1.893942739s ago: executing program 0 (id=2059): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c0000001a00010003000000000000000a000000000000000000000008000500"], 0x2c}}, 0x8800) 1.890060539s ago: executing program 6 (id=2060): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic="21bf0433f1"]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) 1.728095875s ago: executing program 7 (id=2061): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000c00, &(0x7f0000000140)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@nodiscard}, {@errors_continue}, {@errors_continue}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61e2, &(0x7f00000063c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLUauu74D+Jm9ee1AYiCkTmpg45gQkk12bSe+0KaYcG24lUAo9ILtetdmwTe8dgk0kk0DJRJGRRVtw0NbQKjNS0UeeKAVoDygVkiVoH2gL4gKlYeoCiggVYIK2GrO+f//OzM7O7Nrj9dnzvl8pOSXnTkz58yZM7P73c13DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACtbn3t/CcbWZY1/8n/tTXLntf8781TW/PLXnWttxAAAAC4Ur/M//3cDemCg2u4Ucsy//rSb39laWlpKXvP6F+Of3ZpKV0xlWXjm7Isvy566gfvbbQuEzyWTTZGWr4e6bP60T7Xj/W5frzP9RN9rt/U5/rJPtev2AErbC5+H5Pf2c78P7cWuzS7MRvPr9vZ5VaPNTaNjMTf5eQa+W2Wxo9lC9mJbD6bbVu+WLaRL/+1W5vrelMW1zXSsq7tzSPkJ48ejdvQCPt4Z9u6lu8z+tFrsqmf/uTRo39/7tmbu82+u6Ht/ortvGNHczs/Hi4ptrWRbUr7JG7nSMt2bu/ynIy2bWcjv13zvzu387k1bufo8mZuqM7nfDIbyf/7O/l+Gmv9tV7aT9vDZT+7Lcuyi8ub3bnMinVlI9mWtktGlp+fyeKIbN5H81B6YTa2ruP01jUcp805t7P9OO18TcTn/9Zwu7FVtqH1afrRxyZanvdfLF3OcRo1H/Vqr5XOY3DQr5WyHIPxuPhO/qAf73oM7gyP/9HbVz8Gux47XY7B9LhbjsEd/Y7BkYnRfJvTk9DIb7N8DO5qW340X1Mjn8/c3vsYnDl38szM4kc+evfCySPH54/Pn9qza9fsnr179+/fP3Ns4cT8bPHvy9zb5bclG0mvgR1h38XXwCs6lm09VJe+MLHi/fdyX4eTPV6HWzuWHfTrcKzzwTU25gW58pguXhvvau70yUsj2Sqvsfz5ufPKX4fpcbe8DsdaXoddv6d0eR2OreF12FzmzJ1r+5llrOWfbtuw+veCKzsGt7Ycg50/j3Qeg4P+eaQsx+BkOC6+d+fq3wu2h+19fHq9P4+MrjgG08MN7z3NS9LP+5P789HtuLylecV1E9n5xfmz9zxy5Ny5s7uyMDbEi1qOlc7jdUvLY8pWHK8j6z5eDy689PFbuly+Neyrybub/5pc9blqLnPvPb2fq/y7W/f92Xbp7iyMAdvo/dntu3lzf05k2ee++bGHvv7o51676v5s5s2Pz1z5z+Ipl7a8/46v8v4bc/+vivWlu3psdHyseP2Opr0z3vZ+3P5UjeXvXY183c/NrO39eDz8s9Hvxzf2eD/e1rHsoN+PxzsfXHw/bvT7bceV6Xw+J8NxcmK29/txc5ltu9d7TI71fD++LcxG2P+vDEkh5aKWY2e14zata2xsPDyusbiG9uN0T9vy4yGbNdf15O7wQ2HayrUdp3fcViw/2nK7aKOO06mOZQd9nKbffa12nDb6/fbt8nQ+n5PhuLhxT+/jtLnM0/de+Xvn5vifLe+dE/2OwfHRieY2j6eDMH+/z5Y2x2Pwnuxodjo7kc3l107kx1MjX9f0fWt7r5wI/2z0e+W2HsfgHR3LDvoYTN/HVjv2GmMrH/wAdD6fk+G4eOK+3sdgc5nX7Rvsz653hEvSMi0/u3b+fm2133nd0rGbrtaxMha285v7ev9utrnMif3rzZm999Nd4ZLruuynztfvaq+puWxj9tO2sJ3P7l99PzW3p7nMZw+s8Xg6mGXZhQ89kP++N/x95cL5736l7e8u3f6mc+FDD/z4+cf+ZT3bD8Dw+1UxthTf61r+MrWWv/8DAAAAQyHm/pEwE/kfAAAAKiPm/vh/hSfyPwAAAFRGzP1jYSZVyP9/2n+Rba97duFXF7LUzF8K4vVpNzxYLBc7rrPh66mlZc3LH/jS/P/+84W1bd5IlmW/ePBPui6/7cG4XYWpsJ1Pvb798hW+cvea1n344Qtpva399c+H+4+PZ62HQbcK7myWZV+74dP5eqbeeymfTz94OJ8PXXz8seYyzx0ovo63f+ZFxfJ/E8q/B48dabv9M2E//DDM2Td33x/xdl++9Mrt+969vL54u8aO6/OH/cT7ivuNn5PzmceK5eN+Xm37v/6pJ7/cXP6Rl3ff/gsj3bf/yXC/Xwrz5y8plm99Dppfx9t9Imx/XF+83T1f/EbX7X/qk8XyZ95QLHc4zLj+O8LXO9/w7ELr/nqkcaTtcWVvLJaL65/97p/n18f7i/ffuf2Thy617Y/O4+Pp/yjuZ6Zj+Xh5XE/0Tx3rb95P6/EZ1//knx1u28/91v/UQ8+8pHm/neu/q2O5Mx+6M1//8v21f2LT337i013XF7fn4D+eaXs8B98RXsdh/U+8LxyP4fr/e6q4v85PVzj8jvb3n7j857deaHs80Zt+Wqz/qVcfz+emyc1brnve86+/+LLmvsuy72wq7q/f+o//3em27f/CTcX+iNfHjn7n+lcT13/2w9OnTi+eX5hLe/XRG/LPznlLsT1xe28I762dXx86fe7982enZqdms2yquh+hd9m+GOaPi3Gx99JLK95B73w4PJ+3/PXXttz+75+Kl//nu4rLL725+L71irDcZ8LlW8Pzt771r/TErTflr+/G02ELl1Z+XvCV2L7zf/avacHw+Dt/LojH+5kXvz/fD83r8u8b8XV9hdv//bnifr4a9utS+GTmHTctr691+fjZCJfeWbzer3j/hbe5+Lz+Q3i+3/rD4v7jdsXH+/3wc8w3trW/38Xj46sXRjrvP/8Uj4vh/SS7WFwfl4r7+9JzN3XdvPg5JNnFm/Ov/yLdz83repirWfzI4syJhVPnH5k5N794bmbxIx89dPL0+VPnDuWf5XnoA/1uv/z+tCV/f5qb33tvlr9bnS7GVXatt//Mw0fn9s3ePjd/7Mj5Y+cePjN/9vjRxcWj83OLtx85dmz+w/1uvzB3/67dB/bs2z19fGHu/v0HDuw5ML1w6nRzM4qN6mPv7AenT509lN9k8f57D+y67757Z6dPnp6bv3/f7Oz0+X63z783TTdv/cfTZ+dPHDm3cHJ+enHho/P37zqwd+/uvp8GePLMscWpmbPnT82cX5w/O1M8lqlz+cXN7339bk81Lf5X8fNsp0bxQXzZ2+/amz6ftelLH1v1ropFOj5A9NnwWTTfesGZ/Wv5Oub+8TCTKuR/AAAAIBdz/0SYifwPAAAAlRFz/6YwE/kfAAAAKiPm/skw0/8SUJP8X7n+/7YLa1q//r/+f+v+0v+vWf//nWXr/xfvF/r/g3Gl/Xv9/0D/X/9f/1//X/+fAShb/z/m/s1Z5u//AAAAUFEx928JM5H/AQAAoDJi7r8uzET+BwAAgMqIuf95YSY1yf/6//r/+v/6//r/3dev/z+c9P970//vQ/9/JqtX///iILf/GvT/N7d+of9PGZWt/x9z//PDTGqS/wEAAKAOYu6/PsxE/gcAAIDKiLn/hjAT+R8AAAAqI+b+rWEmNcn/+v9X1P9PnSv9//bt1/9vp/8fjgf9f/3/DaD/35v+fx/6/87/P1z9/zb6/5RR2fr/Mfe/IMykJvkfAAAA6iDm/heGmcj/AAAAUD5jl3ezmPtfFGayIv9f5goAAACAay7m/huzjiJ4Tf7+r//v/P/6//r/+v/d17/2/v9opv9fHvr/ven/96H/r/+v/6//z0CVrf+f5/5sMntxmElN8j8AAADUQcz9N4WZyP8AAABQGTH3/1qYifwPAAAAlRFz/7Ywk5rkf/3/yvT/f9b61On/6//3Wr/+v/P/V5n+f2/6/33o/+v/6//r/zNQZev/x9x/c5hJTfI/AAAA1EHM/beEmcj/AAAAUBkx9/96mIn8DwAAAJURc//2MJOa5H/9/5L3/2Nz1Pn/9f/1/0vZ/5/U/y8d/f/e9P/70P/X/9f/1/9noMrW/4+5/yVhJjXJ/wAAAFAHMfe/NMxE/gcAAIDKiLn/ZWEm8j8AAABURsz9U2EmNcn/6+n/Ny7q/6/mKp//f2IN5/9vo/+v/99r/fr/zv9fZfr/ven/96H/r/+v/6//z0CVrf8fc/+tYSY1yf8AAABQBzH37wgzkf8BAACgMmLuvy3MRP4HAACAyoi5f2eYSU3yv/P/D0X/P9P/1//X/9f/1/9fG/3/3vT/+9D/1//X/9f/Z6DK1v+Puf/lYSY1yf8AAABQBzH33x5mIv8DAABAZcTc/4owE/kfAAAAKiPm/jvCTGqS//X/9f/1//X/9f+7r1//fzjp//em/9+H/r/+v/6//j8DVbb+f8z9rwwzqUn+BwAAgDqIuf/OMBP5HwAAACoj5v67wkzkfwAAAKiMmPunw0xqkv/1//X/9f/1//X/u69f/3846f/3pv/fh/6//r/+v/4/A1W2/n/M/XeHmdQk/wMAAEAdxNx/T5iJ/A8AAACVEXP/TJiJ/A8AAACVEXP/bJhJTfK//r/+v/6//v+6+v8vW75f/f+C/n+56P/31t7/73y1tdD/1//X/79G/f/x6vX/f97xRkKtlK3/H3P/rjCTmuR/AAAAqIOY+3eHmcj/AAAAUBkx9+8JM5H/AQAAoDJi7r83zKQm+V//X/9f/1//3/n/u69f/3846f/3Nvjz/8eHqP+v/6//7/z/zv/PSmXr/8fcf1+YSU3yPwAAANRBzP17w0zkfwAAAKiMmPv3hZnI/wAAAFAZMffvDzOpSf7X/9f/1//X/9f/775+/f/hpP/f2+D7/87/r/+/TP//2vb/m8eW/j9lU7b+f8z9B8JMapL/AQAAoA5i7n9VmIn8DwAAAJURc/9vhJnI/wAAAFAZMff/ZphJTfJ/z/7/qP6//r/+v/7/te//T+j/6/+vg/5/b/r/fej/6/8Pcf/f+f8po7L1/2Puvz/MpCb5HwAAAOog5v7fCjOR/wEAAKAyYu5/dZiJ/A8AAACVEXP/wTCTmuR/5//foP5/vFD/X/9f/9/5//X/r6qO/v266f8H+v/6//r/+v/6/wxA2fr/Mfe/JsykJvkfAAAA6iDm/gfCTOR/AAAAqIyY+18bZiL/AwAAQGXE3P+6MJOa5H/9f+f/v/b9//G2bdf/X76d/n9B/1//fz2c/783/f8+9P/1//X/9f8ZqLL1/2Puf32YSU3yPwAAANRBzP1vCDOR/wEAAKAyYu5/Y5iJ/A8AAACVEXP/m8JMapL/9f/1/699/9/5//X/C/r/+v+DoP/fm/5/H/r/+v/6//r/DFTZ+v8x9/92mElN8j8AAADUQcz9D4aZyP8AAABQGTH3vznMRP4HAACAyoi5/y1hJjXJ//r/+v/6//r/+v/d16//P5z0/3sbsv7/L68Pl+v/F/T/y7396+3/j3V8fVX6/z9Yrf+/tKnz9vr/XA1l6//H3P/WMJOa5H8AAACog5j73xZmIv8DAABAZcTc//YwE/kfAAAAKiPm/t8JM6lJ/tf/b27HcntZ/1//P79A/1//X/9/aOn/9zZk/X/n/++g/1/u7Xf+f/1/Vipb/z/m/neEmdQk/wMAAEAdxNz/UJiJ/A8AAACVEXP/O8NM5H8AAACojJj73xVmUpP8r//v/P/6//r/+v/d16//P5z0/3vT/+9D/1//v2z9///W/2e4la3/H3P/w2EmNcn/AAAAUAcx9787zET+BwAAgMqIuf93w0zkfwAAAKiMmPvfE2ZSk/yv/z8s/f8p/f919v8nwmX6//r/+v/1ov/fm/5/H/r/+v9l6/87/z9Drmz9/5j73xtmsvb8P7nmJQEAAIBrIub+3wszqcnf/wEAAKAOYu7//TAT+R8AAAAqI+b+PwgzqUn+1/8flv6/8/9nzv+v/9/xePT/9f+72bj+f3zn0f/X/9f/j/T/9f/1/+lUtv5/zP1/GGZSk/wPAAAAdRBz//vCTOR/AAAAGArd/p/sTjH3Hwozkf8BAACgMmLuPxxmUpP8r/+v/6//X9L+/1/t+Lfvfftth3fp/+v/6/+vy4ae/7/54nf+f/1//f9E/1//X/+fTmXr/8fcfyTMZDn4vcUJ/gEAAGC4xdz/R2EmNfn7PwAAANRBzP1Hw0zkfwAAAKiMmPvnwkxqkv/1//X/9f9L2v8f4vP/x/0xTP3/6U1D1P+Pb7r6/11taP//3cs9cf3/9fb/J7pe2tn/b+j/t9H/X/f2fyvLMv1//X+uobL1/2Punw8zqUn+BwAAgDoIuX/kWDGXr5D/AQAAoDJi7j8eZiL/AwAAQGXE3P/+MJOa5H/9f/1//X/9f+f/777+0vb/nf+/J/3/3srT/+/O+f/1/4d5+/X/9f9ZqWz9/5j7F8JMapL/AQAAoA5i7v9AmIn8DwAAAJURc/8Hw0zkfwAAAKiMmPtPhJnUJP/r/+v/6//r/+v/d1+//v9w0v/vTf+/D/1//X/9f/1/Bqps/f+Y+0+GmdQk/wMAAP/P3n18WV6ndRy/hdXSfdi4c+FC9/4JLGStf4ALNi70HI8LUDEnGnPEnANmMWAARUyYE0xihsnDzDA5ByYzM6fnQD3P0xV+9btV3beqfvf7vF4Ln6GG9haePuCH5s0X6CB3/11xi/0PAAAAw8jdf3fcYv8DAADAMHL3f3Pc0mT/6//1/8P2/1+l/z/u8/X/+v+R6f/n6f/X0P/r//X/+n82amn9f+7+b4lbmux/AAAA6CB3/7fGLfY/AAAADCN3/z1xi/0PAAAAw8jd/21xS5P9f6j/31n17P8z49X/j9T/e///2M/X/+v/R3a+/f99L/yZT/+v/9f/B/2//l//z2FL6/9z93973NJk/wMAAEAHufu/I26x/wEAAGAYufu/M26x/wEAAGAYufu/K25psv+9/+/9f/2//l//P/35+v/t5P3/eZ36/3uevu2u5x79ssdO8/n6f/2//l//z2Ytrf/P3f/dcUuT/Q8AAAAd5O7/nrjF/gcAAIBh5O7/3rjF/gcAAIAtdGXyq7n7vy9uabL/9f/6f/1/9P+X9f/6f/3/CPT/8zr1/zfy+fp//b/+X//PZi2t/8/d//1xS5P9DwAAAB3k7v+BuMX+BwAAgOWa+gexZ+Tuvzdusf8BAABgGLn7r8YtTfa//v/s+//P6/+3o//3/r/+X/8/BP3/PP3/Gvp//b/+X//PRi2t/8/df1/c0mT/AwAAQAe5+38wbrH/AQAAYBi5+38obrH/AQAAYBi5+384bmmy//X/3v/X/+v/9f/Tn6//3076/3n6/zX0/zfbz1/S/+v/9f/sd8r+//mZP21vpP/P3f8jcUuT/Q8AAAAd5O7/0bjF/gcAAIBh5O7/sbjF/gcAAIBh5O7/8bilyf7X/+v/9f/6/xvu/4/+1HuR/n+a/v986P/nLab/39md/LL+f+v7f+//6//1/xywtPf/c/f/RNzSZP8DAABAB7n7fzJumdn/p/6b+QAAAMCFyt3/U3GLX/8HAACArZfVWe7+n45bmux//b/+X/+v//f+//Tnz/X/j+37/vT/y6L/n7eY/v8Y+n/9/zZ///p//T9HLa3/z93/M3FLk/0PAAAAHeTuvz9usf8BAABgGLn7fzZusf8BAABgGLn7fy5uabL/p/v/6/+9/v9k9P8Hv3/9//TPj031//m/Uf8/2//f4f3/nvT/8/T/a+j/9f/6/+P6/yvrfrz+nylL6/9z9/983NJk/wMAAEAHuft/IW6x/wEAAGAYuft/MW6x/wEAAGAYuft/KW5psv+9/6//1/9vX//v/f89F/n+/+rc+/9d/f8J6f/n6f/X0P/r//X/8+//z/xbAPT/TFla/5+7/5fjlib7HwAAADrI3f8rcYv9DwAAANth/z87cPgfKA25+381brH/AQAAYBi5+38tbhln/8++1an/1//r//X/+v/pz19W/+/9/5PS/8/T/6+h/z+Lfn53sP7/geN+/BL6/3vPuv+fof9nyoH+//HrX7+o/j93/6/HLePsfwAAAGgvd/9vxC32PwAAAAwjd/9vxi32PwAAAAwjd/9vxS1N9v+Z9/8z//YB/b/+X/+v/9f/6/83Tf8/T/+/hv7f+//e/9f/s1EH+v99Lqr/z93/23FLk/0PAAAAHeTu/524xf4HAACAYeTufyBusf8BAABgGLn7fzduabL/vf+v/9f/6//1/9Ofr//fTjfV39+i/y/6f/2//l//r/9nA5bW/+fu/724pcn+BwAAgA5y9/9+3GL/AwAAwDBy9/9B3GL/AwAAwDBy9/9h3NJk/+v/z7b/z6/r//X/K/2//l//fy7avv+/M/VXoqOO6f+f/MarX3PwK/p//b/+X/+v/+eEvmTmv1tE/3/t+v93mbv/j+KWJvsfAAAAOsjd/8dxi/0PAAAAw8jd/ydxi/0PAAAAw8jd/2Dccsr9P9c8LJn+3/v/+n/9/77+/9JK/6//33Jt+/8T8v7/Gvp//f+W9v/XbtX/s0yL6P/3/Xbu/j+NW/z6PwAAAAwjd/+fxS32PwAAAAwjd/+fxy32PwAAAAwjd/9fxC1N9r/+X/+v/9f/e/9/+vP1/9tJ/z9P/7/GNvX/D95E/787/eWL7udv1kV//97/1/9z1NL6/9z9D8UtTfY/AAAAdJC7/y/jFvsfAAAAhpG7/6/iFvsfAAAAhpG7/6/jlib7X//fsv+/pP/X/+v/9f+j0v/P0/+vVquHZ76Bqf7/2q3L7P+9/7+471//r//nqKX1/7n7/yZuabL/AQAAoIPc/Q/HLfY/AAAADCN3/yNxi/0PAAAAw8jd/7dxS5P9r/9v2f97/1//r//X/w9L/z9P/7/GNr3/r/9f3Pev/9f/c9TS+v/c/X8XtzTZ/wAAANBB7v5H4xb7HwAAAIaRu//v4xb7HwAAAIaRu/+xuKXJ/tf/6//1//p//f/051f/f2Xvt/X/2+Hs+v+V/l//r/9fQ/+v/9f/c9jS+v/c/f8QtzTZ/wAAANBB7v5/jFvsfwAAABhG7v5/ilvsfwAAABhG7v5/jlua7H/9v/5f/6//1/9Pf773/7eT9//n6f/X0P/r//X/+n82arr/v/fC+v/c/f8StzTZ/wAAANBB7v7H4xb7HwAAAIaRu/9f4xb7HwAAAIaRu//f4pYm+1//r/8/2P+vVvp//b/+f8859P+XV/r/jdP/z9P/r6H/H7P/v2U1UP9/5dgfr/9niZb2/n/u/n+PW5rsfwAAAOggd/9/xC32PwAAAAwjd/9/xi32PwAAAAwjd/9/xS1N9r/+X//v/X/9v/5/+vO9/7+d9P/z9P9r6P/H7P+9/6//58Isrf/P3f/fcUuT/Q8AAAAd5O7/n7jF/gcAAIBh5O7/37jF/gcAAIBh5O7/v7ilyf7X/+v/9f/6f/3/9Ofr/7eT/n/exvv/L16tVvp//X/Q/+v/9f8ctrT+P3f//8ctTfY/AAAAdJC7/4m4xf4HAACAYeTufzJusf8BAABgGLn7XxK3NNn/+n/9v/5/O/v/y/p//b/+f9JS+v/bb//qp1r0/97/1//vo//X/+v/OWxp/X/u/pfGLU32PwAAAHSQu/9lcYv9DwAAAMPI3f/yuMX+BwAAgGHk7n9F3NJk/x/t/y+t9grVPVP9fzRq+v999P8Hv3/9//TPD+//6//1/2dvKf1/m/f/9f/6/330/6fo/7/i6I/X/zOipfX/ufufilua7H8AAADoIHf/K+MW+x8AAACGkbv/VXGL/Q8AAADDyN3/dNzSZP97/1//r//X/+v/pz9f/7+d9P/z9P9r6P/1/97/v/vrv0j/z+Ysrf/P3f/quKXJ/gcAAIAOcve/Jm6x/wEAAGAYuftfG7fY/wAAADCM3P2vi1ua7H/9v/5f/6//1/9Pf77+fzvp/+fp/8vhP7Q9ffr/y1NfvOh+/mZd9Pc/TP/v/X82aGn9f+7+18ctTfY/AAAAdJC7/w1xi/0PAAAAw8jd/8a4xf4HAACAYeTuf1Pc0mT/6//1/+P3/1+n/z/0+fp//f/I9P/5V/Rp+v81+vT/ky66n9/271//r//nqKX1/7n7n4lbmux/AAAA6CB3/5vjFvsfAAAAhpG7/y1xi/0PAAAAw8jd/9a4pcn+1//36v93Vh37f+//6//1/53o/+fp/9fQ/+v/9f/6fzZqaf1/7v5nd3Zb7n8AAADYVl/7ld/0zEl/32df/J+XV2+LW+5YXTvhL2MDAAAAC/fC7t/ZXa3e/uJv+fV/AAAAGFHu/nfELU32v/6/V//f8/1//b/+X//fif5/nv5/Df2//l//r/9no5bW/+fuf2fcsm/47Z76jxIAAABYktz974pbmvz6PwAAAHSQu//dccuR/e9fBwgAAADbKnf/e+KWJr/+r/9feP+/OqP+P34//f8e/b/+f+rz9f/bSf8/7yb7/2s7+n/9/wz9v/5f/89hS+v/c/e/N25psv8BAABgUAf+jkLu/vfFLfY/AAAADCN3//vjFvsfAAAAhpG7/wNxS5P9r/8/9/4/U/UzfP//Sv0n7/837//vvzz5+Qf6/5X+X/8/Fv3/PO//r6H/H6X/v1X/r/9nGZbW/+fu/2Dc0mT/AwAAQAe5+z8Ut9j/AAAAMIzc/R+OW+x/AAAAGEbu/o/ELU32v/5/4e//31D/f4L3//X/Pfr/Yz5/nPf/v/S2q0/c+Q2PPKT/57rz7P/z54L+X/+v/9+zoP7f+//6fxZi8/3/7oEvnrb/z93/0bilyf4HAACADnL3Pxe32P8AAAAwjNz9H4tb7H8AAAAYRu7+j8ctTfa//l//v5T+P/9vfQH9/9Ub7v+vrFarC+n/synu3v97/1//f5T3/+fp/9fQ/+v/9f/6fzZq8/3/wS+etv/P3f+JuKXJ/gcAAIAOcvd/Mm7J/b9z6r91DwAAACxM7v5PxS1+/R8AAACGkbv/03FLk/2v/9f/L6X/T97/v/7jxnr//86KU3v2/19e/0n/f7b0//P0/2vo//X/+n/9Pxu1tP4/d/9n4pYm+x8AAAA6yN3/fNxi/wMAAMAwcvd/Nm6x/wEAAGAYufs/F7c02f/6/1H7/yzi9f/6/6X0/97/9/7/+dD/z9P/r6H/1//r//X/bNTS+v/c/V8IAAD//y1gdxA=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1.709981555s ago: executing program 3 (id=2062): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0xffffffffffffff12) 1.704337385s ago: executing program 0 (id=2063): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x0, 0xfffffffd}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 1.5480676s ago: executing program 6 (id=2064): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, 0x0) 1.499009732s ago: executing program 0 (id=2065): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = socket(0x1d, 0x2, 0x6) bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e20, @remote}, 0x10) 1.413959695s ago: executing program 3 (id=2066): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="00800000000000000045a9000000a979035e6ab2b7de8680", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3f) 1.317609858s ago: executing program 0 (id=2067): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETS2(r0, 0x5432, 0x0) 1.265033999s ago: executing program 3 (id=2068): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x24, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x9, 0x10, 0x7, 0x0, 0x3, {[@sack={0x5, 0xa, [0xfffffffe, 0x9]}, @sack={0x5, 0x6, [0x1000]}]}}}}}}}}, 0x0) 1.182321492s ago: executing program 4 (id=2069): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) 868.200673ms ago: executing program 4 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) 867.566393ms ago: executing program 0 (id=2080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 546.448353ms ago: executing program 4 (id=2071): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='securityfs\x00', 0x8, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x14020, 0x0) 344.984439ms ago: executing program 4 (id=2072): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6, 0x0, 0x0, 0xfffff24e}, 0x2e) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, 0x52, 0x1, 0x10000000, 0x4, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) 68.977538ms ago: executing program 6 (id=2073): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x1, 0x1}, 0x1, 0xa0, 0x0, 0x0, 0xa7c0, 0x6, 0x0, 0x8497811, 0x1, 0x0}) 13.82024ms ago: executing program 7 (id=2074): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setresuid(0x0, 0xee01, 0x0) utimensat(r0, 0x0, &(0x7f0000000180), 0x0) 0s ago: executing program 4 (id=2075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a09040000000000ec00000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) kernel console output (not intermixed with test programs): n invalid length. [ 177.518222][ T7294] netlink: 'syz.5.1067': attribute type 29 has an invalid length. [ 177.541200][ T7299] netlink: 'syz.5.1067': attribute type 29 has an invalid length. [ 177.767450][ T7306] loop5: detected capacity change from 0 to 1024 [ 177.771434][ T7308] loop2: detected capacity change from 0 to 8 [ 177.949005][ T7310] loop4: detected capacity change from 0 to 512 [ 177.977762][ T7310] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1075: iget: bad i_size value: 38620345925642 [ 178.027081][ T7310] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1075: couldn't read orphan inode 15 (err -117) [ 178.078266][ T7310] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.250734][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 178.277108][ T7318] loop3: detected capacity change from 0 to 4096 [ 178.296338][ T7320] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 178.309798][ T7320] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 178.382497][ T7320] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 178.391853][ T7324] loop4: detected capacity change from 0 to 512 [ 178.399225][ T7320] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 178.411399][ T7325] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.441111][ T7320] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 178.455862][ T7320] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 178.472012][ T7320] comedi comedi3: 8255: I/O port conflict (0x400000a,4) [ 178.496977][ T7320] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 178.533060][ T7320] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 178.705224][ T7332] netlink: 182 bytes leftover after parsing attributes in process `syz.4.1084'. [ 178.902667][ T6625] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 179.058466][ T7347] loop2: detected capacity change from 0 to 256 [ 179.067409][ T7347] exfat: Deprecated parameter 'namecase' [ 179.102163][ T7347] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 179.102733][ T6625] usb 4-1: Using ep0 maxpacket: 16 [ 179.119054][ T7347] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 179.125057][ T6625] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.170930][ T6625] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.188006][ T6625] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.194951][ T6625] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 179.206460][ T6625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.224859][ T6625] usb 4-1: config 0 descriptor?? [ 179.662046][ T6625] mcp2221 0003:04D8:00DD.0009: item fetching failed at offset 4/5 [ 179.671880][ T6625] mcp2221 0003:04D8:00DD.0009: can't parse reports [ 179.684621][ T6625] mcp2221: probe of 0003:04D8:00DD.0009 failed with error -22 [ 179.746376][ T7364] loop5: detected capacity change from 0 to 40427 [ 179.773278][ T7364] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 179.781448][ T7364] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 179.792864][ T7364] F2FS-fs (loop5): invalid crc value [ 179.808979][ T7364] F2FS-fs (loop5): Found nat_bits in checkpoint [ 179.868916][ T6625] usb 4-1: USB disconnect, device number 5 [ 179.884253][ T7364] F2FS-fs (loop5): Start checkpoint disabled! [ 179.930210][ T7364] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 180.077039][ T4603] kworker/u4:7: attempt to access beyond end of device [ 180.077039][ T4603] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 181.291028][ T7411] loop5: detected capacity change from 0 to 1024 [ 181.410573][ T7411] hfsplus: xattr searching failed [ 181.682343][ T2186] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 181.884062][ T2186] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 181.930630][ T2186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.950443][ T2186] usb 4-1: config 0 descriptor?? [ 182.099405][ T7445] loop0: detected capacity change from 0 to 1024 [ 182.360420][ T7455] loop2: detected capacity change from 0 to 512 [ 182.386669][ T2186] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 182.419999][ T7455] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1130: iget: bad i_size value: 38620345925642 [ 182.442557][ T2186] [drm] Initialized udl on minor 2 [ 182.470509][ T7455] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1130: couldn't read orphan inode 15 (err -117) [ 182.493355][ T7450] loop5: detected capacity change from 0 to 4096 [ 182.553466][ T7461] netlink: 182 bytes leftover after parsing attributes in process `syz.0.1132'. [ 182.577270][ T2186] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 182.594219][ T2186] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 182.612438][ T7455] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.640906][ T2186] usb 4-1: USB disconnect, device number 6 [ 182.647288][ T7464] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.674620][ T4973] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 182.716399][ T4973] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 182.745105][ T4973] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 182.868779][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 183.208743][ T7478] loop4: detected capacity change from 0 to 256 [ 183.265280][ T7478] exfat: Deprecated parameter 'namecase' [ 183.328765][ T7478] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 183.329473][ T7485] loop3: detected capacity change from 0 to 1024 [ 183.408967][ T7478] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 183.492975][ T7488] netlink: 'syz.0.1154': attribute type 29 has an invalid length. [ 183.558449][ T7488] netlink: 'syz.0.1154': attribute type 29 has an invalid length. [ 183.628085][ T7488] netlink: 'syz.0.1154': attribute type 29 has an invalid length. [ 184.126960][ T7511] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 184.135880][ T7511] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 184.158793][ T7511] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 184.176436][ T7511] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 184.198347][ T7511] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 184.232335][ T7511] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 184.252828][ T7511] comedi comedi3: 8255: I/O port conflict (0x400000a,4) [ 184.285140][ T7511] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 184.324342][ T7511] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 185.314068][ T7572] loop5: detected capacity change from 0 to 16 [ 185.331355][ T7572] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 185.429206][ T7579] loop2: detected capacity change from 0 to 8 [ 185.588487][ T7579] SQUASHFS error: Failed to read block 0x2d0: -5 [ 185.604582][ T7579] SQUASHFS error: Unable to read metadata cache entry [2ce] [ 185.623667][ T7579] SQUASHFS error: Unable to read directory block [2ce:0] [ 186.304784][ T7606] loop5: detected capacity change from 0 to 1024 [ 186.741839][ T7618] loop3: detected capacity change from 0 to 256 [ 186.797442][ T7618] exfat: Deprecated parameter 'namecase' [ 186.877959][ T7618] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 187.146016][ T7591] loop2: detected capacity change from 0 to 40427 [ 187.211954][ T7591] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 187.238096][ T7591] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 187.264212][ T7591] F2FS-fs (loop2): invalid crc value [ 187.290004][ T7591] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.561698][ T7591] F2FS-fs (loop2): Start checkpoint disabled! [ 187.629791][ T7591] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 188.072722][ T4603] kworker/u4:7: attempt to access beyond end of device [ 188.072722][ T4603] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 188.232856][ T7658] loop0: detected capacity change from 0 to 64 [ 188.319909][ T7626] loop4: detected capacity change from 0 to 40427 [ 188.394704][ T7626] F2FS-fs (loop4): invalid crc value [ 188.467584][ T7626] F2FS-fs (loop4): Found nat_bits in checkpoint [ 188.592864][ T7633] loop3: detected capacity change from 0 to 40427 [ 188.653859][ T7633] F2FS-fs (loop3): invalid crc value [ 188.711484][ T7633] F2FS-fs (loop3): Found nat_bits in checkpoint [ 188.720509][ T7626] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 188.931054][ T4273] syz-executor: attempt to access beyond end of device [ 188.931054][ T4273] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.004483][ T7633] F2FS-fs (loop3): Start checkpoint disabled! [ 189.078779][ T7633] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 189.402075][ T4302] kworker/u4:6: attempt to access beyond end of device [ 189.402075][ T4302] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 189.445117][ T4302] kworker/u4:6: attempt to access beyond end of device [ 189.445117][ T4302] loop3: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 190.210413][ T7716] xt_l2tp: v2 sid > 0xffff: 1114112 [ 190.279230][ T7713] loop4: detected capacity change from 0 to 8192 [ 190.347291][ T7713] loop4: p1 < > p3 < p5 > p4 [ 190.362388][ T7713] loop4: partition table partially beyond EOD, truncated [ 190.395669][ T7713] loop4: p1 start 4294967040 is beyond EOD, truncated [ 190.410187][ T7720] loop2: detected capacity change from 0 to 1024 [ 190.588616][ T7724] loop3: detected capacity change from 0 to 256 [ 190.664504][ T7724] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 190.808258][ T7730] process 'syz.2.1237' launched '/dev/fd/3' with NULL argv: empty string added [ 190.983729][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 190.996840][ T4545] udevd[4545]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 191.025179][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 191.068759][ T7738] loop2: detected capacity change from 0 to 128 [ 191.156339][ T7738] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 191.310745][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 191.394612][ T7752] loop5: detected capacity change from 0 to 64 [ 192.201781][ T7778] netlink: 71 bytes leftover after parsing attributes in process `syz.5.1260'. [ 192.242761][ T6622] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 192.329914][ T7764] loop3: detected capacity change from 0 to 32768 [ 192.371403][ T7764] (syz.3.1253,7764,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 192.433852][ T7760] loop0: detected capacity change from 0 to 32768 [ 192.434558][ T6622] usb 3-1: too many configurations: 70, using maximum allowed: 8 [ 192.471800][ T7764] (syz.3.1253,7764,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 192.494115][ T6622] usb 3-1: config index 0 descriptor too short (expected 65505, got 72) [ 192.520093][ T6622] usb 3-1: config index 1 descriptor too short (expected 65505, got 72) [ 192.553374][ T6622] usb 3-1: config index 2 descriptor too short (expected 65505, got 72) [ 192.596806][ T7764] JBD2: Ignoring recovery information on journal [ 192.623784][ T6622] usb 3-1: config index 3 descriptor too short (expected 65505, got 72) [ 192.693576][ T7764] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 192.713774][ T6622] usb 3-1: config index 4 descriptor too short (expected 65505, got 72) [ 192.760320][ T6622] usb 3-1: config index 5 descriptor too short (expected 65505, got 72) [ 192.812734][ T6622] usb 3-1: config index 6 descriptor too short (expected 65505, got 72) [ 192.833946][ T6622] usb 3-1: config index 7 descriptor too short (expected 65505, got 72) [ 192.852964][ T6622] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 192.854000][ T4275] ocfs2: Unmounting device (7,3) on (node local) [ 192.879271][ T6622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.889309][ T7792] xt_l2tp: v2 sid > 0xffff: 1114112 [ 192.892732][ T6622] usb 3-1: Product: syz [ 192.898842][ T6622] usb 3-1: Manufacturer: syz [ 192.931595][ T6622] usb 3-1: SerialNumber: syz [ 192.976413][ T6622] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 193.144758][ T6622] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 193.492442][ T4973] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 193.673912][ T4973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.693560][ T4973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.713459][ T4973] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 193.735339][ T4973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.738822][ T7812] syz.0.1277: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 193.766001][ T7812] CPU: 1 PID: 7812 Comm: syz.0.1277 Not tainted syzkaller #0 [ 193.770270][ T4973] usb 4-1: config 0 descriptor?? [ 193.773392][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.773416][ T7812] Call Trace: [ 193.773424][ T7812] [ 193.773432][ T7812] dump_stack_lvl+0x188/0x24e [ 193.773460][ T7812] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 193.773484][ T7812] ? show_regs_print_info+0x12/0x12 [ 193.811072][ T7812] ? load_image+0x410/0x410 [ 193.815618][ T7812] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 193.822063][ T7812] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 193.828594][ T7812] warn_alloc+0x242/0x330 [ 193.832961][ T7812] ? zone_watermark_ok_safe+0x270/0x270 [ 193.838557][ T7812] ? __mutex_trylock_common+0x15c/0x260 [ 193.844138][ T7812] __vmalloc_node_range+0x11e/0x1380 [ 193.849451][ T7812] ? rcu_is_watching+0x11/0xa0 [ 193.854249][ T7812] ? trace_contention_end+0x5f/0x170 [ 193.859576][ T7812] ? __mutex_lock+0x1ab/0xae0 [ 193.864280][ T7812] ? __kmem_cache_free+0xb6/0x200 [ 193.869343][ T7812] ? tomoyo_path_number_perm+0x205/0x650 [ 193.875009][ T7812] ? tomoyo_path_number_perm+0x5a4/0x650 [ 193.880673][ T7812] ? dvb_dvr_do_ioctl+0x75/0x220 [ 193.885636][ T7812] ? tomoyo_path_number_perm+0x205/0x650 [ 193.891303][ T7812] ? free_vm_area+0x50/0x50 [ 193.895844][ T7812] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 193.900898][ T7812] vmalloc+0x75/0x80 [ 193.904825][ T7812] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 193.909872][ T7812] dvb_dvr_do_ioctl+0x12a/0x220 [ 193.914841][ T7812] dvb_usercopy+0x191/0x2b0 [ 193.919463][ T7812] ? dvb_dvr_release+0x3d0/0x3d0 [ 193.924423][ T7812] ? dvb_generic_ioctl+0xb0/0xb0 [ 193.929403][ T7812] ? dvb_dvr_poll+0x230/0x230 [ 193.934105][ T7812] dvb_dvr_ioctl+0x25/0x30 [ 193.938547][ T7812] __se_sys_ioctl+0xfa/0x170 [ 193.943174][ T7812] do_syscall_64+0x4c/0xa0 [ 193.947610][ T7812] ? clear_bhb_loop+0x60/0xb0 [ 193.952315][ T7812] ? clear_bhb_loop+0x60/0xb0 [ 193.957012][ T7812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.962953][ T7812] RIP: 0033:0x7f745d19ce59 [ 193.967407][ T7812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.987040][ T7812] RSP: 002b:00007f745dfaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.995494][ T7812] RAX: ffffffffffffffda RBX: 00007f745d415fa0 RCX: 00007f745d19ce59 [ 194.003492][ T7812] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 194.011487][ T7812] RBP: 00007f745d232e6f R08: 0000000000000000 R09: 0000000000000000 [ 194.019484][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.027482][ T7812] R13: 00007f745d416038 R14: 00007f745d415fa0 R15: 00007ffe8fdf6eb8 [ 194.035490][ T7812] [ 194.067877][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.076775][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.086789][ T7812] Mem-Info: [ 194.087199][ T5238] usb 3-1: USB disconnect, device number 6 [ 194.089924][ T7812] active_anon:6801 inactive_anon:0 isolated_anon:0 [ 194.089924][ T7812] active_file:11460 inactive_file:40051 isolated_file:0 [ 194.089924][ T7812] unevictable:768 dirty:197 writeback:0 [ 194.089924][ T7812] slab_reclaimable:21462 slab_unreclaimable:97959 [ 194.089924][ T7812] mapped:30040 shmem:1372 pagetables:736 [ 194.089924][ T7812] sec_pagetables:0 bounce:0 [ 194.089924][ T7812] kernel_misc_reclaimable:0 [ 194.089924][ T7812] free:1322856 free_pcp:11325 free_cma:0 [ 194.158674][ T7812] Node 0 active_anon:27204kB inactive_anon:0kB active_file:45816kB inactive_file:160004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120144kB dirty:788kB writeback:0kB shmem:3952kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11404kB pagetables:2944kB sec_pagetables:0kB all_unreclaimable? no [ 194.193635][ T4973] hid (null): unknown global tag 0xc [ 194.198977][ T4973] hid (null): report_id 0 is invalid [ 194.204393][ T7812] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 194.207271][ T4973] itetech 0003:06CB:73F6.000A: unknown global tag 0xc [ 194.238300][ T4285] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 194.242566][ T4973] itetech 0003:06CB:73F6.000A: item 0 2 1 12 parsing failed [ 194.250494][ T4285] Bluetooth: hci0: Injecting HCI hardware error event [ 194.258292][ T7812] Node 0 [ 194.268078][ T4288] Bluetooth: hci0: hardware error 0x00 [ 194.280770][ T7812] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.289085][ T4973] itetech: probe of 0003:06CB:73F6.000A failed with error -22 [ 194.307662][ T7812] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 194.320669][ T7812] Node 0 DMA32 free:1379084kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:27204kB inactive_anon:0kB active_file:45816kB inactive_file:160004kB unevictable:1536kB writepending:788kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:26044kB local_pcp:21248kB free_cma:0kB [ 194.351657][ T7812] lowmem_reserve[]: 0 0 1 1 1 [ 194.356440][ T7812] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 194.387160][ T7812] lowmem_reserve[]: 0 0 0 0 0 [ 194.398302][ T7812] Node 1 Normal free:3895808kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21408kB local_pcp:252kB free_cma:0kB [ 194.455176][ T7812] lowmem_reserve[]: 0 0 0 0 0 [ 194.459979][ T7812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 194.462395][ T6622] usb 3-1: Service connection timeout for: 256 [ 194.523379][ T7812] Node 0 DMA32: 495*4kB (M) 646*8kB (UME) 452*16kB (UME) 312*32kB (UME) 310*64kB (UME) 58*128kB (UME) 29*256kB (UME) 24*512kB (UME) 16*1024kB (UM) 10*2048kB (UME) 310*4096kB (UM) = 1377964kB [ 194.537244][ T6622] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 194.543424][ T4973] usb 4-1: USB disconnect, device number 7 [ 194.570819][ T7812] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 194.595238][ T6622] ath9k_htc: Failed to initialize the device [ 194.624163][ T5238] usb 3-1: ath9k_htc: USB layer deinitialized [ 194.677975][ T7812] Node 1 Normal: 256*4kB (UE) 58*8kB (UME) 35*16kB (UME) 168*32kB (UME) 42*64kB (UME) 13*128kB (UME) 4*256kB (M) 8*512kB (ME) 8*1024kB (UME) 4*2048kB (ME) 943*4096kB (M) = 3895808kB [ 194.740614][ T7812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.771560][ T7812] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.800638][ T7812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.815875][ T7812] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.829917][ T7812] 52865 total pagecache pages [ 194.841257][ T7812] 0 pages in swap cache [ 194.847285][ T7812] Free swap = 124996kB [ 194.851988][ T7812] Total swap = 124996kB [ 194.856885][ T7812] 2097051 pages RAM [ 194.860801][ T7812] 0 pages HighMem/MovableOnly [ 194.866071][ T7812] 415207 pages reserved [ 194.870315][ T7812] 0 pages cma reserved [ 195.603221][ T7822] loop4: detected capacity change from 0 to 40427 [ 195.620697][ T7822] F2FS-fs (loop4): invalid crc value [ 195.640485][ T7822] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.721905][ T7822] F2FS-fs (loop4): Start checkpoint disabled! [ 195.769419][ T7822] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 195.910283][ T7832] loop0: detected capacity change from 0 to 32768 [ 195.947993][ T7832] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1286 (7832) [ 195.980428][ T7836] loop3: detected capacity change from 0 to 128 [ 196.005158][ T7832] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.084457][ T7832] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 196.109868][ T4300] kworker/u4:5: attempt to access beyond end of device [ 196.109868][ T4300] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 196.116475][ T7832] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 196.143431][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 196.143446][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 196.143474][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 196.161519][ T4300] kworker/u4:5: attempt to access beyond end of device [ 196.161519][ T4300] loop4: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 196.179835][ T7832] BTRFS info (device loop0): trying to use backup root at mount time [ 196.233339][ T7832] BTRFS info (device loop0): setting nodatasum [ 196.239581][ T7832] BTRFS info (device loop0): enabling ssd optimizations [ 196.277569][ T7832] BTRFS info (device loop0): using spread ssd allocation scheme [ 196.331296][ T7832] BTRFS info (device loop0): turning on flush-on-commit [ 196.369070][ T7832] BTRFS info (device loop0): force zlib compression, level 3 [ 196.395474][ T7832] BTRFS info (device loop0): using free space tree [ 196.464187][ T4288] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 196.905596][ T7849] loop3: detected capacity change from 0 to 8192 [ 196.974742][ T7849] loop3: p1 < > p3 < p5 > p4 [ 196.979588][ T7849] loop3: partition table partially beyond EOD, truncated [ 197.048207][ T7849] loop3: p1 start 4294967040 is beyond EOD, truncated [ 197.332511][ T4973] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 197.356272][ T7842] loop2: detected capacity change from 0 to 32768 [ 197.391420][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 197.395114][ T4545] udevd[4545]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 197.403963][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 197.426176][ T7842] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1290 (7842) [ 197.523762][ T4973] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 197.541985][ T4973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.578509][ T4973] usb 5-1: config 0 descriptor?? [ 197.777670][ T4394] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4394) [ 198.047566][ T4973] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 198.107853][ T4973] [drm] Initialized udl on minor 2 [ 198.148587][ T4272] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.232348][ T4973] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 198.240407][ T4973] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 198.287909][ T4973] usb 5-1: USB disconnect, device number 4 [ 198.304640][ T2186] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 198.326585][ T2186] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 198.343573][ T2186] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 198.535424][ T5235] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 198.739786][ T5235] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.778825][ T5235] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.818874][ T5235] usb 4-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 198.851305][ T5235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.872497][ T5235] usb 4-1: Product: syz [ 198.876991][ T5235] usb 4-1: Manufacturer: syz [ 198.891772][ T5235] usb 4-1: SerialNumber: syz [ 199.143022][ T5235] usb 4-1: unit 5 not found! [ 199.148109][ T5235] usb 4-1: unit 3 not found! [ 199.213310][ T5235] usb 4-1: USB disconnect, device number 8 [ 199.258312][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.508850][ T7881] loop0: detected capacity change from 0 to 40427 [ 199.535630][ T7881] F2FS-fs (loop0): invalid crc value [ 199.558164][ T7881] F2FS-fs (loop0): Found nat_bits in checkpoint [ 199.692058][ T7881] F2FS-fs (loop0): Start checkpoint disabled! [ 199.802393][ T7881] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 199.854297][ T7889] loop3: detected capacity change from 0 to 1024 [ 199.884680][ T7885] loop4: detected capacity change from 0 to 32768 [ 199.918746][ T7885] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1302 (7885) [ 199.922013][ T7889] EXT4-fs: inline encryption not supported [ 199.988352][ T7885] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 199.989297][ T7889] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.057897][ T7885] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 200.104801][ T7885] BTRFS info (device loop4): enabling disk space caching [ 200.111895][ T7885] BTRFS info (device loop4): force clearing of disk cache [ 200.148384][ T7889] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 200.182413][ T7885] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 200.192756][ T7885] BTRFS info (device loop4): use zstd compression, level 3 [ 200.199993][ T7885] BTRFS info (device loop4): disk space caching is enabled [ 200.288807][ T11] kworker/u4:1: attempt to access beyond end of device [ 200.288807][ T11] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 200.363227][ T11] kworker/u4:1: attempt to access beyond end of device [ 200.363227][ T11] loop0: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 200.541857][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 200.632433][ T4280] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 200.641283][ T4280] Bluetooth: hci3: Injecting HCI hardware error event [ 200.652072][ T4288] Bluetooth: hci3: hardware error 0x00 [ 200.682454][ T7885] BTRFS info (device loop4): enabling ssd optimizations [ 200.711406][ T7885] BTRFS info (device loop4): rebuilding free space tree [ 200.802113][ T7885] BTRFS info (device loop4): disabling free space tree [ 200.814206][ T7885] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.877662][ T7885] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 201.143331][ T4273] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 201.703440][ T7921] loop4: detected capacity change from 0 to 16 [ 201.724992][ T7921] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 202.468614][ T7935] loop3: detected capacity change from 0 to 2048 [ 202.518029][ T7935] NILFS (loop3): invalid segment: Magic number mismatch [ 202.540617][ T7935] NILFS (loop3): trying rollback from an earlier position [ 202.575348][ T7935] NILFS (loop3): recovery complete [ 202.611022][ T7938] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.635532][ T7935] syz.3.1313: attempt to access beyond end of device [ 202.635532][ T7935] loop3: rw=0, sector=4096, nr_sectors = 4 limit=2048 [ 202.653417][ T7935] NILFS (loop3): I/O error reading node block for GC (ino=4, vblocknr=1342) [ 202.668423][ T7935] NILFS (loop3): error -5 preparing GC: cannot read source blocks [ 202.782512][ T4288] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 202.835054][ T7929] loop0: detected capacity change from 0 to 32768 [ 202.847559][ T7929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1321 (7929) [ 202.876572][ T7929] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.910327][ T7929] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 202.950390][ T7929] BTRFS info (device loop0): enabling auto defrag [ 202.972665][ T7929] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 203.001787][ T7929] BTRFS info (device loop0): use zstd compression, level 3 [ 203.019591][ T7929] BTRFS info (device loop0): turning on async discard [ 203.044688][ T7929] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 203.074812][ T7929] BTRFS info (device loop0): trying to use backup root at mount time [ 203.105570][ T7929] BTRFS info (device loop0): enabling ssd optimizations [ 203.117020][ T7929] BTRFS info (device loop0): using spread ssd allocation scheme [ 203.128442][ T7929] BTRFS info (device loop0): setting nodatacow, compression disabled [ 203.152527][ T7929] BTRFS info (device loop0): using free space tree [ 203.232566][ T2186] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 203.300453][ T4300] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 203.329266][ T7929] BTRFS error (device loop0): failed to load root extent [ 203.343665][ T7929] BTRFS warning (device loop0): try to load backup roots slot 1 [ 203.355234][ T4300] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 203.401668][ T7929] BTRFS warning (device loop0): couldn't read tree root [ 203.423057][ T2186] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 203.444667][ T2186] usb 4-1: config index 0 descriptor too short (expected 65505, got 72) [ 203.462356][ T7929] BTRFS warning (device loop0): try to load backup roots slot 2 [ 203.483474][ T7929] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 203.497454][ T2186] usb 4-1: config index 1 descriptor too short (expected 65505, got 72) [ 203.505460][ T7929] BTRFS warning (device loop0): couldn't read tree root [ 203.527772][ T2186] usb 4-1: config index 2 descriptor too short (expected 65505, got 72) [ 203.536399][ T7929] BTRFS warning (device loop0): try to load backup roots slot 3 [ 203.554051][ T2186] usb 4-1: config index 3 descriptor too short (expected 65505, got 72) [ 203.578901][ T2186] usb 4-1: config index 4 descriptor too short (expected 65505, got 72) [ 203.603142][ T7929] BTRFS info (device loop0): rebuilding free space tree [ 203.617840][ T2186] usb 4-1: config index 5 descriptor too short (expected 65505, got 72) [ 203.629012][ T7929] BTRFS info (device loop0): checking UUID tree [ 203.637977][ T2186] usb 4-1: config index 6 descriptor too short (expected 65505, got 72) [ 203.698633][ T2186] usb 4-1: config index 7 descriptor too short (expected 65505, got 72) [ 203.731312][ T2186] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 203.771542][ T2186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.801880][ T2186] usb 4-1: Product: syz [ 203.811989][ T2186] usb 4-1: Manufacturer: syz [ 203.832396][ T2186] usb 4-1: SerialNumber: syz [ 203.853511][ T2186] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 203.886073][ T4272] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.936005][ T2186] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 203.955656][ T7961] syz.4.1317: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 204.119135][ T7961] CPU: 1 PID: 7961 Comm: syz.4.1317 Not tainted syzkaller #0 [ 204.126575][ T7961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.136643][ T7961] Call Trace: [ 204.139917][ T7961] [ 204.142848][ T7961] dump_stack_lvl+0x188/0x24e [ 204.147559][ T7961] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 204.153974][ T7961] ? show_regs_print_info+0x12/0x12 [ 204.159173][ T7961] ? load_image+0x410/0x410 [ 204.163685][ T7961] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 204.170101][ T7961] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 204.176603][ T7961] warn_alloc+0x242/0x330 [ 204.181033][ T7961] ? zone_watermark_ok_safe+0x270/0x270 [ 204.186595][ T7961] ? __mutex_trylock_common+0x15c/0x260 [ 204.192145][ T7961] __vmalloc_node_range+0x11e/0x1380 [ 204.197435][ T7961] ? rcu_is_watching+0x11/0xa0 [ 204.202205][ T7961] ? trace_contention_end+0x5f/0x170 [ 204.207494][ T7961] ? __mutex_lock+0x1ab/0xae0 [ 204.212166][ T7961] ? __kmem_cache_free+0xb6/0x200 [ 204.217194][ T7961] ? tomoyo_path_number_perm+0x205/0x650 [ 204.222830][ T7961] ? tomoyo_path_number_perm+0x5a4/0x650 [ 204.228466][ T7961] ? dvb_dvr_do_ioctl+0x75/0x220 [ 204.233409][ T7961] ? tomoyo_path_number_perm+0x205/0x650 [ 204.239050][ T7961] ? free_vm_area+0x50/0x50 [ 204.243560][ T7961] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 204.248589][ T7961] vmalloc+0x75/0x80 [ 204.252491][ T7961] ? dvb_dvr_do_ioctl+0x12a/0x220 [ 204.257517][ T7961] dvb_dvr_do_ioctl+0x12a/0x220 [ 204.262379][ T7961] dvb_usercopy+0x191/0x2b0 [ 204.266880][ T7961] ? dvb_dvr_release+0x3d0/0x3d0 [ 204.271814][ T7961] ? dvb_generic_ioctl+0xb0/0xb0 [ 204.276762][ T7961] ? dvb_dvr_poll+0x230/0x230 [ 204.281448][ T7961] dvb_dvr_ioctl+0x25/0x30 [ 204.285866][ T7961] __se_sys_ioctl+0xfa/0x170 [ 204.290461][ T7961] do_syscall_64+0x4c/0xa0 [ 204.294876][ T7961] ? clear_bhb_loop+0x60/0xb0 [ 204.299550][ T7961] ? clear_bhb_loop+0x60/0xb0 [ 204.304223][ T7961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.310119][ T7961] RIP: 0033:0x7f9d4679ce59 [ 204.314535][ T7961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.334140][ T7961] RSP: 002b:00007f9d449f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.342551][ T7961] RAX: ffffffffffffffda RBX: 00007f9d46a15fa0 RCX: 00007f9d4679ce59 [ 204.350516][ T7961] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 204.358483][ T7961] RBP: 00007f9d46832e6f R08: 0000000000000000 R09: 0000000000000000 [ 204.366453][ T7961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.374422][ T7961] R13: 00007f9d46a16038 R14: 00007f9d46a15fa0 R15: 00007ffc269b29b8 [ 204.382406][ T7961] [ 204.532267][ T7961] Mem-Info: [ 204.535540][ T7961] active_anon:10987 inactive_anon:0 isolated_anon:0 [ 204.535540][ T7961] active_file:11460 inactive_file:40059 isolated_file:0 [ 204.535540][ T7961] unevictable:768 dirty:185 writeback:0 [ 204.535540][ T7961] slab_reclaimable:21605 slab_unreclaimable:98809 [ 204.535540][ T7961] mapped:30163 shmem:5466 pagetables:679 [ 204.535540][ T7961] sec_pagetables:0 bounce:0 [ 204.535540][ T7961] kernel_misc_reclaimable:0 [ 204.535540][ T7961] free:1319347 free_pcp:11141 free_cma:0 [ 204.753821][ T7961] Node 0 active_anon:44076kB inactive_anon:0kB active_file:45884kB inactive_file:160028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120772kB dirty:760kB writeback:0kB shmem:20336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11468kB pagetables:2812kB sec_pagetables:0kB all_unreclaimable? no [ 204.872363][ T7961] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 204.900735][ T7964] usb 4-1: USB disconnect, device number 9 [ 205.094893][ T7961] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.303410][ T7961] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 205.334969][ T7961] Node 0 DMA32 free:1384636kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:27076kB inactive_anon:0kB active_file:45884kB inactive_file:160028kB unevictable:1536kB writepending:760kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:21592kB local_pcp:912kB free_cma:0kB [ 205.470791][ T7961] lowmem_reserve[]: 0 0 1 1 1 [ 205.502518][ T2186] usb 4-1: Service connection timeout for: 256 [ 205.508745][ T2186] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 205.517418][ T7961] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.572654][ T2186] ath9k_htc: Failed to initialize the device [ 205.578907][ T7964] usb 4-1: ath9k_htc: USB layer deinitialized [ 205.637240][ T7961] lowmem_reserve[]: 0 0 0 0 0 [ 205.682540][ T7961] Node 1 Normal free:3897068kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20148kB local_pcp:20148kB free_cma:0kB [ 205.760037][ T7961] lowmem_reserve[]: 0 0 0 0 0 [ 205.774532][ T7961] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.848833][ T7977] loop3: detected capacity change from 0 to 1024 [ 205.852679][ T7961] Node 0 DMA32: 2029*4kB (UME) 2093*8kB (UME) 945*16kB (UME) 499*32kB (UME) 206*64kB (UME) 29*128kB (ME) 31*256kB (UM) 19*512kB (UME) 17*1024kB (UM) 9*2048kB (UME) 312*4096kB (UM) = 1404300kB [ 205.893346][ T7961] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 205.923045][ T7961] Node 1 Normal: 265*4kB (UME) 63*8kB (UME) 45*16kB (UME) 168*32kB (UME) 46*64kB (UME) 15*128kB (UME) 4*256kB (M) 7*512kB (ME) 7*1024kB (UME) 3*2048kB (ME) 944*4096kB (M) = 3897068kB [ 206.014227][ T7977] hfsplus: xattr searching failed [ 206.022302][ T7961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.031928][ T7961] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.074893][ T7961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.112298][ T7961] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 206.121820][ T7961] 52985 total pagecache pages [ 206.152460][ T7961] 0 pages in swap cache [ 206.162755][ T7961] Free swap = 124996kB [ 206.166951][ T7961] Total swap = 124996kB [ 206.171116][ T7961] 2097051 pages RAM [ 206.215598][ T7961] 0 pages HighMem/MovableOnly [ 206.220555][ T7961] 415207 pages reserved [ 206.244312][ T7961] 0 pages cma reserved [ 206.932652][ T5238] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 207.065338][ T7987] loop4: detected capacity change from 0 to 32768 [ 207.104165][ T7987] (syz.4.1326,7987,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 207.122293][ T5238] usb 4-1: Using ep0 maxpacket: 16 [ 207.129387][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.143449][ T7987] (syz.4.1326,7987,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 207.192595][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.218816][ T5238] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 207.251437][ T7997] loop0: detected capacity change from 0 to 2048 [ 207.267888][ T7987] JBD2: Ignoring recovery information on journal [ 207.291241][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.368140][ T7997] NILFS (loop0): invalid segment: Magic number mismatch [ 207.378878][ T5238] usb 4-1: config 0 descriptor?? [ 207.422346][ T7997] NILFS (loop0): trying rollback from an earlier position [ 207.446413][ T7997] NILFS (loop0): recovery complete [ 207.452573][ T7987] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 207.467269][ T8000] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.531850][ T7997] syz.0.1331: attempt to access beyond end of device [ 207.531850][ T7997] loop0: rw=0, sector=4096, nr_sectors = 4 limit=2048 [ 207.587866][ T7997] NILFS (loop0): I/O error reading node block for GC (ino=4, vblocknr=1342) [ 207.619043][ T7997] NILFS (loop0): error -5 preparing GC: cannot read source blocks [ 207.707133][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 207.831207][ T5238] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 207.855550][ T5238] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 207.872286][ T5238] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 207.879462][ T5238] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 207.905336][ T5238] konepure 0003:1E7D:2DB4.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 208.033952][ T5238] usb 4-1: USB disconnect, device number 10 [ 208.269450][ T8006] fido_id[8006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 208.492836][ T8016] loop0: detected capacity change from 0 to 1024 [ 208.661920][ T8016] hfsplus: xattr searching failed [ 208.733231][ T8021] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 208.957488][ T8024] tmpfs: Too few inodes for current use [ 209.200902][ T8030] ALSA: seq fatal error: cannot create timer (-22) [ 209.425698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.577887][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.587788][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.598473][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.610839][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.622937][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.631311][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.851277][ T4300] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.000692][ T4300] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.130884][ T4300] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.269401][ T4300] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.382428][ T5235] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.397404][ T8040] chnl_net:caif_netlink_parms(): no params data found [ 210.476673][ T7964] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 210.624088][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.640693][ T5235] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 210.650478][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.662093][ T5235] usb 5-1: config 0 descriptor?? [ 210.676559][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.683789][ T7964] usb 4-1: Using ep0 maxpacket: 16 [ 210.692973][ T7964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.718916][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.726238][ T7964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.726284][ T7964] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 210.726309][ T7964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.728278][ T7964] usb 4-1: config 0 descriptor?? [ 210.821830][ T8040] device bridge_slave_0 entered promiscuous mode [ 210.998864][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.026489][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.044057][ T8040] device bridge_slave_1 entered promiscuous mode [ 211.130668][ T5235] uclogic 0003:28BD:0078.000C: interface is invalid, ignoring [ 211.229600][ T7964] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 211.272652][ T7964] HID 045e:07da: Invalid code 65791 type 1 [ 211.278843][ T7964] HID 045e:07da: Invalid code 768 type 1 [ 211.297874][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.308256][ T7964] HID 045e:07da: Invalid code 769 type 1 [ 211.326450][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.335049][ T7964] HID 045e:07da: Invalid code 770 type 1 [ 211.370130][ T7964] HID 045e:07da: Invalid code 771 type 1 [ 211.382958][ T7964] HID 045e:07da: Invalid code 772 type 1 [ 211.388630][ T7964] HID 045e:07da: Invalid code 773 type 1 [ 211.412253][ T7964] HID 045e:07da: Invalid code 774 type 1 [ 211.417931][ T7964] HID 045e:07da: Invalid code 775 type 1 [ 211.447053][ T7964] HID 045e:07da: Invalid code 776 type 1 [ 211.520215][ T7964] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000D/input/input8 [ 211.525943][ T8040] team0: Port device team_slave_0 added [ 211.540175][ T5235] usb 5-1: USB disconnect, device number 5 [ 211.612674][ T7964] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 211.663546][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 211.681879][ T7964] usb 4-1: USB disconnect, device number 11 [ 211.859108][ T8040] team0: Port device team_slave_1 added [ 211.950455][ T8085] fido_id[8085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 212.001310][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.036137][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.137299][ T8040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.224191][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.248711][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.303818][ T8040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.325582][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 212.359579][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'. [ 212.388997][ T8095] netlink: 'syz.3.1366': attribute type 6 has an invalid length. [ 212.407545][ T8095] netlink: 'syz.3.1366': attribute type 5 has an invalid length. [ 212.431335][ T8097] tipc: Enabling of bearer rejected, failed to enable media [ 212.594128][ T8040] device hsr_slave_0 entered promiscuous mode [ 212.601970][ T8040] device hsr_slave_1 entered promiscuous mode [ 212.625118][ T8040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.630120][ T8105] loop0: detected capacity change from 0 to 128 [ 212.654731][ T8040] Cannot create hsr debugfs directory [ 213.494651][ T8122] loop3: detected capacity change from 0 to 4096 [ 213.625361][ T4300] device hsr_slave_0 left promiscuous mode [ 213.642033][ T8128] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.658769][ T4300] device hsr_slave_1 left promiscuous mode [ 213.684367][ T26] audit: type=1800 audit(213.694:23): pid=8122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1378" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 213.714796][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.741125][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.752520][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 213.764586][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.801896][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.905599][ T4300] device bridge_slave_1 left promiscuous mode [ 213.930077][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.979599][ T4300] device bridge_slave_0 left promiscuous mode [ 213.990886][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.083528][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.103324][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.117511][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.127452][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.133151][ T4300] device veth1_macvtap left promiscuous mode [ 214.141019][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.148604][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.161081][ T4300] device veth0_macvtap left promiscuous mode [ 214.199627][ T4300] device veth1_vlan left promiscuous mode [ 214.205681][ T4300] device veth0_vlan left promiscuous mode [ 214.346334][ T8156] loop3: detected capacity change from 0 to 256 [ 214.401135][ T8156] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 214.696654][ T8168] loop3: detected capacity change from 0 to 128 [ 214.908399][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 215.101810][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 215.111457][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.135195][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.145497][ T41] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 215.155387][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.167172][ T41] usb 5-1: config 0 descriptor?? [ 215.269511][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 215.319225][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 215.366256][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.394714][ T8185] loop0: detected capacity change from 0 to 256 [ 215.431316][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.435809][ T8185] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 215.603798][ T41] konepure 0003:1E7D:2DB4.000E: unknown main item tag 0x0 [ 215.611019][ T41] konepure 0003:1E7D:2DB4.000E: unknown main item tag 0x0 [ 215.620920][ T41] konepure 0003:1E7D:2DB4.000E: unknown main item tag 0x0 [ 215.628263][ T41] konepure 0003:1E7D:2DB4.000E: unknown main item tag 0x0 [ 215.648696][ T41] konepure 0003:1E7D:2DB4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 215.827265][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 215.846222][ T4973] usb 5-1: USB disconnect, device number 6 [ 215.914007][ T4300] bond0 (unregistering): Released all slaves [ 216.127044][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1396'. [ 216.155887][ T8040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 216.226986][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 216.229286][ T8040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 216.318589][ T8040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 216.320687][ T8200] loop0: detected capacity change from 0 to 1024 [ 216.356978][ T8040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 216.467509][ T8200] EXT4-fs: inline encryption not supported [ 216.554659][ T8200] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.646535][ T8200] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 216.732423][ T2186] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 216.867138][ T8203] fido_id[8203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 216.918037][ T8040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.934656][ T2186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.946190][ T2186] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 216.956374][ T2186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.959251][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 216.966337][ T2186] usb 4-1: config 0 descriptor?? [ 217.083540][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.091564][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.144635][ T8040] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.172585][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.203760][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.252668][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.259866][ T4603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.301716][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.353017][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.392034][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.392764][ T2186] uclogic 0003:28BD:0078.000F: interface is invalid, ignoring [ 217.399286][ T4603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.456656][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.484856][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.516541][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.546077][ T8142] chnl_net:caif_netlink_parms(): no params data found [ 217.659857][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.682936][ T5235] usb 4-1: USB disconnect, device number 12 [ 217.711888][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.768246][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.788510][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.798914][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.809511][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.817554][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 217.828707][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.841655][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.850512][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.875536][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.902758][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 217.985053][ T4300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.001812][ T4300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.180252][ T4300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.196270][ T4300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.280761][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.302987][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 218.314998][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.359446][ T8142] device bridge_slave_0 entered promiscuous mode [ 218.419185][ T4300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.468827][ T4300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.508991][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.525786][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.555047][ T8142] device bridge_slave_1 entered promiscuous mode [ 218.614865][ T4300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.656928][ T4300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.758444][ T8142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.798726][ T8142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.885660][ T8040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.949687][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.972802][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.006538][ T8142] team0: Port device team_slave_0 added [ 219.038900][ T8142] team0: Port device team_slave_1 added [ 219.063286][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.070266][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.096656][ T8142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.144854][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.158158][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.263968][ T8253] loop3: detected capacity change from 0 to 40427 [ 219.282364][ T8142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.340867][ T8253] F2FS-fs (loop3): Found nat_bits in checkpoint [ 219.496459][ T8142] device hsr_slave_0 entered promiscuous mode [ 219.523498][ T8142] device hsr_slave_1 entered promiscuous mode [ 219.541151][ T8142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.550526][ T8253] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 219.590447][ T8142] Cannot create hsr debugfs directory [ 219.608407][ T8253] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0 [ 219.623934][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 219.667880][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 219.683445][ T8253] CPU: 1 PID: 8253 Comm: syz.3.1422 Not tainted syzkaller #0 [ 219.690866][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 219.700944][ T8253] Call Trace: [ 219.704246][ T8253] [ 219.707212][ T8253] dump_stack_lvl+0x188/0x24e [ 219.711920][ T8253] ? show_regs_print_info+0x12/0x12 [ 219.717155][ T8253] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 219.723002][ T8253] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 219.728418][ T8253] f2fs_get_read_data_page+0x40f/0x640 [ 219.733916][ T8253] ? f2fs_reserve_block+0x240/0x240 [ 219.739171][ T8253] f2fs_find_data_page+0x9b/0x3b0 [ 219.744232][ T8253] f2fs_readdir+0x4ba/0xa00 [ 219.748781][ T8253] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 219.754016][ T8253] ? mutex_lock_nested+0x10/0x10 [ 219.758976][ T8253] ? end_current_label_crit_section+0x14b/0x170 [ 219.765245][ T8253] ? iterate_dir+0x10d/0x550 [ 219.769864][ T8253] ? down_read_killable+0x1cc/0x340 [ 219.775089][ T8253] ? fsnotify_perm+0x248/0x550 [ 219.779894][ T8253] iterate_dir+0x213/0x550 [ 219.784341][ T8253] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 219.789571][ T8253] __se_sys_getdents64+0xf2/0x270 [ 219.794633][ T8253] ? __x64_sys_getdents64+0x80/0x80 [ 219.799857][ T8253] ? filldir+0x6f0/0x6f0 [ 219.804136][ T8253] ? lockdep_hardirqs_on+0x94/0x140 [ 219.809361][ T8253] do_syscall_64+0x4c/0xa0 [ 219.813796][ T8253] ? clear_bhb_loop+0x60/0xb0 [ 219.818491][ T8253] ? clear_bhb_loop+0x60/0xb0 [ 219.823194][ T8253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.829121][ T8253] RIP: 0033:0x7fca2a99ce59 [ 219.833564][ T8253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.853191][ T8253] RSP: 002b:00007fca2b934028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 219.861632][ T8253] RAX: ffffffffffffffda RBX: 00007fca2ac15fa0 RCX: 00007fca2a99ce59 [ 219.869625][ T8253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 219.877702][ T8253] RBP: 00007fca2aa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 219.885695][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.893690][ T8253] R13: 00007fca2ac16038 R14: 00007fca2ac15fa0 R15: 00007ffc1b423388 [ 219.901705][ T8253] [ 220.383287][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 220.395363][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.418104][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.503181][ T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 220.569358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.581039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.601195][ T8040] device veth0_vlan entered promiscuous mode [ 220.664449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.697788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.706878][ T41] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 220.724506][ T41] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 220.741237][ T41] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.754814][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.761450][ T41] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 220.770946][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.786910][ T8040] device veth1_vlan entered promiscuous mode [ 220.807798][ T41] usb 5-1: config 0 descriptor?? [ 220.813637][ T8304] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 220.824845][ T8142] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 220.845784][ T8142] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 220.903528][ T8142] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 220.922962][ T8142] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 221.005048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.015719][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.048725][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.090513][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.125670][ T8040] device veth0_macvtap entered promiscuous mode [ 221.188968][ T41] usbhid 5-1:0.0: can't add hid device: -71 [ 221.209358][ T8040] device veth1_macvtap entered promiscuous mode [ 221.221730][ T41] usbhid: probe of 5-1:0.0 failed with error -71 [ 221.258045][ T41] usb 5-1: USB disconnect, device number 7 [ 221.355328][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.377780][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.399682][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.414949][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.425445][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.436196][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.446203][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.456882][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.473354][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.639838][ T8329] loop0: detected capacity change from 0 to 4096 [ 221.647736][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.670802][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.690922][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.706264][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.722633][ T8332] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.736276][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.762355][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.792257][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.861248][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.883272][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.886198][ T8334] loop3: detected capacity change from 0 to 1024 [ 221.912278][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.933545][ T8334] hfsplus: unable to find HFS+ superblock [ 221.982585][ T8040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.994752][ T8040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.028569][ T8040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.082716][ T8338] loop4: detected capacity change from 0 to 4096 [ 222.102918][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.150541][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.196384][ T8341] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.227797][ T8040] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.243335][ T26] audit: type=1800 audit(222.254:24): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1441" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 222.244863][ T8040] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.359094][ T8040] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.386239][ T8040] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.430745][ T8142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.462828][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 222.663564][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.683502][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.710020][ T8142] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.772382][ T4973] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 222.790286][ T4300] device hsr_slave_0 left promiscuous mode [ 222.803681][ T4300] device hsr_slave_1 left promiscuous mode [ 222.815383][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.832359][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.863532][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.874486][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.882282][ T4300] device bridge_slave_1 left promiscuous mode [ 222.888461][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.901490][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.926612][ T4300] device veth1_macvtap left promiscuous mode [ 222.933016][ T4300] device veth0_macvtap left promiscuous mode [ 222.939547][ T4300] device veth1_vlan left promiscuous mode [ 222.945461][ T4300] device veth0_vlan left promiscuous mode [ 222.972475][ T4973] usb 4-1: Using ep0 maxpacket: 16 [ 222.979590][ T4973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.005124][ T4973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.020816][ T4973] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 223.030242][ T4973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.041310][ T4973] usb 4-1: config 0 descriptor?? [ 223.487534][ T4973] monterey 0003:0566:3004.0010: unknown main item tag 0x7 [ 223.500368][ T4973] monterey 0003:0566:3004.0010: unknown main item tag 0x0 [ 223.507802][ T4973] monterey 0003:0566:3004.0010: unknown main item tag 0x1 [ 223.516025][ T4973] monterey 0003:0566:3004.0010: unknown main item tag 0xd [ 223.525847][ T4973] monterey 0003:0566:3004.0010: hidraw0: USB HID v0.77 Device [HID 0566:3004] on usb-dummy_hcd.3-1/input0 [ 223.647188][ T4300] team0 (unregistering): Port device team_slave_1 removed [ 223.695061][ T4973] usb 4-1: USB disconnect, device number 13 [ 223.706960][ T4300] team0 (unregistering): Port device team_slave_0 removed [ 223.752395][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.796896][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.090703][ T4300] bond0 (unregistering): Released all slaves [ 224.188386][ T8357] tipc: Enabling of bearer rejected, failed to enable media [ 224.303915][ T7876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.557824][ T8369] loop3: detected capacity change from 0 to 4096 [ 224.573060][ T8371] loop0: detected capacity change from 0 to 256 [ 224.587328][ T8371] exfat: Deprecated parameter 'utf8' [ 224.604709][ T8371] exfat: Deprecated parameter 'utf8' [ 224.625566][ T8371] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xff6615b4, utbl_chksum : 0xe619d30d) [ 224.678986][ T8372] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.722820][ T8369] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 224.798630][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.808581][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.000797][ T8376] loop3: detected capacity change from 0 to 512 [ 225.040767][ T8376] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 225.062712][ T8376] EXT4-fs (loop3): 1 truncate cleaned up [ 225.070448][ T8376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 225.198157][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 225.418708][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.451955][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.819682][ T8359] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.828758][ T8359] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.837753][ T8359] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.846663][ T8359] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.864801][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.877285][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.911409][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.918611][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.940991][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.950033][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.964795][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.971959][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.983789][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.989302][ T8388] loop4: detected capacity change from 0 to 8192 [ 225.995053][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.042789][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.060807][ T8388] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.109645][ T8388] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 226.109830][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.121712][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.137282][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.146590][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.155255][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.163971][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.177163][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.207950][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.225243][ T8388] REISERFS (device loop4): using ordered data mode [ 226.231791][ T8388] reiserfs: using flush barriers [ 226.247972][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.257163][ T8388] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.277610][ T8142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.334874][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.357292][ T8388] REISERFS (device loop4): checking transaction log (loop4) [ 226.378633][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.402719][ T8388] REISERFS (device loop4): Using r5 hash to sort names [ 226.410718][ T8388] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 226.429922][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.503198][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.551203][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.597829][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.212558][ T6622] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 227.387421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.404077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.412143][ T6622] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.433945][ T6622] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.441531][ T8142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.459012][ T6622] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.492286][ T7876] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 227.532379][ T6622] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.539245][ T6622] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 227.560256][ T6622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.602799][ T8434] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 227.610549][ T8434] team0: Device ipvlan2 is already an upper device of the team interface [ 227.620794][ T6622] usb 4-1: config 0 descriptor?? [ 227.729885][ T7876] usb 5-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.782678][ T7876] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.792035][ T7876] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 227.820176][ T7876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.834235][ T7876] usb 5-1: config 0 descriptor?? [ 228.056722][ T6622] holtek 0003:1241:5015.0011: item fetching failed at offset 3/5 [ 228.066517][ T6622] holtek 0003:1241:5015.0011: parse failed [ 228.073758][ T7876] usbhid 5-1:0.0: can't add hid device: -71 [ 228.087719][ T7876] usbhid: probe of 5-1:0.0 failed with error -71 [ 228.096256][ T6622] holtek: probe of 0003:1241:5015.0011 failed with error -22 [ 228.117979][ T7876] usb 5-1: USB disconnect, device number 8 [ 228.282327][ T6622] usb 4-1: USB disconnect, device number 14 [ 228.466388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.486021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.537424][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.558892][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.602677][ T8142] device veth0_vlan entered promiscuous mode [ 228.617554][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.627934][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.647733][ T8142] device veth1_vlan entered promiscuous mode [ 228.706038][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.735286][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.747433][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.758288][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.787527][ T8142] device veth0_macvtap entered promiscuous mode [ 228.813984][ T8467] loop4: detected capacity change from 0 to 256 [ 228.829618][ T8142] device veth1_macvtap entered promiscuous mode [ 228.923170][ T8471] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1488'. [ 228.944267][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.962984][ T8471] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1488'. [ 228.998648][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.052533][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.077548][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.102129][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.162351][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.208651][ T8142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.247751][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.269902][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.319237][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.351363][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.414645][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.438121][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.492579][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.525921][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.549102][ T8142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.576686][ T8142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.608186][ T8142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.629843][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.657876][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.687001][ T8142] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.706494][ T8142] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.722426][ T8142] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.739923][ T8142] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.823272][ T6622] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 229.957526][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.981516][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.014046][ T6622] usb 4-1: config 0 interface 0 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.037298][ T6622] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.045107][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.064413][ T6622] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 230.078062][ T6622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.083447][ T4603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.110768][ T6622] usb 4-1: config 0 descriptor?? [ 230.114379][ T4603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.143455][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.349390][ T6622] usbhid 4-1:0.0: can't add hid device: -71 [ 230.383575][ T6622] usbhid: probe of 4-1:0.0 failed with error -71 [ 230.422804][ T6622] usb 4-1: USB disconnect, device number 15 [ 230.595338][ T8506] loop4: detected capacity change from 0 to 32768 [ 230.655898][ T8506] XFS (loop4): Mounting V5 Filesystem [ 230.743538][ T8506] XFS (loop4): Ending clean mount [ 230.821369][ T8536] loop6: detected capacity change from 0 to 256 [ 231.071067][ T4273] XFS (loop4): Unmounting Filesystem [ 231.156192][ T8544] loop3: detected capacity change from 0 to 512 [ 231.389147][ T8544] EXT4-fs (loop3): 1 truncate cleaned up [ 231.432551][ T46] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 231.457133][ T8544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 231.482725][ T46] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1 [ 231.566127][ T8550] loop7: detected capacity change from 0 to 8192 [ 231.603220][ T8550] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 231.632283][ T8550] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 231.673531][ T8550] REISERFS (device loop7): using ordered data mode [ 231.680090][ T8550] reiserfs: using flush barriers [ 231.697633][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 231.712957][ T8550] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 231.788622][ T8550] REISERFS (device loop7): checking transaction log (loop7) [ 231.845374][ T8550] REISERFS (device loop7): Using r5 hash to sort names [ 231.876250][ T8550] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 231.931976][ T8565] loop3: detected capacity change from 0 to 1024 [ 232.024278][ T8567] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1527'. [ 232.512420][ T7876] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 232.709311][ T7876] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 232.738282][ T7876] usb 7-1: config 0 interface 0 has no altsetting 0 [ 232.783912][ T7876] usb 7-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 232.812266][ T7876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.848092][ T7876] usb 7-1: config 0 descriptor?? [ 233.156172][ T8581] loop3: detected capacity change from 0 to 32768 [ 233.197995][ T8586] loop7: detected capacity change from 0 to 32768 [ 233.232646][ T8586] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1523 (8586) [ 233.260796][ T8586] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.284017][ T7876] logitech 0003:046D:C287.0012: unknown main item tag 0x0 [ 233.291351][ T8581] XFS (loop3): Mounting V5 Filesystem [ 233.297768][ T7876] logitech 0003:046D:C287.0012: unknown main item tag 0x0 [ 233.305580][ T7876] logitech 0003:046D:C287.0012: unknown main item tag 0x0 [ 233.313359][ T7876] logitech 0003:046D:C287.0012: unknown main item tag 0x0 [ 233.320523][ T7876] logitech 0003:046D:C287.0012: unknown main item tag 0x0 [ 233.327990][ T8586] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 233.328327][ T7876] logitech 0003:046D:C287.0012: unknown main item tag 0x0 [ 233.344950][ T7876] logitech 0003:046D:C287.0012: unknown main item tag 0x0 [ 233.352485][ T7876] logitech 0003:046D:C287.0012: unknown main item tag 0x0 [ 233.364404][ T7876] logitech 0003:046D:C287.0012: hidraw0: USB HID v0.0a Device [HID 046d:c287] on usb-dummy_hcd.6-1/input0 [ 233.382514][ T7876] logitech 0003:046D:C287.0012: no inputs found [ 233.405832][ T8581] XFS (loop3): Ending clean mount [ 233.422441][ T8586] BTRFS info (device loop7): using free space tree [ 233.564660][ T7964] usb 7-1: USB disconnect, device number 2 [ 233.623609][ T4275] XFS (loop3): Unmounting Filesystem [ 233.679642][ T8623] loop0: detected capacity change from 0 to 1024 [ 233.839378][ T8586] BTRFS info (device loop7): enabling ssd optimizations [ 233.939757][ T8610] fido_id[8610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 234.482554][ T8142] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.835270][ T8657] loop0: detected capacity change from 0 to 16 [ 234.903190][ T8657] erofs: (device loop0): mounted with root inode @ nid 36. [ 234.978901][ T8653] loop3: detected capacity change from 0 to 8192 [ 235.091942][ T8653] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 235.131991][ T8663] loop7: detected capacity change from 0 to 512 [ 235.140830][ T8663] EXT4-fs: Ignoring removed bh option [ 235.183864][ T8663] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 235.212274][ T8653] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 235.221480][ T8653] REISERFS (device loop3): using ordered data mode [ 235.249887][ T8653] reiserfs: using flush barriers [ 235.276511][ T8663] EXT4-fs (loop7): 1 truncate cleaned up [ 235.316808][ T8653] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.330028][ T8644] loop6: detected capacity change from 0 to 32768 [ 235.336832][ T8663] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 235.348209][ T8644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1534 (8644) [ 235.397515][ T8644] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.427112][ T8653] REISERFS (device loop3): checking transaction log (loop3) [ 235.427641][ T8644] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 235.448616][ T8653] REISERFS (device loop3): Using r5 hash to sort names [ 235.475546][ T8653] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 235.503638][ T8644] BTRFS info (device loop6): using free space tree [ 235.573255][ T8142] EXT4-fs (loop7): unmounting filesystem. [ 235.589376][ T8677] loop4: detected capacity change from 0 to 128 [ 235.643018][ T8211] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.046685][ T8644] BTRFS info (device loop6): enabling ssd optimizations [ 236.479953][ T8696] loop4: detected capacity change from 0 to 32768 [ 236.572881][ T8696] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1547 (8696) [ 236.622627][ T8040] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 236.879627][ T4360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4360) [ 237.194372][ T8708] loop3: detected capacity change from 0 to 40427 [ 237.248960][ T8708] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 237.290788][ T8708] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 237.343250][ T8708] F2FS-fs (loop3): invalid crc value [ 237.404758][ T8708] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 237.663908][ T8708] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 237.671003][ T8708] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 237.868782][ T8748] netlink: 'syz.7.1559': attribute type 5 has an invalid length. [ 237.920329][ T8708] F2FS-fs (loop3): Unrecognized mount option "noload" or missing value [ 238.376549][ T8757] loop4: detected capacity change from 0 to 4096 [ 238.547099][ T8760] loop7: detected capacity change from 0 to 4096 [ 238.671564][ T8760] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 238.798642][ T8142] EXT4-fs (loop7): unmounting filesystem. [ 238.814259][ T8770] loop0: detected capacity change from 0 to 512 [ 238.887583][ T8770] EXT4-fs: Ignoring removed bh option [ 238.975338][ T8770] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 238.986073][ T8746] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 239.111821][ T8770] EXT4-fs (loop0): 1 truncate cleaned up [ 239.128409][ T8757] EXT4-fs: inline encryption not supported [ 239.140877][ T8770] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 239.142470][ T8746] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 239.168324][ T8757] EXT4-fs (loop4): Test dummy encryption mode enabled [ 239.169681][ T8746] F2FS-fs (loop6): invalid crc value [ 239.206977][ T8746] F2FS-fs (loop6): Found nat_bits in checkpoint [ 239.232507][ T14] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 239.250436][ T8757] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 239.474086][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 239.492435][ T14] usb 8-1: Using ep0 maxpacket: 8 [ 239.500177][ T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 239.534396][ T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.554489][ T8746] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 239.555201][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 239.561541][ T8746] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 239.566149][ T14] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.622258][ T14] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 239.647441][ T14] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 239.667357][ T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.730255][ T14] usb 8-1: config 0 descriptor?? [ 239.746274][ T8774] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 240.014284][ T4288] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 240.089449][ T8804] set_capacity_and_notify: 1 callbacks suppressed [ 240.089465][ T8804] loop0: detected capacity change from 0 to 1024 [ 240.149333][ T8804] hfsplus: xattr exists yet [ 240.214440][ T7112] usb 8-1: USB disconnect, device number 2 [ 240.216704][ T4280] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 240.580128][ T8817] loop3: detected capacity change from 0 to 4096 [ 240.677903][ T8817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 240.770918][ T8828] tipc: Started in network mode [ 240.776153][ T8828] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 240.788893][ T8828] tipc: Enabling of bearer rejected, failed to enable media [ 240.947357][ T8835] loop7: detected capacity change from 0 to 512 [ 240.999204][ T8835] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 2: comm syz.7.1584: invalid block [ 241.024045][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 241.102641][ T8835] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1584: invalid indirect mapped block 10 (level 1) [ 241.128258][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1586'. [ 241.183082][ T8835] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1584: invalid indirect mapped block 8 (level 1) [ 241.319201][ T8835] EXT4-fs (loop7): 1 truncate cleaned up [ 241.367546][ T8835] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 241.635321][ T8142] EXT4-fs (loop7): unmounting filesystem. [ 242.405327][ T8885] loop4: detected capacity change from 0 to 512 [ 242.475709][ T8885] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1604: invalid indirect mapped block 10 (level 1) [ 242.531727][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.539190][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.580838][ T8885] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1604: invalid indirect mapped block 8 (level 1) [ 242.595592][ T8885] EXT4-fs (loop4): 1 truncate cleaned up [ 242.601824][ T8885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 242.666688][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 242.930298][ T8895] loop4: detected capacity change from 0 to 4096 [ 243.331515][ T8905] loop0: detected capacity change from 0 to 4096 [ 243.353191][ T8905] EXT4-fs: inline encryption not supported [ 243.381175][ T8905] EXT4-fs (loop0): Test dummy encryption mode enabled [ 243.411016][ T8905] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 243.473602][ T8868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.519037][ T8868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.613636][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 243.932133][ T8868] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.941248][ T8868] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.950196][ T8868] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.959337][ T8868] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.873467][ T8949] vim2m vim2m.0: vidioc_s_fmt queue busy [ 245.217141][ T8964] loop6: detected capacity change from 0 to 512 [ 245.248525][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1638'. [ 245.287693][ T8964] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.341395][ T8964] EXT4-fs (loop6): Test dummy encryption mode enabled [ 245.397327][ T8964] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 245.658004][ T8040] EXT4-fs (loop6): unmounting filesystem. [ 246.159371][ T9005] tipc: Started in network mode [ 246.190027][ T9005] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 246.249959][ T9001] loop6: detected capacity change from 0 to 8192 [ 246.280962][ T9005] tipc: Enabling of bearer rejected, failed to enable media [ 246.454929][ T9010] loop3: detected capacity change from 0 to 4096 [ 246.876565][ T9024] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 247.012488][ T7112] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 247.035387][ T8988] loop0: detected capacity change from 0 to 40427 [ 247.079806][ T8988] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 247.126218][ T8988] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 247.156659][ T8988] F2FS-fs (loop0): invalid crc value [ 247.222544][ T7112] usb 5-1: Using ep0 maxpacket: 16 [ 247.233334][ T7112] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.262255][ T7112] usb 5-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 247.279226][ T8988] F2FS-fs (loop0): Found nat_bits in checkpoint [ 247.302868][ T7112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.346718][ T7112] usb 5-1: config 0 descriptor?? [ 247.438361][ T8988] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 247.451108][ T8988] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 247.625991][ T9051] vcan0: MTU too low for tipc bearer [ 247.651748][ T9051] tipc: Enabling of bearer rejected, failed to enable media [ 247.783323][ T7112] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0934.0013/input/input9 [ 247.849796][ T7112] uclogic 0003:28BD:0934.0013: input,hidraw0: USB HID v0.81 Mouse [HID 28bd:0934] on usb-dummy_hcd.4-1/input0 [ 247.980278][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1670'. [ 247.981755][ T7112] usb 5-1: USB disconnect, device number 9 [ 248.106707][ T9066] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 248.244000][ T9062] fido_id[9062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 248.698407][ T26] audit: type=1326 audit(248.704:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.1678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745d19ce59 code=0x7ffc0000 [ 248.822309][ T26] audit: type=1326 audit(248.714:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.1678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745d19ce59 code=0x7ffc0000 [ 248.932880][ T26] audit: type=1326 audit(248.714:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.1678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745d19ce59 code=0x7ffc0000 [ 248.947646][ T9093] loop6: detected capacity change from 0 to 1024 [ 249.062281][ T26] audit: type=1326 audit(248.714:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.1678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f745d19ce59 code=0x7ffc0000 [ 249.111942][ T9100] hfsplus: xattr exists yet [ 249.192636][ T26] audit: type=1326 audit(248.714:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.1678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745d19ce59 code=0x7ffc0000 [ 249.331900][ T26] audit: type=1326 audit(248.714:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.1678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745d19ce59 code=0x7ffc0000 [ 249.456935][ T26] audit: type=1326 audit(248.714:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.1678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745d19ce59 code=0x7ffc0000 [ 249.621131][ T26] audit: type=1326 audit(248.714:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.1678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745d19ce59 code=0x7ffc0000 [ 249.754089][ T26] audit: type=1326 audit(248.714:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.1678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f745d19ce59 code=0x7ffc0000 [ 249.842386][ T26] audit: type=1326 audit(248.714:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9087 comm="syz.0.1678" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745d19ce59 code=0x7ffc0000 [ 250.503300][ T9153] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1704'. [ 250.544188][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'. [ 250.710133][ T9162] loop6: detected capacity change from 0 to 512 [ 250.811934][ T9162] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 250.881757][ T9143] loop7: detected capacity change from 0 to 32768 [ 250.987804][ T9143] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 250.998730][ T8040] EXT4-fs (loop6): unmounting filesystem. [ 251.261417][ T8142] ocfs2: Unmounting device (7,7) on (node local) [ 251.446216][ T9181] loop0: detected capacity change from 0 to 256 [ 252.105659][ T9202] device ipip0 entered promiscuous mode [ 252.124228][ T9203] loop0: detected capacity change from 0 to 256 [ 252.124997][ T9203] exfat: Deprecated parameter 'namecase' [ 252.125042][ T9203] exfat: Deprecated parameter 'namecase' [ 252.125067][ T9203] exfat: Deprecated parameter 'namecase' [ 252.154548][ T9202] team0: Device ipip0 is of different type [ 252.161842][ T9203] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 252.781131][ T9226] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1726'. [ 253.133963][ T9242] device vlan3 entered promiscuous mode [ 253.139569][ T9242] device dummy0 entered promiscuous mode [ 253.406449][ T9249] loop0: detected capacity change from 0 to 4096 [ 253.538586][ T9256] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.036844][ T9272] loop4: detected capacity change from 0 to 1024 [ 254.089912][ T9272] EXT4-fs: Ignoring removed bh option [ 254.149941][ T9272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.197296][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 254.751078][ T9283] device macsec1 entered promiscuous mode [ 254.789536][ T9288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1749'. [ 255.067598][ T9307] loop7: detected capacity change from 0 to 4096 [ 255.171809][ T9316] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.279996][ T9320] loop6: detected capacity change from 0 to 256 [ 255.342848][ T9320] exfat: Deprecated parameter 'utf8' [ 255.368487][ T9320] exfat: Deprecated parameter 'utf8' [ 255.394981][ T9320] exfat: Deprecated parameter 'utf8' [ 255.452903][ T9320] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 255.505023][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.511481][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.656323][ T9329] netlink: 'syz.3.1762': attribute type 29 has an invalid length. [ 255.708348][ T9329] netlink: 'syz.3.1762': attribute type 29 has an invalid length. [ 255.779439][ T9332] netlink: 'syz.3.1762': attribute type 29 has an invalid length. [ 256.050324][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 256.050338][ T26] audit: type=1326 audit(256.054:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.4.1757" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4679ce59 code=0x7fc00000 [ 256.314614][ T9350] Bluetooth: MGMT ver 1.22 [ 256.371113][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1772'. [ 256.526464][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 256.650559][ T9365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1776'. [ 256.885314][ T9373] loop7: detected capacity change from 0 to 1024 [ 256.946573][ T9373] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.985275][ T9373] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.099894][ T9373] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #11: comm syz.7.1781: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 257.177821][ T9373] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1781: couldn't read orphan inode 11 (err -117) [ 257.212333][ T9373] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 257.384737][ T8142] EXT4-fs (loop7): unmounting filesystem. [ 257.703898][ T9408] device macsec1 entered promiscuous mode [ 257.949449][ T9416] loop0: detected capacity change from 0 to 1024 [ 257.967312][ T9416] EXT4-fs: Ignoring removed bh option [ 258.082333][ T9416] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 258.216196][ T9424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1799'. [ 258.265037][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 258.479612][ T9435] sctp: [Deprecated]: syz.3.1803 (pid 9435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.479612][ T9435] Use struct sctp_sack_info instead [ 258.574175][ T9439] sctp: [Deprecated]: syz.3.1803 (pid 9439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.574175][ T9439] Use struct sctp_sack_info instead [ 259.455898][ T9469] loop6: detected capacity change from 0 to 8 [ 259.538484][ T9471] loop3: detected capacity change from 0 to 2048 [ 259.605314][ T9471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.988013][ T9457] loop4: detected capacity change from 0 to 32768 [ 260.097254][ T9457] *** Log Is Dirty ! *** [ 260.120166][ T9457] lmLogInit: exit(-22) [ 260.132893][ T9457] lmLogOpen: exit(-22) [ 260.414861][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1829'. [ 260.902914][ T9522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'. [ 261.127737][ T9528] loop6: detected capacity change from 0 to 1024 [ 261.324342][ T4302] hfsplus: b-tree write err: -5, ino 25 [ 261.338018][ T4302] hfsplus: b-tree write err: -5, ino 4 [ 261.360315][ T4302] hfsplus: b-tree write err: -5, ino 2 [ 261.379923][ T4302] hfsplus: b-tree write err: -5, ino 26 [ 261.545509][ T9535] loop3: detected capacity change from 0 to 4096 [ 261.644065][ T9538] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.776356][ T9541] sctp: [Deprecated]: syz.6.1846 (pid 9541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.776356][ T9541] Use struct sctp_sack_info instead [ 261.904452][ T9542] sctp: [Deprecated]: syz.6.1846 (pid 9542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.904452][ T9542] Use struct sctp_sack_info instead [ 262.025015][ T9526] loop0: detected capacity change from 0 to 32768 [ 262.160706][ T9526] XFS (loop0): Mounting V5 Filesystem [ 262.251471][ T9526] XFS (loop0): Ending clean mount [ 262.394181][ T4272] XFS (loop0): Unmounting Filesystem [ 262.812011][ T9575] loop6: detected capacity change from 0 to 1024 [ 262.828820][ T9575] EXT4-fs: Ignoring removed bh option [ 262.880520][ T9575] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 262.944316][ T9582] loop0: detected capacity change from 0 to 1024 [ 262.971610][ T9582] EXT4-fs: Ignoring removed nobh option [ 263.008708][ T9582] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.058664][ T9582] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 263.058664][ T9582] [ 263.115244][ T8040] EXT4-fs (loop6): unmounting filesystem. [ 263.267834][ T9586] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1855'. [ 263.380924][ T9588] loop0: detected capacity change from 0 to 4096 [ 263.507694][ T9592] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.541356][ T9591] loop4: detected capacity change from 0 to 2048 [ 263.656152][ T9591] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.253773][ T9646] CUSE: unknown device info "" [ 265.263831][ T9646] CUSE: unknown device info "Ö" [ 265.282566][ T9646] CUSE: unknown device info "" [ 265.287478][ T9646] CUSE: unknown device info "" [ 265.337538][ T9646] CUSE: unknown device info "ðÿÿÿ" [ 265.352124][ T9646] CUSE: unknown device info "" [ 265.389277][ T9646] CUSE: unknown device info "" [ 265.416125][ T9646] CUSE: unknown device info "" [ 265.434463][ T9646] CUSE: unknown device info "" [ 265.451452][ T9646] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 265.473692][ T9646] CUSE: unknown device info "ÿÿÿÿ" [ 265.512089][ T9646] CUSE: unknown device info "" [ 265.552757][ T9646] CUSE: unknown device info "€" [ 265.568394][ T9646] CUSE: DEVNAME unspecified [ 266.217875][ T9677] loop6: detected capacity change from 0 to 512 [ 266.269111][ T9677] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 266.307554][ T9677] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 266.393191][ T9677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 266.421573][ T9677] System zones: 1-12 [ 266.483378][ T9677] EXT4-fs (loop6): orphan cleanup on readonly fs [ 266.522946][ T9677] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:511: comm syz.6.1889: Block bitmap for bg 0 marked uninitialized [ 266.651770][ T9677] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:511: comm syz.6.1889: Block bitmap for bg 0 marked uninitialized [ 266.713043][ T9677] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:511: comm syz.6.1889: Block bitmap for bg 0 marked uninitialized [ 266.774296][ T9677] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 266.828842][ T9677] EXT4-fs (loop6): 1 truncate cleaned up [ 266.852357][ T9677] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 267.112414][ T9655] loop3: detected capacity change from 0 to 40427 [ 267.155535][ T9655] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 267.161922][ T9655] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 267.171466][ T8040] EXT4-fs (loop6): unmounting filesystem. [ 267.282880][ T9655] F2FS-fs (loop3): invalid crc value [ 267.369019][ T9655] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 267.618071][ T9655] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 267.647714][ T9655] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 267.716218][ T9709] loop6: detected capacity change from 0 to 1024 [ 267.773574][ T9709] EXT4-fs: Ignoring removed nobh option [ 267.797674][ T4275] syz-executor: attempt to access beyond end of device [ 267.797674][ T4275] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 267.802329][ T9709] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 267.885319][ T9524] Set syz1 is full, maxelem 65536 reached [ 268.002281][ T9709] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 268.002281][ T9709] [ 268.465869][ T9730] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.468661][ T9733] loop7: detected capacity change from 0 to 256 [ 268.474681][ T9730] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.474763][ T9730] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.474796][ T9730] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.629972][ T9733] exfat: Deprecated parameter 'namecase' [ 268.692649][ T9733] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 269.343688][ T9761] loop4: detected capacity change from 0 to 64 [ 269.449726][ T9731] loop3: detected capacity change from 0 to 32768 [ 269.687187][ T9770] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.696121][ T9770] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.704910][ T9770] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.714024][ T9770] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.677404][ T9771] loop4: detected capacity change from 0 to 40427 [ 270.746821][ T9771] F2FS-fs (loop4): Found nat_bits in checkpoint [ 270.936610][ T9771] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 270.976875][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1934'. [ 271.175063][ T9819] loop0: detected capacity change from 0 to 164 [ 271.814106][ T9838] loop3: detected capacity change from 0 to 256 [ 271.857605][ T9838] exfat: Deprecated parameter 'namecase' [ 271.865597][ T9843] loop7: detected capacity change from 0 to 512 [ 271.913641][ T9838] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 272.002581][ T7964] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 272.030810][ T9843] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 272.203995][ T7964] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 272.242712][ T7964] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.281354][ T7964] usb 7-1: config 0 has no interface number 0 [ 272.293395][ T7964] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 272.320515][ T7964] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 74, setting to 64 [ 272.331574][ T7964] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.354581][ T7964] usb 7-1: config 0 interface 52 has no altsetting 0 [ 272.370517][ T7964] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 272.393959][ T8142] EXT4-fs (loop7): unmounting filesystem. [ 272.414675][ T7964] usb 7-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 272.430951][ T7964] usb 7-1: Product: syz [ 272.466650][ T9862] loop4: detected capacity change from 0 to 8 [ 272.476423][ T7964] usb 7-1: SerialNumber: syz [ 272.515248][ T7964] usb 7-1: config 0 descriptor?? [ 272.561987][ T9862] SQUASHFS error: zlib decompression failed, data probably corrupt [ 272.599564][ T9862] SQUASHFS error: Failed to read block 0x9b: -5 [ 272.624838][ T9862] SQUASHFS error: Unable to read metadata cache entry [99] [ 272.661450][ T9862] SQUASHFS error: Unable to read inode 0x127 [ 272.730680][ T7964] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input10 [ 272.951373][ T7964] usb 7-1: USB disconnect, device number 3 [ 272.957321][ C1] synaptics_usb 7-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 273.072602][ T9862] loop4: detected capacity change from 0 to 2048 [ 273.140808][ T9862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 273.171764][ T9862] /dev/loop4: Can't open blockdev [ 273.211029][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 274.368647][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1974'. [ 274.410291][ T9928] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.485703][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.493801][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.759628][ T9936] loop0: detected capacity change from 0 to 4096 [ 274.859859][ T9944] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.860310][ T9936] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 274.944869][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'. [ 275.004236][ T9936] NILFS (loop0): mounting fs with errors [ 275.048816][ T9918] loop7: detected capacity change from 0 to 32768 [ 275.119942][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1985'. [ 275.379897][ T9957] loop4: detected capacity change from 0 to 512 [ 275.439680][ T9957] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 275.568885][ T9967] netlink: 'syz.7.1990': attribute type 29 has an invalid length. [ 275.613813][ T9967] netlink: 'syz.7.1990': attribute type 29 has an invalid length. [ 275.648388][ T9969] netlink: 'syz.7.1990': attribute type 29 has an invalid length. [ 275.718149][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 276.146667][ T9986] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 276.381133][ T9991] loop7: detected capacity change from 0 to 4096 [ 276.491595][ T9991] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 276.502593][T10001] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.537609][ T9991] NILFS (loop7): mounting fs with errors [ 276.965966][T10016] loop3: detected capacity change from 0 to 2048 [ 277.079166][T10017] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.237705][T10016] NILFS (loop3): error -2 truncating bmap (ino=16) [ 277.265695][T10017] NILFS (loop3): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 277.290847][T10017] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 277.357568][T10017] Remounting filesystem read-only [ 277.414084][ T9997] loop4: detected capacity change from 0 to 32768 [ 277.559466][ T4275] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 277.691890][ T9999] loop6: detected capacity change from 0 to 40427 [ 277.736845][ T9999] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 277.771418][ T9999] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 277.814564][ T9999] F2FS-fs (loop6): invalid crc value [ 277.885964][ T9999] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 278.072693][ T4972] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 278.141970][ T9999] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 278.161811][ T9999] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 278.198604][T10011] loop7: detected capacity change from 0 to 40427 [ 278.278957][ T4972] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 278.294291][T10011] F2FS-fs (loop7): Found nat_bits in checkpoint [ 278.295667][ T4972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.350641][ T4972] usb 4-1: Product: syz [ 278.355975][T10025] ceph: No mds server is up or the cluster is laggy [ 278.368361][ T4972] usb 4-1: Manufacturer: syz [ 278.399832][ T4972] usb 4-1: SerialNumber: syz [ 278.440760][ T4972] usb 4-1: config 0 descriptor?? [ 278.473809][ T8040] syz-executor: attempt to access beyond end of device [ 278.473809][ T8040] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 278.523332][T10011] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 278.630545][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2016'. [ 278.938750][T10058] loop4: detected capacity change from 0 to 2048 [ 278.984409][T10058] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 279.061455][T10058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.079816][ T4972] usb 4-1: Firmware version (0.0) predates our first public release. [ 279.094887][ T4972] usb 4-1: Please update to version 0.2 or newer [ 279.214283][ T4972] usb 4-1: USB disconnect, device number 16 [ 279.413351][T10074] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2023'. [ 279.861253][T10084] loop0: detected capacity change from 0 to 4096 [ 279.900616][T10084] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 279.962768][ T4972] libceph: connect (1)[c::]:6789 error -101 [ 279.969307][ T4972] libceph: mon0 (1)[c::]:6789 connect error [ 280.056381][T10084] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 280.064723][T10099] loop3: detected capacity change from 0 to 64 [ 280.335874][ T4970] libceph: connect (1)[c::]:6789 error -101 [ 280.342005][ T4970] libceph: mon0 (1)[c::]:6789 connect error [ 280.531654][T10110] loop3: detected capacity change from 0 to 2048 [ 280.581775][T10110] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 280.647066][T10110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.696314][T10092] ceph: No mds server is up or the cluster is laggy [ 280.703108][T10110] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 144 with incorrect tag 0 [ 281.084868][T10131] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2042'. [ 281.126381][T10129] loop6: detected capacity change from 0 to 2048 [ 281.257559][T10140] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.291196][T10129] NILFS (loop6): error -2 truncating bmap (ino=16) [ 281.352970][T10140] NILFS (loop6): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 281.382811][T10140] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=16) [ 281.406675][T10140] Remounting filesystem read-only [ 281.491471][T10142] loop0: detected capacity change from 0 to 4096 [ 281.560910][T10150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2049'. [ 281.586081][ T8040] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 281.632359][T10150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2049'. [ 281.663987][T10151] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.174646][T10165] loop3: detected capacity change from 0 to 4096 [ 282.271904][T10175] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.384171][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2060'. [ 282.882758][T10189] loop6: detected capacity change from 0 to 8192 [ 282.931341][T10189] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 282.997619][T10202] xt_hashlimit: size too large, truncated to 1048576 [ 283.003714][T10189] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 283.074791][T10189] REISERFS (device loop6): using ordered data mode [ 283.081350][T10189] reiserfs: using flush barriers [ 283.182782][T10189] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 283.318050][T10189] REISERFS (device loop6): checking transaction log (loop6) [ 283.654965][T10189] REISERFS (device loop6): Using tea hash to sort names [ 283.702698][T10189] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 283.755109][T10186] loop7: detected capacity change from 0 to 32768 [ 283.856950][T10186] read_mapping_page failed! [ 283.862021][T10186] ERROR: (device loop7): txCommit: [ 283.862021][T10186] [ 284.047840][ T108] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 284.084146][ T108] ------------[ cut here ]------------ [ 284.089766][ T108] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 284.124973][ T108] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 284.131098][ T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted syzkaller #0 [ 284.138307][ T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 284.148377][ T108] RIP: 0010:txUnlock+0xc7d/0xcb0 [ 284.153599][ T108] Code: 59 df 2b 07 0f 0b e8 72 5a 8e fe 48 c7 c7 c0 1a c6 8a 48 c7 c6 a9 16 c6 8a ba a4 03 00 00 48 c7 c1 a0 27 c6 8a e8 33 df 2b 07 <0f> 0b e8 4c 5a 8e fe 48 c7 c7 c0 1a c6 8a 48 c7 c6 a9 16 c6 8a ba [ 284.173224][ T108] RSP: 0018:ffffc90002d27d30 EFLAGS: 00010246 [ 284.179309][ T108] RAX: 0000000000000037 RBX: 0000000000000000 RCX: d256eea690cdd300 [ 284.187289][ T108] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 284.195269][ T108] RBP: ffff888074b596c8 R08: ffffc90002d27a27 R09: 1ffff920005a4f44 [ 284.203258][ T108] R10: dffffc0000000000 R11: fffff520005a4f45 R12: ffffc9000287a1f8 [ 284.211247][ T108] R13: dffffc0000000000 R14: 000000000000003f R15: ffff888078df9894 [ 284.219232][ T108] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 284.228170][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.234849][ T108] CR2: 00007f6e175cf4e8 CR3: 000000005de91000 CR4: 00000000003506e0 [ 284.242832][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.250809][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 284.258791][ T108] Call Trace: [ 284.262080][ T108] [ 284.265026][ T108] ? _raw_spin_lock_irqsave+0x100/0x100 [ 284.270599][ T108] ? lockdep_hardirqs_on+0x94/0x140 [ 284.275820][ T108] jfs_lazycommit+0x588/0xa90 [ 284.280603][ T108] ? txFreelock+0x5a0/0x5a0 [ 284.285120][ T108] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 284.291033][ T108] ? do_task_dead+0xd0/0xd0 [ 284.295560][ T108] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 284.301468][ T108] ? __kthread_parkme+0x71/0x1c0 [ 284.306427][ T108] ? __kthread_parkme+0x15b/0x1c0 [ 284.311474][ T108] kthread+0x29d/0x330 [ 284.315546][ T108] ? txFreelock+0x5a0/0x5a0 [ 284.320056][ T108] ? kthread_blkcg+0xd0/0xd0 [ 284.324651][ T108] ret_from_fork+0x1f/0x30 [ 284.329083][ T108] [ 284.332110][ T108] Modules linked in: [ 284.534031][ T108] ---[ end trace 0000000000000000 ]--- [ 284.539539][ T108] RIP: 0010:txUnlock+0xc7d/0xcb0 [ 284.558221][ T108] Code: 59 df 2b 07 0f 0b e8 72 5a 8e fe 48 c7 c7 c0 1a c6 8a 48 c7 c6 a9 16 c6 8a ba a4 03 00 00 48 c7 c1 a0 27 c6 8a e8 33 df 2b 07 <0f> 0b e8 4c 5a 8e fe 48 c7 c7 c0 1a c6 8a 48 c7 c6 a9 16 c6 8a ba [ 284.622285][ T108] RSP: 0018:ffffc90002d27d30 EFLAGS: 00010246 [ 284.628423][ T108] RAX: 0000000000000037 RBX: 0000000000000000 RCX: d256eea690cdd300 [ 284.665343][ T108] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 284.693761][ T108] RBP: ffff888074b596c8 R08: ffffc90002d27a27 R09: 1ffff920005a4f44 [ 284.712259][ T108] R10: dffffc0000000000 R11: fffff520005a4f45 R12: ffffc9000287a1f8 [ 284.730458][ T108] R13: dffffc0000000000 R14: 000000000000003f R15: ffff888078df9894 [ 284.748784][ T108] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 284.768335][ T108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.778427][ T108] CR2: 000055816e2b5950 CR3: 0000000056d3d000 CR4: 00000000003506e0 [ 284.796153][ T108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.816570][ T108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 284.833677][ T108] Kernel panic - not syncing: Fatal exception [ 284.840014][ T108] Kernel Offset: disabled [ 284.844336][ T108] Rebooting in 86400 seconds..